1. General provisions
The personal data processing policy is created in accordance with the No.152 Federal Law requirements dated by 27.07.2006 “About personal data” (hereafter - Personal Data Law) and defines the personal data processing procedure and personal data safety measures taken by BPC named after M. Gafuri (hereafter - Operator).
1.1 The Operator’s main purpose and conditions of activity performance is to follow human rights and liberties during personal data processing including personal privacy defense as well as personal and family secrets.
1.2 The Operator’s policy on personal data processing (hereafter - Policy) is applied to all the information that can be obtained about all the web-site https://indushkin.org/ visitors.
2. The Policy main terms
2.1 Automated personal data processing - personal data processing by computer equipment.
2.2. Personal data processing blocking - temporary termination of personal data processing (excluding the cases when the processing is necessary for personal data clarification)
2.3. Web-site - graphical and information material as well as computer programs and database providing their availability on the internet at //indushkin.org/.
2.4. Personal data information system - personal data in the database and information technologies and technical tools that provide personal data processing.
2.5. Personal data depersonalization - activities, as a result of which it is impossible to define the personal data ownership to the exact User or another personal data subject without additional information.
2.6. Personal data processing - any activity (operation) or number of activities with personal data conducted with the help of automatization means or without any means, including personal data collection, recording, systematization, storage, clarification (updating, modifying), extraction, usage and transmission (distribution, providing or access) depersonalization, blocking, deleting, and destruction.
2.7. Operator - state body, municipal body, legal person or physical person that perform personal data processing independently or with other parties and define personal data processing purposes, personal data content, activities (operations) with personal data.
2.8. Personal data - any information that directly or indirectly refers to the defining or defined User of the website https://indushkin.org/.
2.9. Personal data confirmed by personal data subject for distribution - personal data that is available for unlimited groups of people by giving confirmation of personal data subject for processing of the personal data that is approved for distribution in accordance with the Personal Data Law (hereafter - personal data approved for distribution).
2.10. User - any website https://indushkin.org/ visitor.
2.11. Personal data provision - activities aimed at personal data reveal to the exact person or exact group of people.
2.12. Personal data distribution - any activities aimed at revealing personal data to the uncertain group of people (personal data transmission) including publishing in social media or telecommunication networks as well as personal data provision by another way.
2.13. Cross-border data transmission - transmission of personal data to another country, foreign country authority, foreign physical or legal parties.
2.14. Personal data destruction - any activities, as a result of which personal data is irrevocably destroyed without any possibility to recover the content of personal data in the information system and/or physical carriers of personal data are destroyed.
3. Main rights and obligations of the Operator
3.1. The Operator is entitled to:
3.2. The Operator is obliged to:
4. Main rights and obligations of the personal data subject
4.1. Personal data subjects are entitled to:
4.2. Personal data subjects are obliged to:
4.3. Parties that transfer to the Operator unreliable data about themselves or about another personal data subject without the consent of the last one are obliged to take responsibilities according to the Russian Federation legislation.
5. Personal data processing principles
5.1. Personal data processing is performed on a legal and fair basis.
5.2. Personal data processing is limited by the exact, legal and predetermined purposes. Personal data processing that is not compatible with the data collection purpose can not be performed.
5.3. Integration of the databases containing the personal data that is processed for non-correlative purposes can not be performed.
5.4. Only personal data that corresponds to the processing purposes can be processed.
5.5. Personal data content and amount correspond to the declared processing purposes. Personal data redundancy concerning the declared processing purposes is not permitted.
5.6. It is necessary to ensure personal data accuracy, sufficiency and relevance when it is needed concerning personal data processing purpose. The Operator takes the necessary measures on unsufficient or inaccurate data deleting and clarifying and/or makes them to be taken.
5.7. Personal data storage is performed in the form that can make it possible to define the personal data subject no longer than it is required by the processing purpose, if the storage term is not prescribed by the Federal Law or contract with the personal data subject as a beneficiary or guarantor. Processed personal data is destroyed or depersonalized when the processing purpose is achieved or in case of loss of the need, unless otherwise provided by the Federal Law.
