Policy on personal data processing
1. General provisions
1.1. This Policy describes the procedure for processing and protecting personal data of individuals in connection with the implementation of employment relations, the conclusion of contracts and the fulfillment of contractual obligations of CHIPS LLC, the implementation of the statutory activities of the organization, in accordance with the Federal Law “On Information, Information Technologies and Information Protection” dated
1.2. Personal data belongs to the category of confidential information and is protected from unauthorized, including accidental, access to it.
2. The processing of personal data in CHIPS LLC is carried out on the basis of the following principles:
availability of legal grounds for processing personal data;
limited processing of personal data to achieve specific, predetermined and legitimate goals;
preventing the consolidation of databases containing personal data, the processing of which is carried out for incompatible purposes;
processing only those personal data that meet the purposes of their processing;
compliance of the content and volume (avoidance of redundancy) of the processed personal data with the stated purposes of processing;
ensuring the accuracy of personal data, their sufficiency, and, if necessary, their relevance to the purposes of personal data processing;
personal data is stored in a form that makes it possible to identify the subject of personal data, no longer than the purposes of personal data processing require, unless the period of personal data storage is established by the legislation of the Russian Federation, an agreement to which the personal data subject is a party, beneficiary or guarantor.
3. Personal data processed
3.1. In order to comply with the requirements of the legislation of the Russian Federation in the field of personnel accounting, including assistance to employees in finding employment, obtaining education and promotion, ensuring the personal safety of employees, monitoring the quantity and quality of work performed and ensuring the safety of property, payment of wages and other payments due to the employee in accordance with the legislation of the Russian Federation or the contract, personal data of employees and dismissed employees are processed for the implementation of tax and social deductions provided for by the legislation of the Russian Federation.:
1) Last name, first name, patronymic, gender;
2) Date and place of birth;
3) Information about citizenship;
4) Information about education;
5) Profession, position;
6) Marital status, family composition;
7) Passport data;
8) Address, phone,
9) Information about military registration;
10) Information about social status;
11) INN, SNILS;
12) Bank account details;
13)
The basis for processing personal data is the Labor Code of the Russian Federation; the Tax Code of the Russian Federation; Federal Law No.
Personal data is processed using automation tools or without the use of such tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (granting access), blocking, deletion, destruction of personal data.
Location of the database of information containing personal data and information about the organization responsible for data storage: PF SKB Kontur JSC (TIN 6663003127, Yekaterinburg, Narodnaya Volya str., 19a) accounting/ tax/ personnel accounting system, as well as document exchange through EDI.
The period of processing personal data is limited to achieving the stated goal. The storage period of personal data is 50 years of the EPA from the date of termination of the employment relationship. The destruction of personal data is carried out within the time limits established by law after the expiration of the storage period or upon the occurrence of other legal grounds.
3.2. In order to carry out personnel selection, including selection for vacant positions; maintaining a personnel reserve; and employing those who have successfully been selected to fill vacant positions, personal data of applicants (applicants) for vacant positions are processed.:
1) Last name, first name, patronymic;
2) Occupation (profession, portfolio);
3) Date of birth/ age, information about education, citizenship, previous jobs, awards;
4) Address, phone, Email address, Messenger;
The basis for processing personal data is the Labor Code of the Russian Federation; Consent of the subject.
Personal data is processed using automation tools or without the use of such tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (granting access), blocking, deletion, destruction of personal data.
Location of the database of information containing personal data and information about the organization responsible for data storage: JSC IOT (TIN 7731399513, address: 121205 Moscow, Skolkovo Innovation Center ter, Bolshoy
The period of processing personal data is limited to achieving the stated goal. The retention period for personal data of applicants included in the personnel reserve is 5 years (if included in the personnel reserve) from the date of the relevant decision. The destruction of personal data is carried out within the time limits established by law after the expiration of the storage period, upon receipt of the withdrawal of the subject’s consent, or upon the occurrence of other legal grounds.
