{"id":3,"date":"2025-09-04T12:28:02","date_gmt":"2025-09-04T09:28:02","guid":{"rendered":"https:\/\/www2.asari.legal\/?page_id=3"},"modified":"2026-04-14T12:23:38","modified_gmt":"2026-04-14T09:23:38","slug":"policy","status":"publish","type":"page","link":"https:\/\/asari.legal\/en\/policy\/","title":{"rendered":"Personal Data Privacy Policy"},"content":{"rendered":"\n<p>This Privacy Policy regulates the confidentiality and protection of personal data processed via the Website and uses the following terms and abbreviations:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Automated Data Processing<\/strong><\/td><td>PD processing by automated means; this involves the processing of PD based on predefined algorithms using computer infrastructure, including without limitation PIMS, information and telecommunication networks, AWS, and\/or machine-readable media.<\/td><\/tr><tr><td><strong>AWS<\/strong><\/td><td>an automated workstation consisting of software and hardware (i.e. desktop or portable computing devices) designed to execute specific tasks without human intervention for a particular category of users or tasks.<\/td><\/tr><tr><td><strong>PIMS<\/strong><\/td><td>a personal information management system that includes all PD stored in databases, as well as the information technologies and hardware used to process such data.<\/td><\/tr><tr><td><strong>Physical Data Medium<\/strong><\/td><td>a physical object, such as a paper document or a hardware device, used to record and store voice, sound, or visual information (including PD and processed information).<\/td><\/tr><tr><td><strong>Manual Data Processing<\/strong><\/td><td>PD processing without the use of automated means; this involves algorithm-based searching, accessing, using, updating, disseminating and\/or destroying the PD of each PD Subject<a href=\"https:\/\/www.asari.legal\/users\/#sdfootnote1sym\"><sup>1<\/sup><\/a> stored on physical data media and\/or organised PD sets (such as paper-based filing systems, PIMS databases, electronic files stored on AWS) with direct human intervention.<\/td><\/tr><tr><td><strong>PD Processing<\/strong><\/td><td>an action\/operation or a set of actions\/operations performed on PD by automated means and\/or manually.<\/td><\/tr><tr><td><strong>Operator<\/strong><\/td><td><strong>Asari Legal AB, <\/strong>a Moscow-based law firm(having its registered office at Room 40, Office I, Floor 5, 2&nbsp;Tsvetnoy Boulevard, 127051 Moscow) which, independently or jointly with other parties, organises and\/or performs PD processing, defines the purposes of the PD processing, sets the scope of PD to be processed, and determines operations\/actions to be executed on PD.<\/td><\/tr><tr><td><strong>PD<\/strong><\/td><td>personal data, i.e. any information relating to a directly or indirectly identified or identifiable individual (a PD Subject).<\/td><\/tr><tr><td><strong>Policy<\/strong><\/td><td>the Operator\u2019s Policy on personal data processing and privacy.<\/td><\/tr><tr><td><strong>User&nbsp;<\/strong>or<strong> PD Subject<\/strong><\/td><td>an individual who accesses or visits the Website and\/or otherwise uses its functionality, including but not limited to viewing or searching information available on the Website, registering an account on it, submitting web forms, etc.<\/td><\/tr><tr><td><strong>Russia<\/strong><\/td><td>the Russian Federation.<\/td><\/tr><tr><td><strong>Website<\/strong><\/td><td>an Internet site operated for the Operator\u2019s benefit and located at https:\/\/asari.legal\/.<\/td><\/tr><tr><td><strong>PETs<\/strong><\/td><td>privacy-enhancing technologies.<\/td><\/tr><tr><td><strong>Agreement<\/strong><\/td><td>a non-fee agreement between the Operator and the User regulating the use of the Website.<\/td><\/tr><tr><td><strong>Content<\/strong><\/td><td>legally protectable intellectual property on the Website, including literary works (texts, titles, forewords, and annotations); articles; illustrations and cover artwork; music with or without words; graphics and photographs; any derivatives or compilations thereof; user and visual interfaces; brand names and logos; computer software and databases; creative design, structure, specific choice, and coordination of information, its visual representation, the overall \u201clook and feel\u201d and layout of the Website, as well as any other intellectual property elements, whether viewed individually or as a whole.<\/td><\/tr><tr><td><strong>Monitoring Terms and Conditions<\/strong><\/td><td>an appendix to the User Agreement regulating data processing and the use of monitoring technologies.<\/td><\/tr><tr><td><strong>Services<\/strong><\/td><td>access to the Website\u2019s electronic content, including the right to view and download this content, and to its search and navigation tools.<\/td><\/tr><tr><td><strong>Law 152-FZ<\/strong><\/td><td>Russian Federal Law No.&nbsp;152-FZ dated 27&nbsp;July&nbsp;2006 \u201cOn Personal Data\u201d.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">&nbsp;<\/h2>\n\n\n\n<p><strong>Table of Contents<\/strong><\/p>\n\n\n\n<p><strong>Table of Contents<\/strong><\/p>\n\n\n\n<p><a href=\"#_Toc226122512\">1.&nbsp;General 4<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122513\">2. PD Processing Principles, Purposes, and Scope. 