Privacy Policy

1. The following terms and definitions are used throughout this document:

1.1. Personal data shall mean any information relating directly or indirectly to a specific or definable individual (subject of personal data).

1.2. “Operator” — Burlak ATVs LLC, means a person that independently organizes and/or performs processing of personal data, as well as defines the purposes of the processing of personal data, content of personal data to be processed, actions (operations) performed with personal data.

1.3 "Client" means an individual using the Website.

1.4. "Website" means a set of programs for computers and other information contained in the information system, access to which is provided via the Internet by domain names and/or network addresses that allow identifying the Internet websites. Website URL: https://burlakoffroad.com/.

1.5. "Personal data processing" means any action (operation) or a set of actions (operations) performed with or without the use of the automation tools, involving personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, granting access), depersonalization, blocking, deletion, destruction of personal data.

1.6. “Automated Processing of Personal Data” means personal data processing by means of computer technology.

1.7. “Provision of Personal Data” means actions aimed at disclosing personal data to a specific person or a specific group of persons.

1.8. “Blocking of Personal Data” means temporary suspension of personal data processing (except in cases where the processing is necessary for correction of personal data).

1.9. “Destruction of Personal Data” means actions resulting in the impossibility to restore the content of personal data in the personal data information system and/or resulting in the destruction of tangible media of personal data.

1.10. “Personal Data Information System” means a set of personal data contained in databases and a set of information technologies and technical means ensuring the processing of personal data.

1.11. “Cookies” mean pieces of data sent by a website and stored on a computer, mobile phone, or another device from which the Client accesses the website, and used to store data about the Client's actions on the website.

2. When sending a Request to the Operator via the Website, the Client agrees with the terms of this Policy, as well as gives his/her consent to the Operator to process his/her personal data in cases when such consent is required by the provisions of applicable law.

3. The processing of personal data is carried out only on a legal and fair basis. This Privacy Policy is determined in accordance with the applicable legislation of the Russian Federation, including the following regulations of the Russian Federation: The Constitution of the Russian Federation, the Civil Code of the Russian Federation, Federal Law 27.07.2006 № 152-ФЗ "On Personal Data", Federal Law 07.02.19992 № 2300-1 "On Protection of Consumers' Rights".

3. During the processing of personal data, the Client shall be entitled to:

3.1. Receive information regarding the processing of his/her personal data, also containing:

3.1.1. Confirmation of the fact of the processing of personal data;

3.1.2. Legal basis and purposes of the processing of personal data;

3.1.3. Purposes and methods of the processing of personal data;

3.1.4. Information about the name and location of the person processing personal data, information about the persons (except for the employees of the Operator) that have access to personal data or to whom personal data may be disclosed based on a contract with the Operator or based on the current legislation;

3.1.5. Personal data being processed relating to the respective subject of personal data, the source of personal data received unless otherwise provided for by the current legislation;

3.1.6. Time limits of the processing of personal data, including the time limits of its storage;

3.1.7. Procedure for the exercise by the Client of the rights provided for by the current legislation;

3.1.8. Information on the completed or intended cross-border data transfer;

3.1.9. Title or last name, first name, middle name, and address of a person processing personal data on by the order of the Operator in case the processing is or is to be assigned to such a person;

3.1.10. Other information as provided for by the current legislation;

3.2. Require the Operator to correct his/her personal data, to block or destroy it in cases where the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of the processing, as well as to take legal measures to protect his/her rights.

3.3. Appeal the actions or inaction of the Operator to an authorized body for the protection of rights of personal data subjects, or to court, in case the Client believes that the Operator processes personal data in violation of the requirements of the current legislation or otherwise violates his/her rights and freedoms.

3.4. Protect his/her rights and legitimate interests, as well as to receive compensation for damages and/or compensation for moral damages in court.

4. During the processing of Personal Data, the Operator undertakes to:

4.1. Provide the Client with the following information at his/her request:

4.1.1. Confirmation of the fact of processing of personal data;

4.1.2. Legal basis and purposes of processing of personal data;

4.1.3. Purposes and methods of the processing of personal data;

4.1.4. Its title and location, information about the persons (except for employees) that have access to personal data or to which personal data may be disclosed based on a contract or based on a federal law;

4.1.5. Processed personal data of the Client, the source of personal data unless otherwise provided for by the current legislation;

4.1.6. Time limits of the processing of personal data, including the time limits of its storage;

4.1.7. Procedure for the exercise by the Client of the rights provided for by the current legislation;

4.1.8. Information on the performed or intended cross-border data transfer;

4.1.9. Title or surname, first name, patronymic, and address of a person processing personal data by the order of the Operator in case the processing is or is to be assigned to such a person;

4.1.10. Other information as provided for by the current legislation.

4.2. Ensure the adoption of measures for the prevention of unauthorized access to the Client’s personal data;

4.3. Publish or otherwise provide unrestricted access to the document defining the personal data processing policy, as well as to the information about the requirements implemented for the protection of personal data.

5. The purpose of collecting and processing the Client's personal data is the following:

5.1. The receipt by the Client of information, news about goods, services, events, activities, promotions and (or) consulting on the purchase of goods, services presented on the Website, the use by the Client of the services available on the Website, including but not limited to personal messaging service, in order to enter into a corresponding contract;

5.2. The provided data may also be used for marketing programs, statistical research, promotion of goods, services through direct contacts with the Client, as well as notifications, including technical, advertising ones, current offers and promotions of the Operator, by different means of communication, including, but not limited to: mailing, e-mail, telephone, fax, Internet. The Client may refuse to receive notifications at any time by sending a request/demand in compliance with the procedure stipulated by this Privacy Policy.