3.3. For the purpose of carrying out statutory activities, including the conclusion, execution and termination of civil law contracts; provision of paid and free services to personal data subjects; for the purpose of fulfilling the requirements of the legislation of the Russian Federation in the field of tax and accounting, including settlements with personal data subjects; registration of primary accounting documents; manifestation of due diligence processes the personal data of counterparties and clients (sole proprietors and
1) Last name, first name, patronymic;
3) Date and place of birth;
4) Address;
5) Passport data;
6) INN, OGRN;
7) Current account number
8) Profession
9) Contact information (phone,
The basis for processing personal data is the Tax Code of the Russian Federation; Federal Law No.
Personal data is processed using automation tools or without the use of such tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (granting access), blocking, deletion, destruction of personal data.
Location of the database of information containing personal data and information about the organization responsible for data storage: PF SKB Kontur JSC (TIN 6663003127, Yekaterinburg, Narodnaya Volya str., 19a) accounting/ tax/ personnel accounting system, as well as document exchange through EDI;
The period of processing personal data is limited to achieving the stated goal. The storage period of personal data is 5 years from the date of registration of the primary accounting document. The destruction of personal data is carried out within the time limits established by law after the expiration of the storage period or upon the occurrence of other legal grounds.
3.4. For the purpose of carrying out statutory activities, including the conclusion, execution and termination of civil law contracts; providing paid and free services to personal data subjects; improving the quality of services provided; communicating with personal data subjects to send notifications, information and requests related to the activities of CHIPS LLC, as well as processing appeals, applications, applications and other communications from personal data subjects; promotion of goods, works, and services on the market through direct contacts with personal data subjects, personal data of representatives of counterparties is processed:
1) Last name, first name, patronymic;
2) Name of the organization, position;
3) Contact information (phone,
The basis for the processing of personal data is a Contract; The consent of the subject. The processing of personal data is necessary for the performance of an agreement to which the personal data subject is a party or beneficiary or guarantor, as well as for the conclusion of an agreement on the initiative of the personal data subject or an agreement under which the personal data subject will be the beneficiary or guarantor.
Personal data is processed using automation tools or without the use of such tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (granting access), blocking, deletion, destruction of personal data.
Location of the database of information containing personal data and information about the organization responsible for data storage: JSC “IOT” (TIN 7731399513, address: 121205 Moscow, ter Skolkovo innovation Center, Bolshoy
The period of processing personal data is limited to achieving the stated goal. In case of loss of the need to achieve the stated goal, personal data must be destroyed. The destruction of personal data is carried out within the time limits established by law upon receipt of the withdrawal of the consent of the subject or upon the occurrence of other legal grounds.
3.5. In order to collect and analyze information about the performance and use of the site, as well as to improve and customize the provision of information and functionality of the site; the data of site visitors is processed:
1) Cookies of website visitors;
2) Metric system data (information about the operating system, browser, device location; device type, screen resolution; source of access to the site; actions on the site; ip address; identifier of site visitors in the metric system).
The basis for processing personal data is the Consent of the subject on the website.
Personal data is processed using automation tools, including collection, recording, systematization, accumulation, storage, extraction, use, transfer (granting access), blocking, deletion, destruction of personal data.
Location of the database of information containing personal data and information about the organization responsible for data storage: YANDEX LLC (TIN 7736207543, address: 16 Lva Tolstogo str., Moscow, 119021, Russia) metric data collection system.
The period of processing personal data is limited to achieving the stated goal. In case of loss of the need to achieve the stated goal, personal data must be destroyed. The destruction of personal data is carried out within the time limits established by law upon receipt of the withdrawal of the consent of the subject or upon the occurrence of other legal grounds.
4. Collection of personal data
4.1. Personal data is collected directly from the personal data subject himself. If the provision of personal data and/or consent to the processing of personal data by the operator is mandatory in accordance with the legislation of the Russian Federation, the legal consequences of refusal to provide such data and/or consent to their processing are explained to the personal data subject.
4.2. Obtaining personal data from other persons is possible only if there are legitimate grounds. When receiving personal data from other persons, except in cases when personal data was obtained as part of an order for processing personal data or when consent was obtained by the transferring party, it is necessary to notify the subject about this.
