Regulation on the processing of personal dataon the website of Fagus LLC

APPROVED Order of Fagus LLC 10.07.2024 No. 4-ОД

1. Fagus LLC (hereinafter – the Controller) pays special attention to the protection of personal data during its processing and respects the observance of the personal data subjects’ rights.
Approval of the Regulation on the processing of personal data on the website of Fagus LLC (hereinafter – the Regulation) is one of the measures taken by the Controller provided in Art. 17 of the Law of the Republic of Belarus dated 07.05.2021 No. 99-З “On the protection of personal data” (hereinafter – the Law).
The Regulation applies only to the Controller’s Website, hosted on the Internet at https://fagus.by/en/. The Controller does not control and is not responsible for the User visiting and using of external resources, links to which may be contained on the Website.
The Regulation explains to personal data subjects how and for what purposes their personal data is collected, used or otherwise processed, and also reflects the rights available to personal data subjects in this regard and the mechanism for their implementation.
In case of disagreement with the terms of the Regulation, the User shall stop using the Website Service.
The Controller’s postal address: Republic of Belarus, 220099, Minsk, 55 Kiseleva St., off. 34;
Internet address: https://fagus.by/en/;
e-mail: fagusbel@gmail.com.

2. The following terms and definitions are used in this Regulation:
2.1. Internet site (hereinafter – the Site) is a set of web pages hosted on a virtual server and forming a single structure by means of which the Controller provides Users with information and ensures access to clickable forms of interaction. The set of web pages that form the Controller’s Site is hosted on the Internet at the address: https://fagus.by/en/.
2.2. Processing of personal data is any action or set of actions performed with personal data on the Site, including collection, systematization, storage, modification, use, depersonalization, blocking, distribution, provision, deletion of personal data.
2.3. User is a subject of personal data, a legally capable individual, defined by personal data, having access to the Site, using the Site via the Internet in his/her own interests or acting on behalf of and in the interests of the legal entity he/she represents.
2.4. Service is an access to the content of the Site, to clickable forms of interaction on the Site for the purpose of placing applications, requests, establishing contact with representatives of Fagus LLC; as well as receiving additional information provided free of charge by Fagus LLC to the User upon completion of the relevant clickable forms of interaction on the Site.
2.5. User’s personal data is any information that the User provides about himself/herself independently in the process of using clickable forms of interaction on the Site; data that is automatically transferred by the Site in the process of its use by the software installed on the User’s device, including the IP address, cookie information, information about the User’s browser (or other program used to access the Site), access time, address of the requested page.
2.6. Cookie is a technical data sent by the Site to the User via the Internet, stored on the User’s device used to view the Site, and transmitted to the Site from the User’s device used to view the Site, each time the Site is visited.
2.7. IP address is the technical address of the User on the Internet.

3. The Controller obtains the User’s consent to process his/her personal data, except for cases provided by the Law and other legislative acts.

4. The User gives consent, which is a free, unambiguous, informed expression of his/her will, by which he/she permits the processing of his/her personal data, by placing the appropriate mark on the Site.

5. The Controller processes personal data in the following cases:

6. Personal data may also be used by the Controller to conduct statistical and/or evaluation studies of the Controller’s performance after mandatory depersonalization of such personal data.

7. The Controller processes only those personal data that are necessary to achieve the stated goals and does not allow their excessive processing.

8. The Controller does not transfer personal data to third parties, except in cases provided by the Law and other legislative acts.

9. The User’s personal data is processed in any legal way, including in personal data information systems using automation tools or without using such tools, without limiting the period of such processing (until the consent is revoked by the personal data subject).

10. The Controller ensures the protection of personal data during their processing.

11. The User has the right:
11.1. to revoke his/her consent if the Controller has asked the User to obtain consent for the processing of personal data. In this regard, the right to revoke consent cannot be exercised if the processing is carried out on the basis of a contract (for example, when fulfilling obligations under concluded contracts) or in accordance with the requirements of the law (for example, when conducting control or considering an incoming request);
11.2. to receive information regarding the processing of his/her personal data, containing:
the location of the Controller;
confirmation of the fact that the personal data of the applied person is processed by the Controller;
his/her personal data and the source from which they were obtained;
legal grounds and purposes for processing personal data;
the period for which his/her consent is given (if the processing of personal data is carried out on the basis of consent);
the name and location of the authorized person(s);
other information provided by the legislation;
11.3. to demand that the Controller make changes to his/her personal data if the personal data is incomplete, outdated or inaccurate. For these purposes, the personal data subject shall attach the relevant documents and/or their copies certified in the established manner, confirming the need to make changes to the personal data;
11.4. to receive information from the Controller about the provision of his/her personal data processed by the Controller to third parties. This right may be exercised once per calendar year, and the provision of the relevant information is free of charge;
11.5. to demand from the Controller a free termination of the processing of his/her personal data, including its deletion, in the absence of grounds for the processing of personal data provided by the Law and other legislative acts;
11.6. to appeal the actions (inaction) and decisions of the Controller that violate his/her rights when processing personal data, to the authorized body for the protection of the rights of personal data subjects in the manner established by the legislation on appeals of citizens and legal entities.

12. To exercise his/her rights related to the processing of personal data by the Controller, the User shall submit to the Controller an application in writing or in the form of an electronic document (and in the case of exercising the right to revoke consent, also in the form in which such consent was received), respectively, to the postal address or Internet address specified in Part 6, Clause 1 of this Regulation. Such an application shall contain:
surname, name, patronymic (if any) of the personal data subject, the address of his/her place of residence (place of stay);
date of birth of the personal data subject;
statement of the personal data subject’s requirements;
personal signature (for an application in writing) or an electronic digital signature (for an application in the form of an electronic document) of the personal data subject.
The Controller shall not consider applications from personal data subjects sent by other means (telephone, fax, etc.).

13. The Controller shall be liable for any losses incurred by the User in the event of failure to fulfill their obligations in connection with the illegal processing of personal data in accordance with the legislation of the Republic of Belarus.

14. The Controller shall not be liable in the event of loss or disclosure of personal data if the data:
14.1. became publicly known prior to its loss or disclosure;
14.2. were received by the Controller from a third party prior to their receipt from the User;
14.3. were disclosed with the consent of the User;
14.4. were disclosed by third-party websites and services, links to which are present on the Site.

15. The User shall be liable for any consequences in the event of submission of inaccurate personal data.

16. In the event of any disagreements or disputes regarding the interpretation or application of the terms of the Regulation, the Controller and the personal data subject shall seek to resolve them through negotiations.

17. If agreement is not reached through negotiations, disagreements or disputes between the Controller and the personal data subject shall be resolved in accordance with the current legislation of the Republic of Belarus.

18. For assistance in exercising rights, the personal data subject may also contact the person responsible for implementing internal control over the processing of personal data in the Controller’s organization by sending a message to the email address: fagusbel@gmail.com.