1. GENERAL PROVISIONS
1.1. This Personal Data Processing Policy (hereinafter referred to as the "Policy") has been issued and applied by Intelion Data Joint Stock Company (TIN 9725175237) (hereinafter referred to as the "Operator") in accordance with clause 2, Part 1, Article 18.1 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and defines the basic principles, goals and methods of personal data processing, the composition of personal data subjects and their rights, the Operator's actions in processing personal data, the Operator's measures to protect personal data and monitor compliance with the requirements of legislation and this Policy.
1.2. The purpose of this Policy is to unconditionally comply with the requirements of the legislation of the Russian Federation, to ensure the protection of the rights and freedoms of the personal data subject when processing his personal data, including the protection of the rights to privacy, personal and family secrets.
1.3. Basic concepts used in the Policy:
1.3.1. Personal data - any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data);
1.3.2. Personal data processing - any action (operation) or set of actions (operations) with personal data performed with or without automation tools. The processing of personal data includes, but is not limited to:
- collection;
- recording;
- systematization;
- accumulation;
- storage;
- clarification (update, change);
- extraction;
- use;
- transmission (distribution, provision, access);
- depersonalization;
- blocking;
- removal;
- destruction.
1.3.3. Automated personal data processing - processing of personal data using computer technology;
1.3.4. Dissemination of personal data - actions aimed at disclosing personal data to an unspecified group of persons;
1.3.5. Provision of personal data - actions aimed at disclosure of personal data to a certain person or a certain circle of persons;
1.3.6. Blocking of personal data - temporary termination of the processing of personal data (except in cases where the processing is necessary to clarify personal data);
1.3.7. Destruction of personal data - actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed;
1.3.8. Depersonalization of personal data - actions as a result of which it becomes impossible to determine the identity of personal data to a specific personal data subject without using additional information.;
1.3.9. Personal data operator (operator) - a state body, municipal body, legal entity or individual who independently or jointly with other persons organize and (or) process personal data, as well as determine the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data.
1.3.10. Cross–border transfer of personal data - the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity. The cross-border transfer of personal data is carried out exclusively in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and international treaties of the Russian Federation.
1.4. The current version of the Policy, which is a public (publicly available) document that declares the Operator's activities in processing personal data, has been published and is available to any Internet user in the form of unrestricted access on the Operator's website. intelionmine.com (hereinafter referred to as the " Website "), when clicking on the link: intelionmine.com/privacy.
1.5. The Operator has the right to make changes to this Policy. When making changes to the Policy, the Operator notifies about it by posting (publishing) the new version of the Policy on the Website at the permanent address intelionmine.com/privacy no later than 10 (ten) days prior to the entry into force of the relevant amendments. Previous versions of the Policy are stored in the archive of the Operator's documentation.
1.6. In case of contradictions between this Policy and other official documents of the Operator, this Policy is subject to application.
2. INFORMATION ABOUT THE OPERATOR
Name: Intelion Data Joint Stock Company
TIN: 9725175237
Location address: 115419, Moscow, Donskoy Municipal District, 2nd Verhniy Mikhailovsky passage, house 9
3. PURPOSES OF PERSONAL DATA PROCESSING
3.1. The Operator processes personal data solely for the purposes of:
3.1.1. Conclusion and execution of contracts related to the Operator's activities with individuals (including the self-employed) and/or individual entrepreneurs who are parties to the contracts, including, but not limited to: provision of services/performance of works, license agreements, leases, purchase and sale, creation of objects of exclusive rights, confidentiality agreements, agreements of intent, mixed contracts;
3.1.2. Promotion of goods, works, and services on the market through direct contacts with the personal data subject, including marketing activities;
3.1.3. Registration and regulation of the operator's employment relations with personal data subjects and other directly related relationships, including for the fulfillment of obligations and the exercise of the rights of the parties under employment contracts between them, including, but not limited to, for the calculation and payment of wages, to ensure the safety of personal data subjects, the operator and third parties ensuring the safety of the property of personal data subjects, the operator and third parties; obtaining various guarantees and benefits for personal data subjects; reviewing a candidate's resume for vacant positions;
3.1.4. Ensuring access control on the Operator's territory;
3.1.5. The Operator's compliance with the requirements of the current legislation of the Russian Federation, including, but not limited to, carrying out business activities as a legal entity, sending relevant information to government agencies, complying with the requirements and regulations of government agencies, executing judicial acts, reviewing claims and appeals of personal data subjects sent by e-mail or a written request to the Operator's addresses;
3.1.6. Ensuring the correct operation of the Website, including the stability and security of the Website, providing information on the issues of Website visitors through the feedback request form, and carrying out analytical activities.
