Percarbonat Ltd. - Russian producer of sodium percarbonate, environment friendly, oxygen containing component for production of synthetic detergents, bleachers and household chemicals. Our production indeed makes the life of millions of people easier, because due to our environment friendly bleacher, comprised in the most detergents, linen in millions households becomes whiter and stains are washed out easier. And there isn’t any adverse effect on environment as percarbonate decomposes into harmless soda ash, oxygen and water.
1.1. The present Policy of Percarbonat Limited Liability Company on the processing of personal data (hereinafter referred to as the Policy) has been developed in pursuance of the requirements of paragraph 2 of part 1 of Art. 18.1 of the Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" (hereinafter referred to as the Law on Personal Data) in order to ensure the protection of the rights and freedoms of a person and citizen in the processing of his/her personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. The Policy applies to all personal data processed by Percarbonat Limited Liability Company (hereinafter referred to as the Operator).
1.3. The Policy applies to relations in the field of personal data processing that was in possession of the Operator both before and after the approval of this Policy.
1.4. In pursuance of the requirements of part 2 of Art. 18.1 of the Law on Personal Data, this Policy is published in the public domain on the Internet on the Operator's website.
1.5. Basic terms used in the Policy and their definitions:
personal data– any information relating directly or indirectly to a specific or identifiable natural person (personal data subject);
personal data operator (operator) – a government agency, municipal authority, legal entity or natural person, which independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of processing, the scope of personal data to be processed, the actions (operations) performed with personal data;
personal data processing –any action (operation) or a set of actions (operations) with personal data performed using automation tools or without their use. Personal data processing includes, without limitation:
automated personal data processing– processing of personal data using computer technology;
distribution of personal data – actions aimed at disclosing personal data to an unlimited number of persons;
personal data sharing – actions aimed at disclosing personal data to a certain person or a certain number of persons;
blocking of personal data – interruption in the processing of personal data (except the cases when processing is necessary to rectify personal data);
destruction of personal data – actions, as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which material media bearing the personal data are destroyed;
depersonalization of personal data – actions as a result of which it becomes impossible to determine the ownership of personal data by a specific personal data subject without the use of additional information;
personal data information system – a set of personal data contained in databases and information technologies and technical means that ensure their processing.
1.6. Basic rights and obligations of the Operator.
1.6.1. The Operator has the right to:
1.6.2. The Operator is obliged to:
1.7. Basic rights of the personal data subject. Personal data subject has the right to:
1.8. Supervision over the fulfillment of the requirements of this Policy shall be carried out by an authorized person responsible for organizing the processing of personal data by the Operator.
1.9. Responsibility for violation of the Russian Federation legislation and Percarbonat LLC regulations in the field of processing and protecting personal data shall be determined in accordance with the Russian Federation legislation.
2.1. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. Personal data processing incompatible with the purposes of personal data collecting is not allowed.
2.2. Only personal data that is consistent with the purposes of its processing is subject to processing.
2.3. Personal data processing by the Operator is carried out for the following purposes:
2.4. The employees personal data processing may be carried out solely for the purpose of ensuring compliance with laws and other regulatory legal acts.
3.1. The legal basis for personal data processing is a set of regulatory legal acts, in pursuance of which and in accordance with which the Operator processes personal data, including:
3.2. Further, the legal basis for personal data processing is:
4.1. To achieve the processing purposes specified in this Policy, the Operator processes the personal data of its employees, as well as of other personal data subjects who are not the employees of the Operator, including:
4.2. The Operator may process personal data of the following categories of personal data subjects:
4.2.1. Applicants for the vacant positions of the Operator - for the purposes of recruiting personnel for the vacant positions of the Operator, the implementation of access control:
4.2.2. Employees of the Operator and former employees - for the purposes of compliance with the labor legislation within the framework of labor and other directly related relations:
4.2.3. Close relatives of the Operator's employees - for the purposes of compliance with social and tax legislation within the framework of labor and other directly related relations:
4.2.4. Employees and representatives of the Operator's counterparties, students, visitors to the Operator's facilities and participants in events held by the Operator (natural persons) - for the purposes of carrying out activities in accordance with the charter of Percarbonat LLC:
4.2.5. Representatives (employees) of the Operator's clients and counterparties (legal entities) - for the purposes of carrying out activities in accordance with the charter of Percarbonat LLC:
4.3. Processing by the Operator of biometric personal data (information that characterizes the physiological and biological characteristics of a person, on the basis of which it is possible to establish his/her identity) is carried out in accordance with the legislation of the Russian Federation.
Processing of biometric personal data is only allowed with the written consent of the personal data subject. The exception shall be the circumstances provided for in Part 2 of Art. 11 of the Law on Personal Data.
4.4. The Operator does not process special categories of personal data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life, except as provided by the legislation of the Russian Federation.
5.1. Processing of personal data is carried out by the Operator in accordance with the requirements of the legislation of the Russian Federation.
5.2. Processing of personal data is carried out with the consent of personal data subjects to the processing of their personal data, as well as without such consent in cases provided for by the legislation of the Russian Federation.
5.3. The Operator processes personal data for each purpose of its processing by means of:
5.4. Only the Employees of the Operator whose duties include the processing of personal data are allowed to process personal data.
