Personal Data Processing Policy

1.1. This Personal Data Processing Policy (the "Policy") is developed by Piplos Media in accordance with personal data protection legislation and constitutes one of the measures to protect personal data of users of the information resource https://piplos.media (the "Site"), as provided for in Article 17 of the Law of the Republic of Belarus No. 99-Z of 7 May 2021 "On Personal Data Protection" (the "Law").

1.2. The Policy explains what personal data is processed, for what purposes, on what legal grounds, and what rights data subjects have and how to exercise them.

1.3. The Policy applies to all users of the Site.

1.4. "Piplos Media" and "the Organization" refer to the Piplos Media software development team based in Minsk, Belarus. You can contact the Organization via feedback forms on the Site, at info@piplos.media, or by phone: +375 (17) 249-98-97, +375 (29) 122-61-11.

1.5. The procedure and conditions for processing information from cookie files are defined in the Cookie Processing Policy.

1.6. The Policy is always available on the Site. The Organization may amend the Policy at any time without prior notice. A new version takes effect upon publication on the Site unless the version itself provides otherwise.

2.1. The Organization processes personal data based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and appropriate security.

2.2. The Organization processes personal data for the following purposes: — reviewing applications and enquiries submitted through forms on the Site; — communicating with users regarding services; — concluding and performing software development agreements; — ensuring the operation and security of the Site; — fulfilling obligations under the legislation of the Republic of Belarus.

2.3. Categories of data subjects: Site visitors, persons who submit applications or enquiries, and representatives of clients and contractors.

2.4. The list of processed personal data depends on the nature of interaction and may include: name, email address, phone number, company name, project details, and other data voluntarily provided by the user.

2.5. Legal grounds for processing include: consent of the data subject; a contract or actions necessary for its conclusion; and other grounds provided for in Article 6 of the Law.

2.6. Processing is carried out with and without automation. The Organization does not make decisions producing legal effects for the data subject solely on the basis of automated processing.

2.7. Retention periods are determined by processing purposes and do not exceed what is necessary to achieve those purposes, unless a longer period is required by law. Application and correspondence data are generally retained for up to 3 years from the last interaction, unless otherwise agreed or required for contract performance.

3.1. The Organization may entrust personal data processing to authorized persons provided they comply with personal data legislation and contractual confidentiality and security obligations.

3.2. To host and operate the Site, the Organization uses hosting and infrastructure services (including Cloudflare), to which a limited amount of technical data necessary for availability and security may be transferred.

3.3. The Organization does not sell or transfer personal data to third parties for marketing purposes. Disclosure to public authorities occurs only as required by the legislation of the Republic of Belarus.

3.4. When using email and messengers for communication, personal data may be processed by the operators of those services in accordance with their privacy policies.

4.1. Due to the use of global cloud and infrastructure services, the Organization may transfer personal data cross-border to foreign states, including states that do not ensure an adequate level of protection of data subject rights.

4.2. Cross-border transfer is carried out where legal grounds under Article 9 of the Law exist, including based on the data subject's consent or for contract performance.

4.3. The Organization informs about risks associated with processing personal data in foreign jurisdictions, including differences in legal protection, access by law enforcement, and other risks provided for by the legislation of the Republic of Belarus.

5.1. A data subject has the right to: — receive information about the processing of their personal data; — request changes if data is incomplete, outdated, or inaccurate; — receive information about disclosure to third parties (once per calendar year); — request cessation of processing and deletion where no other legal grounds exist; — withdraw consent where processing is based on consent; — lodge a complaint with the National Personal Data Protection Centre.

5.2. To exercise these rights, send a request to info@piplos.media. The request should include your name, contact details, the substance of your request, and a signature (for electronic documents — an electronic digital signature where applicable).

5.3. The Organization reviews requests within time limits established by the legislation of the Republic of Belarus: generally up to 15 calendar days for requests to change, cease processing, or delete data; up to 5 business days to provide information about processing, unless other periods are set by law.

5.4. A response is sent in the same form as the request unless the request specifies otherwise.

5.5. For questions about personal data processing, contact the Organization at info@piplos.media or by phone: +375 (17) 249-98-97, +375 (29) 122-61-11.