1. General ProvisionsThis Personal Data Processing Policy (hereinafter, the "Policy") has been developed in accordance with the Law of the Republic of Belarus No. 99-Z "On Personal Data Protection" dated May 7, 2021 (hereinafter, the "Personal Data Law"). It defines the procedures for processing personal data and outlines the measures taken to ensure the security of personal data by "
Company" (hereinafter, the "Operator").
1.1. The Operator’s primary objective in processing personal data is to respect and protect the rights and freedoms of individuals, including the protection of privacy, personal, and family confidentiality.
1.2. This Policy applies to all information that the Operator may receive regarding visitors of the website
https://bealingua.by (hereinafter, the "Website").
2. Key Terms Used in the Policy2.1.
Automated Processing of Personal Data – Processing of personal data by means of computer technology.
2.2.
Blocking of Personal Data – Temporary suspension of personal data processing (except in cases where processing is necessary to clarify personal data).
2.3.
Website – A set of graphical and informational materials, as well as software and databases, which ensure their availability online via the network address
https://bealingua.by.
2.4.
Information System of Personal Data – A set of personal data contained in databases and the information technologies and technical means that ensure its processing.
2.5.
Anonymization of Personal Data – Actions taken to render personal data such that it is impossible to identify, without the use of additional information, the specific User or subject of the personal data.
2.6.
Processing of Personal Data – Any action (operation) or a set of actions (operations) performed with personal data, whether by automated means or not, including collection, recording, systematization, accumulation, storage, updating (modifying), retrieval, usage, transfer (distribution, provision, access), anonymization, blocking, deletion, or destruction of personal data.
2.7.
Operator – A state authority, municipal authority, legal entity, or individual, which independently or jointly with others organizes and/or conducts the processing of personal data, and determines the purposes and scope of the personal data to be processed, as well as the actions (operations) performed on personal data.
2.8.
Personal Data – Any information that relates directly or indirectly to a specific or identifiable User of the Website.
2.9.
Personal Data Permitted for Distribution by the Data Subject – Personal data to which the data subject grants unrestricted access by giving consent for its processing and distribution in accordance with the Personal Data Law.
2.10.
User – Any visitor of the Website
https://bealingua.by.
2.11.
Provision of Personal Data – Actions aimed at disclosing personal data to a specific individual or a specific group of individuals.
2.12.
Distribution of Personal Data – Any action aimed at revealing personal data to an indefinite group of individuals (transfer of personal data) or making personal data publicly available, including publication in the media, posting on information and telecommunications networks, or providing access to personal data in any other way.
2.13.
Cross-border Transfer of Personal Data – Transfer of personal data to the territory of a foreign country, to a foreign government authority, foreign individual, or foreign legal entity.
2.14.
Destruction of Personal Data – Any actions that result in the irretrievable destruction of personal data, making it impossible to restore the contents of the personal data within the personal data information system, or the destruction of physical carriers of personal data.
3. Rights and Obligations of the Operator3.1. The Operator is entitled to:- Request accurate information and/or documents containing personal data from the data subject.
- Continue processing personal data without the consent of the data subject if the data subject revokes their consent or submits a request to cease processing, provided that there are legal grounds for such processing as outlined in the Personal Data Law.
- Independently determine the scope and measures necessary to fulfill its obligations under the Personal Data Law and related legal acts, unless otherwise specified by the Personal Data Law or other laws of the Republic of Belarus.
3.2. The Operator is obligated to:- Provide the data subject, upon request, with information regarding the processing of their personal data.
- Organize the processing of personal data in compliance with the current laws of the Republic of Belarus.
- Respond to inquiries and requests from data subjects and their legal representatives in accordance with the requirements of the Personal Data Law.
- Inform the authorized body for the protection of the rights of data subjects, upon request, of the necessary information within 10 days of receiving such a request.
- Publish or otherwise provide unrestricted access to this Policy concerning the processing of personal data.
- Take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, or distribution, as well as from other unlawful actions.
- Cease the transfer (distribution, provision, access) of personal data, cease processing, and destroy personal data in accordance with the procedures and cases outlined in the Personal Data Law.
- Fulfill other obligations as required by the Personal Data Law.
