Personal Data Policy

General terms

Personal Data Policy (hereinafter – the Policy) is worked out in accordance with the Federal Law of 27.07.2006 №152 “About personal data” – FL-152).

This Policy determines the procedure of personal data processing and security measures of personal data in JSS “Ryazan region Development corporation” (hereinafter – the Operator) in order to protect human and citizen rights and freedoms while processing his/her personal data including protection of the sanctity of private life, personal and family secrets. 

This Policy uses the following terms:

• Automatic personal data processing – personal data processing by means of computer technology;
• Blocking of personal data – temporal cessation of personal data processing (with the exception of the cases when processing is necessary for specifying of personal data);
• Personal data information system – is a complex of the personal data, contained in the database and the information technologies and technical equipment which provide its processing;
• Depersonalization of personal data — actions as a result of which it becomes impossible to determine the identity of personal data to a specific subject of personal data without the use of additional information;
• Personal data processing refers to any operations performed on this personal data (whether those operations are automated or not). Common types of personal data processing include (but are not limited to) collecting, recording, organizing, structuring, storing, modifying, consulting, using, publishing, combining, erasing, and destroying data;
• A personal data operator is a natural or legal person, as well as a municipal or state institution that processes and receives personal information, determines the purposes and procedures for the provided data;
• Personal data - any information relating to an identified or identifiable natural person (data subject);
• Providing personal information – actions, aimed at disclosure of personal data to a definite person or a definite group of people;
• Dissemination of personal data – actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or at making an unlimited group of persons familiar with personal data, including publication of personal data in mass media, information and telecommunications networks, or otherwise granting access to personal data;
• Cross-border transfer of personal data – a transfer of personal data to a foreign government body.