The policy of the Limited Liability Company "Organizing Committee Builder" (TIN 6658450360) regarding the processing of personal data
September 12, 2025
1. General provisions
1.1. This Policy of the Organizing Committee Builder Limited Liability Company regarding the processing of personal data (hereinafter referred to as the Policy) has been developed in compliance with the requirements of clause 2, Part 1, Article 18.1 of Federal Law No. 152—FZ of 27.07.2006 "On Personal Data" (hereinafter referred to as the Personal Data Law) in order to ensure the protection of rights and freedoms when processing a person's and a citizen's personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. The Policy applies to all personal data processed by the limited Liability Company "Organizing Committee Builder" (hereinafter referred to as the Operator, LLC "Organizing Committee Builder").
1.3. The Policy applies to the relations in the field of personal data processing that arose with the Operator both before and after the approval of this Policy.
1.4. In compliance with the requirements of Part 2 of Article 18.1 of the Law on Personal Data, this Policy is published freely on the Internet on the Operator's website.
1.5. The procedure and conditions for processing personal data in the Operator's Electronic Document Management System are determined by the Operator's Policy regarding the processing of personal data in the electronic document management system.
1.6. The basic concepts used in Politics:
personal data — any information relating directly or indirectly to a specific or identifiable natural person (personal data subject);
personal data operator (operator) — a state body, municipal body, legal entity or individual who independently or jointly with other persons organize and (or) process personal data, as well as determine the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data;
personal data processing is any action (operation) or set of actions (operations) with personal data performed with or without automation tools. The processing of personal data includes, but is not limited to:
- collecting;
- record;
- systematization;
- accumulation;
- keeping;
- clarification (update, change);
- extraction;
- usage;
- transfer (provision, access);
- depersonalization;
- blocking;
- removal;
- destruction;
- distribution;
automated personal data processing is the processing of personal data using computer technology;
dissemination of personal data — actions aimed at disclosing personal data to an unspecified group of people;
providing personal data is an action aimed at disclosing personal data to a specific person or a specific group of people.;
blocking of personal data is the temporary termination of the processing of personal data (except in cases where the processing is necessary to clarify personal data);
destruction of personal data — actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed;
Depersonalization of personal data is an action that makes it impossible to determine whether personal data belongs to a specific personal data subject without using additional information.;
The personal data information system is a set of personal data contained in databases and information technologies and technical means that ensure their processing.
1.7. Basic rights and obligations of the Operator.
1.7.1. The Operator has the right to:
1) independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations stipulated by the Law on Personal Data and regulatory legal acts adopted in accordance with it, unless otherwise provided by the Law on Personal Data or other federal laws;
2) entrust the processing of personal data to another person with the consent of the personal data subject, unless otherwise provided by federal law, on the basis of a contract concluded with this person. The person processing personal data on behalf of the Operator is obliged to comply with the principles and rules of personal data processing provided for by the Law on Personal Data, to respect the confidentiality of personal data, and to take the necessary measures to ensure compliance with the obligations provided for by the Law on Personal Data.;
3) if the personal data subject withdraws consent to the processing of personal data, the Operator has the right to continue processing personal data without the consent of the personal data subject if there are grounds specified in the Law on Personal Data.
1.7.2. The Operator is obliged to:
1) organize the processing of personal data in accordance with the requirements of the Law on Personal Data;
2) respond to requests and requests from personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Act;
3) notify the authorized body for the protection of the rights of personal data subjects (the Federal Service for Supervision of Communications, Information Technology and Mass Communications (Roskomnadzor)) upon request of this body, the necessary information is provided within 10 working days from the date of receipt of such request. This period may be extended, but not for more than five business days. To do this, the Operator must send a reasoned notification to Roskomnadzor indicating the reasons for extending the deadline for providing the requested information.;
4) in accordance with the procedure established by the federal executive governmental body authorized in the field of security, to ensure interaction with the state system for detecting, preventing and eliminating the consequences of computer attacks on information resources of the Russian Federation, including informing it about computer incidents that have resulted in the unlawful transfer (provision, dissemination, access) of personal data.
