Policy on personal data processing
Policy on Personal Data Processing 1. General Provisions
1.1. This Policy describes the procedure for processing and protecting personal data of individuals in connection with the implementation of labor relations, the conclusion of contracts, and the fulfillment of contractual obligations by LLC “CHIPSA,” as well as the organization’s statutory activities, in accordance with Federal Law “On Information, Information Technologies, and Information Protection” dated 27.07.2006 No. 149-FZ. 1.1. This Policy describes the procedure for processing and protecting personal data of individuals in connection with the implementation of labor relations, the conclusion of contracts, and the fulfillment of contractual obligations by LLC “CHIPSA,” as well as the conduct of the organization’s statutory activities, in accordance with the Federal Law “On Information, Information Technologies, and Information Protection” dated 27.07.2006 No. 149-FZ. 1.2. Personal data is classified as confidential information and is protected from unauthorized, including accidental, access. 1.2. Personal data falls under the category of confidential information and is protected from unauthorized, including accidental, access to it.
2. The processing of personal data at LLC “CHIPSA” is carried out based on the following principles:
the presence of legal grounds for processing personal data;
the limitation of personal data processing to achieving specific, predetermined, and lawful purposes;
the prohibition of combining databases containing personal data processed for incompatible purposes;
the processing of only those personal data that correspond to the purposes of their processing;
the compliance of the content and volume (the prohibition of excess) of processed personal data with the stated purposes of processing;
the ensuring of the accuracy of personal data, their sufficiency, and, where necessary, their relevance to the purposes of personal data processing;
The storage of personal data is carried out in a form that allows for the identification of the subject of personal data, no longer than is required for the purposes of processing personal data, if the storage period for personal data is not established by the legislation of the Russian Federation, the contract of which the subject of personal data is a party, beneficiary, or guarantor. 3. Processed personal data
3.1. For the purpose of complying with the requirements of the legislation of the Russian Federation in the field of personnel accounting, including assisting employees in employment, obtaining education, and career advancement, ensuring the personal safety of employees, controlling the quantity and quality of work performed, and ensuring the safety of property, paying wages and other amounts due to the employee in accordance with the legislation of the Russian Federation or the payment agreement, and making tax and social contributions provided for by the legislation of the Russian Federation, personal data is processed. 3.1. In order to comply with the requirements of the legislation of the Russian Federation in the field of personnel accounting, including assisting employees in employment, obtaining education, and career advancement, ensuring the personal safety of employees, controlling the quantity and quality of work performed, ensuring the safety of property, paying wages and other amounts due to employees in accordance with the legislation of the Russian Federation or the contract, and making tax and social contributions provided for by the legislation of the Russian Federation, personal data is processed. 3.1.1. Employees, former employees: 3.1.1. Employees, dismissed employees:
1) Last name, first name, patronymic, gender;
2) Date and place of birth;
3) Information about citizenship;
4) Information about education;
5) Profession, qualification, position;
6) Marital status, family composition;
7) Passport details;
8) Address, phone number, email address;
9) Information about military registration;
10) Information about awards, incentives, honorary titles;
11) Information about social status;
12) Data on pension and medical insurance, TIN, SNILS;
13) Income, amounts of contributions, bank account details;
14) Information about vacations.
The processing of information about the health status of employees is carried out in specific cases in accordance with the legislation of the Russian Federation on state social assistance, labor legislation, and pension legislation of the Russian Federation.
The basis for processing personal data is the Labor Code of the Russian Federation; the Tax Code of the Russian Federation; Federal Law No. 27-FZ of April 1, 1996, “On Individual (Personalized) Accounting in the System of Mandatory Pension Insurance”; Federal Law No. 402-FZ of December 6, 2011, “On Accounting”; Federal Law No. 53-FZ of March 28, 1998, “On Military Duty and Military Service”; Contract; Consent. Context: Contract; Consent. Text to translate:
The processing of personal data is carried out using automation tools or without the use of such tools. Context: The processing of personal data is carried out using automation tools or without such tools.
