Data Processing Policy
1. General Processing Principles
Processing of personal data is carried out in accordance with the principles of legality, fairness, and transparency. We process only the data necessary to achieve the stated purposes and do not use it for other purposes without your consent.
All data processing operations are documented, and access to personal data is limited to authorized employees who need this information to perform their job duties.
2. Legal Basis for Processing
Processing of personal data is carried out on the following legal bases:
- Consent of the data subject to process their personal data
- Performance of a contract to which the data subject is a party
- Compliance with legal obligations imposed on us
- Protection of vital interests of the data subject or another natural person
- Performance of tasks carried out in the public interest
3. Categories of Processed Data
We process the following categories of personal data:
Identification Data
First name, last name, email address, and phone number that you provide when filling out contact forms.
Technical Data
IP address, browser type, operating system, data about visited pages, time and date of visit, which are collected automatically when using the site.
Interaction Data
Information about how you interact with the site, including clicks, page views, and time spent on the site.
4. Data Processing Methods
Processing of personal data is carried out using automated and non-automated methods, including:
- Collection and recording of data in information systems
- Storage of data on secure servers
- Use of data for analysis and service improvement
- Transfer of data to service providers as part of service provision
- Deletion or anonymization of data after the storage period expires
5. Data Retention Periods
Personal data is stored for the period necessary to achieve the processing purposes, or for the period established by law. Specific retention periods depend on the data category:
- Data collected through contact forms is stored until the request is processed and for the period necessary to maintain correspondence
- Technical Data and interaction data are stored for the period necessary for analysis and site improvement
- Data processed based on consent is stored until consent is withdrawn
6. Security Measures
To protect personal data, we apply a set of technical and organizational security measures:
- Encryption of data during transmission and storage
- Restriction of data access based on the principle of least privilege
- Regular updating of security systems and software
- Monitoring and auditing of data access
- Data backup to ensure data integrity
- Training employees on rules for working with personal data
7. Data Transfer to Third Parties
We may transfer personal data to the following categories of recipients:
- Service providers who help us operate the site and process data, provided they comply with confidentiality obligations
- Government agencies in cases provided by law
- Professional consultants who are required to maintain confidentiality
All third parties who receive access to personal data are required to comply with confidentiality requirements and use data only for the purposes for which it was transferred.
8. Data Subject Rights
Regarding your personal data, you have the following rights:
- Right to receive information about what data we process and how
- Right to access your personal data
- Right to correction of inaccurate or incomplete data
- Right to deletion of data when there are legal grounds
- Right to restriction of processing in certain cases
- Right to data portability
- Right to object to data processing
- Right to withdraw consent to data processing
To exercise your rights, you can contact us using the contact information provided.
9. Contact Information
If you have questions regarding the processing of your personal data or want to exercise your rights, you can contact us:
Email: info@aifinplannerhub.com