This Policy on the personal data processing by the «SOCIAL INITIATIVES DEVELOPMENT FUND» (Policy) defines the main provisions implemented when processing personal data by the «SOCIAL INITIATIVES DEVELOPMENT FUND» (Fund).
The purpose of adopting the Policy is to comply with the requirements of the legislation in the field of personal data protection, based on the Constitution of the Russian Federation and international treaties of the Russian Federation and consisting of the Federal Law N 152-F dd 27.07.2006 "About personal data" and other federal laws and regulations that define the cases and features of personal data processing.
Personal data is any information directly or indirectly related to a particular or identifiable individual (the subject of the personal data).
Operator is a state body, municipal authority, legal entity or individual (independently or jointly with other persons) organizing and (or) processing personal data, as well as determining the purposes of personal data processing, composition of personal data, to be processed, actions (transactions) carried out with personal data.
Processing of personal data is any action (operation) or set of actions (operations) on personal data performed with the use of automation tools or without the use of such tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, removal, destruction of personal data.
Automated processing of personal data is processing of personal data with the use of computer technology.
Dissemination of personal data is actions aimed at disclosing personal data to an indefinite number of persons.
Provision of personal data is actions aimed at disclosing personal data to a specific person or a specific group of people.
Blocking of personal data is temporary cessation of personal data processing (except in cases where processing is necessary to clarify personal data).
Removal of personal data is action as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which tangible media of personal data are destroyed.
Depersonalization of personal data is action as a result of which it becomes impossible to determine the ownership of personal data without the use of additional information.
Personal data information system is a set of databases personal data, information technologies and technical means that ensure their processing.
Cross-border transfer of personal data is transfer of personal data to a governmental body of a foreign state, a foreign individual or a foreign legal entity.
Personal data shall be processed on a lawful and fair basis.
Personal data processing shall be limited to achieving specific, predetermined and lawful purposes. Processing of personal data that is incompatible with the purposes of collecting personal data shall not be permitted.
Databases containing personal data processed for incompatible purposes shall not be combined
The only personal data to be processed shall be the one that meets the purposes of processing.
The content and volume of personal data processed shall correspond to the stated purposes of processing. The personal data processed shall not be excessive in relation to the stated purposes of their processing.
Personal data accuracy, their sufficiency and, where necessary, relevance in relation to the purposes of processing shall be ensured while the personal data processed. The operator shall take the necessary measures to delete or clarify incomplete or inaccurate data.
Personal data shall be stored in a form that allows the identification of the subject of personal data, no longer than required by the purposes of personal data processing, unless the storage period of personal data is established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor. Processed personal data shall be subject to destruction or depersonalization upon achievement of the purposes of processing or in the event of loss of the need to achieve these purposes, unless otherwise provided by federal law.
Personal data are processed for the following purposes:
ensuring compliance with the Constitution of the Russian Federation, legislative and other regulatory legal acts of the Russian Federation, local regulatory acts of the Fund;
implementing the functions, powers and duties imposed on the Fund by the legislation of the Russian Federation, including personal data provision to government bodies, the Pension Fund of the Russian Federation, the Social Insurance Fund of the Russian Federation, the Federal Compulsory Medical Insurance Fund, as well as other government bodies;
regulating labor relations with employees of the Fund;
protecting the life, health or other vital interests of personal data subjects;
preparing, concluding, executing and terminating contracts with counterparties;
execution of judicial acts, acts of other bodies or officials subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings;
exercise of the rights and legitimate interests of the Fund within the framework of the implementation of types of activities stipulated by the Charter and other local regulations, or third parties or the achievement of socially significant goals.
for other legal purposes.
Personal data must be processed in compliance with the principles and rules stipulated by Federal Laws.
Processing of personal data is permitted in the following cases:
personal data is processed with the consent of the personal data subject to the processing of his/her personal data;
personal data is processed to achieve the purposes stipulated by an international treaty of the Russian Federation or by law, to implement and fulfill the functions, powers and duties imposed on the operator by the legislation of the Russian Federation;
processing of personal data is necessary for the execution of justice, execution of a court act, an act of another body or an official in accordance with the law of the Russian Federation on enforcement proceeding;
processing of personal data is necessary for the exercise of powers of federal executive bodies, bodies of state extra-budgetary funds, executive bodies of state power of constituent entities of the Russian Federation, local government bodies and functions of organizations involved in the provision of state and municipal services, respectively, stipulated by Federal Law No. 210-FZ dd July 27, 2010 "On the Organization of the Provision of State and Municipal Services", including registration of the personal data subject on the unified portal of state and municipal services and (or) regional portals of state and municipal services;
processing of personal data is necessary for the performance of an agreement to which the personal data subject is a party, beneficiary or guarantor, as well as for concluding an agreement on the initiative of the personal data subject or an agreement under which the personal data subject will be a beneficiary or guarantor;
processing of personal data is necessary to protect the life, health or other vital interests of the personal data subject, if obtaining the consent of the personal data subject is impossible;
personal data processing is necessary for the exercise of the rights and legitimate interests of the operator or third parties or for the achievement of socially significant purposes, provided that the rights and freedoms of the subject are not violated;
personal data processing is necessary for the implementation of professional activities of a journalist and (or) the lawful activities of a mass media outlet or scientific, literary or other creative activities, provided that the rights and freedoms of the subject are not violated;
personal data processing is carried out for statistical or other research purposes, with the exception of the purposes specified in Article 15 of Federal Law No. 152-FZ dd 27.07.2006 "On Personal Data", subject to mandatory anonymization of personal data;
personal data, access to which is granted by the personal data subject or at his request to an unlimited number of persons (hereinafter - personal data made publicly available by the personal data subject) shall be processed;
personal data which is subject to publication or mandatory disclosure in accordance with federal law shall be processed.
The operator has the right to assign the processing of personal data to another person with the consent of the personal data subject, unless otherwise provided by federal law, on the basis of an agreement concluded with this person, including a state or municipal contract, or by the adoption of a corresponding act by a state or municipal body (hereinafter referred to as the operator's assignment). The person processing personal data on the operator's assignment is obliged to comply with the principles and rules for processing personal data stipulated by Federal Law No. 152-FZ dd 27.07.2006 "On Personal Data".
The Fund takes the necessary and sufficient organizational and technical measures stipulated by the legislation in the field of personal data protection to protect personal data requiring confidentiality, to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions by third parties.
When entrusting the processing of personal data to third parties, the entrustment shall specify the requirements for the protection of the personal data being processed in accordance with the requirements of the legislation in the field of personal data.
Internal control over the compliance of personal data processing with the legislation and regulatory legal acts adopted in accordance with it is carried out in the manner established by the Government of the Russian Federation.
This Policy does not apply to relations arising from:
processing of personal data by individuals exclusively for personal and family needs, provided that the rights of the subject are not violated;
organization of storage, compilation, accounting and use of documents of the Archival Fund of the Russian Federation and other archival documents containing personal data in accordance with the legislation on archival affairs in the Russian Federation;
processing of personal data classified in accordance with the established procedure as information constituting a state secret;
provision of information on the activities of courts in the Russian Federation by authorized bodies pursuant to the Federal Law N 262-FZ dd 22 December 2008 "On ensuring access to information on the activities of courts in the Russian Federation".
