1.1. The policy of personal data processing in JSC "Mining Machines" (hereinafter referred to as the Policy) defines the basic principles, objectives, conditions and methods of personal data processing, lists of subjects and personal data processed in JSC "Mining Machines" , the functions of JSC "Mining Machines" in the processing of personal data, the rights of personal data subjects, and also implemented in JSC "Mining Machines" requirements for the protection of personal data.
1.2. This Policy has been compiled taking into account the requirements of the Constitution of the Russian Federation, in accordance with paragraph 2 of Article 18.1 of the Federal Law "On Personal Data" No. 152-FZ of July 27, 2006, as well as other regulatory legal acts of the Russian Federation in the field of protection and processing of personal data and applies to all personal data (hereinafter referred to as Data), which Mining Machines JSC (hereinafter referred to as the Operator) can receive from the subject of personal data.
1.3. The provisions of the Policy serve as the basis for the development of local regulations governing the processing of personal data of employees and other personal data subjects in Mining Machines JSC.
1.4. This Policy comes into force at the time of its approval by a separate order of the Director of JSC "Mining Machines" and is valid indefinitely until replaced by a new local legal act of a similar purpose.
1.5. Mining Machines JSC has the right to make changes to this Policy. When making changes, the date of the last revision update is indicated in the Policy header. Policy adjustment is carried out by separate orders of the company's director.
1.6. In order to implement the Policy provisions, Mining Machines JSC develops relevant local regulations and other documents, including:
Personal data (PD) — any information related directly or indirectly to a specific or identifiable individual (subject of personal data). Information — information (messages, data) regardless of the form of their presentation.
Operator — a state body, municipal body, legal entity or individual, independently or jointly with other persons organizing and (or) processing personal data, as well as determining purposes of processing of personal data to be processed, actions (operations) performed with personal data.
Processing of personal data — any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data data.
Automated processing of personal data — processing of personal data using computer technology.
Personal Data Information System (ISPS) — a set of personal data contained in databases and information technologies and technical means that ensure their processing.
Provision of personal datax — actions aimed at disclosure of personal data to a certain person or a certain circle of persons.
Dissemination of personal data — actions aimed at disclosure of personal data to an indefinite circle of persons.Cross—border transfer of personal data is the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity.
Blocking of personal data — temporary termination of processing of personal data (except in cases where processing is necessary to clarify personal data).
Destruction of personal data — actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed.
Depersonalization of personal data — actions as a result of which it becomes impossible to determine the identity of personal data to a specific subject of personal data without using additional information .