4.3. When collecting personal data, including through the Internet information and telecommunications network, recording, systematization, accumulation, storage, clarification (updating, modification), extraction of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation is ensured.
5. Processing of personal data
5.1. When processing personal data in CHIPS LLC, the following actions are performed: recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer, blocking, deletion, destruction.
5.2. The processing of personal data may be entrusted to a third party with the consent of the personal data subject or on the grounds provided for by the legislation of the Russian Federation. A person who processes personal data on behalf of a subject is not required to obtain the subject’s consent to process his personal data.
5.3. In case of confirmation of the inaccuracy of personal data, such personal data must be updated within seven working days.
5.4. If the fact of illegality of personal data processing is revealed, such personal data must be destroyed within three days.
6. Storage of personal data
6.1. Personal data is stored in a form that makes it possible to identify the subject of personal data for no longer than the purposes of personal data processing require, unless the period of personal data storage is established by the legislation of the Russian Federation or by an agreement to which the subject of personal data is a party.
6.2. Personal data is stored subject to ensuring their confidentiality.
7. Transfer of personal data
7.1. The transfer of personal data to a third party is carried out only with the consent of the personal data subject or in cases expressly provided for by the legislation of the Russian Federation.
7.2. The transfer of personal data to a state authority, a local government authority, a security and law enforcement agency, a state institution and a foundation, as well as to another authorized body is permitted on the grounds provided for by the legislation of the Russian Federation.
7.3. Disclosure of personal data to a third party without the consent of the relevant subject is not allowed, except in cases where it is necessary to protect the life, health or other vital interests of the personal data subject.
7.4. Disclosure of personal data to a third party for commercial purposes without the consent of the relevant subject is prohibited. The processing of personal data for the purpose of promoting goods, works, and services on the market, as well as for political campaigning purposes, is carried out only with the prior consent of the subject.
7.5. There is no
7.6. Subjects of personal data may specify their preferred messenger for communication. The operator uses the specified messenger exclusively for sending informational messages and clarifying questions. Personal data is not transmitted through messengers, and their processing is carried out only within the information system located on the territory of the Russian Federation. The operator does not recommend that personal data subjects transmit additional information in messengers that are not registered in the territory of the Russian Federation, including Telegram. If such communication channels are used on the initiative of the personal data subject, the responsibility for possible risks lies with him.
8. Conditions and procedure for termination of personal data processing
8.1. If the purpose of personal data processing is achieved, the processing of such personal data must be terminated, and the personal data must be destroyed within thirty days from the date of achievement of the purpose of personal data processing, unless otherwise provided by an agreement to which the personal data subject is a party, beneficiary or guarantor, or by another agreement between the operator and the personal data subject. if the operator is not entitled to process personal data without the consent of the personal data subject on the grounds of, provided for by the legislation of the Russian Federation.
8.2. If the subject withdraws consent to the processing of his personal data, the processing of such personal data must be terminated, and if the storage of personal data is no longer required for the purposes of personal data processing, such personal data must be destroyed within thirty days from the date of receipt of the said withdrawal, unless otherwise provided by the contract, the party to which, the beneficiary or the guarantor of which is the subject of personal data, by any other agreement between the operator and the personal data subject, or if the operator is not entitled to process personal data without the consent of the personal data subject on the grounds provided for by the legislation of the Russian Federation.
8.3. In case of detection of unlawful processing of personal data, the processing of such personal data must be terminated within three working days. If it is impossible to ensure the legality of the processing of personal data, the personal data must be destroyed within ten working days from the date of detection of the unlawful processing.
8.4. In case of termination of the activity of CHIPS LLC, the processing of personal data must be terminated on the day of termination of the company’s activities. Unless another term is established by the legislation of the Russian Federation.
8.5. If it is not possible to destroy personal data within the period specified in paragraphs 8.1–8.4, such personal data must be blocked and destroyed within a period of no more than six months, unless another period is established by the legislation of the Russian Federation.
9. Access to personal data
9.1. The right of access to personal data processed at CHIPS LLC is granted to:
The Chief Operating Officer of CHIPS LLC; employees of CHIPS LLC, for whom the processing of personal data is necessary in connection with the performance of their official duties.