6. Personal data processing purposes
7. Conditions for personal data processing
7.1 Processing of personal data is conducted according to the subject’s consent to processing of their personal data.
7.2 Processing of personal data is necessary for accomplishing goals prescribed by the international agreement of the Russian Federation or Law and for fulfilling functions, responsibilities, and obligations entrusted with the Russian Federation Legislation to the Operator.
7.3 Processing of personal data is needed for administration of justice, execution of judicial acts, and acts of other authority or official subject to execution according to the Russian Federation Legislation.
7.4 Processing of personal data is needed to implement a contract a party of which is a beneficiary, or when a guarantor of this contract is a subject of personal data, and for concluding an agreement on the initiative of a subject of personal data, or for concluding an agreement according to which a subject of personal data will be a beneficiary or a guarantor.
7.5 Processing of personal data is needed for implementing rights and legal interests of the Operator or third parties or for accomplishing socially significant purposes if rights and liberties of a personal data subject are not violated.
7.6 Only personal data that is provided to the unlimited group of individuals by the subject or upon their request can be processed (further - publicly available personal data)
7.7 The personal data that is subject to be published or necessarily revealed is processed in accordance with the Federal Law.
8. Procedure of collecting, storing, transferring, and other types of personal data processing
Safety of personal data processed by the Operator is provided through implementing legal, organizational, and technical measures necessary for meeting requirements of current personal data protection legislation.
8.1 The operator provides security of personal data and takes all the possible measures which exclude unauthorized individuals’ access to personal data.
8.2 Under no circumstances will personal data of User be passed to third parties except for cases connected with implementation of current legislation or if a subject of personal data agreed on passing their personal data for fulfilling commitments under civil law contracts.
8.3 If any inaccuracies in personal data are identified, User can update them and inform the Operator https://indushkin.org/ to their email with a note «Personal data update».
8.4 Period of personal data processing is determined by accomplishing goals for which personal data was collected if another period is not provided with an agreement or current legislation. User can withdraw their consent to personal data processing notifying the Operator https://indushkin.org/ through email with a note «WIthdrawing of the consent for personal data processing».
8.5 All information collected by other services, including payment systems, communication means, and other service suppliers, is stored and processed by aforementioned parties (Operators) in accordance with their User agreement and Privacy Policy. Subject of personal data and/or with aforementioned documents. The Operator is not responsible for actions of third parties, including aforementioned service suppliers.
8.6 Bans on transferring personal data adopted by a subject of personal data (except for providing access) and their bans on personal data processing or conditions (except for gaining access) of processing data permitted for distributing are not valid in cases when it is in governmental, social, or other public interest, defined by the Russian Federation Legislation.
8.7 When processing personal data, the Operator guarantees personal data privacy.
8.8 The operator stores personal data with a possibility to identify a subject of personal data no longer than it’s necessary for accomplishing purposes of personal data processing if period is not defined by federal laws or an agreement the party of which is a beneficiary or guarantor.
8.9 Accomplishing purposes of personal data processing, expiration of a subject’s consent, a subject’s withdrawal of their consent, demand for termination of personal data processing, and detection of improper personal data processing can be conditions for termination of personal data processing.
9. List of actions with personal data performed by the Operator
9.1 The operator collects, records, systematizes, accumulates, stores, clarifies (updates and changes), extracts, uses, transfers (distributes, provides, accesses), depersonalizes, blocks, deletes, and destructs personal data.
9.2 The Operator processes personal data automatically with gaining information and/or providing access to the information through information or telecommunication networks or without them.
10. Cross-border personal data transfer
10.1 Before providing cross-border personal data transfer, the operator must notify authorities responsible for protection of personal data subjects’ rights of intention to implement cross-border personal data transfer. Additionally, this notification and intention to process personal data must be sent separately.