3.2. Processing of personal data that does not meet the purposes of processing is not allowed.
4. SUBJECTS OF PERSONAL DATA
4.1. The Operator's personal data information systems process the personal data of the following personal data subjects, including, but not limited to:
4.1.1. visitors to the Operator's Website (hereinafter referred to as "Users");
4.1.2. potential clients of the Operator;
4.1.3. visitors to the Operator's offices and warehouses;
4.1.4. applicants for Operator jobs;
4.1.5. employees who are in an employment/contractual relationship with the Operator;
4.1.6. buyers/clients of the Operator;
4.1.7. contractors/suppliers of the Operator.
5. CATEGORIES OF PERSONAL DATA PROCESSED
5.1. The Operator processes the following personal data in accordance with the purpose specified in clause 3.1.1.:
• Last name, first name and patronymic; phone number; e-mail; contact information on the Telegram social network (login/nickname); date of birth (day, month and year); passport data or data of another identity document (place of birth, series, number, date of issue, name of authority, who issued the document, unit code); citizenship; address of residence; registration address; information about the taxpayer identification number; amount of remuneration under the contract (transaction price); bank details; scope and subject of property rights; information on the amount of the tax rate for the purpose of calculating the taxation of income received from the transaction; other information necessary to achieve the purpose of processing personal data.
5.2. The Operator processes the following personal data in accordance with the purpose specified in clause 3.1.2.:
• Last name, first name and patronymic; telephone number; e-mail; information collected through metric programs; other information necessary to achieve the purpose of personal data processing.
5.3. The Operator processes the following personal data in accordance with the purpose specified in clause 3.1.3.:
• Last name, first name and patronymic; gender; phone number; e-mail; contact information on the Telegram social network (login/nickname), date of birth (day, month and year); passport data or data of another identity document (place of birth, series, number, date of issue, name the body that issued the document, the unit code); citizenship; address of residence; registration address; information about work (including work experience, current employment data, indicating the name of the organization); profession; position; information about qualifications and availability of special knowledge or special training (series, number, date of issue of a diploma, certificate, certificate or other document confirming graduation from an educational institution, name and location of the educational institution, date of commencement and completion of training); information about advanced training or retraining (series, number, date of issue of the document confirming professional development or retraining, name and location of the educational institution, date of commencement and completion of training, other necessary information); INN; SNILS; income information; information on military registration of persons liable for military service and persons subject to conscription; information on marital status (marital status, marriage certificate data, last name, first name, patronymic of spouse, degree of kinship, last names, first names, patronymics, birth certificate data, dates of birth of other family members, dependents); SNILS of family members (if necessary, caring for a sick family member); data from the certificate of name change (if any); data from the marriage certificate; data from the certificate of divorce; information about property (property status): availability of vehicles (state numbers and other data from vehicle registration certificates and vehicle passports); bank details; medical and social examination certificate data (on disability, temporary disability); other information necessary to achieve the purpose of personal data processing.
5.4. The Operator processes the following personal data, in accordance with the purpose specified in clause 3.1.4.:
• Last name, first name and patronymic; gender; phone number; e-mail; date of birth (day, month and year); passport data or data of another identity document (place of birth, series, number, date of issue, name of the issuing authority, unit code); nationality; address of residence; registration address; other information necessary to achieve the purpose of processing personal data.
