4.2. The Operator may process personal data of the following categories of personal data subjects.

4.2.1. Candidates for employment with To the operator:

last name, first name, patronymic;
floor;
citizenship;
date and place of birth;
contact information;
information about education, work experience, qualifications;
other personal information provided by candidates in resumes and cover letters.

4.2.2. Employees and former employees of the Operator:

last name, first name, patronymic;
floor;
citizenship;
date and place of birth;
image (photo);
passport data;
address of registration at the place of residence;
actual residence address;
contact information;
taxpayer's individual number;
insurance number of an individual personal account (SNILS);
information about education, qualifications, professional training and professional development;
marital status, children, family ties;
information about employment, including the availability of incentives, awards and (or) disciplinary penalties;
marriage registration data;
information about military registration;
disability information;
information about withholding alimony;
information about income from a previous job;
other personal data provided by employees in accordance with the requirements of labor legislation.

4.2.3. Family members of the Operator's employees

last name, first name, patronymic;
degree of kinship;
Year of birth;
other personal data provided by employees in accordance with the requirements of labor legislation.

4.2.4. The Operator's counterparties (individuals):

last name, first name, patronymic;
date and place of birth;
passport data;
address of registration at the place of residence;
contact information;
current position;
taxpayer's individual number;
current account number;
other personal data provided by counterparties (individuals) necessary for the conclusion and execution of contracts.

4.2.5. Representatives (employees) of the Operator's counterparties (legal entities):

last name, first name, patronymic;
passport data;
contact information;
current position;
other personal data provided by representatives (employees) of counterparties necessary for the conclusion and execution of contracts.

4.3. The processing of biometric personal data by the Operator (information that characterizes the physiological and biological characteristics of a person, on the basis of which his identity can be established) is carried out in accordance with the legislation of the Russian Federation.

4.4. The Operator does not process special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, health status, intimate life, except in cases provided for by the legislation of the Russian Federation.

5. Procedure and conditions of personal data processing

5.1. The processing of personal data is carried out by the Operator in accordance with the requirements of the legislation of the Russian Federation.

5.2. The processing of personal data is carried out with the consent of the subjects of personal data to the processing of their personal data, as well as without it in cases provided for by the legislation of the Russian Federation.

5.3. The Operator performs both automated and non-automated processing of personal data.

5.4. The Operator's employees, whose job responsibilities include processing personal data, are allowed to process personal data.

5.5. Personal data is processed by:

receiving personal data in oral and written form directly from personal data subjects;
obtaining personal data from publicly available sources;
entering personal data into the logs, registers and information systems of the Operator;
using other methods of personal data processing.

5.6. Disclosure and dissemination of personal data to third parties is prohibited without the consent of the personal data subject, unless otherwise provided by federal law. Consent to the processing of personal data authorized by the personal data subject for dissemination is issued separately from other consents of the personal data subject to the processing of his personal data.

The requirements for the content of consent to the processing of personal data authorized by the personal data subject for distribution were approved by Roskomnadzor Order No. 18 dated 02/24/2021.

5.7. The transfer of personal data to the bodies of inquiry and investigation, to the Federal Tax Service, the Pension Fund of the Russian Federation, the Social Insurance Fund and other authorized executive authorities and organizations is carried out in accordance with the requirements of the legislation of the Russian Federation.

5.8. The Operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, distribution and other unauthorized actions, including:

identifies threats to the security of personal data during their processing;
Adopts local regulations and other documents regulating relations in the field of personal data processing and protection;
appoints persons responsible for ensuring the security of personal data in the structural divisions and information systems of the Operator;
creates the necessary conditions for working with personal data;
organizes the accounting of documents containing personal data;
organizes work with information systems in which personal data is processed;
stores personal data in conditions that ensure their safety and exclude unauthorized access to them.;
organizes the training of the Operator's employees who process personal data.

5.9. The Operator stores personal data in a form that allows determining the subject of personal data for no longer than the purposes of personal data processing require, unless the period of personal data storage is established by federal law or contract.

5.10. When collecting personal data, including through the Internet information and telecommunications network, the Operator ensures the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation, except for the cases specified in the Law on Personal Data. data.

6. Updating, correction, deletion and destruction of personal data, responding to requests from subjects for access to personal data

6.1. Confirmation of the fact of personal data processing by the Operator, the legal grounds and purposes of personal data processing, as well as other information specified in Part 7 of Article 14 of the Law on Personal Data, are provided by the Operator to the personal data subject or his representative when contacting or receiving a request
from the personal data subject or his representative.

The information provided does not include personal data related to other subjects of personal data, except in cases where there are legitimate grounds for the disclosure of such personal data.

The request must contain:

the number of the main identity document of the personal data subject or his representative, information about the date of issue of the specified document and the issuing authority;
information confirming the personal data subject's participation in the relationship with the Operator (contract number, date of conclusion of the contract, conditional designation and (or) other information), or information otherwise confirming the fact of personal data processing by the Operator;
signature of the personal data subject or his representative.

The request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.

If the request of the personal data subject does not reflect all the necessary information in accordance with the requirements of the Law on Personal Data, or the subject does not have access rights to the requested information, a reasoned refusal is sent to him.

The right of a personal data subject to access his personal data may be restricted in accordance with Part 8 of Article 14 of the Law on Personal Data, including if the access of a personal data subject to his personal data violates the rights and legitimate interests of third parties.

6.2. In case of detection of inaccurate personal data when contacting a personal data subject or his representative, or at their request or at the request of Roskomnadzor, the Operator blocks personal data related to this personal data subject from the moment of such request or receipt of the specified request for the verification period, if blocking personal data does not violate the rights and legitimate interests the subject of personal data or third parties.

In case of confirmation of the inaccuracy of personal data, the Operator, based on information provided by the personal data subject or his representative or Roskomnadzor, or other necessary documents, clarifies the personal data within seven working days from the date of submission of such information and removes the blocking of personal data.

6.3. In case of detection of unlawful processing of personal data when contacting (requesting) a personal data subject or his representative or Roskomnadzor, the Operator shall block unlawfully processed personal data related to this personal data subject from the moment of such request or receipt of the request.

6.4. Upon achievement of the purposes of personal data processing, as well as in the case of revocation by the personal data subject of consent to their processing, personal data is subject to destruction if:

nothing else is provided for in the contract to which the personal data subject is a party, beneficiary or guarantor.;
The operator does not have the right to process personal data without the consent of the personal data subject on the grounds provided for by the Law on Personal Data or other federal laws.;