Appendix 1 to Order No. 1-P dated 01.01.2020
POLICY REGARDING THE PROCESSING OF PERSONAL DATA AND THE REQUIRED REQUIREMENTS FOR THE PROTECTION OF PERSONAL DATA AT FARENGATE FIRM LLC
1. INTRODUCTION
This Policy defines the principles, procedure and conditions for the processing of personal data of employees of Fahrenheit Firm LLC (hereinafter referred to as the Company) and other persons whose personal data are processed by the Company, in order to ensure the protection of the rights and freedoms of man and citizen in the processing of his personal data, in including the protection of privacy rights, personal and family secrets, and also establishes the responsibility of Company officials with access to personal data for failure to comply with the requirements of the rules governing processing and protection of personal data.
2. CONCEPT AND COMPOSITION OF PERSONAL DATA
The information constituting personal data in the Company is any information relating directly or indirectly to a specific or determinable individual (subject of personal data), with the exception of personal data relating to racial, ethnicity, political views.
Depending on the subject of personal data, the Company processes personal data of the following categories of personal data subjects:
- personal data of the employee of the Company - information necessary for the Company in connection with labor relations and relating to a specific employee;
- personal data of the founders - information necessary for the Company to be reflected in reporting documents on the activities of the Company in accordance with the requirements of the law;
- personal data of counterparty employees - information necessary for the Company to fulfill its obligations under contractual relations with the counterparty and to comply with legal requirements;
- personal data of individuals in civil law relations with LLC Fahrenheit Firm in accordance with the requirements of the law;
- personal data for applicants for vacant positions;
- personal data of visitors to administrative and industrial premises of LLC Fahrenheit Firm;
- personal data of authorized, on the basis of a power of attorney, representatives of the above personal data entities.
3. PURPOSES FOR PROCESSING PERSONAL DATA
The processing of personal data in the Company is carried out in order to:
- conclusion, execution and termination of civil contracts with individuals, legal entities, individual entrepreneurs and other persons, in cases provided for by applicable law and the Charter of the Company;
- Organization of personnel records of the Company, ensuring compliance with laws and other regulatory legal acts, conclusion and fulfillment of obligations under labor and civil law contracts; conducting personnel records management, assisting employees in finding employment, training and promotion, using various types of benefits, fulfilling the requirements of tax legislation in connection with the calculation and payment of personal income tax, as well as the unified social tax and pension legislation in the formation and presentation of personalized data about each recipient of income, taken into account when calculating insurance premiums for mandatory pension insurance and security, filling in primary statistical documentation in accordance with the Labor Code of the Russian Federation, the Tax Code of the Russian Federation, and federal laws.
4. RIGHTS AND OBLIGATIONS
4.1.Rights and obligations of the Company:
The company, as the operator of personal data, has the right:
- defend their interests in court;
- provide personal data of entities to third parties, if this is provided by applicable law (tax, law enforcement agencies, etc.);
- refuse to provide personal data in cases stipulated by law;
- use the personal data of the subject without his consent, in cases provided by law.
4.2. Rights and obligations of the subject of personal data: The subject of personal data has the right:
- demand clarification of their personal data, their blocking or destruction if personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, and also take measures prescribed by law to protect their rights;
- require a list of their personal data processed by the Company and the source of their receipt;
- receive information on the processing time of their personal data, including the storage time;
- require notification of all persons who were previously provided with incorrect or incomplete personal data about all exceptions, corrections or additions made to them;
- appeal to the authorized body for the protection of the rights of subjects of personal data or in a judicial proceeding of unlawful actions or inaction in the processing of his personal data;
- to protect their rights and