1. General provisions
Corpitech Limited Liability Company (hereinafter, “Corpitech”) respects every person’s right to privacy and takes the necessary measures to protect personal data.
This Personal Data Processing Policy (hereinafter, the “Policy”) defines how Corpitech processes the personal data of website users, as well as the rights of personal data subjects and how those rights may be exercised.
The Policy has been developed in accordance with the legislation of the Republic of Belarus, including the Law of the Republic of Belarus No. 99-Z of 7 May 2021 “On the Protection of Personal Data” (hereinafter, the “Law”). Terms used in this Policy have the meanings established by the Law.
Personal data operator: Corpitech Limited Liability Company, UNP 391756332.
Address: Office 1, 169-2d Molodezhnaya St., Novopolotsk, 211501, Republic of Belarus.
Website: https://corpitech.by
Email for personal data inquiries: info@corpitech.by
This Policy applies to the processing of personal data of individuals who visit https://corpitech.by and contact Corpitech using the communication methods provided on the website.
2. Personal data we may process
Corpitech does not require users to provide personal data merely to browse the website.
When you contact Corpitech by email, telephone or another available communication method, we may process:
- surname, first name and patronymic (hereinafter, name);
- email address;
- telephone number;
- place of work and job title, if you provide this information voluntarily;
- the content of your message, inquiry or request;
- other personal data that you voluntarily provide to Corpitech.
Please do not send excessive personal data when it is not required to consider your inquiry.
3. Why we process personal data
Corpitech processes personal data only to the extent necessary to achieve specific and lawful purposes.
| Processing purpose | Data that may be processed | Legal basis | Processing period |
|---|---|---|---|
| Considering an inquiry, answering a question or providing feedback to the user | Name, contact details, message content and other data provided by the user | Consent of the personal data subject and/or other grounds provided by the legislation of the Republic of Belarus | For the period necessary to consider the inquiry and communicate with the user, unless a longer period is established by law or required to protect Corpitech’s rights and legitimate interests |
| Discussing possible cooperation, services or a project at the user’s initiative | Name, contact details, information about the company or project and other data provided by the user | Consent of the personal data subject and/or taking actions aimed at concluding a contract | For the period necessary to consider the request and discuss possible cooperation |
| Concluding and performing a contract where the user is a party to the contract or represents a counterparty | Data necessary to conclude and perform the contract | Contract with the personal data subject or other grounds provided by law | For the periods established by law and the necessary retention period for the relevant documents |
Corpitech does not use users’ personal data for purposes incompatible with the original purpose for which it was collected.
4. How personal data is processed
Corpitech may process personal data with or without the use of automated systems.
Depending on the purpose of processing, we may collect and receive, record and organise, store and use, amend or update, provide where required by law or necessary to achieve the stated purpose, and delete or destroy personal data.
Corpitech does not sell or provide users’ personal data to third parties for their independent use in advertising or other commercial activities.
5. Sharing personal data with third parties
Personal data may be provided to third parties only when this is necessary to achieve the purposes of processing, required by the legislation of the Republic of Belarus, necessary to protect Corpitech’s rights and legitimate interests, or done with the data subject’s consent where such consent is required by law.
If Corpitech engages an authorised person to process personal data, the processing is carried out under conditions that ensure compliance with the legislation of the Republic of Belarus on personal data protection.
6. Cross-border transfer of personal data
Corpitech carries out cross-border transfers of personal data where there is a legal basis provided by the legislation of the Republic of Belarus and in compliance with personal data protection legislation.
Where a cross-border transfer is made to a foreign country that does not ensure an adequate level of protection of personal data subjects’ rights, the transfer is made only where there is a basis provided by law, including the consent of the personal data subject where such consent is required by law.
Information about cross-border transfers of personal data carried out through the web analytics services used on the website, and the risks associated with such transfers, is provided in Section 11 of this Policy.
7. Personal data protection
Corpitech takes legal, organisational and technical measures to protect personal data from unlawful or accidental access, alteration, blocking, copying, distribution, provision, deletion or destruction.
These measures include:
- restricting access to personal data;
- granting access only to authorised persons who need it for their duties;
- using appropriate information system security measures;
- monitoring compliance with personal data protection legislation;
- other measures required by law.
8. Rights of personal data subjects
Personal data subjects have the rights provided by the legislation of the Republic of Belarus, including the right to:
Receive information about the processing of personal data
You may receive information about how Corpitech processes your personal data in the cases and manner established by law.
Request changes to personal data
If your personal data is incomplete, outdated or inaccurate, you may request that it be amended.
