Regulations on the processing of personal data
GENERAL PROVISIONS
1. These Regulations on the processing of personal data (hereinafter referred to as the Regulations, these Regulations) were developed by Zemlemer-Meteo LLC (hereinafter also referred to as the Operator) and are applied in accordance with clause 2, part 1 of Art. 18.1. Federal Law of July 27, 2006 No. 152 “On Personal Data”.
This Regulation defines the Operator’s policy regarding the processing of personal data.
All issues related to the processing of personal data that are not regulated by these Regulations are resolved in accordance with the current legislation of the Russian Federation in the field of personal data.
This Regulation and amendments to it are approved by the head of the Operator and introduced by order of the Operator.
2. In accordance with paragraph 1 of Art. 3 of the Federal Law of July 27, 2006 No. 152 “On Personal Data”, personal data of clients and individuals means any information related to a client or individual directly or indirectly identified or determined on the basis of such information (hereinafter referred to as personal data).
3. Zemlemer-Meteo LLC is the operator that organizes and (or) carries out the processing of personal data, as well as determines the purposes and content of the processing of personal data.
4. The purpose of processing personal data is:
• ensuring the protection of the rights and freedoms of man and citizen when processing his personal data, including the protection of the rights to privacy, personal and family secrets;
• provision by the Operator of services to individuals and legal entities related to the Operator’s business activities, including the Operator’s contacts with such persons, including by email, by telephone, at the address provided by the relevant person;
• sending consultations and responses to applicants using means of communication and the contact information they provided;
• promotion of goods, works, services of the Operator on the market by making direct contacts with potential consumers using communication means (allowed only with the prior consent of the subject of personal data).
5. Processing is organized by the Operator on the principles:
• the legality of the purposes and methods of processing personal data, integrity and fairness in the activities of the Operator;
• the reliability of personal data, their sufficiency for the purposes of processing, the inadmissibility of processing personal data that is excessive in relation to the purposes stated when collecting personal data;
• processing only personal data that meets the purposes of their processing;
• compliance of the content and volume of processed personal data with the stated purposes of processing. The personal data processed should not be redundant in relation to the stated purposes of their processing;
• the inadmissibility of combining databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
• ensuring the accuracy of personal data, their sufficiency, and, where necessary, relevance in relation to the purposes of processing personal data. The operator takes the necessary measures or ensures that they are taken to delete or clarify incomplete or inaccurate data;
• storing personal data in a form that allows identifying the subject of personal data for no longer than required for the purposes of processing personal data.
6. Processing of personal data is carried out in compliance with the principles and rules provided for by the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data” and these Regulations.
7. Personal data is processed with and without the use of automation tools.
8. In accordance with the set goals and objectives, the Operator, before starting the processing of personal data, appoints a person responsible for organizing the processing of personal data.
1. The person responsible for organizing the processing of personal data receives instructions directly from the executive body of the Operator and is accountable to it.
2. The person responsible for organizing the processing of personal data has the right to draw up and sign the notification provided for in Parts 1 and 3 of Art. 22 of the Federal Law of July 27, 2006 No. 152 “On Personal Data”.
9. The Operator’s employees directly involved in the processing of personal data must be familiar with the provisions of the legislation of the Russian Federation on personal data, including the requirements for the protection of personal data, documents defining the Operator’s policy regarding the processing of personal data, local acts on issues of processing personal data, with this Regulation and amendments to it.
10. When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with Art. 19 of the Federal Law of July 27, 2006 No. 152 “On Personal Data”.
11. When collecting personal data using information and telecommunication networks, the Operator is obliged to publish in the relevant information and telecommunication network a document defining its policy regarding the processing of personal data and information about the implemented requirements for the protection of personal data, as well as provide the ability to access the specified document using the means of the corresponding information and telecommunication network.
