Personal data privacy policy
This Privacy policy covers all personal data you submit together with your manuscript to Food Processing: Techniques and Technology at https://fptt.ru/.
The Journal belongs to the Federal State Budgetary Institution of Higher Education Kemerovo State University (Primary State Registration Number OGRN 1034205005801, Tax Payer Number INN 4207017537). Hence, your personal data are processed by the Kemerovo State University, hereafter referred to as Operator or "we", "us", "our".
Our headquarters are based at 6 Krasnaya Ul., Kemerovo, 650000, Russia.
We kindly ask you to read this Privacy Policy before submitting any personal information. Should you disagree with any of its provisions, please leave the site.
1. Glossary
1. This Privacy policy operates the following terms:
1.1. Automated processing of personal data means we process your personal data using computer technology.
1.2. Blocking of personal data is a pause in processing, except in cases where processing cannot be avoided to clarify personal data.
1.3. Personal data information system covers the personal data in our database plus the information technologies and tools needed for processing.
1.4. Confidentiality of personal data is a mandatory requirement: anyone who has gained access to your personal data cannot disseminate them without your consent or a reliable legal basis.
1.5. Anonymization of personal data makes it impossible to determine the owner of personal data without additional information.
1.6. Processing of personal data presupposes any procedures, automatized or not, i.e., collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction, etc.
1.7. Operator, also identified as "we", "us", "our" in this Privacy Policy, is the Kemerovo State University, i.e., the organization that, independently or with the people/organizations it employs, processes the personal data, determines the purposes of processing, the part of personal data to be processed, and the exact processing operations.
1.8. Personal data is an umbrella term for any information related directly or indirectly to you as a private entity, i.e., Personal Data Owner.
1.9. Personal data permitted for distribution by the owner means that the personal data owner permits their data to be processed by providing explicit consent in line with the current Russian legislation.
1.10. Privacy Policy is this document and all its future amendments published at https://fptt.ru/
1.11. User / Personal Data Owner is the owner or subject of personal data, a legally competent individual using our website for their own benefit.
1.12. Provision of personal data means disclosing personal data to a person or a group of persons.
1.13. Website is the official website of Food Processing: Techniques and Technology, i.e., the Journal as a collection of graphics, information, software, and databases that make it available on the Internet at https://fptt.ru/
1.14. Dissemination of personal data denotes actions aimed at disclosing personal data to an indefinite number of persons.
1.15. Trans-border transfer of personal data occurs when personal data are transferred abroad, i.e., to a foreign government body, a foreign citizen, or a foreign legal entity.
1.16. Destruction of personal data makes it impossible to restore the content of personal data in the database, which may presuppose the destruction of tangible personal data media.
1.17. Cookies are a small block of data sent by a web server to the user’s device used to access the site, which the web browser sends to the web server each time in an HTTPS request when attempting to open the corresponding site.
1.18. Personal Data Subject / Owner is a legally competent individual who uses the website in their own interests.
1.19. IP address is a unique network label assigned to a node in a computer network built using the IP protocol.
2. General provisions
2.1. This Privacy Policy defines the purposes, content, and procedures for processing and protecting personal data in line with the laws of the Russian Federation. It stipulates our responsibilities for processing and protecting your personal data, including their confidentiality.
2.2. When processing your personal data, we follow the principles in this Privacy Policy and the personal data laws of the Russian Federation. We respect your freedoms and rights to privacy and personal and/or family confidentiality.
2.3. This Privacy Policy applies only to the data we obtain from your using our website and the data you submit as part of contractual obligations.
2.4. You, the personal data user, provide your personal data and consents to its processing voluntarily, of your own free will, and in your own interests. Your consent must be specific, objective, informed, conscious, and unambiguous. Mind that we do not verify the accuracy of the personal data you submit.
2.5. By using our website, you agree to this Privacy Policy and your personal data processing.
2.6. By accepting this Privacy Policy, you give us your consent to process the personal data specified in Section 3, including such operations as collection, recording, accumulation, storage, clarification (updating, modification), retrieval, use, transfer to third parties (distribution, provision, access), depersonalization, blocking, deletion, and destruction (see purposes in Section 3).
2.7. By refusing to give your consent to personal data processing for the purposes specified in Section 3, you may seriously limit you access to the services provided by our website.
2.8. If some of your personal data are at variants with the facts or fail to compile with the requirements on our website, you might not be able to take full advantage of all the services provided, and use of the website will be available to you in a limited mode.
