OK.RU PRIVACY POLICY

1. Who we are

1.1. We are Mail.Ru LLC located at 39 Leningradsky Pr., Bldg. 79, Moscow, 125167, Russian Federation. We are represented, for the purposes of this policy, by MGL MY.COM (CYPRUS) LIMITED of 28 Oktovriou, 365 VASHIOTIS SEAFRONT, office 402 Neapoli, 3107, Limassol, Cyprus.

1.2. This Privacy Policy sets out how we collect and use your personal information when you visit www.ok.ru (including through mobile version m.ok.ru or our mobile apps (including our iPhone, Android and WP apps) (hereinafter the Site) and the choices available to you in connection with our use of your personal information (the Privacy Policy). This Privacy Policy should be read alongside, and in addition to, our Site terms and conditions (accessible online at https://ok.ru/regulations) (Terms) and our Cookie Policy (accessible online at https://ok.ru/res/cookiepolicy.html). In case of any contradictions between terms and conditions of processing your personal information contained in this Privacy Policy and the Terms, this Privacy Policy will prevail.

2. This Privacy Policy

2.1. By making available the Site and its services (hereinafter the Site Services) we, acting reasonably and in good faith, believe that you:
(a) have all necessary rights to register on and use this Site;
(b) provide true information about yourself to the extent necessary for use of the Site Services;
(c) understand that by the posting your personal information you have manifestly made this information public, and this information may become available to other Site users and internet users, be copied and disseminated by them;
(d) understand that some types of information transferred by you to other Site users cannot be deleted by you or us;
(e) are aware of and accept this Privacy Policy.

2.2. We do not check the user information received from you, except where such check is necessary in order for us to fulfill our obligations to you.

2.3. This Privacy Policy applies only to the European Union-based users. If you are not a European Union-based user, please refer to the Privacy Policy applicable in the relevant jurisdiction.

3. Information we collect about you

3.1. In order to implement the agreement between you and us, and provide you with access to the use of the Site functionality, we will improve the Site Services, develop and implement new Site Services, and enhance available Site and services functionality. To achieve these objectives, and in compliance with applicable laws, we will collect, store, aggregate, organise, extract, compare, use, and supplement your data (hereinafter “processing”). We will also receive and pass this data, and our automatically processed analyses of this data to our affiliates and partners as set out in the table below and section 4 of this Privacy Policy.

3.2. We set out in more detail the information we collect when you use our Site Services, why we collect and process it and the legal bases below.