10.2 Before submitting the aforementioned application, the operator must receive required information from foreign governments, foreign individuals, and foreign legal entities which will be subject to ontain cross-border personal data.
11. Personal data privacy
11.1 The operator and other individuals, who got access to personal data, must not reveal and distribute personal data to third parties without personal data subject’s consent unless otherwise provided by federal laws.
12. Final provisions
12.1 When contacting the Operator through email https://indushkin.org/, User can get any explanations regarding their questions about processing their personal data.
12.2 This document will show any changes in personal data processing policy of the Operator. Policy is valid indefinitely until being replaced with a new version.
12.3 Current Policy is available on the Internet on the following website: https://indushkin.org/
The personal data processing policy is created in accordance with the No.152 Federal Law requirements dated by 27.07.2006 “About personal data” (hereafter - Personal Data Law) and defines the personal data processing procedure and personal data safety measures taken by BPC named after M. Gafuri (hereafter - Operator).
1.1 The Operator’s main purpose and conditions of activity performance is to follow human rights and liberties during personal data processing including personal privacy defense as well as personal and family secrets.
1.2 The Operator’s policy on personal data processing (hereafter - Policy) is applied to all the information that can be obtained about all the web-site https://indushkin.org/ visitors.
2. The Policy main terms
2.1 Automated personal data processing - personal data processing by computer equipment.
2.2. Personal data processing blocking - temporary termination of personal data processing (excluding the cases when the processing is necessary for personal data clarification)
2.3. Web-site - graphical and information material as well as computer programs and database providing their availability on the internet at //indushkin.org/.
2.4. Personal data information system - personal data in the database and information technologies and technical tools that provide personal data processing.
2.5. Personal data depersonalization - activities, as a result of which it is impossible to define the personal data ownership to the exact User or another personal data subject without additional information.
2.6. Personal data processing - any activity (operation) or number of activities with personal data conducted with the help of automatization means or without any means, including personal data collection, recording, systematization, storage, clarification (updating, modifying), extraction, usage and transmission (distribution, providing or access) depersonalization, blocking, deleting, and destruction.
2.7. Operator - state body, municipal body, legal person or physical person that perform personal data processing independently or with other parties and define personal data processing purposes, personal data content, activities (operations) with personal data.
2.8. Personal data - any information that directly or indirectly refers to the defining or defined User of the website https://indushkin.org/.
2.9. Personal data confirmed by personal data subject for distribution - personal data that is available for unlimited groups of people by giving confirmation of personal data subject for processing of the personal data that is approved for distribution in accordance with the Personal Data Law (hereafter - personal data approved for distribution).
2.10. User - any website https://indushkin.org/ visitor.
2.11. Personal data provision - activities aimed at personal data reveal to the exact person or exact group of people.
2.12. Personal data distribution - any activities aimed at revealing personal data to the uncertain group of people (personal data transmission) including publishing in social media or telecommunication networks as well as personal data provision by another way.
2.13. Cross-border data transmission - transmission of personal data to another country, foreign country authority, foreign physical or legal parties.
2.14. Personal data destruction - any activities, as a result of which personal data is irrevocably destroyed without any possibility to recover the content of personal data in the information system and/or physical carriers of personal data are destroyed.
3. Main rights and obligations of the Operator
3.1. The Operator is entitled to:
- get reliable information and/or documents with personal data from the personal data subject;
- In case the personal data subject withdraws the personal data processing consent and sends a request to stop processing personal data, the Operator is entitled to continue personal data processing without subject consent if there are grounds mentioned in the Personal Data Law;
- independently define the content and range of measures that are necessary and sufficient for obligation fulfillment considered by the Personal Data Law and the corresponding regulatory legal acts, unless otherwise provided by the Personal Data Law or by other Federal Laws;
3.2. The Operator is obliged to:
- provide the personal data subject with the information concerning their personal data processing at their request;
- organize personal data processing in accordance with the Russian Federation current legislation;
- reply to the personal data subjects or their legal representative requests in accordance with requirements of the Personal Data Law;
- provide the authorized body on the personal data subject’s right protection about the necessary information at its request within 10 days since the date of getting this request;
- publish or provide the unlimited access to the Policy of personal data processing in another way;
- take legal, organizational and technical measures to protect personal data from illegal or accidental access, destruction, modifying, blocking, copying, provision, distribution as well as other illegal activities concerning to the personal data;
- stop personal data transferring (distribution, provision and access) and personal data processing as well as destroy personal data in the manner and procedures prescribed by the Personal Data Law;
- fulfill other obligations prescribed by the Personal Data Law.
