Policy of Personal Data Processing

1.General terms

This policy for the personal data processing is made in accordance with the requirements of the Federal Law “On Personal Data” No. 152 dated July 27, 2006 and determines the procedure for processing personal data and measures to ensure the security of Medical Screening Systems. Ltd. personal data (hereinafter referred to as the Operator).

The Operator sets as his most important goal, as well as the condition for his activities implementation, the observance of the rights and freedoms of man and citizen in his personal data processing, including the protection of rights to privacy, personal and family secrets.

This Operator policy regarding the personal data  processing (hereinafter – the Policy) applies to all information that the Operator can receive about visitors from the website https://celsus.ai/en/.

2.Basic definitions

Automated personal data processing is the processing of personal data using computer technology;

Blocking personal data is a temporary cancellation to the personal data processing (unless the processing is necessary to data clarifying);

Website is a combination of graphic and information materials, as well as programs and databases, ensuring their availability on the Internet at the network address https://celsus.ai/en/ ;

Personal data information system is a combination of personal data contained in the databases, and ensuring their information technologies processing;

Depersonalization of personal data is actions for the determining impossibility without the additional information belonging of personal data to a specific User or other personal data subject;

Processing personal data is any action (operation) or a set of actions (operations) performed with or without automation, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, removal;

Operator is a state, municipal body, legal entity or individual, independently or jointly with others, organizing and (or) processing personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;

Personal data is defined as any information relating directly or indirectly to a particular or determined User of the website https://celsus.ai/en/ ;

A user is any visitor to the website https://celsus.ai/en/ ;

The provision of personal data is actions aimed at disclosing personal data to a specific person or a certain number of persons;

Distribution of personal data are any actions aimed at disclosing personal data to an indefinite number of persons (personal data transfer) or familiarizing oneself with personal data of an unlimited number of persons, including disclosing personal data in the media, posting on information and telecommunication networks or providing access personal data in any other way;

Cross-border  personal data transfer is the personal data transferring to the foreign state territory, or foreign government authority, foreign individual or foreign legal entity;

Destruction of personal data is any action as a result of which personal data is permanently destroyed with the inability to further restore the content of personal data in the personal data information system and (or) as a result of which personal data material carriers are eliminated.

3.The operator may process the following personal User data.

Full Name;

Email address

Phone numbers;

Year, month, date and place of birth;

Photos;

Files in the DICOM format;

The site also collects and processes anonymized data about visitors (including cookies) using Internet statistics services (Yandex Metric, Google Analytics, and others).

The above data are hereinafter united by the general concept of Personal Data.

4.Personal data processing purpose.

The purpose of processing the User’s personal data is to inform the User by sending emails; as well as the conclusion, execution and termination of civil contracts; providing the User with access to services, information and / or materials contained on the website.

The Operator also has the right to send notifications to the User about new products and services, special offers and various events. The user can always refuse to receive information messages by sending the Operator an e-mail to celsus@celsus.ai with the note “Refusal to notify about new products and services and special offers”.

The anonymized data of Users collected through the Internet statistics services is used to collect information about the actions of Users on the website, to improve the quality of the website and its content.

5.Legal grounds for the personal data processing.

The Operator processes the User’s personal data only if it is filled out and (or) sent by the User independently through special forms located on the website https://celsus.ai/en/. By filling out the appropriate forms and (or) sending your personal data to the Operator, the User expresses his consent to this Policy.

The operator processes anonymized data about the User in case it is allowed in the settings of the User’s browser (the storage of cookies and the use of JavaScript technology are available).

6.The procedure for the collection, storage, transfer and other types of personal data processing.

The security of personal data processed by the Operator is ensured by the implementation of legal, organizational and technical measures necessary to fully comply with the requirements of the current legislation on the personal data protection.

The Operator ensures the personal data safety and takes all possible measures to exclude access to personal data of unauthorized persons.

The User’s personal data will never, under any circumstances, be transferred to third parties, only in cases related to the implementation of current legislation.

In case of inaccuracies in personal data, the User can update them independently by sending a notification to the Operator marked “Updating personal data” to the Operator’s email address celsus@celsus.ai.

The processing time for personal data is unlimited. The user can at any time withdraw his consent to the processing of personal data by sending a notification to the Operator marked “Revocation of consent to the processing of personal data” to the operator’s email address celsus@celsus.ai.

7. Cross-border personal data transfer.

Before starting the cross-border personal data transfer, the Operator must make sure that the foreign state where the personal data transfer is supposed to be carried out provides reliable protection of the rights of personal data subjects.

Cross-border personal data transfer on the territory of foreign states that do not meet the above requirements can only be carried out if there is a written consent of the personal data subject to the cross-border transfer of his personal data and (or) the execution of the contract to which the personal data subject is a party.

8.Final provisions.

The User can get any clarification on issues related to his personal data processing by contacting the Operator via e-mail celsus@celsus.ai.

This document will reflect any changes in the processing personal data policy by the Operator. The Policy is valid indefinitely until it will be replaced with a new version.

The current Policy version is freely available on the Internet at https://celsus.ai/en/policy.