Text to translate:
The processing period for personal data is limited to achieving the stated purpose. The storage period for personal data is 50 years from the date of termination of employment. The destruction of personal data is carried out within the timeframes established by law after the storage period has expired or upon the occurrence of other legal grounds. Context: The destruction of personal data is carried out within the timeframes established by law after the storage period has expired or upon the occurrence of other legal grounds.
3.2. For the purpose of personnel selection, including the selection for vacant positions; maintaining a personnel reserve; employment of those who have successfully passed the selection for vacant positions, the personal data of candidates (job seekers) for vacant positions are processed: Text to translate:
3.2. For the purpose of personnel selection, including the selection for filling vacant positions; maintaining a personnel reserve; and employing those who have successfully passed the selection for filling vacant positions, the personal data of candidates (applicants) for filling vacant positions are processed:
1) Last name, first name, patronymic;
2) Type of activity (profession, qualifications, portfolio);
3) Information included in the applicant’s resume (date of birth/age, education details, citizenship, previous workplaces, awards);
4) address, phone, email address, messenger;
The basis for processing personal data is the Labor Code of the Russian Federation; The consent of the subject.
processing of personal data is carried out using automation means or without the use of such means.
The process of processing personal data is limited to the achievement of the declared goal. The shelf life of the personal data of the applicants included in the personnel reserve is 5 years (in case of included in the personnel reserve) from the moment the corresponding decision is made. The destruction of personal data is carried out within the deadlines established by law upon the expiration of the period of their storage, upon receipt of the consent of the subject or upon the occurrence of other legal grounds.
3.3. In order to fulfill the requirements of the legislation of the Russian Federation in the field of tax and accounting, including calculations with personal data subjects; registration of primary accounting documents; Manifestations of proper examination are processed by personal data of counterparties and their representatives:
1) surname, name, patronymic;
2) organization, position;
3) date, place of birth;
4) passport data;
6) TIN, OGRN (for IP); messenger).
The basis for processing personal data is the Tax Code of the Russian Federation; Federal Law of 06.12.2011 No. 402-ФЗ “On Accounting”; Contract; Consent of the subject.
Personal data processing is carried out using automation tools or without the use of such means.
The process of processing personal data is limited to achieving the declared goal. The shelf life of personal data is 5 years from the date of registration of the primary accounting document. The destruction of personal data is carried out within the deadlines established by law at the expiration of the period of their storage or upon the occurrence of other legal grounds.
3.4.With the aim of carrying out the statutory activity, including the conclusion, execution and termination of civil law contracts; the provision of paid and free services to personal data subjects; improving the quality of the services provided; communication with personal data subjects for sending notifications, information and requests related to the activities of Chips LLC, as well as processing appeals, applications, applications and other messages of personal data subjects; providing personal data to the subjects of access to the use of the Internet site and its functionality; promotion of goods, works, services in the market by implementing direct contacts with personal data subjects; Conducting statistical and other studies based on impersonal personal data processes personal data of customers and their representatives:
1) Surname, name, patronymic;
2) name of the organization, position;
3) Contact information (phone, e-mail, messenger);
4) COOKIE files; (Information about the operating system, browser, location of the device; type of device, screen resolution; source of transition to the site; actions on the site; IP address; identifier of site visitors in the metric system).
The basis for processing personal data is the consent of the subject.
Personal data processing is carried out using or without the use of such Means.
The term of processing of personal data is limited to the achievement of the declared goal.In case of loss of need to achieve the declared goal, personal must be destroyed. The destruction of personal data is carried out within the terms established by law upon receipt of the consent of the subject of the subject or upon the occurrence of other legal grounds.
4. Collection of personal data
4.1. Personal data is collected directly at the subject of personal data. If the provision of personal data and (or) the receipt by the operator of consent to the processing of personal data are mandatory in accordance with the legislation of the Russian Federation, the subject of personal data explains the legal consequences of the refusal to provide such data and (or) consent to their processing.