4. Main rights and obligations of the personal data subject
4.1. Personal data subjects are entitled to:
- get information concerning their personal data, unless cases prescribed by the Federal Law. Information is provided to the personal data subject by the Operator in an accessible form and it must not include the personal data of other subjects unless the cases when there are legal grounds for revealing these personal data. Range of information and procedure of obtaining are prescribed by the Personal Data Law;
- require from the Operator to clarify, block or destroy the personal data, if the personal data is not sufficient, not updated, inaccurate, illegally obtained or not necessary for declared processing purpose as well as to take legal measures in order to protect the rights;
- put forward the conditions for preliminary consent during personal data processing for promotional purpose in the goods and service market;
- revoke the personal data processing consent as well as send the request about personal data processing termination;
- appeal the illegal action or inaction of the Operator during personal data processing in an authorized body on personal data subjects right protection or in court;
- exercise other rights prescribed by the Russian Federation legislation.
4.2. Personal data subjects are obliged to:
- provide the Operator with the reliable data;
- inform the Operator about personal data clarification (updating, modifying).
4.3. Parties that transfer to the Operator unreliable data about themselves or about another personal data subject without the consent of the last one are obliged to take responsibilities according to the Russian Federation legislation.
5. Personal data processing principles
5.1. Personal data processing is performed on a legal and fair basis.
5.2. Personal data processing is limited by the exact, legal and predetermined purposes. Personal data processing that is not compatible with the data collection purpose can not be performed.
5.3. Integration of the databases containing the personal data that is processed for non-correlative purposes can not be performed.
5.4. Only personal data that corresponds to the processing purposes can be processed.
5.5. Personal data content and amount correspond to the declared processing purposes. Personal data redundancy concerning the declared processing purposes is not permitted.
5.6. It is necessary to ensure personal data accuracy, sufficiency and relevance when it is needed concerning personal data processing purpose. The Operator takes the necessary measures on unsufficient or inaccurate data deleting and clarifying and/or makes them to be taken.
5.7. Personal data storage is performed in the form that can make it possible to define the personal data subject no longer than it is required by the processing purpose, if the storage term is not prescribed by the Federal Law or contract with the personal data subject as a beneficiary or guarantor. Processed personal data is destroyed or depersonalized when the processing purpose is achieved or in case of loss of the need, unless otherwise provided by the Federal Law.
6. Personal data processing purposes
- Personal data processing purposes: informing Users by sending emails
- Personal data: Name, surname, telephone number, previous job experience,
- Legal basis: Federal law On Information, Informational Technologies, and Data Protection dated by 27.07.2006 N 149-FL
- List of actions with personal data: non-automated personal data processing; collecting, recording, systematization, storing, accumulation, elimination, depersonalization of personal data; Sending emails to with information
7. Conditions for personal data processing
7.1 Processing of personal data is conducted according to the subject’s consent to processing of their personal data.
7.2 Processing of personal data is necessary for accomplishing goals prescribed by the international agreement of the Russian Federation or Law and for fulfilling functions, responsibilities, and obligations entrusted with the Russian Federation Legislation to the Operator.
7.3 Processing of personal data is needed for administration of justice, execution of judicial acts, and acts of other authority or official subject to execution according to the Russian Federation Legislation.