2.9. Operator’s rights:
We, the operator,
- collect personal data from the site;
- provide access to the site;
- collect, record, accumulate, store, clarify (update, modify), retrieve, use, transfer (disseminate, provide, access), depersonalize, block, delete, and destroy personal data;
- transfer personal data to third parties for purposes in Section 3;
- reserve the right to continue processing the personal data without your consent, provided there are legal grounds, even if you revoke your consent to processing;
- may refuse your second request for information regarding your personal data available to us, provided we send you a reasoned response in line with the federal law;
- disseminate the personal data owner to separate dissemination consent.
2.10. Operator’s Responsibilities:
We, the operator,
- use your personal data solely for the purposes specified in Section 3;
- provide you with information regarding your personal data upon request;
- are not be liable for the loss or disclosure of confidential information if it:
- became public prior to its loss or disclosure;
- was received from a third party before it was submitted to us;
- was disclosed with the consent of the user;
- notify you or your representative of the processing upon your request;
- do not distribute personal data to third parties without your consent, unless otherwise provided by law;
- provide you with the information and data specified in your request in an accessible form and without specifying the personal data related to other personal data owners, unless there are legal grounds for disclosing such personal data;
- inform you if we make decisions based solely on the automated processing of personal data;
- explain the possible legal consequences of this decision, provide you with the opportunity to object, and explain how you can protect your rights and legitimate interests. The objection is to be responded to within 30 days from the date of its receipt.
- explain the legal consequences of refusing to provide your personal data and/or consent to processing, if the provision of personal data and/or consent are mandatory in accordance with federal law;
- record, systematize, accumulate, store, clarify (update, modify), and retrieve personal data submitted by Russian citizens online or offline using databases located within the Russian Federation, except in cases specified by the current Russian legislation;
- protect the personal data we receive and their confidentiality.
2.11. User’s rights:
Send us a request at fptt98@gmail.com, if you need:
to demand us to update, block, or destroy your personal data it if it is incomplete, outdated, inaccurate, illegally obtained, or unnecessary for processing;
- information about the measures we take to protect your personal data;
- information regarding your personal data (see Appendix 4);
- to send a follow-up request regarding your personal data (within 30 days after the initial request);
- to re-apply or send a follow-up request for information regarding your personal data, as well as to review your personal data (you may do it before the expiration of 30 days if you failed to provide the necessary personal data in full following the review of the initial request; make sure you provide a justification for the follow-up request);
- to retract your consent to personal data processing or dissemination;
- to protect your rights and legitimate interests, including compensation for damages and/or moral damages, in court;
- to report our actions or inactions to the authorized body responsible for personal data protection or to court.
2.12. User’s responsibilities
You, the User, are expected to:
- comply with the requirements in Paragraph 1.11;
- provide accurate Personal Data.
2.13. Databases with personal data of Russian citizens are located on the territory of the Russian Federation.
2.14. We process your personal data lawfully and fairly to fulfill our functions and obligations as assigned by law, and to exercise the rights and legitimate interests of our own and other persons. We transfer (dissemination, provision) and use personal data only in cases and according to the procedure stipulated by federal laws and with your consent.
2.15. We receive your personal data directly from you as the personal data owner, except in cases where personal data is transferred as part of contractual relationships.
2.16. To process your personal data, we need your consent either in writing or as part of implied actions.
2.17. The principles of processing personal data:
2.17.1. We process personal data lawfully and fairly.
2.17.2. We pursue specific and legitimate purposes. We do not process personal data for other purposes but those it was collected for and we do not collect personal data excessive to the purpose.
2.17.3. We do not combine databases with personal data for incompatible purposes.
2.17.4. We process only the personal data relevant to the purposes we promise you to achieve.
2.17.5. The content and volume of personal data processed must correspond to the purposes of processing. The processed personal data must not be excessive in relation to the stated purposes.
2.17.6. Make sure the personal data you submit is accurate, relevant, and sufficient. We delete or rectify incomplete or inaccurate data.
2.17.7. We store personal data in a form that allows identification of its owner only for as long as it is needed to achieve the processing purposes, unless the storage period is established by federal law or an agreement to which the owner is a party, beneficiary, or guarantor. We destroy or anonymize the data upon achieving the processing purposes or when these purposes are no longer necessary, unless otherwise provided by federal law.
2.17.8. Before commencing the cross-border transfer, we ensure that the destination state protects the rights of personal data owner.