Information Collected Purpose Legal Basis
1 Location Data We use your location data in order to generate recommendations and tailor and improve the adverts that are presented on the Site. We also use this information in order to provide you with recommendations, community groups we feel you may be interested in, updates and information on our and selected third parties' products and services we think you may be interested in. Consent
Legitimate Interests
2 Data you provide for registering on the Site including your name, surname, date of birth, gender, mobile phone number We use this information in order to manage and administer the Site including providing our services to you. We use this data to enable us to fulfill our obligations to you as part of the Site Services (e.g. in cases where you request restoration of your page that is not linked to a mobile phone number). See section 9.3 of this Privacy Policy for more information. We also use this information in order to provide you with recommendations, community groups we feel you may be interested in, updates and information on our and selected third parties' products and services we think you may be interested in. We use this information in order to generate recommendations and tailor and improve the adverts that are presented on the Site. Legitimate interests
Performance of our contract with you
3 Where necessary, a copy of your identity or another document containing your name, surname, photograph and number of the principal identity document of you or your representative. We may take additional verification steps where we consider reasonable in order to verify your account. We use this data in order to identify you, verify your account and prevent abuse and infringements of your or other persons' rights. For example, we use this information to verify your identity if you lose your credentials and wish to access your account with us. Legitimate Interests
Performance of our contract with you
4 Additional data you provide when you edit your page via the Site including your family status, native city, current city, family relations and career, education and army details. Additional data you provide when you edit your settings (i.g. email). We use this information in order to manage and administer the Site including providing our Site Services to you. We also use this information in order to provide you with recommendations, community groups we feel you may be interested in, updates and information on our and selected third parties' products and services we think you may be interested in. We use this information in order to tailor and improve the adverts that are presented on the Site and measure the effectiveness of these advertisements. Legitimate Interests
Performance of our contract with you
5 Additional data received when you access the Site, including information regarding technical devices, technical interaction with the Site (your host IP-address, your operating system, browser information, geographic position, time of visit, consent information, referrer, the Internet provider, contacts from your phonebook, your installed apps (only Android platform), data obtained accessing the camera, microphone and similar devices) and your browsing behavior and further actions on the Site. We use your data for internal review in order to constantly improve the content of our web page, to understand any errors you may encounter when using the Site, to notify you of changes to the Site and to personalise the use of our Site. Information containing the Site activity history is available in the "Settings/ Location History" section of your page. We also use this information in order to provide you with recommendations, community groups we feel you may be interested in, updates and information on our and selected third parties' products and services we think you may be interested in. We use this information in order to tailor and improve the adverts that are presented on the Site and measure the effectiveness of these advertisements. Legitimate Interests
6 Information that is automatically received at the time of access to the Site with the use of cookies. Please see our cookies policy which sets out the types of cookies we use and what we use these cookies for. We use this information in order to tailor and improve the adverts that are presented on the Site and measure the effectiveness of these advertisements. Consent
7 Information that is created by you on your page and the Site outside the page edit section of the Site and on the Site (including statuses, entries in the microblog, pictures, audio recordings, video recordings, comments, entries in the group discussions) We use this information in order to manage and administer the Site including providing our services to you. We may also use this data in order to tailor and improve the adverts and recommendations that are presented on the Site and measure the effectiveness of these advertisements. Legitimate interests, which inter alia, include the processing of manifestly made public by you data
Performance of our contract with you
8 Information that is created by you while placing requests to our Services support. We use this information in order to verify your identity and to fullfil your support request. We may also use this data in order to investigate any complaints on your behalf and to provide you with a more efficient service. Legitimate interests
Performance of our contract with you
9 Information that is received as the result of your behavioral actions on the Site (in particular, joining / leaving a group, adding other users to the friends list, posting pictures, participation / refusal to participate in meetings, your call history, adding video recordings and liking posts). Your information can be available to all of your friends and other users, including in the Home page section, in accordance with your settings. We use this information in order to manage and administer the Site including providing our Site Services to you. We may also use this data in order to tailor and improve the adverts that are presented on the Site and measure the effectiveness of these advertisements. We may also use this data in order to investigate any complaints on your behalf and to provide you with a more efficient service. Legitimate interests
10 Information that is received about you as the result of other users’ actions on the Site (in particular, notes made on the video recordings and pictures by other users). We use this information in order to manage and administer the Site including providing our Site Services to you. We also may use this data in order to tailor your use of the Site and your interaction with our Site Services. Legitimate interests
11 Information that is received as the result of your using payment functionality on the Site (e.g. first and last four digits of your card number that are needed for the option of matching these details with user’s id number). We use this information in order to manage and administer the Site including providing our Site Services to you. We may also use this data in order to investigate any complaints on your behalf and to provide you with a more efficient service. Legitimate interests
Performance of our contract with you
12 Data collected via third parties including your friends' information from Facebook and contacts from Gmail. We import this information into your profile. Legitimate interests
Performance of our contract with you

3.3. Our legitimate interests include
(1) maintaining and administrating the Site;
(2) providing the Site Services to you;
(3) improving the content of the Site;
(4) processing of the data that was manifestly made public by you
(5) ensuring your account is adequately protected; and
(6) compliance with any contractual, legal or regulatory obligations under any applicable law.

3.4. Your personal information may also be processed if it is required by a law enforcement or regulatory authority, body or agency or in the defence or exercise of legal claims. We will not delete personal information if it is relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved and/or during the term that is required and/or permissible under applicable/relevant law.

3.5. You may withdraw your consent the collection of location data and your apps by amending your privacy settings on the Site or mobile app/the settings of your mobile device. You may withdraw your consent the processing of your phonebook by amending your phone settings. An option to unsubscribe will also be included in every SMS or email (as direct marketing) sent to you by us or our selected third party partners if such direct marketing is realized in fact by us or our selected third party partners with our permission. You can also choose to hide or receive fewer some advertisement from advertisers.