4<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122514\">3.&nbsp;PD Collection and Processing. 5<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122515\">4.&nbsp;PD Sharing. 6<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122516\">5.&nbsp;Cessation of Processing and Destruction. 6<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122517\">6.&nbsp;Processing Management and PD&nbsp;Security. 8<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122518\">7.&nbsp;Rights of PD Subjects. 9<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122519\">8.&nbsp; PD&nbsp;Protection Officer 9<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122520\">9.&nbsp;Approval and Updates. 10<\/a><\/p>\n\n\n\n<p><a href=\"#_Toc226122521\">10.&nbsp;Liability. 10<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221778\">1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <a>General<\/a><\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>In processing PD, the Operator prioritises the principles of legality, fairness, confidentiality, and data security.\n<ul class=\"wp-block-list\">\n<li>This Privacy Policy:<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>has been designed to ensure compliance with the applicable PD processing and privacy laws of the Russian Federation.<\/li>\n\n\n\n<li>is a public declaration of the Operator\u2019s conceptual principles underlying the processing and protection of PD collected through the Website.<\/li>\n\n\n\n<li>outlines the methods and principles used by the Operator to process PD, the Operator\u2019s rights and obligations, the rights of the Users as PD subjects, and measures taken by the Operator to ensure PD security during processing.<\/li>\n\n\n\n<li>The Operator has also adopted the Conceptual Framework for PD Processing and Security, which is available for review upon request.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221779\">2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PD Processing Principles, Purposes, and Scope\u00a0<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The Operator processes PD in compliance with the principles of Article\u00a05 of Law\u00a0No.\u00a0152-FZ.\n<ul class=\"wp-block-list\">\n<li>Subject to the laws on PD, the Operator performs the following actions to process PD collected via the Website:<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Processing Purposes<\/strong><\/td><td><strong>PD Categories and Elements<\/strong><\/td><td><strong>PD&nbsp;Subjects<\/strong><\/td><td><strong>Legal Grounds for PD Processing<\/strong><\/td><td><strong>Processing Methods and Activities<\/strong><\/td><td><strong>Processing and Retention Periods<\/strong><\/td><\/tr><\/thead><tbody><tr><td><strong>To improve and enhance the Operator\u2019s activities,<\/strong> in particular through: implementation, analysis, management, enhancement\/optimisation, and development of: \u2014&nbsp;safe and productive interaction with Website users\/visitors, including their identification, authentication and\/or authorisation; prevention of illegal or unauthorised actions and fraud; information security \u2014&nbsp;personalised user experience which includes tailored services, functions, features, options, and recommendations reflecting the User\u2019s needs, interests, preferences, and expectations \u2014&nbsp;efficient User support to address difficulties or incidents &nbsp; marketing and promotion of the Operator\u2019s products and brand through tailored marketing communications, specifically, targeted marketing messages and personalised and non-personalised advertising (including online advertising)<\/td><td>Last name, first name, patronymic Date of birth Contact details Participation in events Professional background and occupation Job title, corporate division, employer Professional and\/or academic interests Communication and information exchange patterns Participation in joint activities Data on the User\u2019s device Browser data Internet connection details Visitation and usage of Web resources User\u2019s consent (in particular, to PD processing)<\/td><td>Website Users and visitors, whether registered or not Operator\u2019s employees Attorneys Legal interns Event participants Interviewees<\/td><td>PD&nbsp;subject\u2019s consent (under Articles 6(1)(1)&nbsp;and 10.1(1) of Law No.&nbsp;152-FZ) Operator\u2019s contract with the PD&nbsp;subject (Article 6(1)(5) of Law No.&nbsp;152-FZ) Rights and\/or legitimate interests of the Operator or third parties (Article 6(1)(7) of Law No.