Privacy policy
This Personal Data Processing Policy (hereinafter – the “Privacy Policy”) sets out the rules, terms, and principles governing the processing of personal data of users of the Website by the Federal State Budgetary Scientific Institution Ufa Federal Research Centre of the Russian Academy of Sciences (hereinafter – the “Operator”), a website located on the Internet at: https://ecobiotech-journal.ru/ (hereinafter — the “Website”).
1. BASIC CONCEPTS AND TERMS
1.1. Website — the set of computer and mobile device programs and other information contained in an information system, access to which is provided via the Internet at: https://ecobiotech-journal.ru/
1.2. Website Content (hereinafter — “Content”) — any information posted on the Website in any format (graphic, text, photo, audio, or video): information about the Founder and Publisher of the journal — the Federal State Budgetary Scientific Institution Ufa Federal Research Centre of the Russian Academy of Sciences (UFRC RAS), its location and structure; information about the journal, the editorial board, and the editorial office; texts of scientific articles and other published materials; requirements for the formatting and submission of manuscripts; information on the archive of issues, the indexing of the journal in databases, and its scientometric indicators; other information posted by the Operator for the purposes of scientific communication and the journal's publishing activities.
1.3. Personal data operator — a state authority, municipal authority, legal entity, or individual that, independently or jointly with other persons, organizes and/or carries out the processing of personal data, and determines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data.
1.4. Personal data of Website users (hereinafter — “Personal Data”) — any information posted on the Website relating to a directly or indirectly identified or identifiable user of the Website, including:
1.4.1. Personal data that the user provides to the Operator on their own initiative.
1.4.2. Personal data transmitted by the user to the Operator by means of software installed on the user's computer or mobile device.
1.5. Processing of Personal Data — any action (operation) or set of actions (operations) performed on Personal Data, whether or not by automated means, including: collection; recording; systematization; accumulation; storage; clarification (updating, amendment); retrieval; use; transfer (disclosure, provision, access); depersonalization; blocking; deletion; and destruction.
1.6. Confidentiality of Personal Data — an obligation, binding on any person who has gained access to specific Personal Data, not to disclose such Personal Data to third parties without the consent of the data subject.
1.7. Operator of Personal Data of Website Users (hereinafter — the “Operator”) — the Federal State Budgetary Scientific Institution Ufa Federal Research Centre of the Russian Academy of Sciences, Taxpayer ID (INN) 0274064870, Primary State Registration Number (OGRN) 1030204207582, Tax Registration Reason Code (KPP) 027601001, address: 71 Oktyabrya Prospekt, Ufa, Republic of Bashkortostan, 450054, Russian Federation, the owner of the Website.
1.8. Website User (hereinafter — the “User”) — any individual using the Website for its intended purpose.
1.9. Parties — the Operator and the User, collectively.
1.10. Cookie file — a small text file stored on the User's computer or mobile device, used to save web page display settings. During the first visit to the Website, this file is downloaded via the browser. On a subsequent visit to the Website from the same device, the browser may check for the presence of an associated file (i.e., one bearing the Website's name) and send the data contained in that cookie file back to the Website. This allows the Operator to determine whether the Website has previously been visited from that browser and, in some cases, to change the content displayed. Cookie files make the Website easier to use and allow relevant Content to be provided to Users. Cookie files are used for research and statistical purposes, and to improve the service provided by the Website.
1.11. IP address — a unique identifier (address) of a device (computer or mobile device) connected to a local network or the Internet.
1.12. Yandex Metrica — a web analytics service provided by YANDEX LLC (INN 7736207543), designed to collect and process statistical data on Website traffic, User behavior, traffic sources, and the effectiveness of advertising campaigns, using cookie files and device identification technologies.
2. GENERAL PROVISIONS
2.1. This Privacy Policy applies to all Personal Data processed by the Operator and applies exclusively to the Website. The Operator is not responsible for information posted on third-party websites that the User may access via links available on the Website.
