1. GENERAL PROVISIONS

1.1. This Privacy Policy (hereinafter referred to as the "Policy") is developed in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" (hereinafter referred to as the "Law") and defines the procedure for processing and protecting the personal data of users of the website brook-drive.ru (hereinafter referred to as the "Site"), the terms and principles of personal data processing, the rights of users, and the obligations of Ed-Com LLC (hereinafter referred to as the "Company").

1.2. The Policy applies to all personal data that the Company receives from users of the Site (hereinafter referred to as the "User").

1.3. If the User disagrees with the terms of the Policy, they must immediately cease any use of the Site.

1.5. The following terms are used in the Policy:

1.6. Terms not defined in this section of the Policy are interpreted in accordance with the legislation of the Russian Federation.

2. PURPOSES OF PERSONAL DATA PROCESSING

2.1. The Company processes the User's PD exclusively for the following purposes:

2.1.1. Establishing and maintaining communication between the User and the Operator, and consulting on the provision of services by the Operator;

2.1.2. Sending informational mailings;

2.1.3. Publishing User reviews;

2.1.4. Analyzing the results of the User's use of the Site;

2.1.5. Providing the User with technical support when using the Site, and preventing, detecting, and resolving technical problems in the Site's operation;

2.1.6. Improving the quality of User service and modernizing the Site by processing requests and applications from the User, as well as for recording telephone conversations with the Operator to improve service quality and preserve evidence in case of disputes between the Company and the User;

2.1.7. Conducting statistical and other research based on anonymized information provided by the User, and analyzing the obtained statistical and other data.

3. SCOPE AND CATEGORIES OF PROCESSED PERSONAL DATA, CATEGORIES OF PERSONAL DATA SUBJECTS

3.1. The content and scope of PD of Site Users processed by the Company correspond to the processing purposes set out in Section 2 of this Policy. The processed PD are not excessive in relation to the stated purposes of their processing.

3.2. The User accepts the terms of the Policy and gives the Company specific, informed, and conscious consent to the processing of their PD (hereinafter – "Consent") on the terms provided for by the Policy and the legislation of the Russian Federation.

3.3. The Company collects and processes the following types of data about Site Users:

3.4. Consent is confirmed by checking the "Submit" or "Subscribe" box on the Site or by performing other actions that the Site directly or indirectly indicates are sufficient to give Consent to the processing of personal data.

3.5. The moment of expressing Consent is:

• The Site User sending a completed web form on the Operator's Site by checking (clicking) the corresponding box in the web form and clicking the web form submission button on the relevant page of the Site;
• Any other submission of personal data by the Site Visitor using the Site.

3.6. The categories of PD subjects include:

• Individuals who are Site Users;
• Individuals with whom the Company intends to enter into civil legal relations, including persons with whom the Company intends to conclude contracts;
• Individuals who are affiliated persons of the Company;
• Individuals who are heads or chief accountants of legal entities that are affiliated persons of the Company;
• Other individuals whose personal data must be provided to the Company in accordance with the requirements of the legislation of the Russian Federation;
• Site visitors who send inquiries to the Company or otherwise use the Site.

4. TERMS AND PROCEDURE FOR PERSONAL DATA PROCESSING

4.1. The Company does not verify the PD provided by the User. Therefore, the Company assumes that when providing PD on the Site, the User:

• Is a legally competent person. In the case of a legally incompetent person using the Site, consent to the processing of PD is provided by the User's legal representative, who has read and accepted the terms of PD processing specified in this Policy;
• Provides reliable information about themselves or the represented incompetent person to the extent necessary for using the Site. The User is responsible for keeping the provided PD up to date;
• Is aware that information about themselves posted on the Site may become available to other Site Users and may be copied and distributed by such Users in cases provided for by the Policy.

4.2. The Consent provided by the User in accordance with this Policy is valid from the day it is provided and for the period necessary to achieve the purposes of PD processing or until the User withdraws the specified consent, unless otherwise provided by the legislation of the Russian Federation. The User may withdraw the previously provided Consent from the Company in one of the following ways:

• Where applicable, by unsubscribing from the informational (news) mailing by clicking on the special unsubscribe link at the bottom of the email with the mailing;
• By sending a corresponding application in the form of an electronic document to the email address info@brook-drive.ru.

4.3. The Company processes Users' PD (collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion, destruction) using databases located in the territory of the Russian Federation.

4.4. Processing of Users' PD is carried out by the Company both with and without the use of automated means.

4.5. The Company and other persons who have gained access to PD are obliged not to disclose and not to transfer PD to third parties without the consent of the PD subject, unless otherwise provided by the Law.

