4. Categories of personal data processed by the Operator

4.1. In pursuit of the processing purposes outlined in this Policy, the

Operator processes the following categories of personal data of Clients:

Full name (last name, first name, patronymic);
Email address;
Mobile phone number

5. Methods and Conditions of Processing Clients' Personal Data

5.1. The Operator carries out both automated and non-automated processing of Clients' personal data.
5.2. Confidentiality is maintained regarding the personal information of Clients, except in cases where the Client voluntarily provides information about themselves for general access to an unlimited circle of individuals.
5.3. The Operator discloses information about Clients to third parties only in cases where there is an obligation to do so in accordance with current legislation, requests from government authorities, legal proceedings, court decisions, or judicial processes.
5.4. Processing, including storage, of Clients' personal data is carried out until the moment of the Client's refusal of the Operator's services.
5.5. In case of the Client's refusal of the Operator's services, the Client's personal data is deleted by destroying the account, after which such a record is not subject to restoration.
5.6. The Operator provides services to Clients by placing its website on the site https://getcourse.ru/, representing the software 'GETCOURSE 2.0.' designed for creating an online school and organizing the learning process on the Internet. The website getcourse.ru uses the HTTPS extension to the HTTP protocol to enhance security and protect information.
5.7. Hosting services and dedicated server provisioning services are provided by OOO 'Selectel' https://selectel.ru/about/details.

6. Ensuring the Security of Personal Data

6.1. The Operator takes necessary organizational and technical measures to protect the Client's personal information from unauthorized or accidental access, destruction, alteration, blocking, copying, distribution, as well as other unlawful actions by third parties. The Operator adheres to industry standards for the protection of personal information provided to it at all stages of personal data processing.
6.2. In accordance with the Federal Law of the Russian Federation dated July 27, 2006, No. 152-FZ 'On Personal Data,' the Operator independently determines the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations prescribed by legislation in the field of personal data.
6.3. Personal data protection is achieved through:
6.3.1. Appointment of a person responsible for processing and protecting personal data;
6.3.2. Approval of this Policy;
6.3.3. Organization of access by Operator's employees to information containing the personal data of Clients in accordance with their job (functional) duties;
6.4. The Client protects their personal data by withdrawing consent to the processing of their personal data or by other means provided by law.
6.5. The Operator, together with the Client, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the Client's personal data.
6.6. In the event of loss or disclosure of personal data, the Operator informs the Client about the loss or disclosure of personal data.

7. Responsibilities of the Parties

7.1. In case of non-performance of its obligations, the Operator is responsible for the losses incurred by the Client due to the unauthorized use of personal data, in accordance with the legislation of the Russian Federation.
7.2. In the event of loss or disclosure of confidential information, the Operator is not responsible if this confidential information:
7.2.1. Became public domain before its loss or disclosure;
7.2.2. Was disclosed with the Client's consent.