2.2. The Operator does not verify the accuracy of Personal Data.
2.3. Use of the Content or of any functional features of the Website constitutes the User's unconditional acceptance of this Privacy Policy and of the terms, purposes, and rules for the collection and processing of Personal Data set out herein. If the User does not agree with this Privacy Policy, the User must immediately stop using the Website in any way.
2.4. Personal Data may be transferred to authorized government authorities of the Russian Federation on the grounds and in the manner established by applicable Russian legislation, and to third parties.
3. PROCESSING OF PERSONAL DATA THROUGH THE USE OF COOKIE FILES
3.1. Cookie files are divided into: those necessary for the use of the Website and its functions; operational cookies, which collect information on the use of the Website, for example on frequently visited pages — such data may be used to optimize the Website and simplify navigation, these files are not used to collect personal information, and all information collected through them is intended solely for statistical purposes and remains anonymous; and functional cookies, which remember choices made on the Website, text-size and font settings, and other Website parameters — these files allow the Website to remember choices made by the User and may be used to remember settings such as text size and font, and the information provided by such files does not allow identification of Users.
3.2. The Operator uses cookie files to collect and store small pieces of data in small files on the hard drive of the User's computer or mobile device, in order to ensure maximum navigation convenience based on the User's preferences. Such files do not store any Personal Data and are used by the Operator solely to identify the User's computer or mobile device and to collect navigation data (for example, pages viewed on the Website, the User's IP address). To collect statistical data on Website traffic and User behavior, the Operator uses the “Yandex Metrica” web analytics service, which likewise employs cookie files and similar technologies. The Operator processes data obtained through the “Yandex Metrica” service only where the User has given consent to the processing of personal data, which consent is expressed through the User's affirmative actions when visiting the Website (including through cookie settings in the Website's or browser's interface), or by continuing to use the Website after the relevant notice has been displayed. If the User does not consent to the processing of such data, the Operator does not collect or process it.
3.3. The use of cookie files allows the Operator to: analyze traffic patterns on the Website; improve the convenience of navigating the Website; determine the User's geographic location; save browser settings in order to automatically collect Personal Data, simplifying the User's log-in procedure on the Website; suggest useful links based on recently viewed pages; collect navigation statistics; and enable the sharing of information on social networks. The “Yandex Metrica” service additionally allows the Operator to analyze the sources of traffic to the Website, page-view depth, User actions on the Website, and the effectiveness of promotional materials.
3.4. Cookie files transmitted by the Website to the User's computer or mobile device are used to provide the User with personalized Website features and personalized advertising shown to the User for statistical and research purposes, and to improve the operation of the Website.
3.5. The User acknowledges that the equipment and software used to visit the Website may include a function that blocks operations involving cookie files, and that allows the deletion of previously received cookie files.
3.6. The Operator must ensure that certain Website functions may be used only where the acceptance and receipt of cookie files has been permitted by the User. If the User blocks cookies, the functionality of the Website may be limited, and the Operator will notify the User of any such limitations.
3.7. The structure, content, and technical parameters of the cookie file are determined by the Operator and may be changed by it without prior notice to the User.
4. SUBJECT MATTER OF THE PRIVACY POLICY
4.1. The subject matter of this Privacy Policy is the processing of Personal Data by the Operator, and the maintenance of the confidentiality of such Personal Data, in accordance with applicable Russian legislation.
4.2. The Personal Data provided by the User to the Operator, and which the User has authorized for processing under this Privacy Policy, includes: last name, first name, and patronymic; the User's contact telephone number; the User's email address; and the delivery address for goods.
4.3. The Operator also protects data that is automatically transmitted by the User while viewing informational blocks on the Website and while visiting Website pages, namely: IP address; information from cookie files; information about the browser or other program that enables advertising content to be displayed and viewed; access time; the address of the page on which the informational block is located; and the address of the previous page (referrer). Such data may also be processed using the “Yandex Metrica” service, for the purposes set out in Section 5 of this Privacy Policy.
4.4. Information on Users' IP addresses is used by the Operator solely to identify and resolve technical problems. The content and scope of the Personal Data processed correspond to the purposes of processing set out in Section 5 of this Privacy Policy. The Personal Data collected and processed is not excessive in relation to the stated purposes of its processing.
