Personal Data Processing Policy
This is an informational translation. The Russian-language version is the legally binding original.
(applies to all information that the Operator may obtain about visitors to the website https://flok-stroy.ru/)
1. General provisions
1.1. The Policy regarding the processing of personal data (hereinafter referred to as the “Policy”) has been developed in pursuance of the requirements of clause 2 of part 1 of Article 18.1 of Federal Law No. 152-FZ “On Personal Data” of 27.07.2006 (hereinafter referred to as the “Personal Data Law”) for the purpose of ensuring compliance with the requirements of labor, tax, and pension legislation, as well as other regulations related to the organization’s activities. 1.2. In pursuance of the requirements of part 2 of Article 18.1 of the Personal Data Law, this Policy is published with free access on the information and telecommunications network Internet on the Operator’s website. 1.3. The subject of the personal data policy is any natural person possessing the relevant personal data.
2. Terms and definitions
2.1. The Operator is FLOK LLC (INN: 7724576641), acting through its General Director Igor Petrovich Efimov on the basis of the Charter, hereinafter referred to as the “Operator”. 2.2. Personal data – any information relating to a directly or indirectly specified or identifiable natural person (the personal data subject). 2.3. Personal data permitted by the personal data subject for dissemination – personal data to which access by an unlimited number of persons has been granted by the personal data subject by giving consent to the processing of personal data permitted by the personal data subject for dissemination. 2.4. Processing of personal data – any action (operation) or set of actions (operations) with Personal data performed with or without the use of automation tools. The processing of personal data includes, among other things: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (dissemination, provision, access); depersonalization; blocking; deletion; destruction. 2.5. Automated processing of personal data – the processing of personal data using computing equipment. 2.6. Dissemination of personal data – actions aimed at disclosing personal data to an indefinite number of persons. 2.7. Provision of personal data – actions aimed at disclosing personal data to a specified person or a specified group of persons. 2.8. Blocking of personal data – the temporary cessation of the processing of personal data (except in cases where processing is necessary to clarify personal data). 2.9. Destruction of personal data – actions as a result of which it becomes impossible to restore the content of personal data in a personal data information system and/or as a result of which the physical media of personal data are destroyed. 2.10. Depersonalization of personal data – actions as a result of which it becomes impossible, without the use of additional information, to determine the attribution of personal data to a particular personal data subject. 2.11. Personal data information system – a set of personal data contained in databases and the information technologies and technical means ensuring their processing.
3. Purposes of processing personal data
3.1. The processing of Personal data by the Operator is carried out for the following purposes: ensuring compliance with the Constitution of the Russian Federation, federal laws, and other regulatory legal acts of the Russian Federation; carrying out commercial activities in accordance with the Operator’s Charter. 3.2. Consent to the processing of Personal data permitted by the personal data subject for dissemination is provided to the Operator by giving such consent using the Information System of the authorized body for the protection of the rights of personal data subjects. 3.3. The Operator carries out both automated and non-automated processing of Personal data. 3.4. The disclosure to third parties and dissemination of Personal data without the consent of the personal data subject is not permitted, unless otherwise provided for by the legislation of the Russian Federation. 3.5. The transfer of Personal data to bodies of inquiry and investigation and other authorized bodies of executive power and organizations is carried out in accordance with the requirements of the legislation of the Russian Federation. 3.6. The Operator takes the necessary legal, organizational, and technical measures to protect Personal data from unlawful or accidental access to them, destruction, modification, blocking, dissemination, and other unauthorized actions. 3.7. The personal data of subjects may be obtained, undergo further processing, and be transferred for storage both on paper media and in electronic form. 3.8. The storage and placement of documents containing Personal data in open electronic catalogs and similar file-sharing services is not permitted. 3.9. The Operator stores Personal data in a form that allows the personal data subject to be identified for no longer than the purposes of processing the Personal data require, unless the retention period for Personal data is established by the legislation of the Russian Federation, a contract, or an agreement. 3.10. The destruction of documents (media) containing Personal data is carried out in a manner whereby the personal data on physical media cease to exist. 3.11. Personal data on electronic media is destroyed by erasing or formatting the medium.
4. Procedure and conditions for the processing and storage of personal data
4.1. The processing of Personal data is carried out by the Operator in accordance with the requirements of the legislation of the Russian Federation. 4.2. The processing of Personal data is carried out with the consent of the personal data subjects to the processing of their Personal data. Consent to the processing of personal data is given in any form that allows the fact of its receipt to be confirmed. 4.3. Consent to the processing of Personal data permitted by the personal data subject for dissemination is executed separately from other consents of the personal data subject to the processing of their Personal data.
5. Categories of personal data subjects
5.1. The Personal data of the following personal data subjects is processed: employees, former employees, counterparties, representatives of counterparties, clients, website visitors. 5.2. Personal data obtained by the Operator: full name, date and place of birth, marital status, social status, property status, income, gender, residential address, registration address, email address, telephone number, SNILS, INN, citizenship, identity document data, bank card details, settlement account number, personal account number, profession, position, information on employment activity (including length of service, data on current employment indicating the name and settlement account of the organization), information on education, other personal data.
6. Basic rights of the personal data subject
6.1. The subject has the right of access to their personal data and to the following information:
- Confirmation of the fact of the processing of personal data by the Operator;
- The legal grounds and purposes of the processing of Personal data;
- The purposes and methods of processing Personal data applied by the Operator;
- The name and location of the Operator, information on persons (with the exception of the Operator’s employees) who have access to Personal data or to whom Personal data may be disclosed on the basis of a contract with the Operator or on the basis of the legislation of the Russian Federation;
- The periods of processing of Personal data, including the periods of their storage;
- The procedure for the personal data subject to exercise the rights provided for by the Personal Data Law;
- The name or the surname, first name, patronymic, and address of the person carrying out the processing of Personal data on behalf of the Operator, if the processing is or will be entrusted to such a person;
- Contacting the Operator and sending requests to it.
7. Updating, correction, deletion, and destruction of personal data, responses to subjects’ requests for access to personal data
7.1. Confirmation of the fact of the processing of Personal data by the Operator, the legal grounds and purposes of the processing of Personal data, as well as other information specified in part 7 of Article 14 of the Personal Data Law, is provided by the Operator to the personal data subject or their representative upon application or upon receipt of a request from the personal data subject or their representative. 7.2. In the event that inaccurate Personal data is identified upon application of the personal data subject or their representative, or upon their request, or upon a request from Roskomnadzor, the Operator blocks the Personal data relating to that personal data subject from the moment of such application or receipt of the said request for the period of verification, provided that the blocking of Personal data does not violate the rights and legitimate interests of the personal data subject or third parties. 7.2.1. In the event of confirmation of the fact of the inaccuracy of Personal data, the Operator, on the basis of information provided by the personal data subject or their representative or by Roskomnadzor, or other necessary documents, clarifies the Personal data within seven working days from the day of submission of such information and removes the blocking of the Personal data. 7.3. In the event that unlawful processing of Personal data is identified upon the application (request) of the personal data subject or their representative or of Roskomnadzor, the Operator blocks the unlawfully processed Personal data relating to that personal data subject from the moment of such application or receipt of the request. 7.4. Upon achievement of the purposes of processing Personal data, as well as in the event of the withdrawal by the personal data subject of consent to their processing, the Personal data is subject to destruction, if:
- It is not otherwise provided for by a contract to which the personal data subject is a party, beneficiary, or guarantor;
- The Operator is not entitled to carry out processing without the consent of the personal data subject on the grounds provided for by the Personal Data Law or other federal laws;
- It is not otherwise provided for by another agreement between the Operator and the personal data subject.