Drafting a privacy policy for the online store and Marketplace

Ivan Mashin

A marketplace or online store exists in one way or another in the form of a website or application for mobile devices. In all cases, he receives personal data from future buyers. These processes, storage, processing, protection, transfer to third parties, are subject to clear regulation. These rules are reflected in the privacy policy, which is mandatory for the marketplace. You can read about how to draw it up in accordance with the requirements of the law in our article.

Contents:

What personal data does the online store / marketplace collect?

Any information that allows you to identify a user сalled Personal data. Personal data includes a fairly wide range of data, so even if it seems to you that such information will not be personal data should be checked against practice criteria.

It is worth pointing out that personal data will be taken

During the registration of the user this is what he himself indicates;
During the period of being on the site or using the marketplace application, for example, geolocation, date and time of access to the site / application, etc.

For what purposes does the marketplace process personal data?

In accordance with the legislation, data processing is possible only for specific purposes, which must be indicated in the Privacy Policy. The user gives his consent to the processing for these purposes, therefore processing in others is not allowed.

Processing goals can be set in the interests of the marketplace itself and its users. On the one hand, the marketplace sets the goals that it needs to comply with all legal requirements. In addition, this data can help improve performance. On the other hand, the availability of personal data allows you to customize the service and make it more convenient. You can read more about the purposes of processing personal data in another article "What are the purposes of processing personal data

Who has access to the personal data of the marketplace?

In the Privacy Policy, it is necessary to indicate who has access to the received personal data, since it will not only be at the marketplace. First, the data will most likely be passed on to advertisers to place advertisements on the store's website. Secondly, if this is a marketplace, then some data can be transferred to sellers who will directly sell and deliver goods.

Storage of personal data and their protection

The legislator imposes a large number of requirements for these processes, therefore, as a rule, companies here do not have a choice of the provisions of the Policy. Storage and any other processes associated with the processing of personal data must take place on the territory of Russia. Data is usually stored for as long as necessary to achieve the purpose for which it was collected.

Protection implies that access to personal data is limited. For example, marketplace employees receive information only if it is necessary to complete their tasks. In addition, these employees are required to follow the internal rules for the processing of personal data.

User rights in the process of processing personal data

The Privacy Policy, as a rule, prescribes the rights of the user who provided the personal data. All of them are provided for by law, however, in order to make it easier for the user, they are prescribed in the Policy itself. The user has the following rights:

Request personal data;
Withdraw consent to their processing;
Request their removal and other rights.

User's consent to the terms of the Marketplace privacy policy

The law obliges to make sure that the user has read the privacy policy and agrees with its terms. Therefore, the marketplace shows the user a box to check the consent box. This field should be located after the link to the text of the Privacy Policy. In normal use of the site, the text should always be easily accessible, so it is usually placed at the end of the page.

Thus, drafting a privacy policy for a marketplace is a mandatory step when launching a marketplace or online store. Its content may vary depending on specific functions, but most of the provisions are related to mandatory legal requirements. A special process is occupied by the procedure for agreeing to the terms of the privacy policy. The marketplace must make sure that the user agrees with the processing of personal data. Otherwise, he will be responsible. If you have any questions or need help drafting a privacy policy, please contact A4 Law Firm lawyers.