Privacy Policy

 

WITH RESPECT TO THE PROCESSING OF PERSONAL DATA AND ITS PROTECTION

 

  1. GENERAL PROVISIONS

This Policy has been developed and applied UNIPOST CO., LTD on the basis of Articles 23, 24 of the Constitution of the Russian Federation, Federal Law No. 149-FZ dated July 27, 2006 On Information, Information Technologies and Information Protection, Federal Law dated July 27, 2006 No. 152-FZ On Personal Data, Federal Law of December 19, 2005 No. 160-FZOn Ratification of the Council of Europe Convention for the Protection of Individuals with Automated Processing of Personal Data, Resolution of the Government of the Russian Federation of November 01, 2012. No. 1119 On approval of requirements for the protection of personal data when processing in personal data information systems, Resolution of the Government of the Russian Federation No. 687 of September 15, 2008 On Approval of the Regulation on Peculiarities of Processing Personal Data Performed Without Using Automation Tools, Order of the Federal Service for technical and export control of February 18, 2013. No. 21 On approval of the composition and content of organizational measures to ensure the security of personal data when processing them in personal data information systems and other regulatory and non-regulatory legal acts governing personal data processing issues.

This Policy defines the actions of UNIPOST CO., LTD in relation to the processing of personal data of individuals who have transferred their personal data for processing, the procedure and conditions for processing personal data, ensuring the security of personal data using or without using automation tools, establishes procedures aimed at preventing violations of the laws of the Russian Federation, elimination of the consequences of violations related to the processing of personal data.

The policy is designed to ensure the protection of the rights and freedoms of Personal Data Subjects in the processing of their personal data, as well as in order to establish the responsibility of UNIPOST CO., LTD employees who have access to personal data of Personal Data Subjects for non-compliance with the requirements and standards governing the processing of personal data.

 

Personal data- any information relating to directly or indirectly definite or determined individual (Personal Data Subject), which is confidential information of limited access, not constituting a state secret;

The subject of personal datais an individual, carrier of personal data, whose personal data is transferred to the Company for processing.

Personal data operator – UNIPOST CO., LTD (House 71, Soi Sukhumvit 101/1, Sukhumvit road, Bang Chak, TAX ID 0205564014730), a state body, municipal body, legal or natural person, independently or together with other persons organizing and (or) processing personal data, as well as defining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;

Personal data processing- any action (operation) or a set of actions (operations) performed with the use of automation tools or without the use of such tools with personal data, including the collection, recording, systematization, accumulation, storage, refinement (update, change), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data; Automated processing of personal data- processing of personal data using computer equipment;

Dissemination of personal data- actions aimed at disclosing personal data to an indefinite circle of persons;

Provision of personal data- actions aimed at disclosing personal data to a specific person or a certain circle of persons;

Blocking of personal data- the temporary termination of the processing of personal data (unless it is necessary to process personal data);

Destruction of personal data- actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which the material carriers of personal data are destroyed; Anonymization of personal datais an action in which it becomes impossible without using additional information to determine the identity of personal data to a specific Personal Data Subject;

Use of personal data- actions with personal data performed by the Operator in order to make decisions or perform other actions that generate legal consequences in relation to the Personal Data Subject or other persons or otherwise affect the rights and freedoms of the Personal Data Subject or other persons.

Personal Data Information System- a set of personal data contained in databases and information technologies and technical means ensuring their processing;

Cross-border transfer of personal data- the transfer of personal data to the territory of a foreign state to the authority of a foreign state, a foreign individual or a foreign legal entity.

Confidentiality of personal datais a requirement for the Operator or another person who has obtained access to personal data not to allow their distribution without the personal data subjects consent or legal basis.

Site- a set of information, texts, graphic elements, design, images, photos and video materials, other intellectual property, as well as computer software tools that provide for the public viewing of information and data united by a common purpose, through technical means used for communication between computers and the Internet. The site is located on the Internet at: https://unipost-th.com/.