1.8. The basic rights of the personal data subject. The personal data subject has the right to:
1) to receive information concerning the processing of his personal data, except in cases provided for by federal laws. The information is provided to the personal data subject by the Operator in an accessible form, and it should not contain personal data related to other personal data subjects, except in cases where there are legitimate grounds for the disclosure of such personal data. The list of information and the procedure for obtaining it are established by the Law on Personal Data;
2) require the operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as take legally prescribed measures to protect their rights.;
3) give prior consent to the processing of personal data in order to promote goods, works and services on the market;
4) appeal to Roskomnadzor or in court against illegal actions or omissions of the Operator during the processing of his personal data.
1.9. Control over the fulfillment of the requirements of this Policy is carried out by the person responsible for organizing the processing of personal data by the Operator.
2. Purposes of personal data processing, categories of personal data subjects, list of personal data being processed, legal grounds for personal data processing, methods, timing of their processing and storage, procedure for personal data destruction
2.1. Purposes of personal data processing:
2.1.1. Maintaining personnel and accounting records.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; marital status; income; gender; email address; place of residence; registration address; phone number; SNILS; INN; citizenship; identity document data; bank card details; bank account number; number personal account; profession; position; information about work (including work experience, current employment data, indicating the name and current account of the organization); attitude to military duty, information about military registration; information about education; photo-video image of the person;
Special categories of personal data: health information;
Categories of subjects whose personal data is being processed: employees; relatives of employees; dismissed employees;
The legal basis for the processing of personal data: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data; the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;
The list of actions: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: in accordance with the requirements of labor and accounting laws;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.2. Ensuring compliance with the labor legislation of the Russian Federation.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; gender; e-mail address; place of residence; registration address; phone number; SNILS; INN; nationality; identity document data; document data contained in the birth certificate; bank card details; number current account number; personal account number; profession; position; information about work (including work experience, current employment data, indicating the name and current account of the organization); information about education; photo-video image of the person;
Special categories of personal data: information about the state of health; nationality;
Categories of subjects whose personal data is being processed: employees; relatives of employees;
The legal basis for the processing of personal data: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data; the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned by the legislation of the Russian Federation to the operator;; the processing of personal data is necessary for the performance of the contract, the party to which or the beneficiary or for which the personal data subject is the guarantor, as well as for concluding a contract on the initiative of the personal data subject or a contract under which the personal data subject will be the beneficiary or guarantor. An agreement concluded with a personal data subject may not contain provisions restricting the rights and freedoms of the personal data subject, establishing cases of processing personal data of minors, unless otherwise provided for by the legislation of the Russian Federation, as well as provisions allowing inaction of the personal data subject as a condition for concluding the agreement.;
The list of actions: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: in accordance with the requirements of labor legislation;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.3. Ensuring compliance with the tax legislation of the Russian Federation.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; marital status; income; gender; e-mail address; place of residence; registration address; phone number; SNILS; INN; nationality; identity document data; document data contained in the birth certificate;
Special categories of personal data: nationality;
Categories of subjects whose personal data is being processed: employees; relatives of employees;
Legal basis of personal data processing: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data; the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;
The list of actions: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: in accordance with the requirements of the tax legislation;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.4. Ensuring compliance with pension legislation of the Russian Federation.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; income; gender; email address; place of residence; registration address; phone number; SNILS; INN; citizenship; identity document data; profession; position; information about work (including work experience, current employment data, indicating the name and current account of the organization);
Special categories of personal data: health information;
Categories of subjects whose personal data is being processed: workers;
The legal basis for the processing of personal data: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data; the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;
The list of actions: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: in accordance with the requirements of the legislation on pension provision;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.5. Ensuring compliance with the legislation of the Russian Federation on defense.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; marital status; gender; email address; place of residence; registration address; phone number; nationality; identity document data; profession; position; attitude to military duty, information about military registration; photo-video image of the face;
Special categories of personal data: health information;
Categories of subjects whose personal data is being processed: workers;
Legal basis of personal data processing: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data; the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;
