Privacy statement
This Privacy Statement explains how Cheleto LLC (“Cheleto”) processes your data.
1. Information under Article 13 of the General Data Protection Regulation (GDPR)
This Privacy Statement aims to inform you about the purpose, nature and scope of the use of your data, and your rights in relation to it.
2. Data controller
Cheleto LLC (“Cheleto”)
11 Pererva Street, Building 23, Moscow, 109651, Russia
Phone: +7 (499) 994 4725
Email:info@cheleto.com
3. Purpose and legal basis for processing
Personal data is processed solely on a lawful basis: with your consent, under an existing contract, pursuant to legal provisions or in the legitimate interests of Cheleto.
We also collect only the personal data that you have explicitly and voluntarily provided, for example when you apply for a vacancy on our careers portal or subscribe to our newsletter.
We use this type of information only for specific purposes and in accordance with applicable legal provisions; any further use requires your consent.
4. Data storage
When you access our website, your data is temporarily stored on our server for security purposes. Each data record includes:
- the IP address of the end device;
- the access timestamp (date and time);
- name of the requested file;
- the type of device used;
- name of the browser used;
- the browser language setting;
- name of the operating system used;
- the volume of data transmitted;
- the access status (file transferred, not found, etc.);
- name of the internet service provider;
- the contents of all completed forms.
These records help us identify the causes of potential technical problems, optimise the technical aspects of our online presence and ensure the security of our IT infrastructure. We have a legitimate interest in temporarily storing this data under Article 6(1)(f) of the General Data Protection Regulation (GDPR).
Data collection is necessary for our website to function. Website visitors therefore have no right to object to these activities.
5. Data and information security
Your data is processed exclusively in accordance with the following technical and organisational measures (Article 32 of the General Data Protection Regulation (GDPR)):
- Confidentiality undertakings by all employees;
- multi-level access checks;
- multi-level user authentication;
- video surveillance;
- individual authorisation schemes;
- an encrypted SSL connection;
- secure IT infrastructure.
Your data is shared with third parties only for the following purposes:
- Article 6(1)(a) of the General Data Protection Regulation (GDPR);
- Article 6(1)(b) of the General Data Protection Regulation (GDPR);
- Article 6(1)(c) of the General Data Protection Regulation (GDPR);
- Article 6(1)(f) of the General Data Protection Regulation (GDPR).
We process your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) to the extent necessary to decide whether to establish an employment relationship. The legal basis is Article 88 of the GDPR and, where applicable, Article 6(1)(b) of the GDPR concerning the performance of a contract or steps taken before entering into a contract.
We may also process your personal data where necessary to comply with legal obligations (Article 6(1)(c) of the General Data Protection Regulation (GDPR)) or to defend ourselves against legal claims. The legal basis for the latter is Article 6(1)(f) of the General Data Protection Regulation (GDPR). A legitimate interest may include, for example, the need to provide evidence in legal proceedings under the German General Act on Equal Treatment (Allgemeines Gleichbehandlungsgesetz — AGG). If you give us explicit consent to process your personal data for specific purposes, the legal basis for that processing, in accordance with your consent, is Article 6(1)(a) of the General Data Protection Regulation (GDPR). You may withdraw your consent at any time with effect for the future (see Section 12).
If you enter into an employment relationship with us, under Article 88 of the General Data Protection Regulation (GDPR), we may continue to process the personal data previously received from you for the purposes of that relationship and to the extent necessary to perform or terminate it, or to exercise or fulfil the rights and obligations of an employee representative body under legislation, a wage agreement or a works or service agreement (collective agreement).
Data obtained with your consent will be kept in our candidate database so that we can tell you about future career opportunities at Cheleto if a suitable position is not currently available. Your data will be kept for six months for this purpose. With your explicit consent, this period may be extended to 12 months.
8. Cookies
Cookies are small text files that your browser stores on your device when you visit websites. These text files can be used to identify a user or analyse their online activity.
We will not place functional, statistical or marketing cookies without your explicit consent. You can also change your cookie preferences in your web browser settings.
Further information is available in your browser’s help section.
9. Newsletter
To subscribe to the Cheleto newsletter, you must provide at least the email address to which it should be sent. Other information is used to tailor the newsletter to your preferences and to contact you. We use a double opt-in subscription process. This means that we will send you newsletters only after you have provided your email address and confirmed your subscription by clicking the link in the email we send you. We do this to ensure that only the owner of the email address can subscribe. We must receive your confirmation immediately after sending the email; otherwise, the subscription and email address will be deleted from our database. Our newsletter service will not accept further messages from this email address until we receive your confirmation. You can unsubscribe from newsletters at any time.
To unsubscribe, contact us using the details in the “Data controller” section or use the unsubscribe link at the bottom of each newsletter.
If you receive our newsletters, we collect statistical data to optimise our services. The newsletters you subscribe to and your use of them are associated with each customer in the newsletter software.
9.1. Legal basis
We send newsletters on the basis of Article 6(1)(a) and (f) and Article 7 of the General Data Protection Regulation (GDPR).
10. Links
Although links to other websites are carefully selected and checked, we accept no responsibility for the content of third-party websites.
11. Age restrictions
Under no circumstances do we process the personal data of children under 18. If you have not yet reached the minimum age, do not use our services and ask your legal guardian for assistance.
12. Rights of the data subject
The General Data Protection Regulation (GDPR) grants data subjects the following rights:
- the right of access (Article 15 of the General Data Protection Regulation (GDPR));
- the right to rectification (Article 16 of the General Data Protection Regulation (GDPR));
- the right to erasure (“right to be forgotten”) (Article 17 of the General Data Protection Regulation (GDPR));
- the right to restriction of processing (Article 18 of the General Data Protection Regulation (GDPR));
- the right to data portability (Article 20 of the General Data Protection Regulation (GDPR));
- the right to object (Article 21 of the General Data Protection Regulation (GDPR));
- the right to withdraw consent (Article 7(3) of the General Data Protection Regulation (GDPR));
- the right to lodge a complaint with a supervisory authority (Article 77 of the General Data Protection Regulation (GDPR))
If you have general questions about data protection or exercising your rights, please contact us using the details in the “Contacts” section.