5.5. The Operator processes the following personal data in accordance with the purpose specified in clause 3.1.5.:
• Last name, first name and patronymic; phone number; e-mail; date of birth (day, month and year); passport data or data of another identity document (place of birth, series, number, date of issue, name of the issuing authority, unit code); nationality; address of residence; address registration; INN; SNILS; profession; position; information about work (including work experience, current employment data, indicating the name of the organization); information about marital status; information about income; information on military registration of persons liable for military service and persons subject to conscription; information on qualifications, professional training, and advanced training; telephone records; bank details; information on concluded transactions (contracts); and other information necessary to achieve the purpose of processing personal data.
5.6. The Operator processes the following personal data, in accordance with the purpose specified in clause 3.1.6.:
• Name, phone number, e-mail address;
• Other information about the Users of the Website necessary to achieve the purpose of processing personal data, which includes additional data obtained when accessing the Site, including data on technical means (devices), technological interaction with the Website (including the IP address of the host, the type of User's operating system, browser type, geographical location, Internet service provider) and the User's subsequent actions on the Site.
5.7. Processing of special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, health status, intimate life is not allowed, except in cases established by current legislation.
5.8. The processing of biometric personal data that characterize the physiological and biological characteristics of a person, on the basis of which it is possible to establish the identity of the personal data subject, is not carried out, except in cases established by applicable law.
6. PRINCIPLES OF PERSONAL DATA PROCESSING
6.1. The processing of personal data is carried out by the Operator taking into account the protection of the rights and freedoms of both the Operator's employees and other persons when processing their personal data, including the rights to privacy, personal and family secrets based on the principles of:
Legality and fairness of personal data processing;
• legality and fairness of personal data processing;
• limiting the processing of personal data to the achievement of specific, predetermined and legitimate goals;
• compliance of the purposes and methods of personal data processing with the purposes that were stated during data collection;
• inadmissibility of combining databases created for different purposes for processing personal data;
• compliance of the necessity and sufficiency of the volume, nature and methods of personal data processing with the stated purposes of their processing;
• ensuring the accuracy, reliability and, if necessary, relevance of personal data in relation to the purposes of processing;
• storing personal data in a form that allows you to identify the subject of personal data for no longer than required by the purposes of processing, the requirements of legislation or the contract under which the party / beneficiary is the subject of personal data;
• destruction or depersonalization of personal data upon achievement of goals or loss of the need to achieve these goals, unless otherwise provided by the requirements of the legislation
6.2. When collecting personal data, including through the Internet information and telecommunications network, the Operator is obliged to ensure the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation.
6.3. If the Operator, on the basis of a contract, entrusts the processing of personal data to another person, an essential condition of such an agreement is a list of actions (operations) with personal data that will be performed by the person processing personal data, the purposes of processing, the obligation to ensure the confidentiality of personal data and the security of personal data during processing., and also the requirements for the protection of the processed personal data must be specified in accordance with Article 19 of the Federal Law "On Personal Data" No. 152-FZ dated 27.07.2006
6.4. Processing of personal data for the purpose of promoting goods, works and services by the Operator through direct contacts with the subject of personal data using means of communication is allowed only if prior consent of the personal data subject. In the event of a corresponding request from the personal data subject, the Operator is obliged to immediately stop processing them for the purposes indicated above.
6.5. The processing of personal data authorized by the personal data subject for dissemination, and the dissemination of such personal data must be carried out exclusively with the consent of the personal data subject, unless otherwise established by law (in particular, data provided to investigative authorities based on the results of decisions of relevant authorities).
6.6. Making decisions that give rise to legal consequences with respect to the personal data subject or otherwise affect his rights and legitimate interests based solely on automated processing by the Operator is not allowed.
6.7. In cases stipulated by the Federal Law "On Personal Data" No. 152-FZ of July 27, 2006, the processing of personal data (including the processing of personal data authorized by the personal data subject for dissemination) is carried out only with the written consent of the personal data subject.
