Products
1. GENERAL PROVISIONS
Политика обработки персональных данных (далее – Политика) разработана в соответствии с Федеральным законом от 27.07.2006. №152-ФЗ «О персональных данных» (далее – ФЗ-152).
This Policy describes how we treat personal information and measures to ensure the security of personal data in the LLC "ZZBO" (hereinafter - operator) in order to protect the rights and freedoms of man and citizen in the processing of their personal data, including the protection of the rights to privacy, personal and family secrets.
The policy uses the following basic concepts:
automated processing of personal data - personal data processing by means of computer equipment;
blocking of personal data - temporary suspension of processing of personal data (except in cases where the processing is necessary to clarify personal data);
information system of personal data - a set contained in the databases of personal information data, and providing their information processing technologies and equipment;
depersonalization of personal data - actions as a result of which it is impossible to determine without more information, the personal data belonging to a particular subject of personal data;
processing of personal data - any operation (surgery) or a set of actions (operations) performed with the use of automation equipment or without the use of such means with personal data, including collection, recording, accumulation, storage, clarification (update, modification), extraction, use, transfer (spreading, providing access), depersonalization, blocking, deletion, destruction of personal data;
operator - public body, a municipality, a legal or natural person, alone or together with others, organizing and (or) carrying out the processing of personal data, as well as defining the purpose of processing personal data, the composition of the personal data to be processed, the actions (operations) in respect of with the personal data;
personal data - any information relating to, directly or indirectly identified or identifiable natural person (personal data subject);
the provision of personal data - actions aimed at the disclosure of personal data to a certain person or a certain group of people;
dissemination of personal data - actions aimed at the disclosure of personal data to an indefinite number of persons (personal data) or to become acquainted with the personal data of the general public, including the disclosure of personal data in the media, information and accommodation in telecommunication networks or to provide access to personal data in any other way;
cross-border transfer of personal data - transfer of personal data to a foreign country to the authority of a foreign state, a foreign person or foreign legal entity;
destruction of personal data - actions as a result of which it is impossible to restore the contents of personal data in the information system of personal data and (or) the result of which destroyed the material carriers of personal data.
Компания обязана опубликовать или иным образом обеспечить неограниченный доступ к настоящей Политике обработки персональных данных в соответствии с ч. 2 ст. 18.1. ФЗ-152.
CAMOZZI pneumatic gate - two-side
2 PRINCIPLES AND CONDITIONS OF PROCESSING OF PERSONAL DATA
2.1 Principles of personal data processing
Processing of personal data from the Operator is based on the following principles:
the rule of law and fair manner;
processing of personal data limited the achievement of specific, pre-defined and legitimate purposes;
avoid processing personal data is incompatible with the personal data collection purposes;
preventing association database containing personal data, which processing is performed in order that are inconsistent with each other;
process only personal data that meet their treatment goals;
conformity of the content and scope of the processed personal data processing stated objectives;
preventing the processing of personal data redundant in relation to the stated objectives of the processing;
ensure accuracy, adequacy and relevance of personal data in relation to the processing of personal data targets;
destruction or anonymization of personal data to achieve the goals of their treatment in case of loss or the need to achieve these goals, if it is impossible to eliminate.
Operator admitted breaches of personal data, unless otherwise provided by federal law.
2.2 Terms and conditions of personal data processing
The operator performs the processing of personal data in the presence of at least one of the following conditions:
personal data processing is done with the consent of the subject's personal data handling of personal data;
personal data processing is necessary to achieve the objectives set by the international treaty of the Russian Federation or the law, to exercise and perform its Russian legislation on the operator's functions, powers and duties;
processing of personal data is necessary for the administration of justice, the execution of the judicial act, the act of another body or official to be executed in accordance with the Russian legislation on enforcement proceedings;
personal data processing is necessary for the performance of a contract to which any beneficiary or guarantor for that is the subject of personal data, as well as to conclude an agreement on the initiative of the personal data subject or an agreement by which the data subject will be the beneficiary or guarantor;
personal data processing is necessary for the exercise of the rights and legitimate interests of the operator or third parties, or to achieve the objectives of public interest, provided that this does not violate the rights and freedoms of the personal data subject;
processing of personal data is carried out, the general public who have been granted access to the personal data subject or, at his request (hereinafter - public personal information);
carried out processing of personal data, to be published or mandatory disclosure in accordance with federal law.
2.3 Privacy of personal data
The operator and other persons who have access to personal data are obliged not to disclose to third parties or distribute personal data without the consent of the personal data subject, unless otherwise provided by federal law.
2.4 Public sources of personal data
В целях информационного обеспечения у Оператора могут создаваться общедоступные источники персональных данных субъектов, в том числе справочники и адресные книги. В общедоступные источники персональных данных с письменного согласия субъекта могут включаться его фамилия, имя, отчество, дата и место рождения, должность, номера контактных телефонов, адрес электронной почты и иные персональные данные, сообщаемые субъектом персональных данных.
Data on the subject should be at any time be excluded from publicly available sources of personal data at the request of the subject or by decision of a court or other public bodies.