The list of actions: collection; recording; systematization; accumulation; storage; refinement (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: in accordance with the requirements of the defense legislation;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.6. Recruitment of personnel (applicants) for vacant operator positions
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; marital status; gender; email address; place of residence; registration address; phone number; nationality; profession; position; information about work (including work experience, current employment data time, indicating the name and settlement account of the organization); attitude to military duty, information about military registration; photo-video image of the face;
Categories of subjects whose personal data is being processed: job seekers;
The legal basis for the processing of personal data: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
The list of actions: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: before making a decision on the candidate's employment or his non-compliance with the vacancy;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.7. Preparation, conclusion and execution of a civil contract.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; gender; email address; place of residence; registration address; phone number; SNILS; INN; citizenship; identity document data; bank card details; current account number;
Categories of subjects whose personal data is being processed: counterparties; representatives of counterparties; beneficiaries under contracts;
The legal basis for the processing of personal data: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data; the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned by the legislation of the Russian Federation to the operator;; the processing of personal data is necessary for the performance of the contract, the party to which or the beneficiary or for which the personal data subject is the guarantor, as well as for concluding a contract on the initiative of the personal data subject or a contract under which the personal data subject will be the beneficiary or guarantor. An agreement concluded with a personal data subject may not contain provisions restricting the rights and freedoms of the personal data subject, establishing cases of processing personal data of minors, unless otherwise provided for by the legislation of the Russian Federation, as well as provisions allowing inaction of the personal data subject as a condition for concluding the agreement.;
The list of actions: collection; recording; systematization; accumulation; storage; refinement (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction; distribution;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: in accordance with the requirements of the current legislation on tax and accounting, until the expiration of the established retention period of the contract;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.8. Organization and holding of congress, exhibition and other mass public events of the Operator.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; social status; email address; place of residence; registration address; phone number; citizenship; identity document data; profession; position; photo-video image of a person; place of work, academic degree, academic title, biographical information information
Categories of subjects whose personal data is being processed: participants of the congress, exhibition and other mass public events of the Operator;
Legal basis of personal data processing: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
The list of actions: collection; recording; systematization; accumulation; storage; refinement (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction; distribution;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: for 25 years after the end of the event.;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.9. Organization and holding of sports events and contests of the Operator.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; place of birth; marital status; social status; gender; email address; place of residence; registration address; phone number; nationality; identity document data; profession; position; information about education; photo and video image of the person; place of work, place of study, weight, height, other parameters of the human body, size of clothes and shoes.
Special categories of personal data: health information;
Categories of subjects whose personal data is being processed: participants of sports events and contests of the Operator.
Legal basis of personal data processing: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
The list of actions: collection; recording; systematization; accumulation; storage; refinement (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction; distribution;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: for 25 years after the end of the event.;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
2.1.10. Ensuring the functioning of the operator's website on the Internet, providing personalized services and features to website users.
Categories of personal data: information collected through metric programs;
Categories of subjects whose personal data is being processed: site visitors;
Legal basis of personal data processing: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
The list of actions: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction;
Processing methods: automated; with transmission via the internal network of a legal entity; with transmission via the Internet;
Terms of processing and storage: until the end of the operation of the relevant site;
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.1.11. Carrying out the professional activities of a journalist and (or) the legitimate activities of the mass media.
Categories of personal data: last name, first name, patronymic; year of birth; month of birth; date of birth; marital status; social status; gender; profession; position; information about education; photo-video image of a person;
Categories of subjects whose personal data is being processed: authors of materials in the media, persons whose activities are covered in the media
The legal basis for the processing of personal data: the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data; the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;; the processing of personal data is necessary to carry out the professional activities of a journalist and (or)legitimate activities of the mass media or scientific, literary or other creative activities, provided that the rights and legitimate interests of the personal data subject are not violated.;
The list of actions: collection; recording; systematization; accumulation; storage; refinement (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction; distribution;
Processing methods: mixed; with transmission over the internal network of a legal entity; with transmission over the Internet;
Terms of processing and storage: until the expiration of the storage period for copies of mass media.