Consent in the form of an electronic document signed with an electronic signature in accordance with Federal Law No. 63-FZ of April 6, 2011 “On Electronic Signature” shall be recognized as equivalent to consent to the processing of personal data (as well as consent to the processing of personal data permitted by the personal data subject to be distributed) in written form on paper.
7. PROCEDURE AND CONDITIONS OF PERSONAL DATA PROCESSING
7.1. The processing of personal data is carried out by the Operator on the basis of the principles of personal data processing established in Section 6 of this Policy.
7.2. The processing is carried out by the Operator in the following ways:
• Automated processing of personal data;
• non - automated processing of personal data;
• mixed processing of personal data, including transmission over the Operator's internal network and/or transmission over the Internet.
7.3. The User's personal data is collected on the Website during registration, as well as later when the User enters additional information about himself on his own initiative using the Website's tools. The personal data provided for in clause 5.6. of this Policy is provided by the User and is the minimum necessary during registration (when submitting a request for feedback on the Website).
7.4. Personal data is not transferred to any third parties, except in cases expressly provided for in this Policy.
7.4.1. Upon indication or consent, it is possible to transfer the personal data of the personal data subject to third parties-the Operator's counterparties, subject to the acceptance by such counterparties of obligations to ensure the confidentiality of the information received. The operator may, on the basis of a contract, entrust the processing of personal data to a third party. An essential condition of such an agreement is that the person concerned has the right to process personal data, and the obligation to ensure the confidentiality of personal data and the security of personal data during processing.
7.4.2. The provision of personal data at the request of state bodies (local governments) is carried out in accordance with the procedure provided for by the current legislation of the Russian Federation.
7.4.3. In order to fulfill the agreement between the User and the Operator and provide the User with access to use the Site's functionality, the Operator develops the services and products provided, develops and implements new services and products, optimizes the quality of services and products, improves the available functionality of the Website and its services. To ensure the implementation of these goals, the User agrees to the Operator's collection, storage, accumulation, systematization, extraction, comparison, use, filling (clarification) of their data in compliance with applicable legislation, as well as to receive and transmit to affiliated persons and partners the results of automated processing of such data using various information assessment models, in the form of integers and/or text values and identifiers corresponding to the evaluation criteria specified in the requests for data processing by the Operator and/or persons, specified in this paragraph.
7.5. Interaction with federal executive authorities on the processing and protection of personal data of subjects whose personal data is processed by the Operator is carried out within the framework of the legislation of the Russian Federation.
7.6. Personal data is stored by the Operator in a form that allows determining the subject of personal data for no longer than the purposes of their processing require, and they are subject to destruction upon achievement of the processing objectives or in case of loss of the need to achieve them in accordance with the procedure provided for in this Policy.
7.6.1. When storing personal data, the Operator uses databases located on the territory of the Russian Federation in accordance with Part 5 of Article 18 of the Federal Law "On Personal Data".
7.7. When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with art. 19 of the Federal Law of 27.07.2006 N 152-FZ "On personal Data".
7.8. The condition for termination of personal data processing may be the achievement of the purposes of personal data processing, the expiration of the consent or revocation of the consent of the personal data subject to the processing of his personal data, as well as the identification of unlawful processing of personal data, loss of the need for personal data processing, or termination of the Operator's activities.
8. THE PROCEDURE FOR ENSURING THE RIGHTS OF THE PERSONAL DATA SUBJECT BY THE OPERATOR/INFORMATION ABOUT THE IMPLEMENTED REQUIREMENTS FOR PERSONAL DATA PROTECTION
8.1. Subjects of personal data or their representatives have the rights provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and other regulatory legal acts regulating the processing of personal data.
8.2. The Operator ensures the rights of personal data subjects in accordance with the procedure established by Chapters 3 and 4 of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data".