4.6. Processing of the User's PD includes the Company performing the following actions: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion, destruction.

4.7. Storage of Users' PD is carried out on electronic media. When processing PD for the purpose of fulfilling obligations under agreements with the User, the Company may retrieve PD and store them on physical media. Storage of such PD is carried out for the period established by the legislation of the Russian Federation. Storage of PD is carried out (depending on which event occurs earlier):

• Until their destruction by the Company — in case of receipt from the User of a withdrawal of consent to PD processing or a requirement to destroy PD;
• Until the expiration of the consent validity period (see clause 2 of the Policy).

5. PROTECTION MEASURES

5.1. The Company takes necessary and sufficient legal, organizational, and technical measures to protect the information provided by Users from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions by third parties. Such measures include, in particular:

• The Company has appointed a person responsible for PD processing;
• The Company applies organizational and technical measures to ensure the security of PD during their processing in information systems;
• The Company monitors incidents of unauthorized access to PD and takes measures to prevent such incidents in the future;
• The Company monitors the measures taken to ensure PD security and the level of protection of PD information systems.

6. USER RIGHTS

6.1. The User has the right to receive from the Company information concerning the processing of their PD, namely:

• Confirmation of the fact of PD processing by the Company;
• Legal grounds and purposes of PD processing;
• Purposes and methods of PD processing applied by the Company;
• Name and location of the Company, information about persons (except for employees of the Company) who have access to PD or to whom PD may be disclosed on the basis of an agreement with the Company or on the basis of federal law;
• Processed PD relating to the relevant PD subject, the source of their receipt, unless a different procedure for presenting such data is provided for by federal law;
• Terms of PD processing, including their storage periods;
• Procedure for the PD subject to exercise the rights provided for by the Law;
• Information about the completed or intended cross-border transfer of PD;
• Name or surname, first name, patronymic and address of the person processing PD on behalf of the Company, if the processing is or will be entrusted to such a person;
• Information about the methods of the Company fulfilling the obligations established by Article 18.1 of the Law;
• Other information provided for by the Law or other federal laws.

6.2. The User has the right to send the Company their inquiries and demands (hereinafter – "Appeal"), including regarding the use of their PD, as well as the withdrawal of consent to PD processing. The Appeal can be sent in the following ways:

6.2.1. In writing to the Company's address (see section 10 of the Policy);

6.2.2. In the form of an electronic document (scan or photocopy of the document). The document must be sent from the User's email address to the Company's email address: info@brook-drive.ru.

7. UPDATING, CORRECTION, DELETION AND DESTRUCTION OF PERSONAL DATA

7.1. The Company undertakes to inform the User or their representative free of charge, in the manner provided for by Article 14 of the Law, about the availability of PD relating to this User, and also to provide an opportunity to review these PD upon the User's or their representative's request within 10 (ten) working days from the date of receipt of the request.

7.2. Within a period not exceeding 3 (three) working days from the day the User or their representative presents information confirming that such PD were unlawfully obtained or are not necessary for the stated purpose of processing, the Company undertakes to destroy such PD. The Company also undertakes to notify the User or their representative of the changes made and measures taken and take reasonable measures to notify third parties to whom this User's PD were transferred.

7.3. In case of confirmation of the inaccuracy of PD, the Company, on the basis of information presented by the User or their representative or an authorized body for the protection of the rights of PD subjects, or other necessary documents, undertakes to clarify the PD or ensure their clarification (if PD processing is carried out by another person acting on behalf of the Company) within 7 (seven) working days from the day such information is presented and remove the blocking of PD.

7.4. The Company undertakes to cease PD processing or ensure the cessation of PD processing by a person acting on behalf of the Company:

7.4.1. In case of detection of unlawful PD processing carried out by the Company or a person acting on its behalf, within a period not exceeding 3 (three) working days from the date of such detection;

7.4.2. In case of withdrawal by the User of consent to the processing of their PD;

7.4.3. In case of achieving the purpose of PD processing.

7.5. The Company undertakes to destroy the User's PD or ensure their destruction (if PD processing is carried out by another person acting on behalf of the Company) within a period not exceeding 10 (ten) working days from the date of achieving the purpose of PD processing.

7.6. In case of impossibility to destroy PD within the specified period, the Company blocks such PD or ensures their blocking (if PD processing is carried out by another person acting on behalf of the Company) and ensures the destruction of PD within a period of no more than 6 (six) months, unless another period is established by the legislation of the Russian Federation.

