Online from 10:00 to 20:00 MSC

Personal data processing policy

Lidirium Group Limited Liability Company (hereinafter referred to as the "Operator" or "Company") respects your right to privacy and, with this Policy, defines the procedure for processing personal data and measures to ensure its security in accordance with the requirements of Federal Law No. 152-FZ "On Personal Data" of July 27, 2006 (hereinafter referred to as the "Law").

1. Basic Concepts
Personal data (PD) – any information related to a directly or indirectly identified or identifiable individual (PD subject).

PD processing – any action (operation) or set of actions (operations) performed with PD, with or without the use of automated means, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer, depersonalization, blocking, deletion, and destruction of PD.

Operator – Lidirium Group LLC, which independently or jointly with other entities organizes and processes personal data, and determines the purposes of processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.

2. Purposes of Personal Data Processing
The Operator processes personal data for the following purposes:

Establishing feedback with the client, including sending notifications, requests, and information regarding the use of website services.

Concluding and executing a contract for the sale and purchase of goods or the provision of services (including at the initiative of the personal data subject).

Identifying the client when contacting customer support and placing orders.

Sending commercial and advertising information to the client about the Company's goods, services, promotions, and news (only with separate consent).

3. Legal Basis for Processing Personal Data
Personal data is processed based on the following legal grounds, as provided in Article 6 of the Law:

Clause 5, Part 1, Article 6: Processing is necessary for the performance of a contract to which the personal data subject is a party, or for the conclusion of a contract initiated by the personal data subject (e.g., placing an order on a website).

Part 2, Article 6: The personal data subject has expressed consent to the processing of their personal data (e.g., by checking a box when submitting an application on a website).

4. Categories and list of personal data processed
The Operator processes the following categories of personal data, depending on the purpose of processing:

For purposes No. 1, 2, 3 (feedback, consultation, conclusion and execution of a contract):

Surname, first name, patronymic.

Contact phone number.

Email address (if provided by the client).

Data related to the order or request (order details, consultation history).

For purpose No. 4 (distribution of advertising and informational materials – only with separate explicit consent):

Last name, first name, patronymic.
Contact phone number.
Special categories of personal data or biometric personal data are not processed by the Operator.

5. Categories of subjects whose personal data is processed
Potential and current clients of the Company (website users).

Individuals who have contacted customer support or submitted a request for a callback.

6. Methods and terms of processing and storage of personal data
Processing methods: Collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, blocking, deletion, and destruction.

Processing is carried out: With or without the use of automated tools (the website's information system) (in paper form, if necessary).

Retention periods: Personal data is stored for no longer than required for the purposes of its processing.

Data collected for the conclusion of a contract (order) is stored for 5 years from the date of contract execution to comply with tax legislation.

Data collected through applications/feedback is stored for up to 1 year from the last interaction.

Data processed based on consent is stored until the personal data subject revokes consent, but for no more than 3 years from the last interaction.

After the specified periods, personal data is subject to destruction or anonymization.

7. Personal Data Destruction Procedure
Personal data, tangible media, and databases are destroyed:

In electronic form – by permanently deleting files and records in databases using standard operating system tools, preventing their recovery.

In paper form – by mechanical destruction (shredding).

The fact of destruction is documented by a corresponding act.

8. Transfer of personal data to third parties
The Operator may transfer personal data to contractors that provide services for the purposes of processing (e.g., delivery services, payment systems) only to the extent necessary to fulfill the contract with the personal data subject. Such contractors are obligated to ensure the confidentiality and security of personal data.

Personal data may be transferred to government agencies only within the framework of Russian Federation law.

9. Personal Data Protection Requirements
The Operator takes necessary and sufficient organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other illegal actions. These measures include, but are not limited to:

Appointing a person responsible for organizing personal data processing.

Adopting local regulations on personal data processing.

Ensuring the physical security of premises.

Using information security tools (antivirus software, firewalls).

Regular employee training.

10. Rights of the Personal Data Subject
The personal data subject has the right to:

Receive information regarding the processing of their personal data.

Request clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, illegally obtained, or is not necessary for the stated purpose of processing.

Revoke consent to the processing of personal data.

Contact the Operator with a complaint or request to protect your rights.

Appeal the Operator's actions or inactions to the authorized body (Roskomnadzor) or in court.

11. Operator Contact Information
To exercise your rights or with questions regarding the processing of your personal data, you can contact the Operator:

Name: Lidirium Group Limited Liability Company

OGRN: 1200200060169

Legal Address: Ufa, Ukhtomskogo St. 16-177

Email for inquiries regarding personal data: help@medleech.ru

Phone: +7 (937) 35-000-33

MEDLEECH

+7 (937) 35 - 000 - 33

help@MedLeech.ru

Every day from 10:00 to 20:00

Consultation on Telegram

Consultation on WhatsApp

Free
training