Position
on the processing of personal data
GENERAL PROVISIONS

 

This Regulation on the processing of personal data (hereinafter - the Regulations, this Regulation) has been developed the name of the company (hereinafter also - the Operator) and is applied in accordance with cl. 18.1. Federal Law of July 27, 2006 No. 152-FZ "On Personal Data."
This Regulation determines the policy of the Operator with regard to the processing of personal data.
All issues related to the processing of personal data, not regulated by this Regulation, are resolved in accordance with the current legislation of the Russian Federation in the field of personal data.
This Regulation and changes to it are approved by the Operator's Head and are entered by the Operator's order.
In accordance with paragraph 1 of Art. 3 of Federal Law No. 152-FZ of July 27, 2006 "On Personal Data", personal data of clients and individuals means any information relating to a client or an individual (hereinafter referred to as personal data), directly or indirectly determined or determined on the basis of such information.
The name of the company is the operator organizing and (or) carrying out the processing of personal data, as well as defining the purposes and content of processing personal data.
The purpose of processing personal data is:
ensuring the protection of human and civil rights and freedoms while processing his personal data, including protection of privacy rights, personal and family secrets;
rendering Operator to individuals and legal entities of services related to the Operator's business activities, including the Operator's contacts with such persons, including by e-mail, by phone, to the address provided by the relevant person;
the direction of consultations, replies to the requesting persons via means of communication and the contract data specified by them;
promotion of goods, works, services of the Operator in the market by making direct contacts with the potential consumer by means of communication facilities (it is allowed only under the condition of prior consent of the subject of personal data).
Processing is organized by the Operator on the principles:
legitimacy of the purposes and methods of processing personal data, honesty and fairness in the Operator's activities;
the reliability of personal data, their sufficiency for processing purposes, the inadmissibility of processing personal data that is redundant in relation to the purposes claimed for the collection of personal data;
processing only personal data that meet the objectives of their processing;
compliance of the content and volume of processed personal data with the stated processing objectives. The processed personal data should not be redundant in relation to the stated purposes of their processing;
inadmissibility of combining databases containing personal data, processing of which is carried out for purposes not compatible with each other;
ensuring the accuracy of personal data, their sufficiency, and in necessary cases and relevance in relation to the purposes of processing personal data. The operator takes the necessary measures or ensures their acceptance for the removal or refinement of incomplete or inaccurate data;
storage of personal data in a form that allows to determine the subject of personal data, no longer than the purposes of personal data processing require.
Processing of personal data is carried out in compliance with the principles and rules provided for by Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" and this Regulation.
Personal data is processed using and without the use of automation.
In accordance with the goals and objectives set, the Operator prioritizes the processing of personal data to the person responsible for organizing the processing of personal data.
The person responsible for organizing the processing of personal data receives instructions directly from the executive body of the Operator and is accountable to him.
The person responsible for organizing the processing of personal data has the right to execute and sign the notice provided for in Parts 1 and 3 of Art. 22 of the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data".
Employees of the Operator who directly handle the processing of personal data must be made aware of before the commencement of work with the provisions of the legislation of the Russian Federation on personal data, including requirements for the protection of personal data, documents defining the Operator's policy regarding the processing of personal data, personal data, with this Regulation and amendments thereto.
When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with Art. 19 of the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data".
When carrying out the collection of personal data using information and telecommunication networks, the Operator is obliged to publish in the relevant information and telecommunications network a document defining its policy regarding the treatment