2.17.9. We transfer personal data of our authors to international scientific publication databases, e.g., Scopus, Web of Science, PubMed, DOAJ, Dimensions, etc. According to Russian laws, this type of cross-border transfers of personal data falls for the implementation of events in the field of culture, science, and education. Hence, the requirements of Parts 3–6 and 8–11, Article 12 of the Federal Law On Personal Data (Part 2, approved by Russian Government Resolution No. 2526, December 29, 2022) do not apply to operators carrying out cross-border transfers of personal data for the purpose of fulfilling the functions, powers, and duties imposed on state and municipal authorities by international treaties of the Russian Federation and the legislation of the Russian Federation.
2.17.10. We do not control and are not responsible for the processing of information by third-party websites accessible via links available on our site.
3. Purposes, volume and categories of personal data collection
3.1. We need your personal data for the following purposes:
3.1.1. To create a personal account on our site, you have to provide the following personal data:
- email address;
- telephone number;
- last name, first name, and patronymic (if any).
3.1.2. To communicate with you and promptly respond to your requests, complaints, etc., we need to be able to send you feedback, e.g., notifications, answer letters, agreement forms, etc. For this purpose, we need the following personal data:
- email address (we obtain it from your first letter);
- telephone number (we obtain it from your call or messages);
- last name, first name, and patronymic (if any);
- passport information (in cases stipulated by law);
- your physical address to send an official reply to your requests, if needed;
- other personal data that you voluntarily provide or communicate to us during communication.
3.1.3. To publish your manuscript, we need the following personal data:
- last name, first name, patronymic (if any),
- email address,
- telephone number,
- gender,
- place of work,
- job title,
- address,
- other personal data, e.g., academic degree, rank, digital identifiers in research databases, etc.
3.1.4. For digital marketing research and targeting purposes, we collect statistical anonymized data.
3.2. The categories of personal owners include users, authors, and reviewers.
4. Procedure and conditions for personal data processing
4.1. We collect and process the following types of information:
- information that you knowingly provide,
- technical information automatically collected by our software.
4.2. The technical information automatically collected by our software includes:
- IP address;
- data provided by cookies;
- browser data;
- device type information, i.e., mobile phone or PC;
- access time;
- other technical and statistical information.
Technical information also includes anonymized analytical data, obtained by web analytics services. This information is used exclusively for internal and external marketing purposes, e.g., to analyze website traffic trends and improve its service.
4.3. Our website uses a cookie-based user identification technology. Cookies are stored on the device you use to access the site. They help to collect statistical data on website traffic and to fill in forms. We may use and disclose information about our website usage, e.g., to measure the traffic, improve its content, explain its options, and expand its functionality. By accepting this Privacy Policy, you allow us to digitally transmit the technical data specified in Section 4.2, which we collect from our website. Anonymized user data collected through internet statistics services is used to collect information about users’ actions on the website, as well as to improve its quality and content.
4.4. We do not store your personal data in cookies. We use anonymized information stored by cookies to analyze trends, manage our website, track users’ movements on our website, and collect demographic information about the general user base.
4.5. If you do not want us to collect technical information via cookies, please stop using the site or disable the storage of cookies on your device and browser. In this case, some services may become unavailable to you.
4.6. You confirm your consent to the collection and processing of personal data by completing the forms of newsletter subscription, registration, and comment on our website by checking the checkbox located after the relevant form and clicking the button below. You confirm your consent to the dissemination of personal data by providing us with a written consent.
4.7. You provide your consent to personal data processing when submitting a claim or application by filling in the form. You cannot use our publication service without submitting your signed consent together with the text of the claim or application.
4.8. These are the procedures we subject your personal data to, with or without the use of automated tools: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction.
4.9. We process your personal data:
- using automated tools,
- without automated tools.
4.10. We transfer your personal data to third parties (if necessary) upon your consent for the purposes specified in Section 3.
4.11. We provide personal data to third parties in the following cases only:
- it is required by law (e.g., upon written request of a court or law enforcement agency);
- we have your consent to the transfer of your personal data;
- we need it to conclude a contract with you and/or as part of such;
- the transfer occurs as part of the sale or other transfer of the website or business;
- we transfer our personal data database from one service to another in accordance with our contractual relations;
- to support user services or to protect our rights.
4.12. We may have to transfer your personal data to authorized state authorities of the Russian Federation, inquiry and investigation agencies, and other authorized bodies, but only on the basis of and in the manner established by law.