2.5 Special categories of personal data
Operator Processing of special categories of personal data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sexual life, is allowed in the following cases:
the data subject has consented in writing to the processing of their personal data;
personal data made public by the personal data subject;
processing of personal data carried out in accordance with the legislation on the welfare state, labor legislation, Russian legislation on pensions for state pensions, on retirement pensions;
personal data processing is necessary to protect the life, health or other vital interests of the subject of personal data or the life, health or other vital interests of other persons and obtaining the consent of the subject of personal data is not possible;
processing of personal data carried out in medical and preventive purposes, to establish a medical diagnosis, the provision of medical and health-social services, provided that the processing of personal data carried out by a person professionally engaged in medical activities and must, in accordance with Russian law to maintain medical confidentiality;
personal data processing is necessary for the establishment or implementation of the rights of personal data subject or third parties, as well as in connection with the administration of justice;
processing of personal data carried out in accordance with the law on compulsory types of insurance with the insurance legislation.
Processing of special categories of personal data should be immediately discontinued if the cause due to which their processing was carried out, unless otherwise provided by federal law.
Processing of personal data on convictions can be carried out solely by the Operator in the cases and in the manner determined in accordance with federal laws.
2.6 Biometric personal data
Information that characterize the physiological and biological characteristics of a person, on the basis of which it is possible to establish his identity - biometric personal data - can be processed by the Operator only with the consent in writing of the subject.
2.7 The order processing of personal data to another person
Оператор вправе поручить обработку персональных данных другому лицу с согласия субъекта персональных данных, если иное не предусмотрено федеральным законом, на основании заключаемого с этим лицом договора. Лицо, осуществляющее обработку персональных данных по поручению Оператора, обязано соблюдать принципы и правила обработки персональных данных, предусмотренные ФЗ-152.
2.8 Cross-border transfer of personal data
The operator must ensure that foreign state, the territory of which it is supposed to carry out the transfer of personal data to ensure adequate protection of the rights of personal data subjects before the start of the transfer.
Cross-border transfer of personal data to foreign countries that do not provide adequate protection of the rights of subjects of personal data, can be carried out in the following cases:
the consent in writing of the subject of personal data on the cross-border transfer of personal data;
performance of the contract, a party which is the subject of personal data.
CAMOZZI pneumatic gate - two-side
3 RIGHTS PERSONAL DATA SUBJECT
3.1 The consent of personal data subject to the processing of his personal data
Субъект персональных данных принимает решение о предоставлении его персональных данных и дает согласие на их обработку свободно, своей волей и в своем интересе. Согласие на обработку персональных данных может быть дано субъектом персональных данных или его представителем в любой позволяющей подтвердить факт его получения форме, если иное не установлено федеральным законом.
Duty provide evidence consent personal data subject to processing his personal data or proof of the bases indicated in FZ-152, assigned to the Operator.
3.2 Rights of the subject of personal data
Субъект персональных данных имеет право на получение у Оператора информации, касающейся обработки его персональных данных, если такое право не ограничено в соответствии с федеральными законами. Субъект персональных данных вправе требовать от Оператора уточнения его персональных данных, их блокирования или уничтожения в случае, если персональные данные являются неполными, устаревшими, неточными, незаконно полученными или не являются необходимыми для заявленной цели обработки, а также принимать предусмотренные законом меры по защите своих прав.
Обработка персональных данных в целях продвижения товаров, работ, услуг на рынке путем осуществления прямых контактов с потенциальным потребителем с помощью средств связи, а также в целях политической агитации допускается только при условии предварительного согласия субъекта персональных данных. Указанная обработка персональных данных признается осуществляемой без предварительного согласия субъекта персональных данных, если Компания не докажет, что такое согласие было получено.
The operator shall immediately stop at the request of the subject of personal data processing of his personal data for the above purposes.
Prohibited adoption based solely on automated processing of personal data solutions that give rise to legal effects in respect of the personal data subject or otherwise affect the rights and legitimate interests, except for cases stipulated by federal law, or with the consent in writing of the subject of personal data.
If the data subject considers that the operator carries out the processing of personal data in violation of the Federal Law # 152, or otherwise in violation of his rights and freedoms, the data subject shall have the right to appeal the action or the Operator's inaction authorized body for protection of the rights of personal data subjects or in the courts .
personal data subject has the right to protect their legitimate rights and interests, including for damages, and (or) compensation for moral damages in court.
CAMOZZI pneumatic gate - two-side
4 SECURITY OF PERSONAL DATA
security of personal data processed by the Operator, which ensures the implementation of legal, organizational and technical measures necessary to ensure that in the field of personal data protection requirements of the federal legislation.
To prevent unauthorized access to personal data by the Operator following organizational and technical measures are applied:
appointment of officials responsible for organizing the handling and protection of personal data;
restrictions to the number of persons who have access to personal data;
familiarize the subjects with the federal laws and regulations of the Operator documents on processing and protection of personal data;
organization of accounting, storage and handling of media;
the definition of personal data security threats during their processing, forming the basis of threats to their models;
development of model-based threats to personal data protection system;
check availability and efficient use of means of information protection;
differentiation of user access to information resources and software and hardware to process information;
registration and accounting activities of information systems of personal data of users;
the use of antiviral drugs and means of restoration of personal data protection;
application where necessary means firewall, intrusion detection, analysis and security of the cryptographic protection of the information;
organization of admission to the territory of the Operator, security of the premises with the technical means of processing personal data.
CAMOZZI pneumatic gate - two-side
5 FINAL PROVISIONS
Other rights and obligations of the operator as the operator of personal data are determined by the legislation of the Russian Federation in the field of personal data.
Officials Operator persons guilty of violating the rules governing the processing and protection of personal data, bear material, disciplinary, administrative, civil or criminal liability in accordance with the procedure established by federal laws.