4.2. Obtaining personal data for other persons is possible only if there are legal grounds. Upon receipt of personal data from other persons, with the exception of cases when personal data was obtained as part of the instructions for the processing of personal data or when the consent is received by the transmitting party, it is necessary to notify the subject of this.
4.3. When collecting personal data, including through the Internet information and telecommunication network, record, systematization, accumulation, storage, clarification (update, change), extracting personal data of citizens of the Russian Federation using databases located in the Russian Federation.
5 are ensured. Personal data processing
5.1. When processing personal data at Chips LLC, the following actions are carried out: recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transmission, blocking, removal, destruction.
5.2. The processing of personal data may be entrusted to a third party with the consent of the subject of personal data or on the grounds provided for by the legislation of the Russian Federation. A person who processes personal data on behalf of, is not obliged to receive the subject of the subject to process his personal data.
5.3. In case of confirmation of the fact of inaccuracy of personal data, such personal data must be updated within seven business days.
5.4. In case of identification of the illegality of the processing of personal data, such personal data must be destroyed within three days.
6.Storage of personal data
6.1. The storage of personal data is carried out in a form that allows you to determine the subject of personal data is no longer than this requires the purpose of processing personal data, if the storage period of personal data is not established by the legislation of the Russian Federation or an agreement whose side is the subject of personal data.
6.2. Personal data is stored taking into account the regime of their confidentiality.
6.3. Personal data are transferred to archival storage in accordance with the legislation of the Russian Federation on archival affairs, destroyed or depersonalized upon achievement of processing goals or in case of loss of need to achieve these goals, unless otherwise provided by the legislation of the Russian Federation or an agreement whose party is the subject of personal data.
7. Personal data transmission
7.1. The transfer of personal data to a third party is carried out only with the consent of the subject of personal data or in cases expressly provided for by the legislation of the Russian Federation.
7.2. The transfer of personal data to the state power to the local government, the security body and law and order, the state institution and the fund, as well as to another authorized body, is allowed on the grounds provided for by the legislation of the Russian Federation.
7.3.The disclosure of personal data to a third party is not allowed without the consent of the corresponding subject, unless it is necessary to protect life, health or other vital interests of the subject of personal data.
7.4. The disclosure of personal data to a third party for commercial purposes without the consent of the corresponding entity is prohibited. The processing of personal data in order to promote goods, works, services in the market, as well as for the purposes of political campaigning, is carried out only if preliminary consent to this subject.
7.5. A cross -border transfer of personal data in the territory of foreign states is not carried out.
7.6. Personal data subjects can indicate the preferred messenger for communication. The operator uses the specified messenger exclusively to send information messages and clarifying questions. The transfer of personal data through instant messengers is not carried out, their processing is carried out only within the information system located in the Russian Federation. The operator does not recommend subjects of personal data to transmit additional information in messengers not registered in the Russian Federation, including Telegram. In the case of using such communication channels on the initiative of the subject of personal data, the responsibility for possible risks lies with it.
8. Conditions and procedure for terminating the processing of personal data
8.1. If the goal of processing personal data is achieved, the processing of such personal data should be terminated, and personal data should be destroyed within thirty days from the date of achieving the goal of processing personal data, unless otherwise provided by an agreement, the party of which, the beneficiary or guarantor under which the subject of personal data is, other agreement between the operator and the subject of personal data, or if the operator does not have to process personal data without the consent of the subject personal data on the basis provided for by the legislation of the Russian Federation.
8.2. If the subject of consent to the processing of his personal data, the processing of such personal data should be terminated, and if the maintenance of personal data is no longer required for the purposes of processing personal data, such personal data must be destroyed within thirty days from the date of receipt of the specified review, unless otherwise provided by the agreement, the side of which, the beneficiary or guarantor under which the subject of personal data is, other agreement between the operator. and the subject of personal data or if the operator does not have the right to process personal data without the consent of the subject of personal data on the grounds provided for by the legislation of the Russian Federation.
