Consent to the Processing of Personal Data

CONSENT to the processing of personal data

(single consent: Personal Account, membership and participation in events)

Revision 1.0

This consent is given in electronic form by ticking a box in a form on the website or in the mobile application of the International Union of Non-Governmental Organizations “World Peoples Assembly” (PSRN (OGRN) 1177700014887, TIN (INN) 9710036142, address: 4A Uspensky Lane, Moscow, 127006, Russian Federation) — hereinafter referred to as the “Operator”.

The person giving the consent (hereinafter referred to as the “User”) is identified by the details of the account in which the box is ticked. The date and time at which the consent is given and the revision of this document are recorded automatically by the Operator’s information system.

By ticking the box, the User, acting of his or her own free will and in his or her own interest, in accordance with Article 9 of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, gives consent to the Operator to process his or her personal data on the terms specified below.

1. Purposes of the processing of personal data

1.1. Creation and maintenance of a Personal Account, identification upon login, access recovery.

1.2. Consideration of an application for admission to the Assembly, maintenance of membership records, accounting for admission fees and membership fees.

1.3. Enabling the exchange of messages with other users and with the Operator within the Operator’s information systems.

1.4. Consideration of applications for participation in the Operator’s events and making decisions on admission.

1.5. Production of a personal participant badge and provision of admission to the event venue, including by scanning the code printed on the badge.

1.6. Preparation of invitations and documents required to obtain a visa, where a need for visa support has been declared.

1.7. Arrangement of accommodation, transfer and meet-and-greet services for an event participant.

1.8. Maintenance of participant lists and preparation of reports on events held.

1.9. Performance of the obligations imposed on the Operator by the legislation of the Russian Federation.

2. List of personal data

Surname, first name and patronymic, including in Latin script; sex; date of birth; citizenship; email address; telephone number; photograph; registered residential address; actual residential address; information on places of work and positions held; information on proficiency in foreign languages; addresses of personal websites and social media pages; information on membership of the Assembly and on payment of fees; ID details: series, number, date of issue, name of the issuing authority, as well as an image (scanned copy or photograph) of the page of that document; facial photographic image; place of birth; name of the organisation represented; format and category of participation in the event; information on the need for visa support; travel itinerary details: mode of transport, flight number, dates of arrival and departure; contact person details.

3. List of operations performed on personal data and processing methods

Collection, recording, systematisation, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalisation, blocking, deletion, destruction. Processing is carried out both with and without the use of automation means.

4. Transfer of personal data

4.1. The Operator is entitled to entrust the processing of personal data to the following persons, acting on the Operator’s instructions and obliged to observe confidentiality and personal data security requirements:

the cloud infrastructure and data storage operator JSC “Selectel” (PSRN (OGRN) 1089847357126);

payment service providers in respect of the payment of fees: LLC NCO “YuMoney” (the YooKassa service) and Stripe Payments Europe, Ltd. — for payments made with foreign bank cards;

the providers of the mapping services CARTO and OpenStreetMap — where the map of events is displayed.

4.2. When the User submits an application for participation in an event, the User consents to the transfer of his or her personal data, to the extent necessary for the purposes specified in clauses 1.4–1.8, to the following categories of recipients:

the host party and the organisers of the event in the state where it is held;

the administration and the security service of the venue — for the purposes of granting admission;

diplomatic missions and consular offices — for the purposes of processing visa documents;

organisations providing accommodation and transport services — for the purposes of accommodation and transfer.

4.3. Cross-border transfer. The User is notified of, and consents to, the cross-border transfer of his or her personal data to the territory of the state where the event for which the User has applied is held, to the extent and for the purposes specified in this consent. The state in which the event is held is specified in the application form for participation.

4.4. Dissemination of personal data, that is, disclosure to an unlimited number of persons, is not provided for by this consent, save for the inclusion of the surname, first name and name of the organisation represented in published lists of event participants — subject to separately expressed consent.

5. Term of the consent and procedure for its withdrawal

5.1. The consent is valid from the day on which it is given until the day on which it is withdrawn and, in respect of data processed in connection with participation in an event, until the expiry of five years from the day on which the event ended or until the day on which the consent is withdrawn.

5.2. The consent may be withdrawn at any time: in the Personal Account, by sending a written request to the Operator’s address, or by contacting the Operator at the email address info@world-assembly.org.

5.3. Where consent is withdrawn, the Operator terminates processing and destroys the personal data within a period not exceeding thirty days from the day on which the withdrawal is received, save in cases where processing continues on another lawful basis provided for by the legislation of the Russian Federation.

6. Confirmation

The User confirms that he or she has read the Operator’s Policy on the processing of personal data, which is publicly available, and that this consent is given freely, of his or her own free will and in his or her own interest.

7. Procedure for giving consent

7.1. Consent is given by ticking a separate box in electronic form. The box may not be pre-ticked — it is ticked by the User.

7.2. The Operator’s information system records: the account identifier, the date and time at which the box was ticked, the revision of this document, and the network address and device details from which the action was performed. That information constitutes confirmation of the fact that consent was given.

7.3. Information on the consents given and the ability to withdraw them are available to the User in the Personal Account.

7.4. Upon modification of this document, the Operator shall publish the new version and request consent again if the changes affect the purposes of processing, the list of data, or the scope of recipients.

This is a translation of the Russian-language Consent. In the event of any discrepancy between the Russian and English texts, the Russian text shall prevail.