User- an individual who has access to the Site and uses it, regardless of the fact of registration on the Site

 

IS- information system

Company UNIPOST CO., LTD

Policy this Policy in relation to the processing of personal data and their protection in UNIPOST CO., LTD

PD Personal data

RF Russian Federation Subject Personal Data Subject

Federal Law Russian Federal Law dated July 27, 2006 No. 153-FZ On Personal Data

 

judicial act, an act of another body or official, subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings;

 

2 PURPOSES OF PD

 

  1. LEGAL BASIS OF PD TREATMENT

 

  1. CATEGORIES OF PD SUBJECTS AND LIST OF PD
    • Individual – Site

Name;

E-mail address;

Address (city, street, house number, apartment number);

Phone number;

Information about the browser used;

Location;

IP address;

Requested web pages;

Source of access to the Site https://unipost-th.com/

Full Name;

identity document details;

Address (country, city, street, house number, apartment number);

E-mail address;

phone number (home, mobile);

4.3.   A physical person whose PD was received from the Client within the framework of a contract for the provision of courier services, the specified PD is not subject to the Operators actions and obtaining consent for their processing is the responsibility of the respective Client, which is stipulated in the contract; Full Name; identity document details; Address (country, city, street, house number, apartment number; phone number (home, mobile);

4.4.   An individual whose PD was received from a counterparty under a civil law contract, the specified PD is not the object of the Operators actions and obtaining consent for their processing is the responsibility of the respective contractor / performer; Full Name; data of the identity document (in the provision of power of attorney); E-mail address.

 

5 . COOKIES

5.1.   The site owner UNIPOST CO., LTD uses an automatic cookie data collection system on the site. Cookies are a set of information transmitted by the server to the browser and to the device of the User, such as the user’s IP addresses and other information related to the traffic of user data or the user’s preferences when navigating the Site. Permission to use cookies is necessary to use the Site and its services, including ordering services.The data are processed in an aggregate and anonymous form and do not contain information about personal data, but at the same time they allow linking the user with his personal information provided by the User on the Site. The specified data is collected by the Site in the process of navigation through the Cookie directly and automatically as part of the implementation of operational functions.

5.2.   Most browsers have the ability to delete cookies after each session. Instructions for performing such a deletion operation are contained in the Settings section of the Users browser or in the reference information, and the User can access it if he wishes to delete the cookie.

5.3.   If the procedure for deleting cookies was launched in whole or in part, the Website Owner cannot guarantee that the Websites web pages and / or the provision of certain services on the website will function properly.

 

  1. BASIC RIGHTS AND OBLIGATIONS OF THE SUBJECT OF PD AND COMPANY IN THE FIELD OF PROTECTION OF PD

6.1.   The Subject has the right to:

6.1.1.          to receive information concerning the processing of its PD, in particular:

–        confirmation of the processing of PD by the Company;

–        the legal basis and purpose of processing PD;

–        methods of processing PD used by the Company;

–        name and location of the Company, information about persons (except for employees of the Company)

who have access to the PD or with whom the PD may be disclosed on the basis of an agreement with the Company or on the basis of federal law;

–        processed PD related to the relevant PD Subject, the source of their receipt, unless a different procedure for granting is provided for by federal law;

on behalf of the Company, if processing is entrusted to or will be entrusted to such person;

6.1.2.          require the Company to clarify its PD, block them or destroy it if the PD is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take measures provided by law to protect their rights.

6.1.3.to require the Company to notify all persons to whom previously incorrect or incomplete PD was notified of all exceptions, corrections and additions made to them;

6.1.4.withdraw your consent to the treatment of PD;

6.1.5.for free free access to their PD through a personal appeal or by sending a request (the request form is given in Appendix No. 1). Information on PD shall be provided in an accessible form at the location of the Company during working hours within thirty days from the date of receipt of the request (excluding PD, relating to other PD Subjects);

6.1.6.to appeal against the actions or inaction of the Company to the authorized body for the protection of the rights of the Subjects of the PD or in court.

6.1.7.other rights provided by applicable law.

6.2.   The Subject of the PD is obliged to:

6.2.1.          transfer to the Company authentic PD. The Company has the right to check the accuracy of the PD provided in the manner not contradicting the legislation of the Russian Federation, however, the Company proceeds from the fact that the PD Subject provides reliable and sufficient PD for the purposes of PD processing, and keeps this information up to date.

6.2.2.          promptly inform the Company about the change in their PD.

6.3.   The subject of the PD decides on the provision of his PD and agrees to their processing freely, by his own will and in his interest.