5. PURPOSES OF THE COLLECTION AND PROCESSING OF PERSONAL DATA
5.1. The Operator collects and processes Personal Data on the grounds and in the manner provided for by Federal Law No. 152-FZ “On Personal Data” dated 27 July 2006, for the following purposes:
5.1.1. Identifying the author, reviewer, or other User who has contacted the journal's editorial office, including on the basis of the details provided in correspondence sent to the editorial office's email address, and by the ORCID identifier provided by the author when submitting a manuscript;
5.1.2. Receiving and registering the manuscript, accompanying documents (a conflict-of-interest statement, information on authorship contribution under the CRediT standard, and an expert opinion on the possibility of open publication), and other materials sent by the User to the editorial office's email address;
5.1.3. Organizing correspondence between the author, the editorial office, and reviewers in the course of the review process and the preparation of the article for publication;
5.1.4. Notifying the author of the status of the manuscript (acceptance for consideration, referral for review, the editorial board's decision, the need for revision, and the publication date);
5.1.5. Verifying that the manuscript complies with the editorial office's requirements and with publication ethics, including checking for improper borrowing and for multiple submission of the same work to different publications;
5.1.6. Publishing information about the author (last name, first name, patronymic, place of work, ORCID, and email address for correspondence) in open access as part of the published article, with the author's consent, in accordance with the journal's Open Access policy;
5.1.7. Providing the User with technical support in connection with questions relating to the use of the Website;
5.1.8. Sending notifications about the release of new issues of the journal, calls for article submissions, and changes to manuscript formatting requirements — subject to the User's separate consent to receive such mailings;
5.1.9. Conducting statistical research and analyzing the effectiveness of the Website, including assessing traffic, User behavior, and traffic sources.
5.2. Personal Data is processed on the basis of the consent of the personal data subject (Article 9 of Federal Law No. 152-FZ) and, to the extent necessary for the editorial office to perform the functions provided for by legislation on publishing activities and by international standards of research ethics (COPE), in accordance with Clause 5, Part 1, Article 6 of Federal Law No. 152-FZ.
5.3. The Operator does not process special categories of personal data (concerning racial or ethnic origin, political views, or state of health), nor the biometric personal data of Users.
5.4. Personal Data is processed both with and without the use of automation tools, including through the collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer (provision, access), depersonalization, blocking, deletion, and destruction of personal data (Article 3 of Federal Law No. 152-FZ).
6. RIGHTS AND OBLIGATIONS OF THE PARTIES
6.1. The User is obliged to:
6.1.1. Provide the Operator with the Personal Data necessary for placing an order, using the Content and other functional features of the Website, and obtaining consultation;
6.1.2. Update and supplement their Personal Data in the event of any change.
6.2. The User has the right to:
6.2.1. Require the Operator to correct their Personal Data, or to block or destroy it, where such Personal Data is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purposes of processing, and to take any other measures provided for by law to protect their rights;
6.2.2. Notify the Operator, before submitting a request or posting their Personal Data on the Website, of their objection to the processing of their Personal Data;
6.2.3. Inform the Operator of a wish to delete their Personal Data, or to withdraw their consent to its processing, by sending the Operator a written notice;
6.2.4. Appeal against acts or omissions of the Operator to the authority responsible for the protection of the rights of personal data subjects (Roskomnadzor), or to a court, where there are grounds to believe that the Operator is processing Personal Data in violation of the requirements of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (hereinafter — “Law No. 152-FZ”), or is otherwise infringing the User's rights and freedoms;