&nbsp;152-FZ)<\/td><td>The Operator processes PD using both automatic and manual methods, which includes: collecting, recording, categorising, accumulating, retaining, updating (revising or modifying), extracting, receiving, searching, copying, matching\/comparing, merging\/binding, using, sharing (transmitting, accessing, distributing), blocking, deleting, and destroying PD &nbsp; &nbsp;<\/td><td>Up to three (3) years after the end of the Website usage (for instance, registration\/account termination), unless otherwise required by applicable law, PD&nbsp;subject\u2019s consent, a contract\/agreement between the Operator and the PD&nbsp;subject, or the respective policies\/rules of third-party cookie providers<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221780\">3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PD Collection and Processing<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The Operator processes the following PD:<ul><li>data and documents submitted by the User or their representative,<\/li><\/ul><ul><li>data from public and\/or open sources (such as social media, public databases, etc.),<\/li><\/ul><ul><li>data provided by the appropriate authorities and entities, the Operator\u2019s counterparties, and other stakeholders,<\/li><\/ul><ul><li>site interaction data,<\/li><\/ul><ul><li>User behaviour analytics,<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>datasets generated by matching (comparing) and merging (binding) PD (for instance, to predict the User\u2019s likelihood of collaboration).<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Unless the applicable PD laws of the Russian Federation otherwise provide, as part of the PD processing, the Operator records, categorises, accumulates, stores, updates (reviews or modifies), and extracts Russian nationals\u2019 PD using databases located in Russia.<\/li>\n\n\n\n<li>The Operator does not make any decisions based solely on the automated PD processing that create legal consequences for PD subjects or otherwise affect their rights or legitimate interests.<\/li>\n\n\n\n<li>The Operator does not use automated technologies to provide personalised content based on the collection, categorisation, and analysis of User preferences (recommendation engines).<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221781\">4.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PD Sharing<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The Operator may engage third parties for PD processing by outsourcing PD processing to third-party providers and\/or by sharing PD with third parties without outsourcing, including cross-border data transfer to recipients in the United States, European Union member states, or other foreign jurisdictions that ensure an adequate level of protection for PD\u00a0subjects\u2019 rights. The Operator may only engage third parties, provided that their engagement is strictly limited to the extent necessary to achieve the purposes of PD processing, and will ensure that each third party is bound by obligations of confidentiality and PD protection (should a third party fail to comply with the provisions of this clause, it will be held liable under the corresponding contracts with the Operator and\/or under applicable laws). Such third parties may be:<ul><li>persons listed in clause 7.3.1 of the User Agreement<\/li><\/ul><ul><li>the Website hosting provider<\/li><\/ul><ul><li>user behaviour analytics providers as specified in clause 20 of the User Agreement<\/li><\/ul><ul><li>third-party vendors that provide Website security, functionality, performance, efficiency, and personalisation services as specified in clause 20 of the User Agreement.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>Third-party providers for PD processing will be chosen based on the relations existing between the Operator and the PD subject in compliance with applicable law, agreements between the Operator and the PD subject, and the PD subject\u2019s consent to PD\u00a0processing.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221782\">5.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Cessation of Processing and Destruction<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The Operator ceases PD processing in the following instances:<ul><li>The purpose of the PD processing has been achieved or the retention deadline has been reached.<\/li><\/ul><ul><li>The purpose of the PD processing is no longer relevant.<\/li><\/ul><ul><li>Unauthorised PD\u00a0processing has been identified, including the unauthorised receipt of PD or collection of PD\u00a0irrelevant to the stated processing purpose.<\/li><\/ul><ul><li>Lawful processing is no longer possible.<\/li><\/ul><ul><li>The PD\u00a0subject withdraws their consent to PD processing, provided that the PD\u00a0is no longer required to be retained to achieve processing purposes.<\/li><\/ul><ul><li>Except as otherwise required by law, the PD\u00a0subject requests that the Operator cease PD\u00a0processing.<\/li><\/ul><ul><li>The statute of limitation (including for legal claims) has expired for the arrangements under which the PD is or was being processed.<\/li><\/ul><ul><li>The Operator goes into liquidation or certain type of corporate reorganisation.<\/li><\/ul><ul><li>Subject to the provisions of Law\u00a0No.\u00a0152-FZ, the Operator ceases processing by:<ul><li>blocking the PD,<\/li><\/ul><ul><li>destroying the PD, or<\/li><\/ul><ul><li>retaining it as specifically required under the Russian laws on archiving<\/li><\/ul><\/li><\/ul><ul><li>If lawful processing of PD\u00a0is no longer possible, the original purpose of the processing has been achieved, or the PD\u00a0subject has withdrawn their consent to PD\u00a0processing and\/or requested cessation, but it is impossible to destroy the PD\u00a0by the deadlines specified in Law No.