POLICY REGARDING THE PROCESSING OF PERSONAL DATA

1. GENERAL

1.1. This document defines the policy of the Application Owner (hereinafter referred to as the Operator) regarding the processing of personal data.

1.2. This Policy of the Operator has been developed in order to ensure the implementation of the requirements of the legislation in the field of personal data processing, taking into account the requirements of the Constitution of the Russian Federation, Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" (hereinafter - Federal Law No. 152-FZ), other legislative and regulatory legal acts of the Russian Federation in the field of personal data.

1.3. The Policy defines the basic rights and obligations of the Operator and personal data subjects, the purposes of personal data processing, the legal grounds for processing personal data, the categories of personal data being processed, the categories of personal data subjects, the procedure and conditions for processing personal data, as well as measures to ensure the security of personal data when they are processing applied by the Operator.

1.4. For the purposes of this Policy, the following basic concepts are used:

Personal data - any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data).

Operator - a state body, municipal body, legal entity or individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) ) committed with personal data.

Processing of personal data - any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing) , extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

Automated processing of personal data - processing of personal data using computer technology.

Dissemination of personal data - actions aimed at disclosing personal data to an indefinite circle of persons.

Provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons.

Blocking personal data - temporary suspension of the processing of personal data (except when processing is necessary to clarify personal data).

Destruction of personal data - actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed.

Depersonalization of personal data - actions, as a result of which it becomes impossible to determine the ownership of personal data by a specific subject of personal data without the use of additional information.

Personal data information system - a set of personal data contained in databases and information technologies and technical means that ensure their processing.

Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state to the authorities of a foreign state, a foreign individual or a foreign legal entity.

1.5. Basic rights and obligations of personal data subjects:

1.5.1. For the timely and complete exercise of their rights, the subject of personal data is obliged to provide the Operator with reliable personal data.

1.5.2. The subject of personal data decides to provide his personal data and agrees to their processing freely, by his own will and in his own interest. Consent to the processing of personal data may be given by the subject of personal data or his representative in any form allowing to confirm the fact of its receipt, unless otherwise provided by federal law.

The obligation to provide proof of obtaining the consent of the subject of personal data to the processing of his personal data or proof of the existence of the grounds specified in Federal Law No. 152-FZ rests with the Operator.

1.5.3. The subject of personal data has the right to receive information regarding the processing of his personal data, including the following:

1. confirmation of the fact of personal data processing by the Operator;
2. legal grounds and purposes for processing personal data;
3. targets