6.2.5. Use any other means provided for by law to protect their Personal Data.
6.3. The Operator is obliged to:
6.3.1. Use the User's Personal Data solely for the purposes set out in Section 5 of this Privacy Policy;
6.3.2. Keep Personal Data confidential, refrain from disclosing it without the User's prior written permission, and refrain from selling, exchanging, publishing, or otherwise disclosing it, except as provided for by this Privacy Policy and by applicable Russian legislation;
6.3.3. Take precautions to protect the confidentiality of Personal Data, in accordance with the standards generally applied in business practice for the protection of information of this kind;
6.3.4. In the event of unlawful actions, block the Personal Data concerned from the moment a request is received from the User, the User's legal representative, or Roskomnadzor (for the duration of any inspection);
6.3.5. Destroy or depersonalize Personal Data once the purposes of its collection and processing have been achieved, or where the need to achieve such purposes ceases to exist. The Operator shall cease processing Personal Data and destroy (or depersonalize) it within a period not exceeding 30 (thirty) calendar days from the date on which the purposes of processing are achieved, or from the date on which a request to withdraw consent is received from the User, unless otherwise provided by federal law or by an agreement to which the User is a party (as beneficiary or guarantor).
6.4. The Operator has the right to carry out the collection, systematization, accumulation, storage, clarification (updating, amendment), use, depersonalization, blocking, destruction, and processing of Personal Data using the principal methods of such processing (storage, recording on electronic media and the storage thereof, compiling lists, and labelling).
7. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
7.1. In processing Personal Data, the Operator is guided by: Law No. 152-FZ; the Rules for the Distance Selling of Goods, approved by Decree of the Government of the Russian Federation No. 612 of 27 September 2007; this Privacy Policy, which is aimed at preventing and detecting violations of Russian legislation and at eliminating the consequences of any such violations; the Public Offer for the conclusion of a distance sale and purchase agreement; and the User Agreement governing use of the Website
8. PRINCIPLES OF PERSONAL DATA PROCESSING
8.1. The Operator processes Personal Data on the basis of the following principles: the lawfulness of the purposes and met hods of processing Personal Data; good faith; the correspondence of the purposes of processing to those set out in Section 5 of this Privacy Policy, which are determined and stated in advance at the time Personal Data is collected, and to the Operator's powers; the correspondence of the volume and nature of the Personal Data processed, and of the methods of processing, to the purposes of processing; and the impermissibility of combining databases containing Personal Data that were created for purposes incompatible with one another.
8.2. The User's consent to the terms of this Privacy Policy and to the processing of their Personal Data is deemed to have been obtained by the Operator from the moment the User completes all fields of a given feedback form, ticks the box confirming the User's consent to the processing of their Personal Data located within that form, and takes the corresponding action to send the information to the Operator.
9. PROCEDURE AND CONDITIONS FOR THE PROCESSING OF PERSONAL DATA
9.1. The Operator processes Personal Data in compliance with all of the principles, rules, and conditions provided for by Law No. 152-FZ.
9.2. The processing of Personal Data is necessary to achieve the purposes set out in Section 5 of this Privacy Policy.
9.3. In processing Personal Data in accordance with this Privacy Policy, the Operator strictly observes the following conditions and rules: Personal Data is not disseminated; and Personal Data is not disclosed to third parties without the User's consent, except as provided for by applicable Russian legislation.
9.4. The Operator stores Personal Data in a form permitting identification of the User for no longer than is required to achieve the purposes set out in Section 5 of this Privacy Policy. The retention period for Personal Data is determined by reference to the purposes of its processing, but may not exceed the period necessary to achieve those purposes, unless otherwise provided by federal law.
9.5. Personal Data is securely stored and protected.
9.6. Personal Data is destroyed or depersonalized once the purposes of its collection and processing have been achieved and/or where the need to achieve the above purposes ceases to exist, unless otherwise provided by federal law. Personal Data is destroyed by physically deleting (erasing) records from tangible media and/or by destroying the media in a manner that precludes any further recovery and/or extraction of the Personal Data. Personal Data is depersonalized by deleting part of the information (including by replacing identifiers with other values) that allows the Personal Data to identify the User. The fact of destruction or depersonalization of Personal Data is recorded by the Operator in an act or other internal document.
10. TRANSFER OF USERS' PERSONAL DATA TO THIRD PARTIES
10.1. The confidentiality of Personal Data is guaranteed, except where Users voluntarily make information available to an unlimited group of persons for general access.
