Privacy Policy

1. General provisions

1.1. This Privacy Policy (hereinafter referred to as Policy) determines procedure for processing and protecting personal data of platform users ТАЧ! (hereinafter - Platform, Service) in in accordance with Federal Law dated July 27, 2006 No. 152-FZ “On Personal Data” and others norms of the applicable legislation of the Russian Federation.

1.2. Personal data operator - person ensuring the functioning Platforms and posting this Policy on the website tac4.ru. Details Operator published on the page Details, and are also communicated upon request to support@tac4.ru or specified in the contract, public offer or invoice for payment.

1.3. The Policy applies to all personal data that the Operator receives when using the website, personal account, mobile application for establishment employees, API and when contacting support. The use of the Service is also subject to User Agreement.

1.4. The operator provides B2B services establishments (clients of the Platform). In part personal data of establishment employees and guests processed by the establishment itself within the framework of its activities, the operator of personal data is the establishment; The Platform Operator acts on behalf of the client or in other capacities provided for by law — to the extent necessary to provide the Service.

2. What data do we process?

2.1. Depending on the functions used, the Operator can process the following categories personal data users (administrators, managers, analysts and employees of the establishment with access to the Platform):

• last name, first name, patronymic (if indicated);
• email address;
• telephone number;
• account data (role, client and user IDs, profile settings);
• time zone and language preferences of the interface (if specified);
• technical data: IP address, browser and device information, session identifiers, logs of access and actions in the Service, request identifiers for diagnostics.

2.2. When filling out a card, organizations in your personal account can be processed client (establishment) data as a business entity and related information, including: name, INN, KPP, OGRN, legal and postal address, full name and position of the manager, contact phone number and email of the organization, banking details for settlements with the Operator.

2.3. For the employee's mobile application, data about device (name, identifiers, binding to point/terminal), events logins and operational logs necessary for the operation of the Service.

2.4. In connection with payments through banking channels, the Operator processes transaction metadata (amount, status, bank payment session identifiers, time) and also encrypted credentials banking integration, entered by the client. Operator doesn't receive in a typical SBP scenario via API bank full details of the guest's bank card: confirmation of payment is carried out in the application guest bank.

2.5. When contacting support, the Operator processes the content of the request and contact information, provided by the user.

3. Purposes of processing

Personal data is processed for the purposes of:

• registration, identification and authentication of users;
• providing access to your personal account and mobile application;
• provision of services for agreement and execution of the User Agreement;
• setting up the establishment structure, integrations and devices;
• orchestration of requests to the client’s bank API and display of transaction statuses;
• conducting analytics and accounting of transactions in the Platform;
• ensuring security, preventing abuse and investigating incidents;
• technical support for users and clients;
• compliance with the requirements of the legislation of the Russian Federation.

4. Legal basis for processing

Processing of personal data is carried out on the basis of:

• consent of the subject of personal data - in cases where it is required by law;
• execution of an agreement to which the subject is a party, or conclusion of an agreement under initiative of the subject;
• fulfillment of the Operator’s duties as provided for by law;
• legitimate interests of the Operator or third parties - provided that the rights and freedoms are not violated subject (including ensuring the security of the Service), to the extent permitted by law.

5. Methods, timing and place of processing

5.1. Processing includes collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer (provision, access), depersonalization, blocking and deletion of personal data using or without automation tools.

5.2. Personal data is stored on servers located on the premises Russian Federation, unless otherwise agreed with the client in a separate agreement and not prohibited by law.

5.3. The storage period is determined by the purposes of processing, the duration of the contract with the client, legal requirements and internal regulations of the Operator. Upon achieving goals processing or upon withdrawal of consent (when processing is based on consent), the data is subject to deletion or anonymization unless otherwise required by law.

6. Transfer to third parties

6.1. The operator can transfer personal data:

• banks and payment infrastructure - to the extent necessary to carry out requests for client integration (according to client credentials), without the participation of the Operator in settlements with guests;
• contractors (hosting, communications, SMS delivery of confirmation codes, technical infrastructure support) - subject to their compliance with confidentiality and requirements legislation on personal data;
• government agencies - in cases provided for by law, according to proper request.

6.2. The operator does not sell users’ personal data to third parties for marketing purposes.

6.3. Cross-border transfer of personal data is carried out only if there are legal grounds and compliance with the requirements of 152-FZ. If cross-border transfer does not take place, The operator limits processing to the territory of the Russian Federation in accordance with clause 5.2.

7. Cookies and similar technologies

7.1. The website and personal account may use cookies, local browser storage and similar mechanisms for ensuring login, saving session settings and security.

7.2. The user can limit the use of cookies in the browser settings; at the same time Some functions of the Service may become unavailable.

8. Protective measures

The operator applies organizational and technical measures to protect personal data, including: access control, encryption of sensitive data (including integration secrets), user authentication, event logging, backup and control infrastructure in a volume corresponding to the nature of the data being processed.

9. Rights of the subject of personal data

The subject of personal data has the right:

• receive information about the processing of your personal data;
• demand clarification, blocking or destruction of data if there are grounds;
• withdraw consent to processing - when processing is based on consent;
• appeal the Operator’s actions to an authorized body or court.

To exercise your rights, please send a request to support@tac4.ru indicating your full name, contact for response and the essence of the appeal. The operator will consider the request within the time limits established by the legislation of the Russian Federation Federation.

10. Children

The platform is intended for B2B use by establishments and their authorized employees. The operator does not knowingly collect personal data of minors through marketing website for purposes not related to the provision of the Service.

11. Change of Policy

The Operator has the right to update this Policy by publishing a new version on the website. Current version is available at the address of the page on which this text is located. Continued using the Service after the publication of changes may mean acceptance of the updated Policy, unless otherwise provided by law.

12. Contacts

Requests for personal data

support@tac4.ru

Website and personal account

tac4.ru, lk.tac4.ru

Final provisions

This Policy is an integral part of the rules for using the Platform, along with User Agreement And public offer.

For questions regarding the processing of personal data, please contact support@tac4.ru.