6.4.   Operator Responsibilities:

6.4.1.          ensure the confidentiality of the PD. The operator and other persons who have obtained access to the PD are obliged not to disclose to third parties and not to distribute the PD without the consent of the PD Subject, unless otherwise provided by law;

6.4.2.          When collecting PD, provide information on the processing of PD;

6.4.3.          in case of refusal to provide the DPT, the Subject is explained the consequences of such refusal;

6.4.4.          publish or otherwise provide unrestricted access to the document defining its policy regarding the processing of PD, information about the implemented requirements for the protection of PD;

6.4.5.          take necessary legal, organizational and technical measures or ensure their adoption to protect IDPs from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, distribution of PD, as well as from other illegal actions against PD;

6.4.6.          provide answers to requests and requests from PD subjects, their representatives and the authorized body for the protection of the rights of personal data subjects.

 

  1. PROCEDURE FOR TREATMENT OF PD

7.1.   The operator processes the PD of the Subjects by performing any action (operation) or set of actions (operations) performed using automation means or without using such means, including the following: – collection;

Consent to the processing of a PD may be given by the PD Subject in any form allowing to confirm the fact of receiving consent, unless otherwise established by federal law: in written, oral or other form provided for by the current legislation, including through the PD Subject performing of concrete actions.

In particular, the consent to the processing of the PD is considered to be provided by the Subject in case of performing by the Subject the following actions:

putting a special sign – checkboxes or web tags in a special field on the Site (e.g. when requesting any materials, when contacting in the Feedback form, when registering in the Personal Account, when making an Application for services) and clicking the corresponding button is considered unambiguously, as granting consent for the processing of PD in the volume, for the purposes and in the manner provided in the text proposed before putting a special sign (the text of the Consent is Appendix No. 2 to this Policy). The consent is deemed received from the moment of putting a special mark and is valid until the Subject of the PD submits a corresponding statement on the termination of the processing of the PD at the location of the Operator or by e-mail: unipost.co.th@unipost.com

If the Subject does not agree with the processing of his PD, such processing is not carried out.

Operator’s employees are entitled to receive only those PD that they need to perform specific duties. Operator’s staff engaged in the processing of PD should be informed of the fact of such processing, of the features and rules of such processing established by the regulatory legal acts and internal documents of the Operator. An employee of the Company who has the right to process PD is provided with a unique login and password to access the corresponding IP in the prescribed manner.

In the absence of an employee at his workplace should not be documents containing PD. When taking leave, a business trip and other cases of a long absence of an employee at the workplace, he is obliged to transfer documents and other carriers containing personal data to a person who will be entrusted with the local act of the Operator in the performance of his job duties. In the event that such a person is not appointed, documents and other carriers containing the PD of the Subjects are transferred to another employee who has access to the PD at the direction of the head of the relevant structural unit of the Operator.

When an employee with access to a PD is dismissed, documents and other carriers containing PD are transferred to another employee who has access to the PD at the direction of the head of the structural unit and with notice to the person responsible for processing the PD.

To withdraw consent to the processing of PD, the PD subject must submit a corresponding written application at the location of the Operator or send an e-mail to: unipost.co.th@unipost.com

In case of withdrawal by the Subject of consent to the processing of its PD, the Operator stops processing them or ensures that such processing stops (if the processing is carried out by another person acting on instructions of the Operator) and in case the retention of the PD is no longer required for the purposes of their processing, destroys the PD or provides their destruction (if processing is carried out by another person acting on behalf of the Operator) within a period not exceeding 30 (Thirty) days from the date of receipt of the withdrawal, unless otherwise provided by the contract, where the PD Subject is a party, beneficiary, or guarantor, another agreement between the Operator and the Subject, or if the Operator does not have the right to process the PD without the consent of the Subject on the grounds provided for by the Federal Law or other federal laws.

 

  1. MAINTENANCE OF SECURITY
    • When processing PD, the Operator applies legal, organizational and technical measures and ensures that they are taken to protect PD from unauthorized or accidental access to them, destruction, modification, blocking, copying, submission, distribution of PD, as well as from other illegal actions in accordance with the requirements of ensuring the safety of PD when they are processed in the PD information systems, the requirements for the tangible media of the PD and the technologies for storing such data outside the PD information systems established by the Rule stvom
    • Measures for the protection of personal data are determined by the Regulations, Orders, Instructions and other local acts of the
    • The Company takes the measures necessary and sufficient to ensure the fulfillment of the obligations stipulated by the laws of the Russian Federation and the regulatory

legal acts adopted in accordance with them. The Company independently determines the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations provided for by the Federal Law On Personal Data and the regulatory legal acts adopted in accordance with it, unless otherwise provided by this law or other federal laws. Ensuring the safety of PD is achieved in particular:

 