12. Conditions for processing personal data by the Operator. Processing of personal data is permitted in the following cases:
• processing of personal data is carried out with the consent of the subject of personal data to the processing of his personal data;
• processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or law, to implement and fulfill the functions, powers and responsibilities assigned by the legislation of the Russian Federation to the Operator;
• processing of personal data is necessary for the execution of an agreement to which the subject of personal data is a party or beneficiary or guarantor, including in the event that the Operator exercises its right to assign rights (claims) under such an agreement, as well as for concluding an agreement on the initiative of the subject of personal data data or an agreement under which the subject of personal data will be a beneficiary or guarantor;
• processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data, if obtaining the consent of the subject of personal data is impossible;
• processing of personal data is necessary to exercise the rights and legitimate interests of the Operator or third parties or to achieve socially significant goals, provided that the rights and freedoms of the subject of personal data are not violated;
• processing of personal data is carried out for statistical or other research purposes, with the exception of the purposes specified in Art. 15 of the Federal Law of July 27, 2006 No. 152 “On Personal Data”, subject to the mandatory depersonalization of personal data;
• processing of personal data is carried out, access to an unlimited number of persons is provided by the subject of personal data or at his request;
• processing of personal data subject to publication or mandatory disclosure in accordance with federal law is carried out.
13. The storage of personal data must be carried out in a form that allows identifying the subject of personal data, no longer than required by the purposes of their processing, and they are subject to destruction upon achieving the purposes of processing or in the event of loss of the need to achieve them in the manner prescribed by the Regulations on the storage of personal data. data from the Operator.
14. Personal data processed in information systems are subject to protection from unauthorized access and copying. The security of personal data when processed in information systems is ensured using a personal data protection system, including organizational measures and information security means. Hardware and software must meet the requirements established in accordance with the legislation of the Russian Federation to ensure the protection of information.
15. Interaction with federal executive authorities on issues of processing and protection of personal data of subjects whose personal data is collected.
2. ENSURING THE RIGHTS OF THE SUBJECT OF PERSONAL DATA BY THE OPERATOR
1. Subjects of personal data or their representatives have the rights provided for by the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data” and other regulations governing the processing of personal data.
2. The operator ensures the rights of personal data subjects in the manner established by Chapters 3 and 4 of the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data”.
3. The Operator is obliged to provide free of charge to the subject of personal data or his representative the opportunity to familiarize himself with personal data relating to this subject of personal data at the Operator’s location during the Operator’s working hours.
4. The right of the subject of personal data to access his personal data may be limited in accordance with federal laws.
5. If the interests of the subject of personal data are represented by a representative, the powers of the representative are confirmed by a power of attorney executed in the prescribed manner.
6. In cases where the subject of personal data provides written consent to the use of personal data, a simple written form is sufficient for such consent.
7. The operator guarantees the security and confidentiality of the personal data used.
8. Processing of personal data for the purpose of promoting goods, works, services on the market by making direct contacts with potential consumers using communication means is permitted only with the prior consent of the subject of personal data.
3. RECEIVING, PROCESSING, STORING PERSONAL DATA
1. The Operator establishes the following procedure for obtaining personal data:
0. When applying for the Operator’s services, the client indicates the data specified in the relevant forms.
1. The operator does not receive or process the client’s personal data about his race, political views, religious and philosophical beliefs, state of health, intimate life, unless otherwise provided by law.
2. In cases directly related to issues of labor relations, in accordance with Art. 24 of the Constitution of the Russian Federation The Organization has the right to receive and process data about the client’s private life only with his written consent.
2. If the client accepts an offer posted on the Operator’s website, or concludes another agreement with the Operator, the processing of the client’s personal data is carried out for the execution of the relevant agreement, which came into force as a result of the acceptance of the terms of the offer by the client or the conclusion of another agreement, respectively.
3. The Operator also has the right to process the personal data of clients who contact the Operator as individuals only with their consent to the use of personal data.
4. The client’s consent to the processing of personal data is not required in the following cases:
• personal data is publicly available;
• the processing of personal data is carried out on the basis of a federal law that establishes its purpose, the conditions for obtaining personal data and the range of subjects whose personal data is subject to processing, as well as the specific powers of the Organization;
• at the request of authorized state bodies - in cases provided for by federal law;
• processing of personal data for the purpose of fulfilling the contract concluded with the Operator;
• processing of personal data is carried out for statistical or other scientific purposes, subject to the mandatory anonymization of personal data;
• processing of personal data is necessary to protect the life, health or other vital interests of the client, if obtaining his consent is impossible.
