Description of the processing
Categories of data subjects whose personal data is processed
Natural persons whose personal data are contained in Customer’s dataset and/or are required to perform Tasks
Categories of personal data processed
Any personal data contained in Customer’s dataset and/or required to perform Tasks
Sensitive data processed (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures.
Sensitive personal data contained in Customer’s dataset and/or required to perform Tasks. Strict purpose limitation and access restrictions are employed.
Nature of the processing
The processor provides the controller with Services specified in the Toloka Terms of Offer. The processor performs on behalf of the controller operations on personal data required to provide the service: Collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, alignment or combination, restriction, erasure, and destruction.
Purpose(s) for which the personal data is processed on behalf of the controller
Provision to the controller of the Services specified in the Toloka Terms of Offer.
Duration of the processing
Duration of the agreement on provision to the controller of the Service under the Toloka Terms of Offer plus the period from expiry of the term of the agreement until deletion of personal data by the processor in accordance with this Data Processing Agreement.
For processing by (sub-) processors, also specify subject matter, nature and duration of the processing
Yandex.Technologies LLC, Yandex LLC: Maintenance of the software used for provision to the controller of the Services under Toloka Terms of Offer. Operations on personal data: The same as those performed by the processor. Duration of the processing is the same as for the processor.
Yandex LLC, Yandex Oy, Yandex DC LLC, Yandex DC Vladimir LLC, Yandex DC Kaluga LLC: Data center services. Operations on personal data: Storage, erasure, and destruction. Duration of the processing is the same as for the processor.