9.2. Access of employees to personal data is carried out by the Chief Operating Officer by a separate internal act.
10. Procedure for interaction with subjects of personal data
10.1. Any subject whose personal data is processed at CHIPS LLC has the right to access his/her personal data, including the following information:
confirmation of the processing of personal data;
legal grounds and purposes of personal data processing;
purposes and methods of personal data processing used;
the name and location of the operator, information about persons (with the exception of the operator’s employees) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the operator or on the basis of the legislation of the Russian Federation;
terms of personal data processing and storage periods;
information about the ways in which the operator fulfills the duties established by Article 18.1 of Federal Law No.
10.2. CHIPS LLC provides the information specified in clause 12.1 within ten business days from the date of receipt of the request from the subject or his legal representative in the form in which the relevant request was received (unless otherwise specified in the request). The response to the request should not contain personal data related to other subjects of personal data, except in cases where there are legitimate grounds for the disclosure of such personal data. The deadline for responding to a request may be extended, but not by more than five working days if the operator sends a reasoned notification to the subject, indicating the reasons for extending the deadline for providing the requested information.
10.3. The request of the subject or his representative must contain:
the number of the main identity document of the subject or its representative;
information about the date of issue of the specified document and the issuing authority;
information confirming the subject’s participation in the relationship with CHIPS LLC (contract number, date of conclusion of the contract, or other information), or information otherwise confirming the processing of personal data by CHIPS LLC;
signature of the personal data subject or his representative.
10.4. The subject has the right to request clarification of his personal data, their blocking or destruction if the personal data being processed is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the purpose of processing stated by CHIPS LLC.
10.5. The subject has the right to withdraw his consent to the processing of personal data, if such consent has been given. The withdrawal of consent is sent by the subject to CHIPS LLC.
11. Personal Data Protection:
11.1 Local acts on personal data processing have been developed: regulations on personal data processing. Internal control is carried out over the compliance of personal data processing with the Federal Law and the regulatory legal acts adopted in accordance with it, as well as the requirements for personal data protection. Employees who directly process personal data are familiar with the provisions of the legislation of the Russian Federation on personal data, including the requirements for personal data protection, documents defining the organization’s policy on personal data processing, and local acts on personal data processing. A document defining the personal data processing policy has been published on the organization’s website. Personal data is available to a strictly defined range of employees.
11.2. Security tools: electronic digital signature,
11.3. Personal data storage locations have been identified. The list of persons who process personal data and have access to it has been determined. Separate storage of personal data is provided, the processing of which is carried out for various purposes.
11.4. For violation of the requirements established by the legislation of the Russian Federation, the Regulation on the Processing and Protection of Personal Data and other local acts of CHIPSA LLC, employees and other persons who have gained access to personal data bear disciplinary, administrative, civil and criminal liability in accordance with the Federal Laws of the Russian Federation.
11.5. In case of detection of the fact of unlawful or accidental transfer (provision, distribution, access) of personal data, resulting in violation of the rights of personal data subjects, CHIPS LLC notifies Roskomnadzor.:
within 24 hours of the identification of the incident, the alleged causes that led to the violation of the rights of personal data subjects, and the alleged harm caused to the rights of personal data subjects, the measures taken to eliminate the consequences of the incident, including information about the person authorized to interact on issues related to the identified incident.;
within 72 hours from the moment of revealing the results of the internal investigation of the incident, as well as the persons whose actions caused the incident (if any).
12. This Policy provides unrestricted access to all interested parties, including subjects of personal data and public authorities exercising control and supervision in the field of personal data processing. The Operator has the right to make changes to this Privacy Policy without the User’s consent. The new version of the Policy comes into force from the moment it is posted on the Operator’s official website.
Banking details and contact information
Name: LLC “CHIPS”
TIN: 2466279665, CHECKPOINT: 246601001
Address: Russia, 660043, Krasnoyarsk, Chernyshevsky St. 116 sq. 194
Email address: info@chipsa.ru
Phone:
