1. This Regulation on the processing of personal data (hereinafter referred to as the Regulation, this Regulation) has been developed by the ENSO Foundation for Cultural Initiatives (hereinafter also referred to as the Operator) and is applied in accordance with clause 2, part 1 of Art. 18.1. Federal Law of 27.07.2006 No 152-FL "On Personal Data". This Regulation determines the Operator's policy regarding the processing of personal data.
2. All issues related to the processing of personal data that are not regulated by this Regulation are resolved in accordance with the current legislation of the Russian Federation in the field of personal data. This Regulation and changes to it are approved by the head of the Operator and are introduced by the order of the Operator.
3. In accordance with paragraph 1 of Art. 3 of the Federal Law of July 27, 2006 No. 152-FL "On personal data", personal data of clients, individuals means any information relating directly or indirectly to a client, an individual (hereinafter referred to as personal data) determined or determined on the basis of such information.
4. The Fund for Cultural Initiatives "ENSO" is the operator, organizing and (or) carrying out the processing of personal data, as well as determining the purposes and content of the processing of personal data.
5. The purpose of processing personal data is:
ensuring the protection of human and civil rights and freedoms when processing his personal data, including the protection of the rights to privacy, personal and family secrets;
the provision by the Operator to individuals and legal entities of services related to the economic activities of the Operator, including contacts of the Operator with such persons, including by e-mail, by phone, at the address provided by the relevant person;
sending consultations, replies to the applicants using the means of communication and the contract data indicated by them;
promotion of goods, works, services of the Operator on the market by making direct contacts with a potential consumer using communication means (allowed only subject to the prior consent of the subject of personal data).
6. Processing is organized by the Operator on the following principles:
the legality of the purposes and methods of processing personal data, good faith and fairness in the activities of the Operator;
the reliability of personal data, their sufficiency for the purposes of processing, the inadmissibility of processing personal data that are redundant in relation to the purposes stated when collecting personal data;
processing only personal data that meet the purposes of their processing;
compliance of the content and volume of processed personal data with the stated processing objectives. The processed personal data should not be redundant in relation to the stated purposes of their processing;
inadmissibility of combining databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
ensuring the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of personal data processing. The operator takes the necessary measures or ensures their adoption to delete or clarify incomplete or inaccurate data;
storing personal data in a form that allows you to determine the subject of personal data, no longer than required by the purpose of processing personal data.
7. The processing of personal data is carried out in compliance with the principles and rules stipulated by the Federal Law of July 27, 2006 No. 152-FL "On Personal Data" and this Regulation.
8. Personal data is processed with and without the use of automation tools.
9. In accordance with the goals and objectives set, the Operator, prior to the start of the processing of personal data, appoints a person responsible for organizing the processing of personal data.
The person responsible for organizing the processing of personal data receives instructions directly from the executive body of the Operator and is accountable to him.
The person responsible for organizing the processing of personal data has the right to draw up and sign the notification provided for in Part 1 and 3 of Art. 22 of the Federal Law of July 27, 2006 No. 152-FL "On Personal Data".
10. Employees of the Operator directly involved in the processing of personal data must be familiarized with the provisions of the legislation of the Russian Federation on personal data, including the requirements for the protection of personal data, documents defining the Operator's policy regarding the processing of personal data, local acts on the processing of personal data, with this Regulation and amendments to it.
11. When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with Art. 19 of the Federal Law of July 27, 2006 No. 152-FL "On Personal Data".
12. When collecting personal data using information and telecommunication networks, the Operator is obliged to publish in the relevant information and telecommunication network a document defining its policy regarding the processing of personal data, and information on the requirements for the protection of personal data, as well as to provide access to the specified document using the means of the corresponding information and telecommunication network.
13. Conditions for the processing of personal data by the Operator. The processing of personal data is allowed in the following cases:
the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or by law, for the implementation and implementation of the functions, powers and duties imposed on the Operator by the legislation of the Russian Federation;
the processing of personal data is necessary for the execution of an agreement to which the subject of personal data is a party or a beneficiary or guarantor, including if the Operator exercises his right to assign rights (claims) under such an agreement, as well as to conclude an agreement on the initiative of the subject of personal data or an agreement under which the subject of personal data will be the beneficiary or guarantor;
the processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data, if it is impossible to obtain the consent of the subject of personal data;
processing of personal data is necessary to exercise the rights and legitimate interests of the Operator or third parties or to achieve socially significant goals, provided that this does not violate the rights and freedoms of the subject of personal data;
the processing of personal data is carried out for statistical or other research purposes, with the exception of the purposes specified in Art. 15 of the Federal Law of July 27, 2006 No. 152-FL "On Personal Data", subject to the mandatory depersonalization of personal data;
processing of personal data is carried out, access of an unlimited number of persons to which is provided by the subject of personal data or at his request;
processing of personal data subject to publication or mandatory disclosure in accordance with federal law.
14. The storage of personal data should be carried out in a form that makes it possible to determine the subject of personal data, no longer than the purpose of their processing requires, and they are subject to destruction upon reaching the processing goals or in case of loss of the need to achieve them in the manner prescribed by the Regulation on the storage of personal data. data from the Operator.
15. Personal data processed in information systems are subject to protection from unauthorized access and copying. The security of personal data during their processing in information systems is ensured with the help of a personal data protection system, which includes organizational measures and information protection means. Hardware and software must meet the requirements established in accordance with the legislation of the Russian Federation to ensure the protection of information.
16. Interaction with federal executive authorities on the processing and protection of personal data of subjects whose personal data is processed by the Operator is carried out within the framework of the legislation of the Russian Federation.