  1. REQUESTS, APPEALS AND ORDER OF THEIR PROCESSING BY THE OPERATOR
    • The operator is obliged to provide free of charge to the Subject or his representative the opportunity to get acquainted with the PD related to this Within a period not exceeding seven working days from the date of submission by the Subject or his representative of information confirming that the PD are incomplete, inaccurate or irrelevant, the Operator is obliged to make the necessary changes to them. Within a period not exceeding seven working days from the date of submission by the Subject or his representative of information confirming that such PD are illegally obtained or are not necessary for the stated purpose of processing, the Operator is obliged to destroy such PD. The operator is obliged to notify the Subject or his representative about the changes made and the measures taken and take reasonable measures to notify third parties to whom the PD of this Subject have been transferred.
    • The operator is obliged to inform the authorized body for the protection of the rights of personal data subjects at the request of this body the necessary information within thirty days from the date of receipt of such a
    • If unauthorized processing of PD is detected when the Subject or his representative is contacted or at the request of the Subject or his representative or the authorized body to protect the rights of personal data subjects, the Operator is obliged to block unlawfully processed PD related to this Subject, or ensure their blocking (if the PD is processed by another person acting on behalf of the Operator) from the time of such a request or receipt of the specified request for the period of verification. If inaccurate PD is detected when the Subject or his representative addresses, either at their request or at the request of the authorized body to protect the rights of personal data subjects, the Operator is obliged to block the PD related to this Subject or ensure blocking it (if the PD is processed by another person acting on behalf of the Operator) from the moment of such a request or receipt of the specified request for the inspection period, if blocking the PD does not violate the rights and legitimate interests of the Subject or third parties.
    • In case of confirmation of the fact of inaccuracy of the PD, the Operator on the basis of information provided by the Subject or his representative or the authorized body for protection of the rights of personal data subjects, or other necessary documents is obliged to clarify the PD or ensure their clarification (if the PD is processed by another person acting on behalf of the Operator) within seven working days from the date of submission of such information and remove the blocking of

9.5. In case of unlawful processing of PD, carried out by the Operator or a person acting on behalf of the Operator, the Operator shall, within three working days from the date of this identification, be obliged to stop the illegal processing of the PD or ensure the termination of the illegal processing of the PD by the person acting on behalf of the Operator. If it is impossible to ensure the legality of the processing of PD, the Operator shall, within a period not exceeding ten working days from the date of unlawful processing of PD, identify such PD or ensure their destruction. The Operator is obliged to notify the Subject or his representative about the elimination of the violations or the destruction of the PD, and if the appeal of the Subject or his representative or the request of the authorized body to protect the rights of personal data subjects were also sent by the authorized body to protect the rights of personal data subjects, the Operator is obliged to notify the specified body.

 

  1. CONTROL, RESPONSIBILITY FOR VIOLATION OR DEFAULT OF POLICIES

10.1.The control over the execution of this Policy is imposed on the OPD Supervisor.

10.2.Persons violating or not fulfilling the requirements of the Policy are brought to disciplinary, administrative, civil or criminal liability in accordance with the legislation of the Russian Federation.

10.3.Heads of structural units of the Operator are personally responsible for the performance of duties by their subordinates.

 

  1. OTHER PROVISIONS
    • This Policy and changes to it are approved by the sole executive body of the Company, are binding for all employees who have access to the PD of the Subjects, and enters into force from the date of its approval.
    • All employees of the Company admitted to work with PD should be familiarized with this Policy before starting work with
    • Publication or otherwise providing unrestricted access to this Policy, other documents defining the policy of the Operator in relation to the processing of PD, to the information about the implemented requirements for the protection of personal data, the Operator performs, in particular but not limited to, by posting on an electronic site owned by the
    • All issues related to the processing of PD that are not regulated by this Policy are resolved in accordance with the current legislation of the Russian Federation in the field of personal data, as well as other local acts adopted by the Company in the field of personal data.

 

Appendix No. 1 to the Policy regarding the processing and protection of Personal Data Request Form on the access of the Personal Data Subject to their personal data

To the head of

UNIPOST CO., LTD

TAX ID 0205564014730

House 71, Soi Sukhumvit 101/1, Sukhumvit road, Bang Chak, Phra Khanong District, Bangkok, 10260

Request on the access of the Personal Data Subject to their personal data

I,                       (full name) ___________(main document proving the identity of the Personal Data Subject or his representative)____________ (main document number) issued                                                                                                              year(issue date)     (issuer of main document),                                                                          (information confirming the participation of the Personal Data Subject in the relationship with the Operator (contract number, date of conclusion of the contract, conditional verbal designation and / or other information) or information otherwise confirming that the Operator has processed personal data)

Please provide me with the following information (documents) for compiling my personal data:

  1. ;

2 .                                                                  ;

  1. . “ “        20     .