3.6. Please note, if you do not want us to process sensitive and special categories of data about you (including data relating to your health, racial or ethnic origin, political opinion, religious or philosophical beliefs, sex life, and your sexual orientation) you should take care not to post this information or share this data on the Site. Once you have provided this data it will be accessible by other site users and it becomes difficult for us to remove this data.

3.7. Please note, if you withdraw your consent to processing or you do not provide the data that we require in order to maintain and administer the Site, you may not be able to access or register with the Site.

3.8. If we intend to further process your data for any other purpose to those set out in this Privacy Policy, we shall provide you with details of this further purpose before we commence processing.

4. Data sharing

4.1. Your information can be available to all of "your friends" in your page and the Home page section in accordance with your settings and clause 5.1, 5.2 of this Privacy Policy. Some of your information is available to all users of the Site in your page and the Home page section in accordance with your settings and clause 5.1, 5.2 of this Privacy Policy. You can amend your settings via the Site and, subject to clause 5.1, 5.2 of this Privacy Policy, you can also determine your own confidentiality mode and conditions of access to the information mentioned at purposes 2,3,4 and 7 in the table above. We take technical and organizational measures to ensure that the appropriate Site tools are functional. Please note that by the posting your personal information you have manifestly made this information public, and this may become available to other Site users and internet users and be copied and/ or disseminated by such users. Once this data is transferred by you to other users you will not be able to delete this data.

4.2. We may share your data with MGL MY.COM (CYPRUS) LIMITED, V Kontakte LLC and other our affiliates. Sometimes we may also need to share your data with a third party in order to provide our services to you or to administer the Site, for example if you choose to share your data across other social media platforms.

4.3. We may also share your data with our third party contractors and application developers provided these third parties assume confidentiality obligations regarding your personal data collected by the Site and your use of the applications they offer. The developers use the information provided to them in order to provide you with additional services such as games. Data will only be shared with these developers with your consent. You can authorize developers to access your information via the Site.

4.4. Our ad management and recommendation system is designed so that your information will not be shared directly with our third party advertisers. An advertiser or maker of a recommendation can only choose to target advertisements to groups of users falling within criteria such as age, gender or location, or to target communities according to type, e.g. cars or fashion. If you fall within one of the target groups you will receive an advert or recommendation.

4.5. An advertiser or maker of recommendations may also choose to upload e.g. a list of emails, phone numbers and identities to our systems so that we (but not the adviser or maker of recommendations) can check for user matches. They will see the number of matches but not the matches themselves.

4.6. We, Mail.Ru LLC, other companies in the Mail.ru Group or our selected third party partners with our permission, using their own ad services, can show advertisements to you.
For the purpose of displaying a cookie banner and using cookies, including for displaying ads to users, we cooperate with Jaohawi AB (Håltegelvägen 1b, 72348 Västerås, Sweden) in full accordance with applicable law and IAB Europe Transparency & Consent Framework Policies Version 2019-04-02.2c.

4.7. As the Site is an all-in-one means of communication and the key function of the Site is to restore and maintain contacts with old and new acquaintances, the following information about you is always available to Internet users:
surname and name;
date of birth (without year if it is hidden), profile photograph, city of birth, city of residence;
number of your friends, photos, groups, games, notes, videos and gifts.

5. Privacy Settings

5.1. You may, subject to the limitations under clause 4.7, set one of the following "confidentiality levels" for your personal data submitted to us under purposes 2,4 and 7 in the table above:
information available to all of the Site Users;
information available only to the persons having the status of the User’s friends on the Site;
information available only to the User.

5.2. For the information on your page, including mentioned in clause 4.7, you may set one of the following confidentiality levels:
information available to all internet users and indexed by the search systems, or;
information not indexed by the search systems.

5.3. Please note, once your personal data has been copied or shared by another site user, this information will remain available to all site users and internet users even if you delete this information from your page or delete your page in its entirety. We accept no liability for the disclosure of your personal data by other Site users who have accessed such data in accordance with the confidentiality level selected by you.

5.4. The Site contains links to sites operated by third parties. We are not responsible for your data privacy when you access these links or engage with third party services and you should ensure you review the relevant third party's privacy statement which will govern your data privacy rights.

5.5. We bear no liability for the actions of third parties which, as the result of your use of the internet or the Site Services, obtain access to your information in accordance with the confidentiality level selected by you.

