QForm Privacy Policy

This Privacy Policy describes the rules for processing data (including personal data) of users of the site and the “QForm” software product located on the network at https://ru.qform.io/ (hereinafter also referred to as the Site, “QForm Site”) .

This Privacy Policy for the QForm Site was developed in accordance with the Federal Law of the Russian Federation dated July 27, 2006. No. 152-FZ “On Personal Data” (hereinafter referred to as the Law) and other regulatory legal acts of the Russian Federation in the field of personal data.

Depending on the circumstances, the QForm Site processes data as a personal data operator or as a personal data processor acting on behalf of. The administrator of the QForm Site and the operator (processor) of your personal data is the Limited Liability Company KUFORM LLC (OGRN: 1215600001594, location: 460044, Orenburg, Berezka St. 2/5, room 18, hereinafter referred to as the Operator) .

By using the QForm Site, you may be a visitor, user or respondent to the Site:

You are a visitor when you visit the Site without registering or creating an account;
You are a user or a representative of a user when you use the Site through your account to use all services of the Site;
You are a respondent when you provide your data to users through web forms created using the QForm Site.
We notify you that the amount of personal data available for processing by the User using the QForm Software Product, as well as their storage period, may vary depending on the use of a paid or free version of the QForm Software Product. You can find out exact information about the number and composition of services provided by the administrator of the “QForm” Site in “Section 5 “Rights and Obligations of the Parties” of the User Agreement of the “QForm” Site, located at: ru.qform.io/service-offer.

TERMS AND DEFINITIONS

Personal data - any information relating to a directly or indirectly identified or identifiable individual (subject of personal data, hereinafter referred to as the subject);
Processing of personal data - processing of personal data - any action (operation) or set of actions (operations) performed using automation tools or without the use of such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing ), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
Personal data operator - a state body, municipal body, legal entity or individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) ) performed with personal data;
Personal data processor is a person who processes personal data in the interests and on behalf of the personal data operator;
Site, “QForm” Site – a composite (complex) object of intellectual property owned by the Operator, consisting of computer programs and other software, databases, graphic content and other works, combined to ensure the functioning of the Site and the use by users of the “QForm” Software Product; access to the Site is carried out via the Internet; The site is located on the domain name “https:/ru.qform.io/” its subdomains;
“QForm” software product is a software package posted on the “QForm” Website, which provides the ability to create forms for data collection and other capabilities upon user requests;
Services – the Operator’s services for providing access to the functions of the QForm Software Product, as well as other services related to information and computing services on the basis of the User Agreement of the QForm Site;
Form, Data Collection Form (quiz) – a special online form created by the Site User using the QForm Software Product, which allows the collection of any data (including personal data) from respondents;
The User's website is the User's Internet resource, accessible via the Internet, on which a data collection form created using the QForm Software Product is installed;
Site visitor – a person using the Site without creating an individual account;
Site User (customer) – a Site visitor who has created an account on the Site and uses the QForm Software Product;
Respondent is a visitor to the User’s Site using Data Collection Forms created using the QForm Software Product;
User registration is a set of user actions, namely providing your data and initially entering a login and password to create an account on the Site.
Personal Account – a web page on the Site that provides the opportunity to register and use the QForm Software Product.

1. DATA PROCESSED

When using the Site and the QForm Software Product, the Operator can process the following data:

1.1. When registering a User (creating an account) on the Site:

surname, first name;
Date of Birth;
E-mail address;
phone number;
VK ID;
Google ID;
Yandex ID.

1.2. When the User fills out personal data in the personal account of the Site:

surname, first name;
E-mail address;
phone number;
Date of Birth;
country of actual location;
photo.

1.3. When the User fills out a form to generate payment through the Site:

surname, first name.

1.4. When the Visitor fills out the feedback form on the Site:

surname, first name;
E-mail address;
phone number.

1.5. When the Respondents fill out the Data Collection Form - any data of the Respondents collected by Users through the Forms, including : last name, first name, patronymic; E-mail address; phone number; residential address; floor; age; links to websites, profile on social networks; income information; photo; when using the paid version of the QForm Software Product on the special instructions of the User - special categories of personal data): data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life; and other data with the exception of : biometric personal data; bank card data.