The order of destruction: the responsible person of the operator destroys the personal data of the personal data subject with the preparation of an appropriate act.
2.2. The Operator does not process special categories of personal data related to race, political views, religious or philosophical beliefs, or intimate life.
2.3. There is no cross-border data transfer by the Operator.
2.4. Processing of biometric personal data in The operator is allowed only with the written consent of the personal data subject, except in cases provided for by the legislation of the Russian Federation.
2.5. The processing of personal data authorized by the personal data subject for dissemination is carried out by the Operator on the basis of the consent of the personal data subject to dissemination in compliance with the prohibitions and conditions for the processing of personal data established by the personal data subject.
3. Procedure and conditions of personal data processing
3.1. Personal data is processed by the Operator in accordance with the requirements of the legislation of the Russian Federation.
3.2. The processing of personal data is carried out with the consent of the subjects of personal data to the processing of their personal data, as well as without it in cases provided for by the legislation of the Russian Federation.
3.3. The Operator processes personal data for each purpose of their processing in the following ways:
- non-automated processing of personal data;
- automated processing of personal data with or without transmission of the received information via information and telecommunication networks;
- mixed processing of personal data.
3.4. The Operator's employees, whose job responsibilities include processing personal data, are allowed to process personal data.
3.5. The processing of personal data for each purpose of processing specified in Section 2 of the Policy is carried out by:
- receiving personal data in oral and written form directly from personal data subjects;
- entering personal data into the registers and information systems of the Operator;
- using other methods of personal data processing.
3.6. Disclosure and dissemination of personal data to third parties is prohibited without the consent of the personal data subject, unless otherwise provided by federal law. Consent to the processing of personal data authorized by the personal data subject for dissemination is issued separately from other consents of the personal data subject to the processing of his personal data.
3.7. The transfer of personal data to the bodies of inquiry and investigation, the Federal Tax Service, the Social Fund of Russia and other authorized executive authorities and organizations is carried out in accordance with the requirements of the legislation of the Russian Federation.
3.8. The Operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, distribution and other unauthorized actions, including:
3.8.1. issues documents defining the policy regarding the processing of personal data, local acts on the processing of personal data;
3.8.2. appoints a person responsible for organizing the processing of personal data;
3.8.3. carries out an assessment of the harm that may be caused to personal data subjects, the ratio of the specified harm and the measures taken by the operator aimed at ensuring the fulfillment of duties stipulated by law.;
3.8.4. familiarizes employees who directly process personal data with the provisions of the legislation of the Russian Federation on personal data, including requirements for personal data protection, documents defining the policy on personal data processing, local acts on personal data processing, and (or) training of these employees.;
3.8.5. applies legal, organizational and technical measures to ensure the security of personal data, including:
– organization of a security regime for the premises in which the information system is located, preventing the possibility of uncontrolled entry or stay in these premises of persons who do not have the right to access these premises;
– ensuring the safety of personal data carriers;
– approval of a document defining the list of persons whose access to personal data processed in the EDMS is necessary for the performance of their official (labor) duties;
3.8.6.identifies threats to the security of personal data during their processing;
3.8.7. stores personal data in conditions that ensure their safety and exclude unauthorized access to them.;
3.9. The Operator stores personal data in a form that allows determining the subject of personal data for no longer than required by each purpose of personal data processing, unless the period of storage of personal data is established by federal law, contract.
3.9.1. Personal data on paper is stored in OOO "Organizing Committee Builder" during the retention periods of documents for which these periods are provided by the legislation on archival affairs in the Russian Federation.
3.9.2. The storage period of personal data processed in personal data information systems corresponds to the storage period of personal data on paper.
3.10. The Operator stops processing personal data in the following cases::
- the fact of their illegal processing has been revealed. The deadline is within three working days from the date of detection.;
- the goal of their processing has been achieved;
- the consent of the personal data subject to the processing of the specified data has expired or been revoked when, according to the Law on Personal Data, the processing of this data is allowed only with consent.