5.6. We bear no liability for the consequences of use of the information which, due to the Site nature, is available to any internet user. We ask you to take a responsible approach to the scope of their information posted on the Site.

5.7. We respect your privacy as a user, and you can change or revoke your consent to processing your personal data for targeted advertising from our advertisers by using settings on the page at https://ok.ru/cmpChangeConsent.

6. International Transfers

6.1. We may transfer and maintain on our servers or databases some of your personal information outside the European Economic Area (EEA) including in Russia.

6.2. The countries to which we transfer your data may not have the same data protection laws as your jurisdiction. We take reasonable cyber security measures and/or put in place the Standartd Contractual Clauses (e.g. Model Clauses, Data Processing Agreement/Addendum) to ensure your data is adequately protected.

7. Retention Periods

7.1. We will retain your personal information for as long as required to perform the purposes for which the data was collected depending on the legal basis for which that data was obtained and/or whether additional legal/regulatory obligations mandate that we retain your personal information during the term that is required and/or permissible under applicable/relevant law.

7.2. You may delete your personal data by removing the data from your personal page; alternatively, you can remove your page using the Delete profile functionality available in the end License Agreement section. You have the right to restore your personal page within 90 days after the personal page is removed.

7.3. We may remove your page, or the information you post if there are grounds provided for by applicable law or by the Terms.

8. Your Rights

8.1. You have the following rights, in certain circumstances, in relation to your personal information:
Right to access your personal information.
Right to rectify your personal information: you can request that we update, block or delete your personal data, if the data is incomplete, outdated, incorrect, unlawfully received or no longer relevant for the purpose of processing.
Right to restrict the use of your personal information.
Right to request that your personal information is erased.
Right to object to processing of your personal information.
Right to data portability (in certain specific circumstances).
Right not to be subject to an automated decision.
Right to lodge a complaint with a supervisory authority.

8.2. You also have a right to independently remove your page, information on your page and make changes and corrections to your personal page on the Site, provided that such changes and corrections contain up-to-date and true information. You can also view an overview of the information we hold about you via the Site.

8.3. If you would like to exercise these rights, please send your request to us in our Support Service, or in writing to: 39 Leningradsky Pr., Bldg. 79, Moscow, 125167, Russian Federation. We will aim to respond to you within 30 days from receipt of request. We will need to verify your identity before we are able to disclose any personal data to you.

9. Security Measures

We take technical, organizational and legal measures, including, where suitable, encryption, to ensure that your personal data are protected from unauthorized or accidental access, deletion, modification, blocking, copying and dissemination.

Access to the Site is authorized using your login (e-mail address or mobile phone number) and password. You are responsible for keeping this information confidential. You should not share your credentials with third parties and we recommend you take measures to ensure this information is kept confidential.

If you need to reset password, you can provide us with your mobile phone number or e-mail address associated with your profile. If you forget mobile phone number or e-mail address associated with your account, you can type your personal information (first name, surname, age and city) specified in your profile or the link to your profile and we will try to find your profile. We will send you a restoration code to your mobile phone number or e-mail associated with your profile. You can create a new password using such code on the restoration page.

To reduce the probability of third parties gaining unauthorized access, if you login to your account from an unusual server (in particular, from a server located in a foreign country), we will block entry to your personal page. You will then receive a message asking you to provide digits indicated in SMS

You can access information concerning the time and IP-address from which your account was accessed using "Settings / Location History" link in the Site.

10. Changes to this Policy

10.1. From time to time, we may change and/or update this Privacy Policy. If this Privacy Policy changes in any way, we will post an updated version on this page. We will store the previous versions of this Privacy Policy in our documentation achieve. We recommend you regularly review this page to ensure that you are always aware of our information practices and any changes to such.

11. Contact Us

11.1. If you have any questions, please send your inquiries to us, in writing to 39 Leningradsky Pr., Bldg. 79, Moscow, 125167, Russian Federation, or to our support. So we can deal with your enquiry effectively, please quote this Privacy Policy. We will aim to respond to you within 30 days from receipt of request.

11.2. All correspondence received by us from you (written or electronic inquiries) is classified as restricted-access information and may not be disclosed without your written consent. The personal data and other information about you may not be used without your consent for any purpose other than for response to the inquiry, except as expressly provided by law.

11.3. The e-mail address of our DPO is dpo@corp.my.com.