5. The operator ensures secure storage of personal data, including:
0. Storage, acquisition, accounting and use of documents containing personal data are organized in the form of a separate archive of the Operator.
1. Storage of personal data must be carried out in a form that makes it possible to identify the subject of personal data, no longer than required by the purposes of processing personal data, unless the period for storing personal data is established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor. data. The processed personal data is subject to destruction or depersonalization upon achievement of the processing goals or in the event of the loss of the need to achieve these goals, unless otherwise provided by federal law.
4. TRANSFER OF PERSONAL DATA
1. Personal data is transferred in compliance with the following requirements:
• it is prohibited to disclose personal data to a third party without the written consent of the client, except in cases where this is necessary in order to prevent a threat to the life and health of the client, as well as in other cases provided for by law;
• do not disclose personal data for commercial purposes without the written consent of the subject of such data;
• warn persons receiving personal data that this data can only be used for the purposes for which they are communicated, and require confirmation from these persons that this rule has been complied with;
• allow access to personal data only to specially authorized persons, while these persons should have the right to receive only those personal data that are necessary to perform specific functions;
• do not request information about the client’s health status, with the exception of information that relates to the issue of the client’s ability to fulfill his obligations under the contract with the Operator;
• transfer the client’s personal data to his representatives in the manner established by Federal Law No. 152-FZ dated July 27, 2006 “On Personal Data”.
5. ACCESS TO PERSONAL DATA
1. The right of access to personal data has:
• the head of the Operator;
• Operator employees working with a specific client;
• accounting employees;
• employees providing technical support for the Operator's activities.
2. In order to ensure the protection of personal data, clients have the following rights:
• full information about their personal data and the processing of this data;
• free and free access to your personal data, including the right to receive copies of any record containing personal data, except as otherwise provided by federal law;
• to identify their representatives to protect their personal data;
• to request the exclusion or correction of incorrect or incomplete personal data, as well as data processed in violation of the requirements of the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data”.
3. Copying and making extracts of personal data is permitted solely for official purposes with the permission of the manager.
6. LIABILITY FOR VIOLATION OF THE STANDARDS GOVERNING THE PROCESSING OF PERSONAL DATA
1. Persons guilty of violating the procedure for handling personal data bear disciplinary, administrative, civil or criminal liability in accordance with federal laws.
2. The heads of the Operator’s structural divisions bear personal responsibility for the performance of duties by their subordinates.
Agreement
for the processing of personal data
The user, by leaving a request or application on the website http://zemlemer-meteo.ru (hereinafter also referred to as the website), creating an account and/or agreeing to the offer on the website, accepts this Consent to the processing of personal data.
The user, acting freely, of his own will and in his own interest, confirming his legal capacity, gives his consent to Zemlemer-Meteo LLC (TIN 2455021865, OGRN 1032401404144, 662605 Krasnoyarsk Territory, Minusinsk, Druzhby St. 10) to the processing of his personal data both with and without the use of automation tools for the purpose of processing incoming requests from individuals (users) for the purpose of consulting, sending comments to individuals (users); analytics of the actions of an individual (user) on the site and the functioning of the site; fulfillment of obligations under the offer agreement accepted by the user on the site. Wherein:
1. Consent is provided for the use of my following personal data: Last name, first name, patronymic; contact phone numbers; email addresses; place of work and position held; address; location information; type, version, language of operating system, browser; device type and screen resolution; pages opened by the user; ip address.
2. Processing of my personal data may include the following actions: collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction.
This consent can be revoked by sending the subject of personal data (user) or his representative a written application to the address: Zemlemer-Meteo LLC 662605 Krasnoyarsk Territory, Minusinsk, st. Friendship 10 or by email: zemlemer-meteo@mail.ru. If the subject of personal data (user) withdraws consent to the processing of personal data, Zemlemer-Meteo LLC has the right to continue processing such personal data in the cases provided for in paragraphs 2-11 of part 1 of article 6, paragraphs 2-10 of part 2 of article 10, part 2 of article 11 of the Federal Law of July 27, 2006 No. 152 “On Personal Data”.
This consent is provided for an indefinite period and is valid for the entire period of processing of personal data. Requests regarding personal data can be sent to the email address: zemlemer-meteo@mail.ru