5. Legal basis for personal data processing
5.1. We process your personal data based on the following legal grounds:
- The Constitution of the Russian Federation;
- The Civil Code of the Russian Federation;
- Federal Law No. 2300-1 of February 7, 1992: Protection of Consumer Rights;
- Federal Law No. 59-FZ of May 2, 2006: Procedure for Considering Appeals from Citizens of the Russian Federation;
- Federal Law No. 149-FZ of July 27, 2006: Information, Information Technology, and Information Protection;
- Federal Law No. 63-FZ of April 6, 2011: Electronic Signature;
- Federal Law No. 152-FZ of July 27, 2006: Personal Data;
- Government Resolution No. 1119 of November 1, 2012: Requirements for the Protection of Personal Data When Processed in Personal Data Information Systems;
- Government Resolution No. 687 of September 15, 2008: Personal Data Processing Without Automation Tools;
- Agreements concluded between us and third parties for the purposes specified in Section 3;
- Our internal local documents;
- Consent to the processing of Personal Data (in cases not expressly provided for by Russian legislation, but within our authority), consent to the Dissemination of Personal Data.
6. Measures taken to provide security of personal data during processing
6.1. We use standard security methods to protect your personal data from loss, unauthorized or accidental access, distortion, unauthorized distribution, destruction, modification, blocking, copying, and any other illegal actions by third parties. We do it by using network security software, advanced verification procedures, cryptographic tools, and compliance with this Privacy Policy and other internal documents.
6.2. Should it happen that your personal data is lost or disclosed, we notify you immediately.
6.3. Both parties take all necessary legal, organizational, and technical measures to prevent loss or other negative consequences caused by the loss or disclosure of personal data.
6.4. We keep your personal data confidential, except in cases where you voluntarily post it publicly in messages or comments on our website.
6.5. Our personal data information systems are protected from unauthorized and accidental access by the following security measures:
6.5.1. identifying threats when processing personal data;
6.5.2. applying standard organizational and technical security measures established by the Government of the Russian Federation when processing personal data;
6.5.3. implementing duly completed information security compliance assessment procedures;
6.5.4. evaluating the effectiveness of security measures prior to commissioning;
6.5.5. accounting for machine-readable media containing personal data;
6.5.6. detecting instances of unauthorized access to personal data and taking appropriate measures;
6.5.7. restoring personal data modified, deleted, or destroyed due to unauthorized access;
6.5.8. establishing rules for accessing personal data in our information systems, as well as ensuring the registration and accounting of all actions performed with personal data in these information systems;
6.5.9. monitoring the security measures and their levels.
6.6. We select and take measures necessary and sufficient to fulfill the obligations stipulated by current Russian laws:
1) We appoint a manager responsible for personal data processing;
2) We issue documents that define our personal data processing and privacy policies, internal regulations regarding purposes, categories, methods, timeframes, destruction, security, amendments, and other procedures;
3) We take legal, organizational, and technical measures to ensure the security of personal data;
4) We provide internal control and/or auditing of compliance of personal data processing with legislation and statutory regulations, requirements for the protection of personal data, this Privacy Policy, and our internal regulations;
5) We assess the harm that may be caused to personal data owners in the event of a violation of the law, as well as the balance between such harm and the measures taken by us to ensure our legal obligations;
6) Our employees that process your personal data are informed of the legal provisions on personal data, including protection requirements and our personal data processing and privacy policies. They undergo regular training in the abovementioned aspects;
7) This Privacy Policy is available on our site.
7. Personal data processing timeframes
7.1. We start processing your personal data from the moment you submit the form on our website until the website is terminated or you revoke your consent / delete your personal account.
7.2. Unless otherwise provided by other clauses of this Privacy Policy or by applicable Russian law, we stop processing your personal data as soon as we achieve the purposes of processing, your consent to processing has expired, you revoke your consent, unlawful processing of personal data has been detected, or you request to delete your personal data.
7.3. We terminate the transfer (distribution, provision, access) of your personal data at any time upon your request.
7.4. You are free to request us to stop the transfer (distribution, provision, access) of your personal data previously permitted for distribution in the event of non-compliance with the provisions of applicable law, or to file such a request in court. We are obligated to cease the transfer (dissemination, provision, or access) of your personal data within three business days since the moment we receive your request or within the period specified in the court decision. If such period is not specified in the court decision, it is three business days since the decision enters into force.
7.5. You are free to determine the subscription period for our newsletters and unsubscribe at any moment by clicking the unsubscribe link or by sending a free-form request at fptt98@gmail.com. Please type Unsubscribe in the subject line.