7.4 Processing of personal data is needed to implement a contract a party of which is a beneficiary, or when a guarantor of this contract is a subject of personal data, and for concluding an agreement on the initiative of a subject of personal data, or for concluding an agreement according to which a subject of personal data will be a beneficiary or a guarantor.
7.5 Processing of personal data is needed for implementing rights and legal interests of the Operator or third parties or for accomplishing socially significant purposes if rights and liberties of a personal data subject are not violated.
7.6 Only personal data that is provided to the unlimited group of individuals by the subject or upon their request can be processed (further - publicly available personal data)
7.7 The personal data that is subject to be published or necessarily revealed is processed in accordance with the Federal Law.
8. Procedure of collecting, storing, transferring, and other types of personal data processing
Safety of personal data processed by the Operator is provided through implementing legal, organizational, and technical measures necessary for meeting requirements of current personal data protection legislation.
8.1 The operator provides security of personal data and takes all the possible measures which exclude unauthorized individuals’ access to personal data.
8.2 Under no circumstances will personal data of User be passed to third parties except for cases connected with implementation of current legislation or if a subject of personal data agreed on passing their personal data for fulfilling commitments under civil law contracts.
8.3 If any inaccuracies in personal data are identified, User can update them and inform the Operator https://indushkin.org/ to their email with a note «Personal data update».
8.4 Period of personal data processing is determined by accomplishing goals for which personal data was collected if another period is not provided with an agreement or current legislation. User can withdraw their consent to personal data processing notifying the Operator https://indushkin.org/ through email with a note «WIthdrawing of the consent for personal data processing».
8.5 All information collected by other services, including payment systems, communication means, and other service suppliers, is stored and processed by aforementioned parties (Operators) in accordance with their User agreement and Privacy Policy. Subject of personal data and/or with aforementioned documents. The Operator is not responsible for actions of third parties, including aforementioned service suppliers.
8.6 Bans on transferring personal data adopted by a subject of personal data (except for providing access) and their bans on personal data processing or conditions (except for gaining access) of processing data permitted for distributing are not valid in cases when it is in governmental, social, or other public interest, defined by the Russian Federation Legislation.
8.7 When processing personal data, the Operator guarantees personal data privacy.
8.8 The operator stores personal data with a possibility to identify a subject of personal data no longer than it’s necessary for accomplishing purposes of personal data processing if period is not defined by federal laws or an agreement the party of which is a beneficiary or guarantor.
8.9 Accomplishing purposes of personal data processing, expiration of a subject’s consent, a subject’s withdrawal of their consent, demand for termination of personal data processing, and detection of improper personal data processing can be conditions for termination of personal data processing.
9. List of actions with personal data performed by the Operator
9.1 The operator collects, records, systematizes, accumulates, stores, clarifies (updates and changes), extracts, uses, transfers (distributes, provides, accesses), depersonalizes, blocks, deletes, and destructs personal data.
9.2 The Operator processes personal data automatically with gaining information and/or providing access to the information through information or telecommunication networks or without them.
10. Cross-border personal data transfer
10.1 Before providing cross-border personal data transfer, the operator must notify authorities responsible for protection of personal data subjects’ rights of intention to implement cross-border personal data transfer. Additionally, this notification and intention to process personal data must be sent separately.
10.2 Before submitting the aforementioned application, the operator must receive required information from foreign governments, foreign individuals, and foreign legal entities which will be subject to ontain cross-border personal data.
11. Personal data privacy
11.1 The operator and other individuals, who got access to personal data, must not reveal and distribute personal data to third parties without personal data subject’s consent unless otherwise provided by federal laws.
12. Final provisions
12.1 When contacting the Operator through email https://indushkin.org/, User can get any explanations regarding their questions about processing their personal data.
12.2 This document will show any changes in personal data processing policy of the Operator. Policy is valid indefinitely until being replaced with a new version.
12.3 Current Policy is available on the Internet on the following website: https://indushkin.org/
