PERSONAL DATA PROCESSING POLICY
1. General provisions
1.1. The personal data processing Policy at IP Kalnina Svetlana Vladimirovna, TIN 504507400600, OGRNIP 321774600749910, (hereinafter referred to as the Policy) defines the basic principles, goals, conditions and methods of personal data processing, lists of subjects and processed on the site https://i-like.world / (hereinafter referred to as the Operator) of personal data, functions in the processing of personal data, the rights of subjects personal data, as well as the personal data protection requirements implemented by the Operator.
1.2. The Policy has been developed taking into account the requirements of the Constitution of the Russian Federation, legislative and other regulatory legal acts of the Russian Federation in the field of personal data.
1.3. The provisions of the Policy serve as the basis for the development of local regulations governing the processing of personal data of the Operator's employees and other subjects of personal data.
1.4. In compliance with the requirements of Part 2 of Article 18.1 of the Federal Law of 27.07.2006 No. 152-FZ "On Personal Data", the Policy is published in free access on the Internet on the Operator's website.
2. Legislative and other regulatory legal acts of the Russian Federation, in accordance with which the Policy is determined
2.1. The Company's personal data processing policy is determined in accordance with the following regulatory legal acts:
● The Labor Code of the Russian Federation;
● Federal Law No. 152-FZ of 27.07.2006 "On Personal Data";
● Decree of the President of the Russian Federation dated March 06, 1997 No. 188 "On Approval of the List of Confidential Information";
● Decree of the Government of the Russian Federation of September 15, 2008 No. 687 "On Approval of the Regulation on the Specifics of Personal Data Processing carried out without the use of automation tools";
● Decree of the Government of the Russian Federation No. 512 dated July 06, 2008 "On Approval of Requirements for Physical Carriers of Biometric Personal Data and Technologies for Storing Such Data outside of Personal Data Information Systems";
● Decree of the Government of the Russian Federation dated November 01, 2012 No. 1119 "On Approval of Requirements for the Protection of Personal Data during their Processing in Personal Data Information Systems";
● FSTEC of Russia Order No. 21 dated February 18, 2013 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data during their Processing in Personal Data Information Systems";
● By Roskomnadzor Order No. 996 dated September 05, 2013 "On Approval of Requirements and methods for Depersonalization of personal Data";
● other regulatory legal acts of the Russian Federation and regulatory documents of authorized state authorities.
2.2. In order to implement the Policy provisions, IP Kalnina Svetlana Vladimirovna develops relevant local regulations and documents regulating the processing of personal data.
3. Purposes of processing, categories of subjects of personal data, categories and list of processed personal data, methods, terms of their processing and storage, procedure for destruction of personal data upon achievement of goals or upon the occurrence of other legal grounds
3.1. The categories of subjects of personal data include:
3.1.4. Operator's Partners (legal entities and individuals)
● In this category of entities, the operator processes personal data received by the operator for the purpose of executing an agreement to which the client/counterparty (legal entity) is a party
● List of personal data processed: last name, first name, patronymic, phone number, e-mail address, INN, OGRN
● Processing method: mixed (automated and non-automated)
● Terms of processing and storage: until the expiration of the partnership agreement of the persons with whom the interaction is carried out in order to fulfill the agreement.
● Destruction procedure: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
3.1.5. Registered users of the Operator's website
● In this category of subjects, the Operator processes the personal data of site visitors in order to provide personalized services and opportunities to site users.
● List of personal data processed: name, e-mail address.
● Processing method: mixed (automated and non-automated)
● Terms of processing and storage: until the withdrawal of consent to the processing of personal data given during registration on the Operator's website
● Destruction procedure: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
3.1.6. Clients, potential clients
● In this category of entities, the Operator processes personal data of customers and potential customers in order to inform them about products, services, news, promotions and offers via telephone, SMS, and e-mail from the Company and its partners.
● The list of personal data processed: last name, first name, patronymic, phone number, email address, region and/or city of the Russian Federation, profession and/or position.
● Processing method: mixed (automated and non-automated)
● Terms of processing and storage: until the withdrawal of consent to the processing of personal data given during registration on the Operator's website
● Destruction procedure: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
3.2. The Company does not process special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, or intimate life.
3.3. There is no cross-border data transfer by the Operator.
3.5. The processing of personal data authorized by the personal data subject for dissemination is carried out in the Company on the basis of the consent of the personal data subject to dissemination in compliance with the prohibitions and conditions for the processing of personal data established by the personal data subject.
4. The functions of the Operator in the processing of personal data
The operator when processing personal data:
● takes measures necessary and sufficient to ensure compliance with the requirements of the legislation of the Russian Federation and local regulations of the Operator in the field of personal data;
● takes legal, organizational and technical measures to protect personal data from unlawful or accidental access to it, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions with respect to personal data;
● appoints a person responsible for organizing the processing of personal data in the Company;
● issues local regulations governing the processing and protection of personal data in the Company;
● familiarizes the Operator's employees who directly process personal data with the provisions of the legislation of the Russian Federation and the Operator's local regulations in the field of personal data, including the requirements for personal data protection;
● publishes or otherwise provides unrestricted access to this Policy;
● informs personal data subjects or their representatives in accordance with the established procedure about the availability of personal data related to the relevant subjects, provides an opportunity to get acquainted with these personal data when contacting and (or) receiving requests from these personal data subjects or their representatives, unless otherwise established by the legislation of the Russian Federation;
● stops processing and destroys personal data in cases stipulated by the legislation of the Russian Federation in the field of personal data;
● performs other actions stipulated by the legislation of the Russian Federation in the field of personal data.
5. Basic rights of personal data subjects
Personal data subjects have the right to:
● complete information about their personal data processed by the Operator;
● access to their personal data, including the right to receive a copy of any record containing their personal data, except in cases provided for by the legislation of the Russian Federation;
● clarification of their personal data, their blocking or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
● withdrawal of consent to the processing of personal data;
● Taking legal measures to protect their rights;
● appeal against the Operator's actions or omissions carried out in violation of the requirements of the legislation of the Russian Federation in the field of personal data to the authorized body for the protection of the rights of personal data subjects or to the court;
● exercise of other rights provided for by the legislation of the Russian Federation.