This Privacy Policy on personal data (hereinafter – the Privacy Policy) has been developed in accordance with the Law of the Republic of Belarus No. 99-Z of 7 May 2021 «On Personal Data Protection» in order to ensure the protection of human and civil rights and freedoms in the processing of their personal data, including the protection of the rights to inviolability of private life, personal and family secrets, and applies to all information processed by DEFIANT Limited Liability Company in its capacity as operator.

1. OPERATOR

1.1. The operator is DEFIANT Limited Liability Company (hereinafter – the Organisation).

1.2. The Organisation uses the website defiant.by.

2. TERMS AND DEFINITIONS

2.1. The following terms are used in this Privacy Policy:

Website – defiant.by
User – a person who has access to the Website via the Internet and uses the Website, and in respect of whom personal data are processed.
Personal data – any information relating to an identified natural person or a natural person who can be identified.
Processing of personal data – any action or set of actions performed in respect of personal data, including collection, systematisation, storage, modification, use, depersonalisation, blocking, dissemination, provision, deletion of personal data.
Confidentiality of personal data – a mandatory requirement for the operator or any other person who has obtained access to personal data not to allow their dissemination without the consent of the data subject or without other lawful grounds.
Cookies – a small piece of data sent by a web server and stored on the User's computer, which the web client or web browser sends to the web server in an HTTP request each time when attempting to open a page of the relevant website.
IP address – a unique network address identifying a device on the Internet or a local network.

2.2. Other terms and concepts used in the text of the Privacy Policy are used in the meanings applied in the current legislation of the Republic of Belarus.

3. GENERAL PROVISIONS

3.1. The Privacy Policy applies to the Organisation's processes in which the collection, processing and storage of Users' personal data are carried out.

3.2. The processing of the User's personal data is carried out by the Organisation.

3.3. In case of disagreement with the terms of the Privacy Policy, the User must cease use of the Website.

3.4. The Organisation does not verify the accuracy of personal data provided by the User. Accordingly, any adverse consequences (including liability of any kind) that may arise in connection with the provision of inaccurate information shall be the responsibility of the User.

4. PURPOSES OF USE OF PERSONAL DATA

4.1. The Operator may use the User's personal data for the following purposes:

establishing feedback with the User, including sending notifications and requests relating to the use of the Website and the provision of services, and processing the User's requests and applications;
using in mailings (postal, by e-mail, by SMS, other messaging services (e.g. Viber, Telegram, etc.)) to send the User information about new services, promotions, special offers, advertising and similar events, as well as other news of the Operator, to receive which the data subject has given consent in written or other form not prohibited by law. The data subject may at any time opt out of such mailings to their contact details;
providing the User with effective client and technical support (where necessary) in the event of problems related to the use of the Website;
improving the quality of services, provision and promotion of the Operator's services;
confirming the accuracy and completeness of personal data provided by the User;
processing statistical information;
sending notifications, information and requests relating to the collection, storage and processing of personal data;
providing the User by e-mail or other available means, with their consent, with other information/notifications on behalf of the Website;

4.2. Consent to the processing of personal data may be withdrawn by the User in the manner set out in clause 7.2 of this Privacy Policy.

5. LIST OF PERSONAL DATA PROCESSED AND RETENTION PERIOD

5.1. Personal data permitted to be processed under this Privacy Policy are provided by the User by filling in the form when placing an order and include the following information:

the User's email address;
the User's name;
the User's contact telephone number;

5.2. The Organisation may also collect technical and other information:

IP address;
information from «cookies» files;
browser information (Google Chrome, Mozilla Firefox, Opera, Internet Explorer, etc.);
operating system used (Windows, Mac OS, etc.);
time of access;
type of device used;
name of the website from which the User navigated to the Website;
other data specified in contracts, agreements, questionnaires, forms and similar documents completed by the User;

The Organisation collects statistics on the IP addresses of its visitors. This information is used to identify and resolve technical issues.

5.3. By providing personal data to the Organisation, the User grants the Organisation the right to receive, store, process, use and disclose personal data on the terms of the Privacy Policy.

5.4. The User's personal data will be processed until consent is withdrawn.

6. METHODS OF PROCESSING PERSONAL DATA

6.1. The Organisation carries out collection (receipt), processing (recording, systematisation, accumulation, updating, modification, extraction, use), storage, transfer (dissemination, provision of access), destruction (depersonalisation, blocking, deletion) of personal data for the purposes specified in the Privacy Policy.

6.2. The Organisation processes personal data using automated means and without using such means, as well as in a mixed manner, including in information and telecommunications networks, for the purposes specified in the Privacy Policy.

