We tell you what legal documentation must be posted on the site in order to successfully pass the inspection of Roskomnadzor and the FAS.
Personal data processing policy
If you collect information about users (emails, names, phone numbers) or data about their behavior on the site, then by law you are obliged to develop a special document. It is often called "Privacy Policy" or "Terms of Processing Personal Data".
The document should contain general provisions, the purposes of collecting information, the categories of data you collect and the methods of processing them. To avoid confusion and to draw up the document correctly, use the recommendations of Roskomnadzor .
Where to place: on each page of the site where there is a feedback form, subscription or registration form. You can place a link to the document in the footer of the site. If the link is hidden and difficult to find immediately, Roskomnadzor may regard this as a violation.
Personal data processing policy
What is the penalty for violation: a fine of 15 to 30 thousand rubles for legal entities (Part 3 of Article 13.11 of the Code of Administrative Offenses).
Consent to the processing of personal data
According to paragraph 1 of Article 6 of the qatar business email list Federal Law "On Personal Data", you cannot process user data without their consent. To process means to collect, store and make changes.
Where to place: in each contact collection form. When a person registers on your site, they must agree to the processing of personal data. Therefore, next to the form, you need to place the appropriate text with a link to the document. It must indicate the operator's data, the list of data, the purpose of their processing, information about the user and the validity period of the consent. Everything should be as transparent as possible.
Consent to the processing of personal data.
What is the penalty for violation: administrative liability in the amount of 25 to 40 thousand rubles for legal entities under Part 5 of Article 13.11. of the Code of Administrative Offenses of the Russian Federation.
Consent to receive newsletters
Want to send emails, push notifications, SMS messages to your customers and tell them about promotions and discounts? Then your subscribers must give their explicit consent to this. This is stated in Article 18 of the Federal Law "On Advertising".
Where to place: The best way is to add an unfilled checkbox to the registration form with the note “I agree to receive advertising mailings.” If you collect contacts through subscription forms, then the checkbox is not needed, since by filling out the form, the person already expresses consent to the mailing.
Consent to receive newsletters
What is the penalty for violation: a fine under Part 1 of Article 14.3 of the Code of Administrative Offences of the Russian Federation for legal entities ranges from 100 to 500 thousand roubles.
Use of cookies
Cookies are also personal data, so you must report their use. If you do not do this, you may be held liable for failure to provide information to the subject of personal data (Article 13.11 of the Code of Administrative Offenses of the Russian Federation).
Where to place: Use pop-ups. Often people immediately close or ignore pop-ups because of the large and boring text about website optimization. To avoid this, write a simple and clear message, for example: “Our website uses cookies so that everything works properly. You can read about cookies here.” Roskomnadzor allows such free wording.