Regulations on the processing and protection of personal data by the Grambit.biz service

1. Purpose and scope of application of the Regulations on the processing and protection of personal data by the Grambit.biz service

1.1. This Regulation establishes the procedure for receiving, recording, processing, accumulating and storing information related to the personal data of Users of the Service.

1.2. This Regulation is valid in accordance with the Rules for the provision of services by the Grambit.biz service. All meanings of terms and definitions used in these Regulations correspond to the meanings disclosed in the Rules.

1.3. Users mean persons who are a party to the Offer, in accordance with the Rules for the provision of services by the Grambit.biz service

1.4. The purpose of this Regulation is to protect Users’ personal data from unauthorized access and disclosure. Personal data is always confidential, strictly protected information.

1.5. The service is hosted in the territory of the Netherlands. This Statement has been developed in accordance with the General Data Protection Regulation of the European uniоn (General Data Protection Regulation, GDPR; European uniоn Regulation 2016/679).

1.6. The current version of the Regulations is available for public access on the Service website. The Service Administration has the right to unilaterally change these Regulations at any time. Such changes come into force after 3 (three) calendar days from the moment the new version of the Regulations is posted on the website, unless a different procedure for entry is specifically provided for in the new version of the Regulations. If the User disagrees with the changes made, he is obliged to send a corresponding letter to the email address indicated on this site.

2. Concept and composition of personal data

2.1. Personal data of Users means information necessary for the employer in connection with labor relations and relating to a specific employee, as well as information about the facts, events and circumstances of the employee’s life, allowing his or her identity to be identified.

2.2. Composition of personal data:

2.2.1. Personal data

2.2.1.1. When using the Service, the administration may ask the User to provide certain personal information that the Service uses to contact or identify the User (“Personal Data”).

2.2.1.2. Identification information may include, but is not limited to:

• Email address;
• First and Last Name;
• Phone number;
• Address, City, Country, Postal Code and other information.

2.2.2. Cookies and Usage Data

2.2.2.1. The Service may also collect information about access to and use of the Service (“Usage Data”). This data may include the following information:

• Internet protocol address of the User’s computer (for example, IP address);
• Browser type;
• Browser version;
• Version of the Service page;
• Time of visiting the pages of the Service, time spent on these pages;
• Unique device identifiers and other diagnostic data.

2.2.2.2. The Service may use cookies and similar technologies to track activity on the Service and store certain information. Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to the User’s browser from the website and stored on the User’s device. Tracking technologies that are also used are tags and scripts to collect and track information, as well as to improve and analyze the operation of the Service.

2.2.2.3. The user can refuse all cookies or specify what data is sent to the coоkie.

2.2.2.4. If the User does not accept cookies, the User understands and accepts the circumstances that the scope of use of the Service’s functions may be limited.

2.2.2.5. Examples of Cookies that may be used by the Service:

• Session Cookies (used to manage the Service);
• Preference Cookies (used by the Service to remember the User’s preferences and various settings);
• Security Cookies (used by the Service to ensure security).

3. Collection of personal data of Users

3.1. The collection of personal data of Users is an integral part of the process of processing such personal data, which involves actions to sеlect or organize information about the User of the Service.

3.2. The grounds for processing Users’ personal data are:

• Conclusion and execution of the Offer, in accordance with the Rules, to which the subject of personal data is the User;
• The need to protect the legitimate interests of personal data owners, except in cases where the subject of personal data requests to stop processing his personal data and the need to protect personal data exceeds such interest.

3.3. The fact that the User is familiar with the rights in the field of personal data protection, a message about the owner of personal data, the composition and content of the collected personal data, the purpose of collecting personal data and the persons to whom the personal data will be transferred is confirmed by acceptance of the Offer, in accordance with the Rules.

3.4. If it is discovered that information about the User has been processed that does not correspond to reality, such information must be corrected or destroyed.

4. Storage and destruction of Users’ personal data

4.1. The storage of personal data involves actions to ensure their integrity and the appropriate mode of access to them.

4.2. Users’ personal data is processed in a form that allows identification of the person concerned, and is stored for no longer than is necessary in accordance with their legal purpose and the purpose of their processing, unless otherwise provided by legislation in the field of archiving and records management.

4.3. Personal data of Users is deleted or destroyed in accordance with the requirements of the law.

4.4. Personal data is subject to destruction in the following cases:

• Expiration of the data storage period determined by the consent of the subject (User) of personal data to the processing of this data or by law;
• Termination of legal relations between the User and the Service, unless otherwise provided by law;
• The entry into force of a court decision to remove data about the User from the personal data base;

4.5. The destruction of personal data is carried out in a way that excludes the further possibility of recovery of such personal data.

5. Use of data

5.1. The service uses the collected data for various purposes:

5.1.1. Ensuring the User’s participation in the interactive functions of the Service;
5.1.2. Providing support and service to Users;
5.1.3. Conducting analysis to improve the operation of the Service;
5.1.4. Monitoring the use of the Service;
5.1.5. Prevention, detection and elimination of technical problems in the operation of the Service;
5.1.6. Notifying the User about changes in the Service.

6. Transfer of personal data to third parties and providing third parties with access to personal data of Users

6.1. The transfer of Users’ personal data to third parties is determined by the terms of consent to the processing of personal data or in accordance with the requirements of the law.

6.2. Access to personal data to a third party is provided only in accordance with the General Regulations for the Protection of Personal Data.

6.3. The User has the right to receive any information about himself contained in the Service, without specifying the purpose of the request.

6.4. The Service may use third party service providers to monitor and analyze use of the Service.

7. Links to third party sites

7.1. The Service may contain links to third-party sites that are not operated by the Service.

7.2. If the User clicks on such a link, he will be taken to a third party site. The service administration strongly recommends that the user read the Privacy Policy of each third-party site that the user visits.

7.3. The service has no control over and is not responsible for the content, privacy policies or actions of third party sites and services.