By submitting a request via the website, the sender provides their consent to IranDiscovery, hereinafter referred to as the "Operator," to process their personal data as described below, in accordance with applicable laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Scope of Consent
The data subject consents to the Operator processing their personal data, which includes the following actions: collection, receipt, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission to third parties (where applicable), anonymisation, restriction, and erasure or destruction. The processing will be conducted for purposes such as entering into civil-law contracts with the Operator, fulfilling contractual obligations, and/or providing information about other services or products offered by the Operator.
2. Categories of Personal Data
The personal data to be processed includes, but is not limited to:
- Full name (surname, first name, middle name);
- Income and financial status;
- Profession and education (including degrees and specialisations);
- Foreign language proficiency;
- Social status and benefits eligibility;
- Address of registration and residence;
- Place and date of birth;
- Health status;
- Contact details (mobile and landline phone numbers, emergency contact information, email address);
- Family status and composition;
- Citizenship;
- Identity document details (e.g., passport information);
- Bank account numbers, payment card details, and other financial data;
- Social security and tax identification numbers;
- Employment history, work experience, and references;
- Photograph;
- Details of work performed, including rewards and sanctions;
- Military service status;
- Other personal data contained in electronic communications, voice messages, or documents created, stored, or transmitted via electronic or communication devices.
3. Rights of the Data Subject
In accordance with Article 15 of the GDPR, the data subject has the right to access their personal data and receive information about its processing upon written request. The data subject also has the right to rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and to object to processing, as outlined in Articles 16–21 of the GDPR.
4. Retention Period of Personal Data
The Operator is authorised to perform the following actions with the provided personal data:
- Personal data in physical form will be retained for up to 7 years;
- Electronic records will be retained for the entire operational period of the Operator, unless otherwise required by law.
5. Duration of Consent
This consent remains valid from the date of submission until it is withdrawn in writing by the data subject.
6. Actions Permitted by the Operator
The Operator is authorised to perform the following actions with the provided personal data:
- Collection;
- Organisation;
- Storage;
- Adaptation or alteration;
- Retrieval;
- Use;
- Restriction;
- Erasure or destruction.
7. Withdrawal of Consent
The data subject may withdraw their consent at any time by submitting a written request to the Operator. The withdrawal will take effect no later than thirty (30) days from the date of receipt of the request.