8.3. The representative's authority to represent the interests of each personal data subject is confirmed by a power of attorney issued in accordance with Articles 185 and 185.1 of the Civil Code of the Russian Federation, Part 2 of Article 53 of the Civil Procedure Code of the Russian Federation or notarized in accordance with Article 59 of the Fundamentals of the Legislation of the Russian Federation on Notaries. The scanned copy of the representative's power of attorney is stored by the Operator for at least three years, and if the storage period of personal data is more than three years, at least the storage period of personal data.
8.4. When processing personal data, the Operator takes the necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, distribution, as well as from other unlawful actions with respect to personal data in accordance with the requirements of Article 19 of the Federal Law "On Personal Data" No. 152-FZ dated July 27, 2006, in particular:
• a person responsible for organizing the processing of personal data is appointed;
• a personal data processing policy is issued, as well as other local acts on personal data processing;
• internal audit of compliance of personal data processing with Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" and regulatory legal acts adopted in accordance with it, requirements for personal data protection, Operator's Policy, Operator's local acts is carried out;
• an assessment is being carried out of the harm that may be caused to personal data subjects in the event of a violation of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data", the ratio of this harm and the measures taken by the Operator aimed at ensuring the fulfillment of obligations provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data";
• employees who directly process personal data are familiarized with the provisions of the legislation of the Russian Federation on personal data, including requirements for personal data protection, documents defining the Operator's policy regarding personal data processing, local acts on personal data processing, and (or) training of these employees;
• threats to the security of personal data during their processing in personal data information systems are identified;
• organizational and technical measures are applied to ensure the security of personal data during their processing in personal data information systems;
• information security measures that have been passed in accordance with the established procedures for conformity assessment are applied;
• the effectiveness of the measures taken to ensure the security of personal data is assessed prior to the commissioning of the personal data information system;
• procedures are established for backup and recovery of personal data modified or destroyed due to unauthorized access to them;
• rules for access to personal data processed in the personal data information system are established, as well as registration and accounting of all actions performed with personal data in the personal data information system.;
• the measures taken to ensure the security of personal data and the level of security of personal data information systems are monitored;
• organizational and technical measures are being implemented to protect against unauthorized or accidental access, destruction, modification, blocking, copying, and dissemination of personal data, including: a permissive system for access of users (service personnel) to information resources, the information system and related works, documents; user access to premises is restricted, where are the technical means for processing personal data located, as well as information storage media; access of users and service personnel to information resources, software tools for processing (transmitting) and protecting information is delimited; actions of users and service personnel are registered, unauthorized access and actions of users, service personnel and unauthorized persons are monitored; technical means are reserved, arrays and data carriers are duplicated; information protection tools that have been used in compliance assessment procedure in accordance with the established procedure; technical means that allow the processing of personal data are located within a protected area; physical protection of premises and the actual technical means that allow the processing of personal data is organized; work is underway to prevent the introduction of malicious programs (virus programs) and software bookmarks into information systems.; when working in information networks, information security is ensured by means of inter-network shielding, the creation of demilitarized zones, virtual private networks, secure communication channels, the use of secure information transmission protocols and hardware and software encryption of information that have passed compliance assessment procedures in accordance with the established procedure.
9. RESPONSIBILITY AND CONTROL OVER COMPLIANCE WITH THE REQUIREMENTS OF THIS POLICY AND LEGISLATION IN THE FIELD OF PERSONAL DATA
9.1. The person responsible for organizing and ensuring the security of personal data in the framework of the implementation of the provisions of this Policy and legal acts of the Russian Federation in the field of personal data is authorized:
• identify threats to the security of personal data during their processing in personal data information systems;
• plan the application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems necessary to counter threats to personal data security and meet personal data protection requirements;
• organize control and/or audit of compliance of the taken protection measures during the processing of personal data with Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data", regulatory legal acts, requirements of regulatory acts for the protection of personal data, local acts;
• evaluate the effectiveness of measures taken to ensure the security of personal data prior to the commissioning of the personal data information system and organize monitoring of the level of personal data security during the operation of the personal data information system;
• conduct an analysis on violations of the provisions of this Policy;
• develop and take appropriate measures to maintain the necessary level of personal data security;
• organize the reception and processing of requests and requests from regulatory authorities of the Russian Federation, subjects of personal data or their representatives. Persons guilty of violating the norms of the current legislation of the Russian Federation in the field of personal data may be brought to disciplinary, administrative, civil and criminal liability in accordance with the procedure established by the current legislation of the Russian Federation.
