Privacy Policy
1. General provisions
1.1. The policy of processing personal data in JSC "Baltic Industrial Company" (hereinafter referred to as the Policy) applies to all personal data that JSC "Baltic Industrial Company" can receive from personal data subjects - employees of JSC "Baltic Industrial Company" in connection with the implementation of labor relations , customers and counterparties of JSC "Baltic Industrial Company" in connection with the implementation of JSC "Baltic Industrial Company" statutory activities. This Policy defines the principles, procedure and conditions for the processing of personal data of employees, clients and counterparties of JSC "Baltic Industrial Company" whose personal data are processed by JSC "Baltic Industrial Company" in order to ensure the protection of human and civil rights and freedoms while processing personal data in including protection of rights to privacy, personal and family secrets, and also establishes the responsibility of employees of JSC "Baltic Industrial Company" with access to
1.2. The policy is developed taking into account the requirements of the Constitution of the Russian Federation, legislative and other normative legal acts of the Russian Federation in the field of personal data.
1.3. The provisions of the Policy form the basis for the development of local regulations governing the processing of personal data of employees of JSC "Baltic Industrial Company" and other subjects of personal data in JSC "Baltic Industrial Company".
2. Legislative and other normative legal acts of the Russian Federation, in accordance with which the Policy for the processing of personal data in JSC "Baltic Industrial Company" is defined
2.1. The policy of processing personal data in JSC "Baltic Industrial Company" is determined in accordance with the following regulatory legal acts:
- The Labor Code of the Russian Federation
- Federal Law of July 27, 2006, No. 149-FZ "On Information, Information Technologies and Information Protection"
- Federal Law of May 2, 2006, No. 59-FZ "On the Procedure for Considering Applications from Citizens of the Russian Federation";
- Russian Federation Government Resolution No. 687 of September 15, 2008 "On Approval of the Regulations on the Specifics of Processing Personal Data Performed Without the Use of Automation Tools";
- Russian Government Resolution No. 1119 of November 1, 2012 "On Approving the Requirements for the Protection of Personal Data in the Processing of Personal Data Information Systems";
- FSTEC Order No. 21 of February 18, 2013 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Safety of Personal Data when Handled in Personal Data Information Systems";
- order of Roskomnadzor of September 5, 2013 No. 996 "On approval of requirements and methods for the depersonalization of personal data";
- other regulatory legal acts of the Russian Federation and regulatory documents of authorized state bodies
2.2. In order to implement the provisions of the Policy, JSC "Baltic Industrial Company" develops appropriate local regulations and other documents.
3. The basic concepts used in JSC "Baltic Industrial Company" in this Privacy Policy
Personal data is any information related to a person directly or indirectly defined or determined by a personal data subject.
Information - information (messages, data) regardless of the form of their presentation.
Operator - a public authority, a municipal body, a legal entity or an individual, independently or jointly with other persons organizing and (or) processing personal data , as well as defining the purposes of processing personal data, the composition of personal data to be processed, the actions (operations) performed with personal data.
Personal data processing - any action (operation) or set of actions (operations) performed using automation tools or without using such tools with personal data collection, recording, systematization, accumulation, storage, updating (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
Automated processing of personal data - processing of personal data from