1. 总则

1.1. 本隐私政策（下称“政策”）根据2006年7月27日第152-FZ号联邦法律《个人数据法》（下称“法律”）的要求制定，规定了网站 brook-drive.ru（下称“网站”）运营商处理和保护用户个人数据的程序、条件与原则，明确了用户的权利以及有限责任公司“Ed-Com”（下称“公司”）的义务。

1.2. 本政策适用于公司从网站用户（下称“用户”）处获取的所有个人数据。

1.3. 若用户不同意本政策的条款，应立即停止使用本网站。

1.5. 本政策中使用以下术语：

1.6. 本政策本章节中未定义的术语，依照俄罗斯联邦现行法律进行解释。

2. 处理个人数据的目的

2.1 公司处理用户PD仅用于以下目的：

2.1.1 建立并维护用户与运营商之间的联系，就运营商提供的服务进行咨询；

2.1.2 发送信息通讯；

2.1.3 发布用户评论；

2.1.4 分析用户使用网站的情况；

2.1.5 在用户使用网站时提供技术支持，预防、发现和解决网站运行中的技术问题；

2.1.6 通过处理用户的查询和申请，以及为记录与运营商的电话通话，以提高服务质量，在公司与用户发生争议时保存证据，从而改善用户服务并优化网站；

2.1.7 基于用户提供的匿名化信息进行统计及其他研究，并对获得的数据进行分析。

3. 处理的个人数据范围与类别，个人数据主体类别

3.1. 公司处理的网站用户PD的内容和范围符合本政策第2章规定的处理目的。所处理的PD对于其声明的处理目的而言并非多余。

3.2. 用户接受本政策条款，即表示根据本政策及俄罗斯联邦法律，向公司提供具体、知情且明确的同意，以处理其PD（下称“同意”）。

3.3. 公司收集并处理以下类型的网站用户数据：

3.4. 同意通过在网站上点击“发送”、“订阅”或采取其他行动来确认，网站已直接或间接指明此类行动足以表示同意处理个人数据。

3.5. 表示同意的时刻为：

• 网站用户在运营商网站上填写网络表单，通过标记（点击）表单相应字段并点击页面上的发送按钮来提交该表单；
• 网站访客以任何其他方式通过网站提交个人数据。

3.6. PD主体类别包括：

• 作为网站用户的自然人；
• 公司拟与之建立民事法律关系（包括拟签订合同）的自然人；
• 作为公司关联方的自然人；
• 作为公司关联方的法人的负责人、总会计师；
• 根据俄罗斯联邦法律要求必须向公司提供其个人数据的其他自然人；
• 向公司发送询问或以其他方式使用网站的访客。

4. 处理个人数据的条件与程序

4.1. 公司不检查用户提供的PD。因此，公司认为，当用户在网站上提供PD时：

• 是具有行为能力的个人。若使用网站的个人无行为能力，则处理PD的同意应由其法定代理人提供，该代理人已阅读并接受本政策规定的PD处理条件；
• 提供关于其自身或所代表的无行为能力个人的真实且必要的使用网站所需信息。用户有责任自行维护所提供PD的及时更新；
• 知悉其在网站上发布的关于自身的信息可能对其他网站用户开放，并可能被这些用户在本政策规定的情况下复制和传播。

4.2. 用户根据本政策提供的同意自提供之日起生效，并在实现PD处理目的所需的期限内有效，或直至用户撤销该同意为止，除非俄罗斯联邦法律另有规定。用户可以通过以下方式之一撤销先前提供给公司的同意：

• 在适用的情况下，通过点击通讯邮件底部的专门退订链接来退订信息（新闻）通讯。
• 以电子文档形式向电子邮件地址 info@brook-drive.ru 发送相应声明。

4.3. 公司在俄罗斯联邦境内使用数据库处理用户PD（收集、记录、系统化、积累、存储、澄清（更新、修改）、提取、使用、传输（提供、访问）、封锁、删除、销毁）。

4.4. 公司处理用户PD时，既使用自动化手段，也使用非自动化手段。

4.5. 公司及其他获得PD访问权限的人员有义务未经PD主体同意不得向第三方披露或传输PD，除非法律另有规定。

4.6. 用户PD的处理包括公司执行以下操作：收集、记录、系统化、积累、存储、澄清（更新、修改）、提取、使用、传输（提供、访问）、封锁、删除、销毁。

4.7. 用户PD存储在电子载体上。为履行与用户的协议义务而处理PD时，公司可以提取PD并将其存储在物质载体上。此类PD的存储期限由俄罗斯联邦法律规定。PD的存储期限（以先发生的事件为准）：

• 至公司销毁之日——如果用户撤回处理PD的同意或要求销毁PD；
• 至同意有效期届满（见政策第2条）。

5. 保护措施

5.1. 公司采取必要且充分的法律、组织和技术措施，以保护用户提供的信息免遭第三方非法或意外访问、销毁、修改、封锁、复制、传播以及其他非法行为。此类措施特别包括：

