Privacy policy

Policy of the limited liability company "Mica Factory"

regarding the processing of personal data

1. General Provisions

1.1. This Policy of Verona Limited Liability Company regarding the processing of personal data (hereinafter referred to as the Policy) has been developed in pursuance of the requirements of paragraph 2 of part 1 of Art. 18.1 of the Federal Law of July 27, 2006 N 152-FZ "On Personal Data" (hereinafter referred to as the Law on Personal Data) in order to ensure the protection of the rights and freedoms of a person and citizen in the processing of his personal data, including the protection of the rights to privacy, personal and family secrets.

1.2. The Policy applies to all personal data processed by Verona Limited Liability Company (hereinafter referred to as the Operator, Verona LLC).

1.3. The Policy applies to relations in the field of personal data processing that the Operator has both before and after the approval of this Policy.

1.4. In pursuance of the requirements h. 2 Article. 18.1 of the Law on Personal Data, this Policy is published in the public domain on the Internet information and telecommunications network on the Operator's website.





Note:

If the policy regarding the processing of personal data is not published or otherwise unrestricted access to the document is not provided, then the organization and (or) its officials may be held administratively liable under Part 3 of Art. 13.11 of the Code of Administrative Offenses of the Russian Federation (warning or administrative fine for officials from 3 thousand to 6 thousand rubles, for legal entities - from 15 thousand to 30 thousand rubles).


1.5. Basic concepts used in the Policy:

personal data - any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data);

personal data operator (operator) - a state body, municipal body, legal entity or individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;

processing of personal data - any action (operation) or a set of actions (operations) with personal data performed using automation tools or without their use. The processing of personal data includes, among other things:

collection;

record;

systematization;

· accumulation;

·    storage;

clarification (update, change);

extraction;

·    usage;

transfer (distribution, provision, access);

· depersonalization;

Blocking

removal;

destruction;

automated processing of personal data - processing of personal data using computer technology;

dissemination of personal data - actions aimed at disclosing personal data to an indefinite circle of persons;

provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons;

blocking of personal data - temporary suspension of the processing of personal data (unless the processing is necessary to clarify personal data);

destruction of personal data - actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed;

depersonalization of personal data - actions as a result of which it becomes impossible to determine the ownership of personal data by a specific subject of personal data without the use of additional information;

personal data information system - a set of personal data contained in databases and information technologies and technical means that ensure their processing.

1.6. Basic rights and obligations of the Operator.

1.6.1. The operator has the right:

1) independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations provided for by the Law on Personal Data and the regulatory legal acts adopted in accordance with it, unless otherwise provided by the Law on Personal Data or other federal laws;

2) entrust the processing of personal data to another person with the consent of the subject of personal data, unless otherwise provided by federal law, on the basis of an agreement concluded with this person. The person processing personal data on behalf of the Operator is obliged to comply with the principles and rules for the processing of personal data provided for by the Law on Personal Data, respect the confidentiality of personal data, take the necessary measures aimed at ensuring the fulfillment of the obligations provided for by the Law on Personal Data;

3) in case of withdrawal by the subject of personal data of consent to the processing of personal