3.11. Upon achieving the purposes of personal data processing, as well as in the event that the personal data subject withdraws consent to their processing, the Operator stops processing this data if:
- nothing else is provided for in the contract to which the personal data subject is a party, beneficiary or guarantor.;
- The operator does not have the right to process personal data without the consent of the personal data subject on the grounds provided for by the Law on Personal Data or other federal laws.;
- no other agreement is provided for between the Operator and the personal data subject.
3.12. When a personal data subject applies to the Operator with a request to stop processing personal data within a period not exceeding 10 working days from the date of receipt by the Operator of the relevant request, the processing of personal data is terminated, except in cases provided for by the Law on Personal Data. The specified period may be extended, but not more than five working days. To do this, the Operator must send a reasoned notification to the personal data subject indicating the reasons for the extension of the deadline.
3.13. When collecting personal data, including through the Internet information and telecommunications network, the Operator ensures the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation, except for the cases specified in the Law on Personal Data.
4. Updating, correction, deletion, destruction of personal data, responses to requests from subjects for access to personal data
4.1. In case of detection of inaccurate personal data when contacting a personal data subject or his representative, or at their request or at the request of Roskomnadzor, the Operator blocks personal data related to this personal data subject from the moment of such request or receipt of the specified request for the verification period, if blocking personal data does not violate the rights and legitimate interests of the subject personal data or third parties.
In case of confirmation of the inaccuracy of personal data, the Operator, based on information provided by the personal data subject or his representative or Roskomnadzor, or other necessary documents, clarifies the personal data within seven working days from the date of submission of such information and removes the blocking of personal data.
4.2. In case of detection of unlawful processing of personal data when contacting (requesting) a personal data subject or his representative or Roskomnadzor, the Operator shall block unlawfully processed personal data related to this personal data subject from the moment of such request or receipt of the request.
4.3. If the Operator, Roskomnadzor or any other interested person identifies the fact of unlawful or accidental transfer (provision, dissemination) of personal data (access to personal data), which has resulted in a violation of the rights of personal data subjects, the Operator:
- within 24 hours, notifies Roskomnadzor of the incident, the alleged causes that led to the violation of the rights of personal data subjects, the alleged harm caused to the rights of personal data subjects, and the measures taken to eliminate the consequences of the incident, as well as provides information about the person authorized by the Operator to interact with Roskomnadzor on issues related to the incident.;
- within 72 hours— notifies Roskomnadzor of the results of the internal investigation of the identified incident and provides information about the persons whose actions caused it (if any).
4.4. The procedure for the destruction of personal data by the Operator.
4.4.1. Terms and conditions of personal data destruction by the Operator:
– achievement of the purpose of personal data processing or loss of the need to achieve this goal — within 30 days;
– achieving the maximum retention period for documents containing personal data — within 30 days;
– the provision by the personal data subject (his representative) of confirmation that the personal data was obtained illegally or is not necessary for the stated purpose of processing — within seven working days;
– withdrawal by the personal data subject of consent to the processing of his personal data, if their retention is no longer required for the purpose of their processing, within 30 days.
4.4.2. Upon achievement of the purpose of personal data processing, as well as in the case of revocation by the personal data subject of consent to their processing, personal data is subject to destruction if:
– nothing else is provided for by the contract to which the personal data subject is a party, beneficiary or guarantor.;
– the operator does not have the right to process personal data without the consent of the subject on the grounds provided for by the Law on Personal Data or other federal laws.;
– unless otherwise provided by another agreement between the Operator and the subject of personal data.
4.4.3. The destruction of personal data is carried out by a commission established by order of the Director of OOO "Organizing Committee Builder".
4.4.4. The destruction of electronic documents containing personal data is carried out by irreversible physical deletion (erasure) of information from machine media (server hard drives, data storage systems), in which data recovery is impossible.
The destruction of personal data on paper media is carried out separately, in accordance with the procedure established for the destruction of tangible media (using paper shredding devices).
4.4.5 Upon the destruction, the commission draws up an Act on the destruction of personal data.
The signed act is handed over to the person responsible for organizing the processing of personal data and filed in the file. A copy of the act is kept for the period specified for storing personnel documents.