Receive information about sharing personal data with third parties
You may receive information once per calendar year, free of charge, about the provision of your personal data to third parties where this right is provided by law.
Withdraw consent
Where processing is based on consent, you may withdraw that consent at any time. After receiving the withdrawal, Corpitech will stop processing based on consent and delete the data unless there are other lawful grounds for continuing the processing.
Request that processing stop and personal data be deleted
You may request the free cessation of processing and deletion of your personal data where there are no lawful grounds for processing it.
Challenge Corpitech’s actions or decisions
You may challenge Corpitech’s actions, inaction or decisions that violate your rights in connection with personal data processing before the National Centre for Personal Data Protection of the Republic of Belarus in accordance with the procedure established by law.
9. How to exercise your rights
To exercise your rights relating to personal data processing, you may send an application to Corpitech:
- by email: info@corpitech.by;
- by post: Office 1, 169-2d Molodezhnaya St., Novopolotsk, 211501, Republic of Belarus.
The application must contain the information required by the legislation of the Republic of Belarus to identify the applicant and consider the request.
You may withdraw consent in the form in which it was obtained or by another method that reliably establishes your identity.
Corpitech considers personal data subjects’ applications within the time limits established by law.
10. Contacting us through the website
The Corpitech website provides communication methods that allow users to contact the company, including by email and telephone.
If you send Corpitech an email, call the telephone number shown on the website or otherwise provide your personal data, Corpitech processes the data to consider your inquiry and communicate with you in accordance with this Policy and the legislation of the Republic of Belarus.
Simply clicking an email or telephone link on the website does not by itself mean that you have automatically provided personal data to Corpitech if the relevant data is not technically transmitted to Corpitech.
11. Processing of cookies
Corpitech uses cookies on the website to ensure its proper operation and retain technical settings and, where the user has given separate consent, to analyse how users interact with the website.
The website uses the following types of cookies:
- technically necessary (functional) cookies — required for the correct and secure operation of the website and for retaining technical settings, such as the selected language or whether consent to cookies has been given. These cookies are not used to analyse user behaviour or for marketing purposes. Separate user consent is not required for their use under Article 6 of the Law;
- analytics (statistical) cookies — used to analyse how users interact with the website, including the number of visits, traffic sources and popular pages, in order to improve the quality of the service and content. These cookies are collected and processed only after the user’s prior consent has been obtained.
Third-party web analytics services may be used on the website, including, but not limited to, Yandex Metrica and Google Analytics. The specific list of services used may change depending on the technical solutions applied on the website.
The volume and composition of analytics data are determined by the settings of the web analytics services used. The storage period for analytics cookies is determined by the settings of the relevant web analytics services and depends on the technologies and processing parameters they use.
The use of the relevant analytics cookies, as well as the associated processing and cross-border transfer of personal data, takes place only after the user’s separate prior consent has been obtained.
Since it is not reliably known in which countries the servers of third-party web analytics services may be located, use of these services may involve the cross-border transfer of personal data collected through cookies to countries that may not ensure an adequate level of protection of personal data subjects’ rights.
Such cross-border transfer may involve the following risks:
- the absence or insufficiency of legislative safeguards for protecting personal data subjects’ rights;
- the inability or substantial difficulty of enforcing decisions of competent authorities and implementing legally provided measures for personal data protection in the relevant foreign country;
- the absence of an independent state authority responsible for monitoring and supervising personal data protection and/or limited rights of personal data subjects and mechanisms for exercising them;
- an increased risk of unauthorised access to personal data and/or other unlawful actions concerning personal data, as well as possible difficulties in protecting and restoring the violated rights of a personal data subject in the foreign country.
Users may accept, configure or withdraw their consent to the collection of analytics cookies at any time through the special cookie banner and/or at the bottom of the website page, and may also block or delete cookies through their internet browser settings.
Disabling or deleting technically necessary cookies may cause certain website functions to operate incorrectly or limit access to some website elements.
12. Changes to this Policy
Corpitech may amend this Policy if legislation, personal data processing procedures or Corpitech’s activities change.
The current version of the Policy is always published on the website: https://corpitech.by.
If this Policy is amended, Corpitech publishes its current version on the website. The new version of the Policy comes into force when it is published on the website, unless another date is established by the Policy itself or by the legislation of the Republic of Belarus.
Amendments to the Policy do not change the legal grounds for processing personal data previously provided by a personal data subject, unless otherwise expressly provided by the legislation of the Republic of Belarus or new consent from the personal data subject is required for continued processing.