10.2. The processing of statistical data using the “Yandex Metrica” service is carried out by the Operator on the terms established by YANDEX LLC, including in accordance with Yandex's Privacy Policy, published at: https://yandex.ru/legal/metrica_termsofuse/ru/#5-personalnye-dannye-i-konfidencialnost, and the Terms of Use of the “Yandex.Metrica” service, published at: https://yandex.ru/legal/metrika_terms. The User's consent to the processing of personal data through the “Yandex.Metrica” service is obtained separately by the Operator, in the manner provided for in Clause 8.2 of this Policy, as well as by giving the User the opportunity to select cookie settings when visiting the Website. The User's refusal to permit the processing of data through “Yandex.Metrica” does not affect the User's ability to use the main functions of the Website.
10.3. In the event of the sale of the Website, the purchaser shall assume all obligations to comply with the terms of this Privacy Policy in respect of the Personal Data received by the purchaser.
10.4. The processing of Personal Data for the purposes of ensuring the functioning of the Website and its overall operation is carried out by the Operator by any lawful means, including through the use of automation tools, for the period necessary to achieve the purposes of processing set out in Section 5 of this Policy, or until the User withdraws consent. In respect of the processing of the personal data of individual Users, the processing periods shall be determined in accordance with Clauses 9.4 and 9.6 and with Section 14 of this Policy.
10.5. In the event of the loss or disclosure of Personal Data, the Operator shall inform the User accordingly.
10.6. The Operator takes the necessary organizational and technical measures to protect Personal Data from unlawful or accidental access, destruction, alteration, blocking, copying, and dissemination, and from other unlawful actions by third parties.
10.7. The Parties shall take all necessary measures to prevent losses or other adverse consequences caused by the loss or disclosure of Personal Data.
10.8. Before carrying out a cross-border transfer of personal data, the Operator must satisfy itself that the foreign state to which the personal data is intended to be transferred provides adequate protection for the rights of personal data subjects.
10.9. Cross-border transfer of personal data to the territory of foreign states that do not meet the above requirements may be carried out only where there is written consent from the personal data subject to the cross-border transfer of their personal data, and/or where such transfer is required for the performance of an agreement to which the personal data subject is a party.
11. LIABILITY OF THE OPERATOR
11.1. In the event of a failure to fulfil its obligations under this Privacy Policy, the Operator shall be liable, in accordance with applicable Russian legislation, for any harm caused to the User in connection with the unlawful use of Personal Data.
11.2. The Operator shall not be liable for the loss or disclosure of Personal Data where such information: became publicly available before its loss or disclosure; was obtained from a third party before being received by the Operator; or was disclosed with the User's consent.
12. DISPUTE RESOLUTION
12.1. Before filing a claim in court in respect of a dispute arising between the Parties, the User must first submit a written complaint to the Operator.
12.2. The Operator shall, within 30 (thirty) calendar days of receiving the complaint, notify the User in writing of the outcome of its review.
12.3. If no agreement is reached on the disputed matter, the dispute shall be resolved in court in accordance with applicable Russian legislation.
12.4. All provisions of this Privacy Policy are governed by applicable Russian legislation.
13. ADDITIONAL TERMS
13.1. The current version of the Privacy Policy is made available on the Website without restriction.
13.2. The Operator has the right to amend this Privacy Policy without the User's consent. A new version of the Privacy Policy shall take effect from the moment it is posted on the Website, unless the new version provides otherwise. Where inaccuracies are identified in personal data, the User may update such data independently by contacting the Operator using the contact details posted on the Website.
14. PERIOD OF PROCESSING OF PERSONAL DATA AND WITHDRAWAL OF CONSENT
14.1. Term. Consent is valid until completion of the work relating to the request submitted via the website https://ecobiotech-journal.ru/.
14.2. The User may, at any time, send a written request to the Operator's address indicated above, or to the email address: ecobiotech@ufaras.ru.
14.3. The User acknowledges that withdrawal of consent, or termination — at the User's request — of the processing of personal data covered by that consent, may result in it becoming impossible to achieve the purposes of personal data processing provided for by that consent.
14.4. Any suggestions or questions regarding this Privacy Policy should be directed to the Operator using the contact details posted on the Website.