Personal data

Privacy Policy

This policy sets out the manner in which personal data is processed and protected on the CShark.ru website and in the CShark user interfaces accessible through it.

1. General provisions

1.1. The operator of personal data is the Limited Liability Company "KOMPETENTSIA": INN 7724438955, KPP 772501001, OGRN 1187746432015, address: 115280, Moscow, st. Leninskaya Sloboda, 21, building 1.

1.2. The Policy applies to the data of website visitors, representatives of customers and potential customers, users of CShark public interfaces, as well as persons submitting requests, applications or search requests for a car.

1.3. The policy was developed taking into account the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data”, the Federal Law of July 27, 2006 No. 149-FZ “On Information, Technologies and Information Protection” and other applicable requirements of the legislation of the Russian Federation.

1.4. Filling out a form, submitting a request, undergoing telephone authentication, or using the vehicle search function means that the user has read this Policy. Where consent is required for processing, it is requested separately.

2. Terms

Personal data - information relating to a directly or indirectly identified individual. Processing — any action with such data, including collection, recording, storage, clarification, use, transfer, depersonalization, blocking and deletion.

CShark — navigation, video analytics and parking space management system. Customer of the object — the organization operating the parking lot and defining the rules for using CShark at a particular facility.

3. Categories of subjects

• visitors to the site CShark.ru;
• representatives of organizations submitting an application for demonstration, design or implementation;
• drivers and other users of vehicle search and navigation functions;
• Operators, administrators and customer employees using CShark work interfaces; operators, admins and employees of the customer using CShark workinterfaces;
• persons contacting technical support.

4. Composition of processed data

4.1. Applications and business communication

• name, title, work phone number and email address;
• name and details of the organization;
• information about the parking facility, project, plans, number of parking spaces, required functions and equipment;
• content of the appeal, correspondence and submitted documents.

4.2. Vehicle search and user functions

• phone number used to authenticate the user;
• state registration number of the vehicle specified in the request;
• date, time and result of the request, parking facility ID and security events;
• the actual location of the car, a photograph of the parking space and the route, if this information is available to the user according to the rules of the facility.

CShark records which verified phone number requested the license plate. This is necessary for access control, investigation of unauthorized requests and protection of vehicle owners.

4.3. Operation of the system at a parking facility

Depending on the project configuration, video frames of parking spaces, state license plates, information about occupancy and marking violations, entry and parking times, history of changes in the state of the space, camera identifiers and operator actions can be processed. The specific composition, storage period and access rights are fixed by the regulations and contractual documents of the facility.

4.4. Technical data of the site

IP address, browser and device type, operating system, date and time of access, page address, referral source, technical logs, information about attempts to send forms and other data necessary for the operation and protection of the site. Analytical data is processed only after the user's consent.

The CShark public website is not intended to collect special categories of personal data or biometric identification of natural persons.

5. Purposes of processing

• operation of the website, feedback forms and user interfaces;
• preparation of demonstration, survey, project and commercial proposal;
• communication with the user and processing requests;
• telephone authentication and control of the legitimacy of the vehicle request;
• searching for a car, displaying its location and plotting a route;
• Operation, support and diagnostics of CShark on customer sites; operation of CShark on client sites;
• preventing abuse, automated attacks and unauthorized access;
• analysis of the quality of the site and interfaces after obtaining consent to analytical cookies;
• execution of contracts and requirements of the legislation of the Russian Federation.

6. Legal basis

The grounds for processing are the consent of the subject of personal data, actions at the request of the user before concluding an agreement, conclusion and execution of an agreement, fulfillment of obligations established by law, as well as the legitimate interest of the Operator in ensuring the security of the site and information systems, subject to the rights of the subject.

Advertising and informational messages are sent only with separate consent, if such consent is required by law.

7. Procedure and methods of processing

Processing is carried out in automated and non-automated ways. The operator can collect, record, systematize, store, clarify, use, transfer to authorized persons, depersonalize, block and destroy data within the stated purposes.

The operator does not make decisions that give rise to legal consequences for the user solely on the basis of automated processing without a basis provided for by law or regulation of the object and the possibility of verification by the responsible person.

8. Transfer and assignment of processing

The operator may entrust the processing to hosting providers, mail infrastructure, CRM, communications, technical support and other contractors if this is necessary for the operation of the site and the execution of the request. Only the minimum amount of data is transferred and the recipient is obliged to observe confidentiality and security requirements.

With the user's consent, technical analytical data is transferred to the Yandex Metrica service. The composition and management of analytical cookies are described in cookie policy.

Transfer to government bodies is carried out only in cases and in the manner provided for by the legislation of the Russian Federation.

9. CShark at customer sites.

When CShark is installed locally or operated in a car park, the customer of the facility can independently determine the purposes of processing the data of the car park visitors and act as the operator of personal data. In such case, COMPETENCE LLC processes the data in the role and to the extent provided for in the contract with the customer.

Rules for access to photographs, site history, state numbers and event logs, as well as storage periods and the procedure for issuing information to the user are determined by the documentation of a particular object. This Policy does not replace the policy of the customer of the parking facility.

10. Localization and cross-border transmission

When collecting personal data of citizens of the Russian Federation, the Operator ensures their recording, systematization, accumulation, storage, clarification and retrieval using databases on the territory of the Russian Federation, except in cases provided for by law.

Cross-border transfer, if necessary for a specific service or project, is carried out only if there is a legal basis and the procedures established by law have been followed.

11. Storage periods and termination of processing

• data from applications, project requests and business correspondence - up to 5 years after completion of interaction;
• contractual and accounting documents - within the time limits established by law and the contract;
• site security logs - for the period necessary to identify and investigate incidents;
• car search data, telephone authentication, video footage and history of parking spaces - according to the regulations of a particular facility and the terms of the contract;
• analytical data - within the terms of the analytics service and the selected cookie settings.

Once the purpose has been achieved, the data is deleted, destroyed or anonymized unless further storage is required by law, contract or to resolve a dispute.

12. Data protection

The operator applies legal, organizational and technical protection measures: differentiation of access rights, recording of administrative actions, secure connections, backup, component updates, event monitoring, limiting the number of requests, form protection and incident response procedures.

Access to photographs of parking spaces, license plates and logs is limited to authorized users within the assigned role.

13. Security incidents

If unauthorized access is detected, the Operator limits processing, establishes the reasons, takes measures to eliminate the consequences and prevent recurrence. Notification of the authorized body and subjects is carried out in cases and within the time limits provided for by law.

14. Rights of the subject

The subject has the right to obtain information about the processing of his data, demand clarification, blocking or destruction, withdraw consent, demand termination of processing and appeal the actions of the Operator to Roskomnadzor or the court.

For data protection purposes, the Operator may request information confirming the identity of the applicant, his/her authorization and the fact of interaction with CShark. The license plate number without user verification is not in itself sufficient grounds for providing the vehicle history.

15. Application procedure

The appeal can be sent to privacy@digital.moscow or by post to the Operator's address: 115280, Moscow, Leninskaya Sloboda str., d. 21, k. 1. For questions about the CShark project, the address is used. b2b@digital.moscow.

The request should indicate the full name, contact for response, the essence of the request and information allowing to establish the fact of interaction. You should not send a password, one-time verification code, or redundant copies of documents.

16. Change of Policy

The operator has the right to update the Policy if legislation, the composition of services or processing methods change. The current edition is published on this page with the date indicated. Significant changes apply from the moment of publication, unless a different period is specified in the document.