1.6. When processing cookies and similar technologies:

IP address;
cookies and similar technologies;
data about the user's use of the Site;
information about the location of connection to the Site.

2. OBJECTIVES AND CONDITIONS OF DATA PROCESSING

2.1. The operator processes data for the purposes of:

Creation and use by Users of a personal account on the Site, providing access to the QForm Software Product and the Operator’s services;
Payments by Users for the Operator's services;
Sending information messages to the User about the operation of the Site;
Execution of Users’ instructions for the processing of personal data of Respondents;
Ensuring communication and interaction between Users and Respondents, sending information and advertising messages to Respondents, promoting goods, works, and services of the Operator’s partners (Users);
Communications with Visitors based on requests on the Site;
Conducting analytical, marketing, statistical and other studies of the use of the Site to optimize its operation, correct errors and malfunctions in the Site, develop products and services of the Operator and its partners.

2.2. The Operator may process the following data for the purpose of creating and using Users’ personal account on the Site, providing access to the QForm Software Product and Operator services :

Subjects (owner) of personal data: Users of the Site;
Categories of processed data: other;
List of processed data: last name, first name; E-mail address; phone number; VK ID; Date of Birth; country of actual location; photo;
Duration of data processing: until the purposes of processing are achieved or consent to processing is withdrawn, but not more than 3 (three) years from the date of deletion of the User’s account on the Site.

2.3. The Operator may process the following data for the purpose of payment by Users :

Subjects (owner) of personal data: Users of the Site;
Categories of processed data: other;
List of processed data: last name, first name;
Duration of data processing: until the purposes of processing are achieved or consent to processing is withdrawn, but not more than 3 (three) years from the date of deletion of the User’s account on the Site.

2.4. The Operator may process the following data for the purpose of sending information messages about the operation of the Site :

Subjects (owner) of personal data: Users of the Site;
Categories of processed data: other;
List of processed data: last name, first name; E-mail address;
Duration of data processing: until the purposes of processing are achieved or consent to processing is withdrawn, but not more than 3 (three) years from the date of deletion of the User’s account on the Site.

2.5. The Operator may process the following data in order to fulfill Users’ instructions for processing personal data of Respondents :

Subjects (owner) of personal data: Respondents;
Categories of processed data: other, special;
List of processed data: any data of Respondents collected by Users through Forms, including: last name, first name, patronymic; E-mail address; phone number; residential address; floor; age; links to websites, profile on social networks; income information; photo; when using the paid version of the QForm Software Product on the special instructions of the User - special categories of personal data: data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life; and other data with the exception of: biometric personal data; bank card data;
Duration of data processing:
1) In the paid version of the QForm Software Product: until the purposes of processing are achieved or the consent to processing is withdrawn, but not more than 3 (three) years from the date of receipt of consent to processing; 2) In the free version of the QForm Software Product ": until the purposes of processing are achieved or consent to processing is withdrawn, but not more than 1 (one) year from the date of receipt of consent to processing.

2.5.1. Users who collect special categories of personal data guarantee the availability of consent to the processing of special categories of personal data received about PD subjects within 3 (three) days from the date of receipt of such PD.

2.6. The Operator may process the following data for the purpose of ensuring communication and interaction between Users and Respondents, sending information and advertising messages to Respondents, promoting goods, works, and services of the Operator’s partners (Users):

Subjects (owner) of personal data: Respondents;
Categories of processed data: other;
List of processed data: last name, first name; phone number; E-mail address;
Duration of data processing:
1) In the paid version of the QForm Software Product: until the purposes of processing are achieved or the consent to processing is withdrawn, but not more than 3 (three) years from the date of receipt of consent to processing; 2) In the free version of the QForm Software Product ": until the purposes of processing are achieved or consent to processing is withdrawn, but not more than 1 (one) year from the date of receipt of consent to processing.

2.7. The Operator may process the following data for the purpose of communication with Visitors based on requests on the Site:

Subjects (owner) of personal data: Site visitors;
Categories of processed data: other;
List of processed data: last name, first name; phone number; E-mail address;
Duration of data processing: until the purposes of processing are achieved or consent to processing is withdrawn, but not more than 3 (three) years from the date of receipt of the user’s application.

