IP Moiseenko Andrey Alexeevich
 

10 July 2020

POLITICS
of personal data processing

5.2. The composition of the personal data of each of the categories of subjects listed in clause 5.1 of this Regulation is determined in accordance with the regulatory documents listed in section 3 of this Regulation, as well as the regulatory documents of Andrei Alexeevich Moiseenko, issued to ensure their implementation.

5.3. In cases stipulated by applicable law, the personal data subject decides to provide his personal data to the Operator (IP Moiseenko Andrey Alexeevich) and agrees to their processing freely, by his own will and in his interests.

5.4. The operator (IP Moiseenko Andrei Alexeevich) ensures that the content and amount of personal data being processed are consistent with the stated processing goals and, if necessary, takes measures to eliminate their redundancy with respect to the declared processing goals.

5.5. The processing of special categories of personal data relating to racial, ethnicity, political views, religious or philosophical beliefs, intimate life is not carried out in the IP Moiseenko Andrey Alexeevich.

6. PERSONAL DATA PROCESSING

6.1. The processing of personal data in the IP Moiseenko Andrey Alexeevich is carried out in the following ways:
- manual processing of personal data;
- automated processing of personal data with the transfer of information received through information and telecommunication networks or without it;
- mixed processing of personal data. 

7. PROTECTION OF PROTECTION OF PERSONAL DATA AT THEIR PROCESSING BY THE OPERATOR

7.1. The operator (IP Moiseenko Andrey Alexeevich) takes the necessary and sufficient measures to ensure the fulfillment of the obligations stipulated by the Federal Law No. 152-ФЗ dated July 27, 2006 “On Personal Data” and regulatory legal acts adopted in accordance with it. The operator independently determines the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations stipulated by the Federal Law No. 152-ФЗ dated July 27, 2006 "On Personal Data", Government Decision No. 687 dated September 15, 2008 "On approval of the Regulation on features of the processing of personal data carried out without the use of automation ", Government Decision No. 1119 of November 1, 2012" On approval of the requirements for the protection of personal data during their processing in personal data information systems ", Order of the FSTEC No. 21 of February 18, 2013 "On approval of the composition and content of organizational and technical measures to ensure the security of personal data when they are processed in personal data information systems" and other regulatory legal acts, unless otherwise provided by federal laws.

Such measures include:

- appointment by the Operator of the person responsible for organizing the processing of personal data;

- publication by the Operator of documents defining the operator’s policy regarding the processing of personal data, local acts on the processing of personal data, as well as local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation, eliminating the consequences of such violations;

- application of legal, organizational and technical measures to ensure the security of personal data;

- internal control and (or) audit of the conformity of personal data processing to the Federal Law No. 152-ФЗ dated July 27, 2006 “On Personal Data” and regulatory legal acts adopted in accordance with it, requirements for the protection of personal data, and the Operator’s policy regarding processing of personal data, local regulatory acts of the Operator;

- determination of the assessment of harm that may be caused to personal data subjects in case of violation of Federal Law No. 152-ФЗ dated July 27, 2006 “On Personal Data”, the ratio of the said harm to the measures taken by the operator to ensure the fulfillment of obligations stipulated by the Federal Law No. 152-ФЗ dated July 27, 2006 "On Personal Data";

- familiarization of the Operator’s employees directly processing personal data with the provisions of the legislation of the Russian Federation on personal data, including requirements for the protection of personal data, documents defining the Operator’s policy regarding the processing of personal data, local acts on the processing of personal data, and (or ) training of these workers.

7.2. When processing personal data, the operator takes the necessary legal, organizational and technical measures or ensures their adoption to protect personal data from unlawful or accidental access to it, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in regarding personal data.

8. PERSONAL DATA SUBJECT RIGHT TO ACCESS ITS PERSONAL DATA

8.1. The personal data subject has the right to demand from the Operator (IP Moiseenko Andrey Alexeevich) to clarify his personal data, block or destroy it if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, and also accept Law measures to protect their rights.

8.2. Information is provided to the personal data subject or his representative by the Operator upon request or upon receipt of a request from the personal data subject or his representative. The request must contain the number of the main document proving the identity of the subject of personal data or his representative, information on the date of issue of the said document and the issuing authority, information confirming the participation of the subject of personal data in relations with the Operator (contract number, date of conclusion of the contract, word mark and (or) other information), or information that otherwise confirms the fact that the Operator has processed personal data, the signature of the personal data subject or his representative. The request can be sent in the form of an electronic document and signed by electronic signature in accordance with the legislation of the Russian Federation.

8.3. The operator has the right to refuse the subject of personal data to perform a second request. Such a refusal must be motivated. The obligation to provide evidence of the validity of the refusal to fulfill the repeated request lies with the Operator.

8.4. The personal data subject has the right to receive information regarding the processing of his personal data, including containing:

- confirmation of the fact of the processing of personal data by the Operator;

- legal grounds and goals for the processing of personal data;

- goals and methods used by the Operator to process personal data;

- the name and location of the Operator, information about persons (except for the employees of the Operator) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Operator or on the basis of federal law;

- processed personal data relating to the relevant subject of personal data, the source of their receipt, unless otherwise provided for by federal law;

- the processing time for personal data, including the storage period;

- the procedure for the exercise by the subject of personal data of the rights provided for by the Federal Law No. 152-ФЗ dated July 27, 2006 "On Personal Data";

- information on completed or proposed cross-border data transfer;

- name or surname, name, patronymic and address of the person who processes personal data on behalf of the Operator, if processing is or will be entrusted to such a person.

8.5. If the personal data subject believes that the operator is processing his personal data in violation of the requirements of Federal Law No. 152-FZ of July 27, 2006 on Personal Data or otherwise violates his rights and freedoms, the personal data subject has the right to appeal against actions or inaction operator to a body authorized to protect the rights of personal data subjects, or in a judicial proceeding.

8.6. The personal data subject has the right to protect his rights and legitimate interests, including compensation for losses and (or) compensation for non-pecuniary damage in court.

9. FINAL PROVISIONS

9.1. This Policy and its amendments are approved by the individual entrepreneur Moiseenko Andrey Alexeevich and introduced by order.

9.2. All employees (if any) should be familiarized with the text of this Policy and amendments to it under the signature.

9.3. I control the implementation of this Policy.