4. Key Rights and Obligations of Data Subjects4.1. Data subjects have the right to:- Obtain information regarding the processing of their personal data, except in cases stipulated by the laws of the Republic of Belarus. The information is provided to the data subject by the Operator in an accessible form and must not contain personal data related to other data subjects, unless there are legal grounds for disclosing such information. The list of information and the procedure for its receipt are determined by the Personal Data Protection Law.
- Request the Operator to clarify, block, or destroy their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the declared purpose of processing, and take measures provided by law to protect their rights.
- Set a requirement for prior consent when processing personal data for marketing purposes.
- Withdraw consent to the processing of personal data and demand the cessation of personal data processing.
- File a complaint with the authorized body for the protection of data subjects' rights or take legal action regarding unlawful actions or omissions of the Operator in the processing of their personal data.
- Exercise other rights provided by the legislation of the Republic of Belarus.
4.2. Data subjects are obligated to:- Provide the Operator with accurate information about themselves.
- Inform the Operator about updates (modifications or changes) to their personal data.
4.3. Individuals who provide the Operator with inaccurate information about themselves, or information about another data subject without the latter’s consent, bear responsibility in accordance with the laws of the Republic of Belarus.
5. Principles of Personal Data Processing5.1. Personal data processing is conducted on a lawful and fair basis.
5.2. The processing of personal data is limited to the achievement of specific, predetermined, and legitimate objectives. Processing of personal data that is incompatible with the purposes of its collection is not permitted.
5.3. The combining of databases containing personal data, the processing of which is carried out for purposes incompatible with each other, is prohibited.
5.4. Only personal data that meets the purposes of its processing is subject to processing.
5.5. The content and volume of processed personal data must correspond to the stated purposes of the processing. The processing of personal data that exceeds the declared purposes is not permitted.
5.6. Accuracy, sufficiency, and relevance of personal data in relation to the purposes of processing are ensured. The Operator shall take necessary measures or ensure their adoption to delete or clarify incomplete or inaccurate data.
5.7. Personal data is stored in a form that allows the identification of the data subject for no longer than required by the purposes of data processing unless a longer retention period is provided by law, contract, or when the data subject is a party to, a beneficiary of, or a guarantor under such a contract. Processed personal data is destroyed or anonymized once the processing objectives are achieved, or the need to achieve such objectives is no longer required, unless otherwise provided by law.
6. Purposes of Personal Data Processing6.1. The Bealingua Online Language School collects and stores only those personal data that are necessary for the provision of services in accordance with the
Public Offer at
https://bealingua.by/en/agreement.
6.2. The purposes of data processing include:- Providing the User with access to the services, information, and/or materials available on the website.
- Identifying the User for the provision of services by the Operator.
- Offering personalized services and features to the User.
- Communicating with the User, including notifications, inquiries, and information related to the use of the website, the provision of services, and processing of inquiries and requests from the User.
- Creating a user account on the website.
- Enhancing the quality of the Bealingua project, improving usability, and developing new services and features.
- Targeting promotional offers and advertising materials.
- Conducting statistical and other research based on anonymized data.
- Sending newsletters and free products.
6.3. Personal data processed include:- Full name.
- Email address.
- Contact phone number.
- Residential address.
- Postal code.
- Date of birth.
- Current place of employment and position.
- Photograph.
- Language proficiency level.
- Other information necessary for the Operator to fulfill its obligations.
6.4. Automatically collected data include:- IP address.
- Information from cookies.
- Access time.
- Requested page address.
- Visited page addresses.
- Number of pages visited.
- Duration of the user session.
- Entry points (third-party sites from which the user accesses the website via a link).
- Exit points (links on the website that the user follows to third-party sites).
- User's country.
- User's region.
- User's service provider.
- User's browser.
- User's system languages.
- User's operating system.
- User's screen resolution.
- Number of screen colors.
6.5. Legal Basis:Agreements concluded between the Operator and the data subject.
6.6. Types of Personal Data Processing:- Collection, recording, systematization, accumulation, storage, destruction, and anonymization of personal data.
- Sending informational emails to the email address.
6.7. This Policy applies only to the website
https://bealingua.by. The Operator does not control and is not responsible for third-party websites to which the User may be directed via links available on the website. Such websites may collect or request other personal information from the User, and other actions may be performed there.
6.8. The Operator does not verify the accuracy of the personal information provided by the Users and does not monitor their legal capacity. However, the Operator assumes that the User provides reliable and sufficient personal information and keeps this information up to date.