2.8. The Operator may process the following data from users of the Site for the purpose of conducting analytical, marketing, statistical and other studies of users’ use of the Site to optimize its operation, correct errors and malfunctions in the Site, and develop products and services of the Operator and its partners:

Subjects (owner) of personal data: Site Visitors, Site Users, Respondents;
Categories of processed data: other;
List of processed data: IP address; cookies and similar technologies; data about the user's use of the Site; information about the location of connection to the Site;
Duration of data processing: until the purposes of processing are achieved or consent to processing is withdrawn, but not more than 3 (three) years from the date of the user’s last visit to the Site.

2.9. Data processing by the Site is carried out in an automated form and includes: collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (provision, access), blocking, deletion, destruction of personal data.

2.10. Data destruction procedure: data is subject to destruction in the following cases:

Achieving processing purposes;
Expiration of processing time;
The user's withdrawal of consent to processing;
The user's exercise of the right to be forgotten;
Submission of a request by an authorized government body to destroy data;
Liquidation or reorganization of the Operator.
Method of destruction: electronic data files are destroyed using software.

3. COOKIES AND SIMILAR TECHNOLOGIES

Cookies and similar technologies (for example, pixels, tags, cache, local storage, etc.) are small pieces of data, most often implemented in the form of text identifier files, that are installed on the user’s device or connection platform when they visit Internet resources, individual pages/modules of the Site, when interacting with them to obtain and create information. The Site uses cookies of various types, which can be created both by the Site itself and by third parties - partners of the Operator, who provide functional and technical solutions necessary for the operation of the Site.

Cookies and similar technologies allow you to:

The user can personalize the settings for working with the Site.
The Operator - collect the data necessary to optimize the operation of the Site, correct errors and failures in its operation, develop products and services of the Operator and its partners.

To do this, the Operator stores information about the actions performed by the user on the Site, for example, information about authorization in the personal account, the effectiveness of the user interface on a particular page of the Site, the use or non-use of certain features of the Site, and the like.

The user can independently configure the settings for installing, blocking, or refusing to use cookies in the configurations of the browser he uses or the device through which he accesses the Site. Information about setting preferences, blocking and deleting cookies can be found in the help sections of the user's browser or device.

Removing or preventing the installation of certain cookies may make it impossible to use certain functions of the Site.

4. BASIS OF DATA PROCESSING

The operator processes your data based on:

The need for the Operator to fulfill his obligations to the Site Users as provided for in the User Agreement, the order for the processing of personal data (if there is an order);
Provided consent to data processing;
Legitimate interests of the Operator.

4.1. Fulfillment of obligations from the User Agreement

The Operator processes data to fulfill its obligations to Users of the Site in accordance with the terms of the User Agreement, including for creating and using a personal account on the Site, providing the User with access to the services of the Site and receiving the services of the Operator.

4.2. Consent to data processing

4.2.1. Consent of Site Visitors and Users:
Before registering your personal account on the Site or before submitting an application on the Site, you provide the Operator with your consent to process your data. Your consent is an independent legal basis for the processing of your data. You provide your consent to the processing of your data by filling out a special consent form on the Site (check box). 4.2.2. Consents of Respondents: Before submitting the data entered in the Data Collection Form, you provide the Operator or User (depending on who is the operator of personal data in a particular case) with your consent to process your data. Your consent is an independent legal basis for the processing of your data. 4.2.3. You provide your consent to the processing of your data by filling out a special consent form on the Site (check box). Withdrawal of consent: You can withdraw your consent at any time by sending an application to the Operator's email: privacy@qform.io. Withdrawal of consent will not affect the lawfulness of processing based on previously given consent. If your consent is withdrawn and there are no other legal grounds for data processing, all your data will be destroyed, which will make it impossible to use the Site’s personal account and use the Site’s services.

4.3. Legitimate interests

The operator processes data for:

Conducting analytical, marketing, statistical and other studies of the use of the Site to optimize its operation, correct errors and malfunctions in the Site, develop products and services of the Operator and its partners;
Protecting your own legitimate interests, for example, to ensure legal protection.