\u00a0152-FZ (provided that retention of such PD\u00a0is no longer required for processing purposes), the Operator shall block such PD\u00a0and destroy it within six (6) months, unless a different timeframe is provided for by applicable law.<\/li><\/ul><ul><li>PD must be destroyed in a manner that prevents any possibility of recovery. If PD cannot be destroyed without damaging their physical medium beyond further use for the intended purpose, then PD must be destroyed together with the physical medium.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>PD destruction must be documented in accordance with the requirements of the relevant authority mandated to protect the rights of PD\u00a0subjects.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221783\">6.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Processing Management and PD\u00a0Security<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>When processing PD through the Website, the Operator will implement legal, administrative, and technical measures as required to protect PD\u00a0from unauthorised or accidental access, destruction, modification, blocking, copying, disclosure, distribution, or other improper handling. Specifically, the following measures are employed to ensure PD security (depending on their applicability based on processing methods and specifics):<ul><li>A PD protection officer has been appointed.<\/li><\/ul><ul><li>The Operator has adopted PD processing policies, bylaws, and internal procedures designed to prevent, identify, and rectify violations of the PD laws.<\/li><\/ul><ul><li>The Operator has implemented internal controls and\/or conducted audits to ensure that PD processing complies with Law No.\u00a0152-FZ, its subordinate regulations, PD protection requirements, and the Operator\u2019s own PD processing policies and bylaws.<\/li><\/ul><ul><li>Subject to the requirements of the relevant Russian authority mandated to protect the rights of PD\u00a0subjects, the Operator has assessed the harm that PD\u00a0subjects may suffer in the event of violations of applicable PD\u00a0laws, and the adequacy of the measures implemented by the Operator to ensure its compliance with such laws.<\/li><\/ul><ul><li>Parties engaged (permitted) by the Operator for PD processing are provided with and\/or are trained in the requirements of applicable PD\u00a0legislation, including PD protection requirements, the Operator\u2019s policy documents on PD processing, and internal regulations on matters related to PD processing;<\/li><\/ul><ul><li>The Operator has implemented administrative and\/or technical measures to ensure secure PD\u00a0processing; specifically, the Operator has utilised PIMS as necessary to maintain the confidentiality, integrity, availability, and resilience of processes and\/or systems used for PD processing.<\/li><\/ul><ul><li>The Operator maintains the capability to restore PD modified or destroyed by unauthorised access or any other security incident.<\/li><\/ul><ul><li>The Operator destroys\u00a0PD in a manner that\u00a0prevents its restoration\u00a0and precludes any subsequent processing and documents the PD\u00a0destruction as required by the Russian authority mandated to protect the rights of PD subjects.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>When it learns of any unauthorised or accidental transfer, disclosure or dissemination, or access to, PD resulting in a breach of PD\u00a0subject rights, the Operator reports the incident to the Russian authority mandated to protect the rights of PD subjects, in accordance with procedure prescribed by PD law.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221784\">7.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Rights of PD Subjects<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>PD subjects have the right to be informed by the Operator about the processing of their data.<ul><li>PD subjects have the right to demand that their PD be updated, blocked, or destroyed by the Operator if such PD\u00a0is incomplete, outdated, inaccurate, illegally obtained, or cannot be considered necessary for the stated processing purposes, and to take further measures as may be provided by law to protect their rights.<\/li><\/ul><ul><li>PD subjects\u2019 right to access their PD\u00a0may be limited by federal laws, including but not limited to cases where such access would adversely affect the rights and legitimate interests of third parties.<\/li><\/ul><ul><li>PD subjects may withdraw any previously granted consent at any time, in whole or in part, and\/or request that the Operator cease PD processing, unless processing is required under Article\u00a06(1), subparagraphs (2) through (11), Article 10(2) or Article\u00a011(2) of Law\u00a0No.\u00a0152-FZ. PD subjects may exercise their right hereunder by sending the corresponding request to the Operator.<\/li><\/ul><ul><li>To exercise and secure their rights and legitimate interests, PD subjects or their representatives may contact the Operator in any manner specified in clause 1.4 of the User Agreement.