• 公司已指定负责处理PD的人员；
• 公司采取组织和技术措施，确保在信息系统中处理PD时的安全性；
• 公司监控未经授权访问PD的事实，并采取措施防止未来发生类似事件；
• 公司监控所采取的PD安全措施和PD信息系统安全级别的执行情况。

6. 用户权利

6.1. 用户有权从公司获取与其PD处理相关的信息，即：

• 确认公司处理PD的事实；
• 处理PD的法律依据和目的；
• 公司处理PD的目的和采用的方法；
• 公司的名称和所在地，关于有权访问PD或根据与公司的合同或根据联邦法律可能被披露PD的人员（公司员工除外）的信息；
• 与相应PD主体相关的已处理PD、其来源，如果联邦法律未规定提供此类数据的其他程序；
• PD处理的期限，包括其存储期限；
• PD主体行使法律规定的权利的程序；
• 关于已进行或计划进行的PD跨境传输的信息；
• 根据公司委托处理PD的人员（如果处理已委托或将委托给该人员）的名称或姓氏、名字、父称和地址；
• 关于公司履行法律第18.1条规定的义务的方式的信息；
• 法律或其他联邦法律规定的其他信息。

6.2. 用户有权向公司发送其查询和要求（下称“申请”），包括关于其PD的使用，以及撤回处理PD的同意。申请可以通过以下方式发送：

6.2.1. 以书面形式发送至公司地址（见政策第10章）；

6.2.2. 以电子文档形式（文件的扫描件、照片副本）。该文档必须从用户的电子邮件地址发送至公司的电子邮件地址：info@brook-drive.ru。

7. 个人数据的更新、更正、删除和销毁

7.1. 公司承诺，在用户或其代表提出申请后10（十）个工作日内，按照法律第14条规定的方式，免费告知用户或其代表是否存在与该用户相关的PD，并提供查阅这些PD的可能性。

7.2. 在用户或其代表提供信息确认此类PD是非法获取的或并非所声明的处理目的所必需之日起不超过3（三）个工作日内，公司承诺销毁此类PD。公司还承诺通知用户或其代表所做的更改和采取的措施，并采取合理措施通知已传输该用户PD的第三方。

7.3. 如果确认PD不准确，公司根据用户或其代表、或PD主体权利保护授权机构、或其他必要文件提供的信息，承诺在提供此类信息之日起7（七）个工作日内更正PD或确保其更正（如果PD处理由根据公司委托行事的其他人执行），并解除对PD的封锁。

7.4. 公司承诺停止处理PD或确保根据公司委托行事的人员停止处理PD：

7.4.1. 在发现公司或根据公司委托行事的人员进行非法PD处理的情况下，自发现之日起不超过3（三）个工作日内；

7.4.2. 在用户撤回处理其PD的同意的情况下；

7.4.3. 在达到PD处理目的的情况下。

7.5. 公司承诺在达到PD处理目的之日起不超过10（十）个工作日内销毁用户PD或确保其销毁（如果PD处理由根据公司委托行事的其他人执行）。

7.6. 如果在规定期限内无法销毁PD，公司将对此类PD进行封锁或确保其封锁（如果PD处理由根据公司委托行事的其他人执行），并确保在不超过6（六）个月的期限内销毁PD，除非俄罗斯联邦法律规定了其他期限。

8. 政策更新

8.1. 公司有权自行决定修改本政策，包括但不限于在相关修改与适用法律变更相关，以及相关修改与网站运营变更相关的情况下。

8.2. 公司承诺，未经事先通知，不会对本政策规定的用户权利进行实质性修改、增加额外负担或限制。相关通知可能会在网站（例如通过弹出窗口或横幅）上显示，直至此类修改生效，或者可能通过其他通信渠道（例如电子邮件）发送给用户。

8.3. 政策的新版本自其在网站相应章节发布之日起生效。在发布新版本政策后继续使用网站，即表示用户接受本政策及其条款。若用户不同意本政策的条款，应立即停止使用网站。

9. 问题与建议

公司欢迎用户就本政策的执行或修改提出问题与建议。用户可以就实现其权利或关于其个人数据不正确或处理非法的投诉，发送问题至公司的电子邮件地址：info@brook-drive.ru。

10. 公司信息

有限责任公司“Ed-Com”

法定地址：121087，莫斯科市，Beregovoy proezd，4/6号楼，2单元。

邮寄地址：121087，莫斯科市，Beregovoy proezd，4/6号楼，2单元。

OGRN 1207700031098

INN 9703008017, KPP 773001001