Personal Data Processing Policy
1. General Provisions
This personal data processing policy was compiled in accordance with the requirements of Federal Law № 152-FZ of 27.07.2006 «On Personal Data» (hereinafter referred to as the «Personal Data Law») and defines the procedure for processing personal data and measures to ensure the security of such data taken by the Operator.
1.1 The Operator sets as its primary goal and condition for its activities, the observance of human and civil rights and freedoms when processing its personal data, including protection of the right to privacy and personal and family secrets.
1.2 This Operator’s policy regarding personal data processing (hereafter referred to as «Policy») applies to all information the Operator can obtain about website visitors https://rozaenergy.ru.
2.1 Automated personal data processing - the processing of personal data using computer technology
2.2 Blocking of personal data - temporary termination of processing of personal information (except in cases where it is necessary to process personal data to clarify them)
2,3 Website - a collection of graphics and information materials, as well as computer programs and databases, which ensure their availability on the internet at the network address https://rozaenergy.ru
24 Personal data information systems - sets of personal data stored in databases and information technology and technical means used to process them
25 Depersonalisation of personal data-actions that make it impossible to determine whether personal data belong to a specific user or another personal subject without additional information
2.6 Personal data processing is any action or set of actions performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, depersonalization, blocking, deletion and destruction of personal data.
2.7 Operator - a state body, municipal body or legal entity that organizes and/or processes personal data independently or jointly with other people, determines the purpose of personal data processing and the composition of the data to be processed.
Personal data - any information directly or indirectly related to a specific user of the website https://rozaenergy.ru.
2.9 Personal data authorized for dissemination by a personal data subject is personal data that can be accessed by an unlimited number of people through the consent of the personal data owner to process the personal data for the purpose of disseminating it in accordance with the procedures provided for in the Personal Data Act.
2.10 A user is any visitor to the website https://rozaenergy.ru.
Provision of personal information - actions aimed at revealing personal information to a specific person or a specific group of people.
2.12 Dissemination of personal data - any action aimed at revealing personal data to an unspecified group of people (transfer of personal information) or at making personal information available to an unlimited number of people, including publishing personal information in the media, posting on information and telecommunication networks or providing access to personal information in any other way
2.13 Cross-border transfer of personal information is the transfer of personal info to the territory of a foreign country to a government agency of a foreign nation, a foreign individual, or a foreign legal entity
2nd paragraph omitted.
Destruction of personal info - any actions resulting in permanent destruction of personal information with the inability to restore the content of that personal data in a personal information system and / or material carriers of that information being destroyed.
— receive reliable information and/or documents containing personal data from a personal data subject;
— if a personal data subjects withdraws consent to processing of their personal data, or sends a request to stop processing of personal data, an operator has the right to continue processing without the consent of a personal data person, provided that there are grounds specified in the law on personal data;
independently determine the composition and list of measures necessary and sufficient to ensure fulfillment of obligations prescribed by the law on Personal Data and regulatory legal acts adopted under it, unless otherwise specified by the law of Personal Data or other Federal laws.
3.2 The operator is obliged:
provide the personal data to the subject upon request with information about processing of personal information.
— Organize the processing of personal data in accordance with the procedures established by the current legislation of the Russian Federation.
— Respond to requests and inquiries from personal data subjects and their legal representatives in accordance with requirements of the Personal Data Act.
To provide necessary information to authorized bodies for protection of rights of personal data subject at request of these bodies within 10 days after receiving such requests.
Publish or otherwise make available this Personal Data Policy.
Take legal, organizational, and technical measures to protect personal information from unlawful access, destruction, alteration, blocking, duplication, provision, distribution of personal information, as well as other illegal actions against personal information.
— Stop transmitting (distributing, providing, accessing) personal data, and destroy personal data according to the procedure and cases specified by the Law on Personal Data; — Perform other duties specified by the law on personal data;
4. Basic rights and obligations of personal data subjects 4.1 Subjects of personal information have the right: — To receive information about the processing of their personal information, except in cases specified in federal laws. Such information is provided by the operator in an accessible format and does not contain personal information related to other individuals, unless there are legitimate reasons for disclosing such information. The list of information and procedure for obtaining this information are established by law.
— require the operator to clarify their personal data, block or delete them if the data is incomplete, outdated, incorrect, illegally acquired or not necessary for the stated processing purpose, as well as taking legally prescribed measures to protect their rights;
— to submit a condition of prior consent for processing personal data to promote goods, works, and services on the market;
— to withdraw consent to the processing of personal data and send a request for termination of the processing; — to appeal to an authorized body for protection of personal data rights or to court against illegal actions or omissions by the Operator during processing of their personal information; — exercise other rights granted by the legislation of the Russian Federation; 4.2. Personal data subjects are obligated to: — provide reliable information to the Operator about themselves;
— inform the Operator about clarification (updating, modification) of their personal data.
4.3. Persons who provide the Operator with false information about themselves or another person's personal data without their consent are liable under the laws of the Russian Federation.
5. Principles for processing personal data 5.1 Personal data is collected on a legal and fair basis. 5.2 The processing of personal information is limited to specific, predetermined, and legitimate purposes. The processing of information that is incompatible with the purpose of collecting personal information is not allowed. 5,3 It is prohibited to combine databases that contain personal information, which is processed for purposes that are incompatible with each other. 4,4 Processing is only allowed for personal data that meets the purpose for which it was collected.
5.5 The content and volume of personal data processed corresponds to the stated purpose of processing. Excessive processing of personal data is not permitted in relation to their stated purposes.
5.6 When processing personal data, accuracy, sufficiency, relevance, and completeness are ensured. If necessary, the operator takes measures or ensures that measures are taken to remove or clarify incomplete, inaccurate, or irrelevant data.