<\/li><\/ul><ul><li>The Operator will review all requests and complaints submitted by PD subjects, thoroughly investigate any breaches, and take all measures necessary to remediate such breaches without delay. The operator will also take the appropriate disciplinary actions against the parties responsible and will seek to resolve resulting disputes or conflicts amicably.<\/li><\/ul><ul><li>PD subjects may lodge a complaint with the authority mandated to protect the rights of PD subjects to dispute Operator\u2019s actions or omissions.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>PD subjects have the right to effective judicial remedies to defend their rights or legitimate interests, including without limitation the right to claim material or non-material damages.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221785\">8.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PD\u00a0Protection Officer<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The PD\u00a0protection officer\u2019s rights, duties, and statutory liability are governed by Article 22.1 of Law\u00a0No.\u00a0152-FZ and the Operator\u2019s internal PD\u00a0processing and protection policies.<ul><li>The Operator appoints and removes the PD\u00a0protection officer through a corporate resolution. The hiring decision is based on the candidate\u2019s competencies, professional qualifications, and personal traits that enable them to fully exercise their powers and effectively carry out their duties.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>The PD\u00a0protection officer:<ul><li>monitors the Operator\u2019s compliance with the applicable PD laws, including statutory requirements on PD protection.<\/li><\/ul><ul><li>makes sure that the persons processing PD for the purposes designated by the Operator have sufficient knowledge of the applicable PD laws, including statutory requirements on PD\u00a0protection, and the Operator\u2019s internal PD processing policies.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>supervises the receipt and processing of requests and inquiries submitted by PD subjects or their representatives.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221786\">9.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Approval and Updates<\/a><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>This Policy is approved and enacted by the Operator\u2019s resolution and remains in effect until terminated.<ul><li>The Operator may update this Policy as necessary (the \u201cUpdates\u201d). All Updates must be approved by the Operator\u2019s resolution. Once approved, the updated Policy will be posted on the Website, stating when the Update goes into effect.<\/li><\/ul><ul><li>PD subjects are responsible for viewing the Updates. By accessing\/using the Website after the updated Policy has come into effect, PD subjects acknowledge that they have read the updated Policy.<\/li><\/ul><ul><li>This Policy is updated as necessary and at least once every three (3) years.<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>This Policy may be updated more frequently to reflect:<ul><li>changes in the regulatory framework governing PD processing and protection in the Russian Federation,<\/li><\/ul><ul><li>changes in the Operator\u2019s internal regulations that directly or indirectly govern PD processing and protection,<\/li><\/ul><ul><li>changes in the way the Operator manages PD processing and protection,<\/li><\/ul><ul><li>changes in the Operator\u2019s business or corporate structure,<\/li><\/ul><ul><li>changes in the Operator\u2019s relations with PD subjects, counterparties, or other persons,<\/li><\/ul><ul><li>reasons for and the extent of violations of Operator\u2019s internal regulations,<\/li><\/ul><ul><li>reasons for and extent of PD\u00a0security incidents identified within the IT environment, and<\/li><\/ul>\n<ul class=\"wp-block-list\">\n<li>other factors that may have a material adverse effect on PD processing and protection by the Operator.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><a id=\"_Toc219221787\">10.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Liability<\/a><\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Persons responsible for violation of PD processing and protection regulations will be subject to liability in accordance with applicable law.<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p><a href=\"#_ftnref1\" id=\"_ftn1\">[1]<\/a> PD processing may not be considered automated only on the grounds that such PD\u00a0is contained in or was extracted from the PIMS.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This Privacy Policy regulates the confidentiality and protection of personal data processed via the Website and uses the following terms and abbreviations: Automated Data Processing PD processing by automated means; this involves the processing of PD based on predefined algorithms using computer infrastructure, including without limitation PIMS, information and telecommunication networks, AWS, and\/or machine-readable media. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"page-content.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":6,"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":1947,"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/1947"}],"wp:attachment":[{"href":"https:\/\/asari.legal\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}