7. Conditions for Personal Data Processing7.1. The processing of personal data is carried out with the consent of the data subject to the processing of their personal data.
7.2. The processing of personal data is necessary to achieve the purposes provided for by an international treaty of the Republic of Belarus or the law, to perform the functions, powers, and obligations imposed on the Operator by the legislation of the Republic of Belarus.
7.3. The processing of personal data is necessary for the administration of justice, the execution of a judicial act, or an act of another body or official, subject to execution in accordance with the legislation of the Republic of Belarus on enforcement proceedings.
7.4. The processing of personal data is necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, as well as for the conclusion of a contract at the initiative of the data subject or a contract under which the data subject will be a beneficiary or guarantor.
7.5. The processing of personal data is necessary for the realization of the rights and legitimate interests of the Operator or third parties, or for achieving socially significant purposes, provided that this does not violate the rights and freedoms of the data subject.
7.6. The processing of personal data that has been made publicly available by the data subject or at their request is carried out (hereinafter referred to as public personal data).
7.7. The processing of personal data that must be published or disclosed in accordance with applicable legislation is carried out.
8. Procedure for Collecting, Storing, Transferring, and Other Types of Personal Data ProcessingThe security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.
8.1. The Operator ensures the confidentiality of personal data and takes all necessary measures to prevent unauthorized access to personal data.
8.2. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to the fulfillment of legal obligations or if the data subject has given consent to the Operator for the transfer of data to a third party for the performance of obligations under a civil law contract.
8.3. If inaccuracies are identified in the personal data, the User may update the data independently by sending a notification to the Operator's email address at
info.bealingua@gmail.com with the subject line “Personal Data Update.”
8.4. The period of personal data processing is determined by the achievement of the purposes for which the personal data was collected, unless otherwise provided by contract or applicable legislation. The User may withdraw consent to the processing of personal data at any time by sending a notification to the Operator via email to
info.bealingua@gmail.com with the subject line “Withdrawal of Consent to Personal Data Processing.”
8.5. All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by those parties (Operators) in accordance with their User Agreements and Privacy Policies. The data subject must familiarize themselves with these documents. The Operator is not responsible for the actions of third parties, including service providers mentioned in this paragraph.
8.6. Restrictions established by the data subject regarding the transfer (except for granting access), as well as the processing or conditions of processing (except for access) of personal data allowed for dissemination, do not apply in cases of personal data processing in state, public, and other public interests as defined by the legislation of the Republic of Belarus.
8.7. The Operator ensures the confidentiality of personal data during processing.
8.8. The Operator stores personal data in a form that allows the identification of the data subject for no longer than is required for the purposes of personal data processing, unless the retention period for personal data is established by law, contract, or when the data subject is a party, beneficiary, or guarantor under such a contract.
8.9. The grounds for terminating personal data processing may include the achievement of the purposes of personal data processing, the expiration of the data subject's consent, the withdrawal of consent by the data subject, a request to stop processing, or the identification of unlawful personal data processing.
9. List of Actions Performed by the Operator with Collected Personal Data9.1. The Operator collects, records, systematizes, accumulates, stores, clarifies (updates, changes), retrieves, uses, transfers (distributes, provides, grants access), anonymizes, blocks, deletes, and destroys personal data.
9.2. The Operator performs automated processing of personal data, including obtaining and/or transmitting the received information via information and telecommunication networks or without such.
10. Cross-Border Transfer of Personal Data10.1. Before beginning cross-border personal data transfers, the Operator must notify the authorized body for the protection of data subject rights of its intention to carry out such transfers (this notification is submitted separately from the notification of the intent to process personal data).
10.2. Before submitting the above-mentioned notification, the Operator must obtain relevant information from the foreign state authorities, foreign individuals, or foreign legal entities to whom the cross-border personal data transfer is planned.
11. Confidentiality of Personal DataThe Operator and other persons who have gained access to personal data are obligated not to disclose or distribute personal data to third parties without the consent of the data subject, unless otherwise provided by law.
12. Final Provisions12.1. The User may obtain any clarifications on questions of interest regarding the processing of their personal data by contacting the Operator via email at
info.bealingua@gmail.com.
12.2. Any changes to the Operator's personal data processing policy will be reflected in this document. The Policy remains in effect indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely available on the Internet at
https://bealingua.by/en/privacy.