6. The Client’s personal data is stored on electronic media and processed using automated personal data processing systems.

7. The Operator shall collect and process the following personal data of the Client:

7.1. Surname, first name, patronymic;

7.2. Subscriber telephone number;

7.3. E-mail address;

7.4. History of requests;

7.5. The operator also receives data that is automatically transmitted in the process of browsing when visiting the site, including:

7.5.1. IP address;

7.5.2. Information from cookies;

7.5.3. Information about the browser (or other program that provides access to display advertising);

7.5.4. Time of the access;

7.5.5. Referrer (address of the previous page).

8. The Client's personal data shall be destroyed by the Operator in the following cases:

8.1. Upon the expiry of three years from the date of the Client's last request to the Operator.

8.2. In case of withdrawal by the Client of his/her consent to the processing of his/her personal data.

9. Destruction of the Client’s personal data shall be carried out without the possibility of its subsequent restoration.

10. Only persons directly related to the work with the Client may have access to the Clients’ personal data in compliance of Section 5 of this Privacy Policy. In other cases, the Operator shall neither distribute the Client’s personal data, nor provide access to it to third parties without the Client’s prior consent, except for cases when personal data is provided at the request of authorized state bodies in compliance with the current legislation.

The Operator shall implement the following measures for the prevention of unauthorized access to the Client’s personal data. The Operator shall:

11.1. Appoint the employees responsible for the organization of the processing of personal data;

11.2. Implement organizational and technical measures to ensure the security of the Client’s personal data, namely:

11.2.1. Identify security threats related to personal data in the course of its processing in the personal data information systems;

11.2.2. Organize a security regime for the premises in which the information system is housed, hindering the possibility of uncontrolled entry or occupancy of the premises by persons lacking the right to access such premises;

11.2.3. Ensure the safety of personal data storage media;

11.2.4. Approve the list of persons having access to personal data as necessary for them to perform official (job) duties;

11.2.5. Use information security tools necessary to prevent unauthorized access to personal data;

11.2.6. Assess the effectiveness of measures taken to ensure the security of personal data;

11.2.7. Ensure the detection of unauthorized access to personal data and take appropriate measures;

11.2.8. Recover personal data modified or destroyed due to unauthorized access (if such recovery is technically possible);

11.2.9. Establish rules for access to personal data being processed in the personal data information system;

11.2.10. Control the measures implemented to ensure the security of personal data and the security level of the personal data information systems.

12. The Client has the right to require the Operator to clarify (update) his/her personal data, to block or to destroy them, if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated processing purpose, and also to withdraw his/her consent to the processing of personal data by directing appropriate request to the Operator and/or demand in writing by registered mail with notification of delivery or personal service at the address of the Operator. The specified request/demand must include the number of the main identifying document of the Client or his/her representative, the date of issue of the specified document and the name of the issuing authority, the address of the Client’s place of residence, information confirming the Client’s relationship with the Operator (contract number, date of the contract, conditional verbal designation and/or other information), or information that otherwise confirms the fact of the processing of Client's personal data, request to clarify, block or destroy the Client’s personal data, or notice of withdrawal of consent to the processing of personal data, signature of the Client or his/her representative. The Operator is obliged to give a reasoned answer on the merits of the Client’s request/demand within 30 calendar days from the date of receipt.

13. The Operator can use the following types of cookies:

13.1. Strictly necessary cookies. These are used to navigate the website and use the requested services. Cookies of this type are used when the User registers and logs in. In their absence, the services requested by the User become unavailable. These cookies are first-party and can be either persistent or temporary. Without the use of this type of cookies, the website does not function properly.

13.2. Performance cookies. They collect website usage statistics. These cookies do not access the User’s personal information. All information collected by these cookies is statistical and anonymous. The purposes of using these cookies are:

13.2.1. Obtaining the website usage statistics;

13.2.2. Evaluating the effectiveness of advertising campaigns. These cookies can be either persistent or temporary, and can relate to both first-party and third-party cookies.

13.3. Functional cookies. They are used to memorize information provided by the Client (such as username, language or location). These files use anonymized information and do not track the Client's actions on other websites. The purposes of using these cookies are as follows:

13.3.1. To memorize information about whether a service was previously provided to the Client;

13.3.2. To improve the quality of interaction with the Website in general by memorizing the preferences selected by the Client.

These cookies can be either persistent or temporary, and can relate to both first-party and third-party cookies.

13.4. Advertising cookies. They are used to manage advertising materials on the website, limit the number of times an ad is viewed by a user, as well as to evaluate the effectiveness of advertising campaigns. Advertising cookies are placed by third parties, for example, advertisers and their agents. These files are associated with advertising on the website provided by third-party companies. They can be either persistent or temporary.

14. The Client can use the settings of the browser used by him/her to block or delete cookies, as well as to limit their function.

15. The Operator reserves the right to make amendments to this Privacy Policy without any prior notice. Amendments shall come into force from the moment of their publication on the Website.

16. All disputes arising shall be resolved by means of negotiations; in case of failure to reach an agreement, the dispute shall be referred to the competent court in accordance with the applicable legislation of the Russian Federation. The place of disputes consideration is the city of Kurgan.