8. Updating, correction, deletion, and destruction of personal data; responses to user requests for access to personal data
8.1. If Personal Data is confirmed to be inaccurate or processed illegally, we update it and terminate its processing.
8.2. Contact us if you want to delete or anonymize your personal data on our website or in our database. Fill in the form in Appendix No. 3 to this Privacy Policy and email it at fptt98@gmail.com. Mind that in this case you might not be able to use certain functions of our website. The request will be processed within ten business days.
8.3. Upon achieving the processing purpose, we cease processing or terminate the processing of your personal data by another person acting on our instruction and destroy it within 30 days from the date the processing objective is achieved, unless:
- otherwise provided by an agreement to which you are a party, beneficiary, or guarantor;
- we have no right to process your personal data without your consent or on the grounds stipulated by federal laws;
- otherwise provided by another agreement between you and us.
If it is not possible to destroy personal data within the period specified in this clause, we block it or ensure its blocking by the party processing it on our behalf and destroy it within six months, unless another period is established by federal laws.
8.4. If we receive a revocation of consent to personal data processing, we stop processing or ensure its termination by another person processing it on our behalf. If the retention of the personal data is no longer required for the purposes of processing, we destroy it within 30 days from the date of receipt of the revocation, unless:
- otherwise provided by the agreement to which you are a party, beneficiary, or guarantor;
- we have no right to process your personal data without your consent or on the grounds stipulated by federal laws;
- otherwise provided by another agreement between you and us.
If it is impossible to destroy personal data within the period specified in this clause, we block your personal data or ensure its blocking by the person processing it on our behalf and destroy it within six months, unless another period is established by federal laws.
8.5. If we receive a request to cease personal data processing, we are obligated to cease the processing or ensure the cessation by the person doing the processing on our behalf within ten business days from the date of receipt, except in cases stipulated by the current Russian legislation. This period may be extended, but by no more than five business days, for appropriate reasons we will timely inform you about. If personal data cannot be destroyed within the period specified in this paragraph, we block it or ensure its blocking by the person processing it on our behalf and destroy it within six months, unless another period is established by federal laws.
8.6. We block access to your personal data if unlawful processing or inaccuracies are detected from the moment of your request (see Appendix No. 1 to this Privacy Policy) or the one made by your legal representative or the body authorized for the protection of your rights during the verification period. If your personal data cannot be destroyed within the period specified in this paragraph, we block it or ensure its blocking by the person processing it on our behalf and destroy it within six months, unless another period is established by federal laws.
8.7. If you detect incomplete, inaccurate, or outdated data, we update, correct, and clarify your personal data within seven business days from the day we receive your request (see Appendix No. 2 to this Privacy Policy) or the one send by your legal representative or the body authorized for the protection of your rights.
8.8. If we receive information confirming that the personal data was obtained illegally or is not necessary for the processing purpose, we delete or destroy it within seven business days upon receiving your request (see Appendix No. 3 to this Privacy Policy) or the one sent by your legal representative or the body authorized for the protection of your rights. In this case, we will notify you or your representative of the changes made and the measures taken. We will also take reasonable measures to notify any third parties we transferred the faulty or unnecessary personal data to.
8.9. In the event of detection of unlawful personal data processing by us or a person acting on our instructions, we cease the unlawful processing or ensure its cessation by the person doing the processing on our behalf within three business days. If the lawfulness of the processing of personal data cannot be provided, we will destroy the personal data or ensure its destruction within ten business days from the date of discovery of the unlawful processing. We notify you, your representative, or the body authorized for the protection of your rights of the rectification of the violations committed or the destruction of the personal data.
8.10. We respond to requests from you, your representatives, or the authorized body within ten business days from the receipt. This period may be extended, but by no more than five business days, for the appropriate reasons we will timely inform you about.
8.11. If it is established that the personal data has been illegally or accidentally transferred (provided, distributed, or accessed) resulting in a violation of your rights, we notify the authorized body within the following periods from the moment we discover the violation:
1) within 24 hours of the incident (we inform the authorized body about the presumed causes of the violation, the presumed harm, and the measures taken to eliminate the consequences; we also provide information about our employee authorized by us to interact with the authorized body on matters related to the incident);
2) within 72 hours of the results (we inform the authorized body of the internal investigation and also provide information about the persons whose actions caused the identified incident, if any).
9. FINAL PROVISIONS
9.1. We retain the right to make any changes or additions to this Privacy Policy at any time at our sole discretion.
9.2. Changes and additions take effect as soon as we post the amended Privacy Policy on our website. You confirm their acceptance by continuing to use the website after the publication of the updated Privacy Policy.