8.3. In case of unlawful processing of personal data, the processing of such personal data should be discontinued within three business days.If it is impossible to ensure the legitimacy of the processing of personal data, personal data must be destroyed within ten working days from the date of identification of unlawful processing.
8.4. In the absence of the possibility of destroying personal data during the period specified in paragraphs 10.1-10.3, the blocking of such personal data and their destruction within a period of not more than six months should be ensured, unless otherwise provided by the legislation of the Russian Federation.
9. Access to personal data
9.1. The right to access the personal data processed at Chips LLC have:
Operational Director of Chips LLC; Employees of Chips LLC, for whom the processing of personal data is necessary in connection with the performance of their official duties.
9.2. The admission of employees to personal data is carried out by the operating director with a separate internal act.
10. The procedure for interacting with personal data
10.1.Any subject whose personal data is processed at Chips LLC has the right to access their personal data, including the following information:
confirmation of the fact of processing personal data;
legal grounds and purpose of personal data processing;
goals and used methods of processing personal data;
name and location of the operator, information about persons (with the operator employees) that are) that are They have access to personal data or which personal data may be disclosed on the basis of an agreement with the operator or on the basis of the legislation of the Russian Federation;
terms of processing personal data and storage terms;
Information about the methods of fulfilling the duties established by Article 18.1 of the Federal Law No. 152-ФЗ “On Personal Data”.
10.2. Chips LLC provides information specified in clause 12.1, within ten working days from the date of receipt of the request of the subject or his legal representative in the form in which the corresponding request was received (unless otherwise specified in the request). The response to the request should not contain personal data related to other subjects of personal data, with the exception of cases if there are legal grounds for disclosing such personal data. The response period for the request may be extended, but not more than five working days if the operator sends to the subject of a reasoned notice indicating the reasons for the extension of the deadline for the provision of requested information.
10.3. The request of the subject or his representative must contain:
the number of the main document certifying the identity of the subject or his representative;
information on the date of issuing the specified document and issuing it to the body;
information confirming the participation of the subject in relations with LLC Chips (the contract number, date of conclusion of the contract or other information), or information confirming the processing of personal data of the LLC “Chips”;
signature of the subject of personal data or its representative.
10.4. The subject has the right to demand the clarification of his personal data, their blocking or destruction if the processed personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the processing targets declared by Chips.
10.5. The subject has the right to withdraw his consent to the processing of personal data, if this was given. The consent of the consent is sent by the subject to Chips LLC.
11. Personal data protection:
11.1. When processing personal data, the necessary legal, organizational and technical measures are taken to protect personal data from unlawful or accidental access to them, destroying, changing, blocking, copying, providing, distributing personal data, as well as from other unlawful actions in relation to personal data.
11.2.For violation of the requirements established by the legislation of the Russian Federation, the Regulation on the processing and protection of personal data and other local acts of Chips LLC, employees and other persons who gained access to personal data carry out disciplinary, administrative, civil and criminal liability in accordance with the federal laws of the Russian Federation.
11.3. In case of identification of an unlawful or random transmission (provision, distribution, access) of personal data that entails a violation of the rights of personal data subjects, Chipsa LLC notifies Roskomnadzor:
within 24 hours from the moment the incident is detected, about the alleged reasons that have caused violation of the rights of personal data, and the alleged harm caused to the rights of personal data subjects, On the measures taken to eliminate the consequences of the corresponding incident, including information about the person authorized to interact on issues related to the identified incident;
within 72 hours from the date of the results of the internal investigation of the incident, as well as on persons whose actions caused the incident (if any).
12. This policy provides unlimited access to all interested parties, including personal data and state authorities, monitoring and supervision in the field of personal data processing. The operator has the right to amend this Privacy Policy without the consent of the user. The new version of the policy comes into force from the moment of its posting on the official website of the operator.
details and contact information
Name: Chipsi LLC
TIN: 2466279665, CPP: 246601001
Address: Russia, 660043, Krasnoyarsk, ul. Chernyshevsky 116 square meters. 194
Email: (Hidden) +7 (495) 532-28-54