                                     /                                                                  / Signature Print full name

 

Appendix No. 1 to the Policy regarding the processing and protection of Personal Data Request Form on the access of the Personal Data Subject to their personal data

To the head of UNIPOST CO., LTD

TAX ID 0205564014730

House 71, Soi Sukhumvit 101/1, Sukhumvit road, Bang Chak, Phra Khanong District, Bangkok, 10260

Consent on the processing of personal data

I hereby freely, by my own will and in my interest, informed and agree that in accordance with Federal Law No. 152-FZ of July 27, 2006 “On Personal Data”, the information I have provided, including information on:

Please provide me with the following information (documents) for compiling my personal data:

E-mail address

Information about the browser used; Location;

IP address;

Cookie data;

Requested web pages;

Source of access to the Site https://unipost-th.com/

… (other statistics collected by the site) will be added to the archive of the Operator for the processing of personal data. I grant the right to process this data in order to organize the process of providing the information I requested about the services of the Operator, receiving feedback from the Operator, ordering services, registering the Personal Account, except when expressly stated otherwise. My PD will be used when I request a Callback, provide feedback, my registration and (or) authorization on https://unipost-th.com/ for the purposes established by Section II of the Policy regarding the processing and protection of Personal Data, namely, in order to: – providing the User with the opportunity to interact with the Site, in particular, sending notifications, requests and information related to the provision of services, as well as processing requests and requests from the User; – the provision of courier services to customers under the agreement for the provision of courier services; -conducting surveys and studies aimed at identifying customer satisfaction / dissatisfaction with the Company’s services, improving the quality of services; – conducting statistical and other studies based on anonymous data. – informing me about promotions, special offers, new services of UNIPOST CO., LTD;

In connection with the above objectives, I understand that my personal data may be communicated to third parties, and I give my consent to this.

In the case of the provision of data from third parties, including contact information, I confirm that the Personal Data Subject has been notified of the processing of his personal data by the Operator for the processing of personal data.

I am hereby informed that I have the right to require clarification of my personal data, its blocking or destruction in case personal data is incomplete, outdated, inaccurate or not necessary for the stated purpose of processing. data by sending a statement at the location of the Operator or send an e-mail to the e-mail address: unipost.co.th@unipost.com

I give my consent to the use of the provided personal data for sending commercial information by the Operator for the processing of personal data and third parties to the specified phone number and email address.

I give the right to send me information about the services, offers and promotions of the Operator and / or its Partners, including through electronic and mobile communications. I am aware and agree that the provided personal data may be incorporated by the Operator into publicly accessible sources of personal data created by the Company for the purposes of its own information support (clause 6.11. Policies).

I am hereby informed that I can at any time refuse to receive commercial information by sending my application at the location of the Operator or by sending an e-mail to: unipost.co.th@unipost.com

Payment Methods:

Cash
If the goods are delivered by courier, payment is made in cash to the courier. Upon receipt of the goods, be sure to check the contents of the goods, the availability of a warranty card and a receipt.

By bank card
To select payment for the goods using a bank card on the corresponding page, you must click the button Payment for the order by bank card . Payment is made through PJSC SBERBANK using bank cards of the following payment systems:

— МИР МИР

— VISA International МИР

— Mastercard Worldwide МИР

— JCB МИР

To pay (enter your card details), you will be redirected to the payment gateway of PJSC SBERBANK. The connection with the payment gateway and the transfer of information is carried out in a secure mode using the SSL encryption protocol. If your bank supports the technology of secure online payments Verified By Visa, MasterCard SecureCode, MIR Accept, J-Secure, you may also need to enter a special password to make a payment.

This site supports 256-bit encryption. The confidentiality of the reported personal information is ensured by PJSC SBERBANK. The entered information will not be provided to third parties, except in cases provided for by the legislation of the Russian Federation. Payments by bank cards are carried out in strict accordance with the requirements of the payment systems MIR, Visa Int., MasterCard Europe Sprl, JCB.
Returning goods

The term for returning the goods of good quality is 30 days from the date of receipt of the goods.

Refunds of the transferred funds are made to your bank account within 5-30 business days (the period depends on the bank that issued your bank card).