5. TRANSFER OF DATA TO THIRD PARTIES

The operator may provide your data to third parties in the following cases:

If the Operator is required to do so by law, in connection with judicial proceedings, administrative proceedings or to establish, exercise or defend the Operator's legal rights;
If the Operator acts on the basis of the User’s instructions to process personal data or in the interests of the User;
If the Operator uses the services of third-party data centers to ensure the storage and protection of processed data;
If data processing will be entrusted to third parties (for example, e-mail / sms marketing service operators, analytical service operators).

The operator will not transfer your data to third parties unless this is expressly provided in this Privacy Policy, in the User Agreement or in the consent to data processing.

5.1. Transfer of data of Respondents on the basis of an order for the processing of personal data

In cases where the Operator processes the data of Respondents (provided when filling out the Data Collection Forms) in the interests of the User or on the basis of an instruction for the processing of personal data, such data will be provided to the Users who created the Data Collection Forms or gave the operator instructions for processing. In particular, the Operator can transmit the following data:

Any data of Respondents collected by Users through Forms, including: last name, first name, patronymic; E-mail address; phone number; residential address; floor; age; links to websites, profile on social networks; income information; photo; special categories of personal data: data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life; and other data with the exception of: biometric personal data; bank card data.

5.2. Transfer of data to operators of e-mail / sms marketing services

If you provide consent to receive informational and advertising messages, the Operator may send part of your data to the operator of the e-mail / sms marketing service that provides relevant services to the Operator. In particular, the Operator can transmit the following data:

Last name, first name;
Phone number;
E-mail address.

Without sending this data to the operator of the e-mail / sms marketing service, it may be impossible for you to receive information and advertising messages.

5.3. Transfer of data to operators of analytical services

If you do not block the Site’s use of cookies and similar technologies, this data (without providing other personal data) will be automatically processed by the operator of the analytical service that provides us with the relevant services (for example, Yandex.Metrica). The following data may be processed:

IP address;
Cookies and similar technologies;
Data about the user's use of the Site;
Information about the location of connection to the Site.

5.4. Data transfer to data centers

To ensure the storage and protection of processed data, the Operator may use third-party data centers. Third-party data centers can process the following data:

Visitor data: last name, first name; phone number; E-mail address;
User data: last name, first name; E-mail address; phone number; VK ID; Date of Birth; country of actual location; photo;
Respondent Data: any Respondent data collected by Users through Forms, including: last name, first name, patronymic; E-mail address; phone number; residential address; floor; age; links to websites, profile on social networks; income information; photo; special categories of personal data: data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life; and other data with the exception of: biometric personal data; bank card data.

Without sending this data to the data center, the operation of the Site may be impossible.

6. RIGHTS OF THE DATA OWNER

To control the processing of your data, you may exercise certain rights. In particular, you have the right:

Get access to your data . You have the right to receive information, including: confirmation that your data is being processed; information on the legal grounds, purposes, methods and terms of data processing; about the operator processing the data; information about persons who have access to personal data or to whom the data may be disclosed; the data being processed and the source of its receipt; the procedure for exercising the rights of the owner (subject) of data; information about the person processing the data on behalf of the operator (if the processing was commissioned); other information.
Request correction (clarification) of data . If you discover that the Operator is processing inaccurate or outdated data, you can check its accuracy and/or request that it be updated or corrected.
Restrict (block) the processing of your data . If you dispute the accuracy of your data, believe that the Operator is processing it unlawfully or wish to object to processing, you have the right to temporarily stop the processing of your data in order to check whether the processing was correct. In this case, the Operator will not process the data for any purpose other than storing it until the reasons for introducing the restriction disappear.
Request destruction of your data . If the Operator is not required to store data in accordance with the law, the data will be destroyed upon your request.
To exercise your rights, you can send your request to the Operator's email: privacy@qform.io.

7. DATA SECURITY

The operator has taken necessary and sufficient measures to protect your information and data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions.
The operator provides access to your data only to authorized persons. These individuals maintain strict confidentiality and prevent unauthorized access to your data.

8. UPDATES TO THIS POLICY

The Operator may update this Privacy Policy. New versions of the Privacy Policy will be published on the Site.
Changes to the Privacy Policy come into force upon publication of the updated version of the Privacy Policy.
We encourage you to check the Privacy Policy page each time you visit the Site to ensure that you are happy with its current version.