9.2. Persons guilty of violating the norms of the current legislation of the Russian Federation in the field of personal data may be brought to disciplinary, administrative, civil and criminal liability in accordance with the procedure established by the current legislation of the Russian Federation.
10. RIGHTS OF THE PERSONAL DATA SUBJECT
10.1. On the basis of a request, the personal data subject has the right to receive from the Operator in an accessible form the entire amount of information on the substance of the processing of his personal data by the Operator, such as:
• confirmation of the fact of personal data processing by the operator;
• legal grounds and purposes of personal data processing;
• the purposes and methods of personal data processing used by the operator;
• the name and location of the operator, information about persons (with the exception of the operator's employees) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the operator or on the basis of federal law;
• processed personal data related to the relevant personal data subject, the source of their receipt, unless another procedure for submitting such data is provided by federal law;
• the terms of processing personal data, including the terms of their storage;
• the procedure for the exercise by a personal data subject of the rights provided for by this Federal Law;
• information about a cross - border data transfer that has been carried out or is expected to be carried out;
• the name or surname, first name, patronymic and address of the person who processes personal data on behalf of the operator, if the processing is or will be entrusted to such a person;
• other information provided by the current legislation of the Russian Federation in the field of personal data.
10.2. The right of a personal data subject to access his/her personal data may be restricted in accordance with federal laws, including if:
• the processing of personal data, including personal data obtained as a result of operational-investigative, counterintelligence and intelligence activities, is carried out for the purposes of national defense, state security and law enforcement;
• personal data is processed by the authorities that have detained the subject of personal data on suspicion of committing a crime, or have charged the subject of personal data in a criminal case, or have applied a preventive measure to the subject of personal data prior to the indictment, except in cases provided for by the criminal procedure legislation of the Russian Federation, if it is allowed to familiarize the suspect or accused with such personal data. with data;
• the processing of personal data is carried out in accordance with the legislation on countering the legalization (laundering) of proceeds from crime and the financing of terrorism;
• the access of the personal data subject to his personal data violates the rights and legitimate interests of third parties;
• personal data is processed in cases stipulated by the legislation of the Russian Federation on transport security in order to ensure the stable and safe functioning of the transport complex, to protect the interests of individuals, society and the state in the field of transport complex from acts of unlawful interference.
10.3. The personal data subject has the right to require the Operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as to take legally prescribed measures to protect their rights.
10.3.1. Within a period not exceeding 7 (seven) business days from the date of provision by the personal data subject or his representative of information confirming that the personal data is incomplete, inaccurate or outdated, the Operator is obliged to make the necessary changes to them.
10.3.2. Within a period not exceeding 7 (seven) business days from the date of submission by the personal data subject or his representative of information confirming that such personal data was illegally obtained or is not necessary for the stated purpose of processing, the operator is obliged to destroy such personal data.
10.3.3. The Operator is obliged to notify the personal data subject or his representative of the changes made and the measures taken, and to take reasonable measures to notify third parties to whom the personal data of this subject has been transferred.
10.4. If the personal data subject believes that the Operator is processing his personal data in violation of the requirements of this Federal Law or otherwise violates his rights and freedoms, the personal data subject has the right to appeal the actions or omissions of the Operator to the authorized body for the protection of the rights of personal data subjects or in court.
11. REQUESTS FROM PERSONAL DATA SUBJECTS AND CONTACT INFORMATION
11.1. Personal data subjects have the right to send their requests to the Operator, including requests regarding the use of their personal data provided for in clause 10.1. of this Policy, in writing to the address: 115419, Moscow, Donskoy Municipal District, 2nd Verhniy Mikhailovsky passage, house 9, or in the form of an electronic document signed with a qualified electronic signature in accordance with the legislation of the Russian Federation, at the following email address: privacy@intelionmine.ru.