6.3. The Organisation takes the necessary measures to delete or clarify incomplete or inaccurate data.

6.4. The Organisation is entitled to transfer personal data to third parties, in particular courier services, postal organisations, telecommunications operators, solely for the purpose of fulfilling the User's order placed on the Website.

6.5. The User's personal data may be transferred to authorised state bodies of the Republic of Belarus and other persons only on the grounds and in the manner established by the legislation of the Republic of Belarus.

6.6. In the event of loss or disclosure of personal data, the Organisation shall inform the User of the loss or disclosure of personal data.

6.7. The Organisation takes the necessary organisational and technical measures to protect the User's personal information from unlawful or accidental access, destruction, modification, blocking, copying, dissemination, as well as from other unlawful actions of third parties.

6.8. Personal data are stored in the Organisation's specialised systems that ensure automated processing and storage of information.

7. USER RIGHTS

7.1. The User exercises their rights to the extent and in the manner established by the legislation of the Republic of Belarus.

7.2. The User has the right at any time, without giving reasons, to withdraw their consent to the processing of their personal data or to request the cessation of the processing of their personal data, including their deletion, by sending a written application to the Organisation (by registered mail or in person) at: 17 Internatsionalnaya St., Brest.

The application must contain:

the User's surname, first name, patronymic (if any), and address of their place of residence (stay);
the User's date of birth;
the User's identification number, or in the absence of such number – the number of the identity document, in cases where this information was provided by the User when giving consent to the Organisation or where personal data are processed without the data subject's consent;
a statement of the substance of the User's request;
the User's personal signature.

Within fifteen days of receiving the User's application, the Organisation shall, in accordance with its content, cease processing of personal data, effect their deletion and notify the User thereof, unless there are other grounds for such actions with personal data provided for by the legislative acts of the Republic of Belarus. Where technical deletion of personal data is not possible, the Organisation shall take measures to prevent further processing of personal data, including their blocking, and shall notify the User thereof within the same period.

7.3. The User has the right to request clarification of their personal data, their blocking or destruction if the personal data are incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing.

7.4. The User has the right to appeal against the actions or omissions of the Organisation to the authorised body for the protection of the rights of personal data subjects or in court.

7.5. The User has the right to protect their rights and legitimate interests, including to claim damages and compensation for moral harm in court.

7.6. The User has the right to receive information concerning the processing of their personal data, including information containing confirmation of the fact of processing of personal data by the Organisation, the legal grounds and purposes of processing, the methods of processing used by the Organisation, the name and location of the Organisation, information on persons (other than the Organisation's employees) who have access to personal data or to whom personal data may be disclosed on the basis of a contract with the Organisation or on the basis of law, processed personal data relating to the relevant User, the source of the personal data unless a different procedure for providing such data is established by law, the timing of processing of personal data, including the retention period, the procedure for the User to exercise the rights provided for by the Law of the Republic of Belarus «On Personal Data Protection», information on cross-border data transfer carried out or proposed, the name or surname, first name, patronymic and address of the person processing personal data on behalf of the Organisation, if processing is or will be entrusted to such a person.

7.7. The Organisation shall consider the User's request and notify the User of the results within thirty days of the date of receipt of the request. In justified cases, this period may be extended by no more than thirty days, of which the Organisation shall notify the User.

7.8. The User may send any questions relating to the processing of their personal data to the Organisation at the address specified in clause 9 of this Privacy Policy.

8. AMENDMENTS TO THE PRIVACY POLICY

8.1. The Organisation has the right to make amendments to this Privacy Policy. The current version of the Privacy Policy is always available on the Website at https://defiant.by/legal/privacy.

8.2. Continued use of the Website by the User after the publication of a new version of the Privacy Policy shall constitute acceptance of the amended terms.

9. OPERATOR CONTACT INFORMATION

9.1. For any questions relating to this Privacy Policy and the processing of personal data, the User may contact the Organisation:

DEFIANT Limited Liability Company

Address: 17 Internatsionalnaya St., Brest, Republic of Belarus

Website: https://defiant.by

10. FINAL PROVISIONS

10.1. The current legislation of the Republic of Belarus applies to this Privacy Policy and to the relations between the User and the Organisation.

10.2. The current Privacy Policy is publicly available and enters into force from the moment of its publication on the Internet on the Website at https://defiant.by/legal/privacy.

10.3. A new version of the Privacy Policy enters into force from the moment it is posted on the Website, unless otherwise provided by the new version of the Privacy Policy.