5.5. Processing of personal data for each purpose of processing specified in clause 2.3 of the Policy is carried out by:
5.6. Disclosing to third parties and distributing personal data without the consent of the personal data subject is not allowed, unless otherwise provided by federal law. Consent to personal data processing authorized by the personal data subject for distribution is issued separately from other consents of the personal data subject to his/her personal data processing .
Requirements for the content of the consent personal data processing authorized by the personal data subject for distribution are approved by Order No. 18 of Roskomnadzor dated February 24, 2021.
5.7. Transfer of personal data to the investigation authorities, the Federal Tax Service, the Social Fund of Russia and other authorized executive authorities and organizations is carried out in accordance with the requirements of the legislation of the Russian Federation.
5.8. The operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access to it, destruction, modification, blocking, distribution and other unauthorized actions, including:
5.9. The Operator stores personal data in a form that allows to determine the personal data subject, during the period no longer than required by each purpose of processing personal data, if the period of personal data storage is not established by federal law or contract.
5.9.1. Personal data on paper is stored at Percarbonat LLC during the periods of documents storage for which these periods are provided for by the legislation on archiving of the Russian Federation (Federal Law No. 125-FZ dated October 22, 2004 "On archiving in the Russian Federation", the list of standard managerial archival documents generated in the course of the activities of state bodies, local governments and organizations, indicating the terms of their storage (approved by the Order No. 236 of the Federal Archive dated December 20, 2019)).
5.9.2. The period of storage of personal data processed in personal data information systems corresponds to the period of storage of personal data on paper.
The Company establishes the following periods for processing and storing personal data:
5.10. The Operator stops processing personal data in the following cases:
5.11. Upon reaching the purposes of processing personal data, as well as in the event that the personal data subject withdraws consent to their processing, the Operator stops processing this data unless:
5.12. When the personal data subject applies to the Operator with a request to stop the processing of personal data within a period not exceeding 10 business days from the date the Operator receives the relevant request, the processing of personal data is terminated, except as otherwise provided by the Law on Personal Data. The specified period may be extended, but not more than five business days. To do this, the Operator shall send a reasoned notification to the personal data subject indicating the reasons for the extension of the period.
5.13. When collecting personal data, including through the Internet information and telecommunications network, the Operator ensures recording, systematization, accumulation, storage, clarification (updating, changing), retrieval of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation, for except in the cases specified in the Law on Personal Data.
6.1. Confirmation of the fact of personal data processing by the Operator, legal grounds and purposes of personal data processing, as well as other information specified in Part 7 of Art. 14 of the Law on Personal Data are provided by the Operator to the personal data subject or his/her representative within 10 business days from the date of application or receipt of a request from the personal data subject or his/her representative. The specified period may be extended, but should not be more than five business days. To do this, the Operator should send a reasoned notification to the personal data subject indicating the reasons for extending the period for providing the requested information.
The information provided does not include personal data relating to other personal data subjects, unless there are legal grounds for disclosing such personal data.
The request shall contain:
The request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.
The operator provides the information specified in Part 7 of Art. 14 of the Law on Personal Data, to the personal data subject or his/her representative in the form in which the relevant appeal or request is sent, unless otherwise specified in the appeal or request.
If in the appeal (request) of the personal data subject, in accordance with the requirements of the Law on Personal Data, all the necessary information is not reflected or the subject does not have the right to access the requested information, then a reasoned refusal is sent to him.
The right of the personal data subject to access his/her personal data may be limited in accordance with Part 8 of Art. 14 of the Law on Personal Data, including if the access of the personal data subject to his/her personal data violates the rights and legitimate interests of third parties.
6.2. In the event that inaccurate personal data is detected when the personal data subject or his/her representative contacts, or at their request or at the request of Roskomnadzor, the Operator blocks personal data related to this personal data subject from the moment of such request or receipt of the specified request for the period of verification, if the blocking of personal data does not violate the rights and legitimate interests of the personal data subject or third parties.
If the fact of inaccuracy of personal data is confirmed, the Operator, on the basis of information provided by the personal data subject or his/her representative or Roskomnadzor, or other necessary documents, clarifies personal data within seven business days from the date of submission of such information and removes the blocking of personal data.
6.3. If unlawful processing of personal data is detected when a personal data subject or his/her representative or Roskomnadzor contacts (requests) the Operator blocks the unlawfully processed personal data relating to this personal data subject from the moment such a request or receipt of a request.
6.4. If the Operator, Roskomnadzor or another interested person reveals the fact of illegal or accidental transfer (provision, distribution) of personal data (access to personal data), which resulted in a violation of the rights of personal data subjects, the Operator:
6.5. The procedure for the destruction of personal data by the Operator.
6.5.1. Conditions and terms for the destruction of personal data by the Operator:
6.5.2. Upon reaching the purpose of processing personal data, as well as in the event that the personal data subject withdraws consent to their processing, personal data shall be destroyed if:
6.5.3. Methods for the destruction of personal data are established in the local regulations of the Operator.
6.5.4. If it is not possible to destroy personal data within the specified period, the Operator blocks such personal data and ensures the destruction of personal data within a period of no more than 6 months, unless another period is established by federal laws.