5. Cookie Policy on the Operator's websites on the Internet
5.1. The Operator processes user data on its Internet sites (hereinafter referred to as Sites) using Cookies, which make it possible to increase the effectiveness of the Sites. By visiting the Website, by clicking the "Accept" button in the Cookie notification window, the User agrees to the terms of use of Cookies described in this document, including the fact that the Operator may use cookies and other data for their subsequent processing, and may also transfer them to third parties. to conduct research and provide services to Partners.
The User can opt out of processing Cookies in accordance with paragraph 6 of this Policy.
5.2. Cookies are small text files that the website requests from the browser used on the user's computer or mobile device. Cookies contain data about User actions on the site: logins, settings, products in the shopping cart, preferred language, and may also contain information about the user's equipment, date and time of the session. Cookies are stored locally on the user's device.
5.3. Purposes of using Cookies
The purposes of using cookies on Websites are:
- improving the usability of the website;
- optimization of services, goods and services on On the Website in accordance with the interests and needs of users;
- creating a user profile;
- user identification;
- interaction personalization (targeted ad advertising);
- evaluation of the effectiveness of advertising campaigns.
To achieve these goals, the collected data may be transferred to the Company's Partners who provide services in the areas of web analytics, data processing, advertising, informational and promotional newsletters, and others.
5.4. The Operator processes the received data using metric programs and analytics systems such as Yandex.Metrica.
The transfer of personal data of visitors and users of the Operator's website during their processing for analytical purposes by the Yandex.Metrica analytics system is carried out by providing them to a certain circle of people or opening authorized access to them.
The Yandex.Metrica analytics system processes personal data of visitors for analytical purposes in accordance with:
- The Cookie Policy posted on the Internet at: https://yandex.ru/legal/cookies_policy;
- The Terms of Use of the Yandex.Metrica service, posted on the Internet at: https://yandex.ru/legal/metrica_termsofuse;
- The Privacy Policy posted on the Internet at: https://yandex.ru/legal/confidential .
The Yandex.Metrica analytics system places a permanent Cookie file in the client's web browser to identify the Operator's site visitor as a unique user the next time they visit this site. This Cookie file cannot be used by anyone other than the Yandex.Metrica analytics system. The information collected using the Cookie file will be transferred for storage to the Yandex servers (16 L. Tolstogo str., Moscow, 119021, Russia).
5.5. The Websites use the following types of cookies:
- Session cookies are temporary cookies that are stored on the user's device until the website window is closed. Session Cookies allow you to remember information about the User's choice on the previous page in order to avoid the need to re-enter information.
- Persistent cookies are cookies that are stored on the user's computer or mobile device and are not deleted when the browser is closed. Permanent Cookies save the user settings of the site, allowing you to use the user's preferences in future sessions of using the site. These files remain on the user's device for a long time or until they are manually deleted.
- Analytical cookies are cookies that collect information about how a user uses a website: which pages they visit, how much time they spend on them, and which links they follow. Analytical Cookies help the Company analyze user behavior and improve website functionality, as well as determine User preferences and provide useful information on products and services.
- mandatory (technical)— these are cookies, the use of which is necessary to ensure the correct and uninterrupted operation of the website.
5.6. Termination of the use of Cookies
Termination of the use of cookies on This is possible by:
- disabling the use of cookies in the browser settings on the user's device;
- refusal to use the Site.
The algorithms for disabling cookies differ from browser to browser. The User can view information on cookie management in the documentation for the browser used.
Disabling the cookies used by the Website may lead to a decrease in the usability of the Website.
In the event that the User has prohibited the processing of cookies in the browser settings, the Site will use only mandatory cookies.
6. Final provisions
6.1. Other rights and obligations of the Operator in connection with the processing of personal data in the EDMS are determined by the legislation of the Russian Federation.
6.2. Control over the fulfillment of the requirements of this Policy is carried out by the person responsible for organizing the processing of personal data.
6.3. This Policy is subject to revision in the event of changes in the legislation of the Russian Federation in the field of personal data, as well as in the event of changes in the Operator's business processes related to the use of EDMS.