11.2. The request sent by the personal data subject must contain the following information:
• name;
• last name;
• email address;
• signature of the personal data subject or his representative.
11.3. The Operator undertakes to review and respond to the user's request within 30 (thirty) days from the date of receipt of the request.
11.4. All correspondence received by the Operator from personal data subjects (written or electronic requests) is classified as restricted access information and is not disclosed without the written consent of the personal data subject. Personal data and other information about the personal data subject who sent the request may not be used without the special consent of the personal data subject other than to respond to the subject of the request received or in cases expressly provided for by law.
12. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA
12.1. This Policy has been compiled in accordance with the requirements of the following regulatory legal acts of the Russian Federation:
• The Constitution of the Russian Federation;
• The Labor Code of the Russian Federation;
• Federal Law No. 152-FZ of 27.07.2006 "On Personal Data";
• Federal Law No. 149-FZ of 27.07.2006 "On Information, Information Technologies and Information Protection";
• Federal Law No. 115-FZ dated 08/07/2001 "On Countering the Legalization (Laundering) of Proceeds from Crime and the Financing of Terrorism";
• Federal Law No. 27-FZ dated 04/01/1996 "On Individual (Personalized) Accounting in the Compulsory Pension Insurance System";
• Federal Law No. 59-FZ of 05/02/2006 "On the Procedure for Considering Appeals from Citizens of the Russian Federation";
• Decree of the President of the Russian Federation dated March 06, 1997 No. 188 "On Approval of the List of Confidential Information";
• Decree of the Government of the Russian Federation of September 13, 2008 No. 687 "On Approval of the Regulation on the Specifics of Personal Data Processing carried out without the use of automation tools";
• Decree of the Government of the Russian Federation No. 512 dated July 06, 2008 "On Approval of Requirements for Physical Carriers of Biometric Personal Data and Technologies for Storing Such Data outside of Personal Data Information Systems";
• Decree of the Government of the Russian Federation of November 01, 2012 No. 1119 "On Approval of Requirements for the Protection of Personal Data during their Processing in Personal Data Information Systems";
• FSTEC of Russia Order No. 21 dated February 18, 2013 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data during their Processing in Personal Data Information Systems";
• Order No. 378 of the Federal Security Service of Russia dated 07/10/2014 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data during their Processing in Personal Data Information Systems using Cryptographic Information Protection Tools Necessary to Comply with the personal data protection Requirements established by the Government of the Russian Federation for each of the Security levels";
• Roskomnadzor Order No. 274 dated 03/15/2013 "On Approval of the List of foreign States that are not Parties to the Council of Europe Convention on the Protection of Individuals with Automated Processing of Personal Data and Ensuring Adequate Protection of the Rights of Personal Data Subjects";
• Roskomnadzor Order No. 996 dated September 05, 2013 "On Approval of Requirements and Methods for Depersonalization of Personal Data";
• other regulatory legal acts of the Russian Federation and regulatory documents of authorized state authorities.
13. FINAL PROVISIONS
13.1. The Website may contain links to other Internet resources that operate independently of the Operator and do not act on behalf of or on behalf of the Operator. Personal data subjects are required to familiarize themselves with the rules for the provision of services and the personal data protection policy of such third parties before using the relevant sites (Internet resources). This Policy does not apply to the actions and Internet resources of third parties.
13.2. The Operator provides unrestricted access to this Policy, which defines its policy regarding the processing of personal data, to information about the implemented requirements for the protection of personal data by publishing in the information and telecommunications network at the following network address: intelionmine.com/privacy.
13.3. All issues related to the processing of personal data that are not regulated by this Policy are resolved in accordance with the current legislation of the Russian Federation in the field of personal data.
* If you have any questions or suggestions regarding the Policy, please email us at: privacy@intelionmine.ru.
