Official site of the MFC of the Nizhny Novgorod region. Preliminary appointment at the MFC, checking the readiness of the case, a list of departments on the map, addresses and telephone numbers of the MFC.

Vaccination against COVID-19

By continuing to use this site, you express your consent to the processing of your personal data using the Yandex Metrika Internet service.

The procedure for processing your personal data, as well as the applicable requirements for their protection, are contained in the Operator's Policy regarding the processing of personal data.

POLICY regarding the processing of personal data in the state budget institution of the Nizhny Novgorod region Authorized multifunctional center for the provision of state and municipal services in the Nizhny Novgorod region (GBU NO Authorized MFC)

1. General Provisions

1.1. This Policy regarding the processing of personal data (hereinafter referred to as the Policy) in the State Budgetary Institution NO Authorized MFC (hereinafter referred to as the Operator), TIN 526001001, located at the address: 603001, Nizhny Novgorod, st. Rozhdestvenskaya, 24, was developed in accordance with the Constitution of the Russian Federation, the Labor Code of the Russian Federation, the Civil Code of the Russian Federation, the Federal Law of July 27, 2006 No. 149-FZ On Information, Information Technologies and Information Protection, Federal Law 27 July 2006 No. 152-FZ On Personal Data, Decree of the Government of the Russian Federation of 01.11.2012 No. 1119 On Approval of Requirements for the Protection of Personal Data when Processing in Personal Data Information Systems, other federal laws and regulations.

1.2. The Policy defines the purposes and general principles of the processing of the Operator's personal data using automation tools and without the use of such tools, as well as the implemented personal data protection measures.

1.3. The policy has been developed in order to ensure the protection of the rights and freedoms of the subject of personal data when processing his personal data (hereinafter referred to as PD).

1.4. The Policy is a public document of the Operator and provides for the possibility of familiarization with it by any person.

1.5. The provisions of the Policy serve as the basis for the development of local regulations governing the processing of personal data of employees of the State Budgetary Institution NO Authorized MFC and other subjects of personal data in the State Budgetary Institution NO Authorized MFC.

2. Purposes of personal data processing

2.1. Personal data is processed by the Operator for the following purposes:

2.1.1. Provision of state and municipal services, including in electronic form, in accordance with the administrative regulations for the provision of these services on the basis of agreements concluded by federal executive authorities, state non-budgetary funds, executive authorities of the Nizhny Novgorod Region, local authorities with the Operator;

2.1.2.Portal_MFC_Nizhegorodskoy_oblasti

• Portal of the MFC of the Nizhny Novgorod region
• Official site of the MFC of the Nizhny Novgorod region. Preliminary appointment at the MFC, checking the readiness of the case, a list of departments on the map, addresses and telephone numbers of the MFC.
• Vaccination against COVID-19
• By continuing to use this site, you express your consent to the processing of your personal data using the Yandex Metrika Internet service.

2.1.3.The procedure for processing your personal data, as well as the applicable requirements for their protection, are contained in the Operator's Policy regarding the processing of personal data.

2.1.4.POLICY regarding the processing of personal data in the state budget institution of the Nizhny Novgorod region Authorized multifunctional center for the provision of state and municipal services in the Nizhny Novgorod region (GBU NO Authorized MFC)

2.1.5.1. General Provisions

1.1. This Policy regarding the processing of personal data (hereinafter referred to as the Policy) in the State Budgetary Institution NO Authorized MFC (hereinafter referred to as the Operator), TIN 526001001, located at the address: 603001, Nizhny Novgorod, st. Rozhdestvenskaya, 24, was developed in accordance with the Constitution of the Russian Federation, the Labor Code of the Russian Federation, the Civil Code of the Russian Federation, the Federal Law of July 27, 2006 No. 149-FZ On Information, Information Technologies and Information Protection, Federal Law 27 July 2006 No. 152-FZ On Personal Data, Decree of the Government of the Russian Federation of 01.11.2012 No. 1119 On Approval of Requirements for the Protection of Personal Data when Processing in Personal Data Information Systems, other federal laws and regulations.

1.2. The Policy defines the purposes and general principles of the processing of the Operator's personal data using automation tools and without the use of such tools, as well as the implemented personal data protection measures.

1.3. The policy has been developed in order to ensure the protection of the rights and freedoms of the subject of personal data when processing his personal data (hereinafter referred to as PD).

• 1.4. The Policy is a public document of the Operator and provides for the possibility of familiarization with it by any person.
• 1.5. The provisions of the Policy serve as the basis for the development of local regulations governing the processing of personal data of employees of the State Budgetary Institution NO Authorized MFC and other subjects of personal data in the State Budgetary Institution NO Authorized MFC.
• 2. Purposes of personal data processing
• 2.1. Personal data is processed by the Operator for the following purposes:
• Provision of state and municipal services, including in electronic form, in accordance with the administrative regulations for the provision of these services on the basis of agreements concluded by federal executive authorities, state non-budgetary funds, executive authorities of the Nizhny Novgorod Region, local authorities with the Operator;
• Implementation and implementation of functions, powers and duties assigned by the legislation of the Russian Federation, in particular:
• fulfillment of the requirements of legislation in the field of labor and taxation;
• personnel accounting;
• maintaining current accounting and tax accounting, the formation, manufacture and timely submission of accounting, tax and statistical reporting;
• Fulfilling the requirements of the legislation to determine the procedure for processing and protecting PDN citizens who are clients or counterparties of the State Budgetary Institution of Higher Professional Education of the MFC (hereinafter referred to as personal data).
• The exercise of the rights and legitimate interests of the State Budgetary Institution of Higher Professional Education, the “authorized MFC” in the framework of the activities provided for by the Charter and other local regulatory acts of the State Budgetary Institution of Higher Professional Education, or third parties or the achievement of socially significant goals;
• Work with appeals and requests of citizens;
• For other legal purposes;
• 2.2. The processing of personal data should be limited to the achievement of specific, predetermined and legal goals. The processing of personal data is not allowed, incompatible with the goals of collecting personal data.
• 3. Legislative and other regulatory legal acts of the Russian Federation, in accordance with which the policy of processing personal data is determined
• 3.1. PD processing is carried out on the basis of the following federal laws and regulatory legal acts:
• Constitution of the Russian Federation;
• Labor Code of the Russian Federation;
• Civil Code of the Russian Federation;
• Tax Code of the Russian Federation;
• Federal Law of 07.27.2010 No. 210-ФЗ “On the Organization of the Provision of State and Municipal Services”;
• Federal Law of 02.05.2006 N 59-ФЗ “On the procedure for considering appeals of citizens of the Russian Federation”;
• Federal Law of July 27, 2006 No. 149-ФЗ “On Information, Information Technologies and On Information Protection”;
• Federal Law of July 07, 2003 No. 126-ФЗ “On Communications”;
• Federal Law of July 17, 1999 No. 176-ФЗ On Postal Communications;
• Federal Law of 01.04.1996 No. 27-ФЗ “On Individual (Personified) Accounting in the Compulsory Pension Insurance System”;
• Federal Law of December 15, 2001 No. 167-ФЗ “On Compulsory Pension Insurance in the Russian Federation”;
• Federal Law of December 29, 2006 No. 255-ФЗ “On Compulsory Social Insurance in case of temporary disability and in connection with motherhood”;
• Federal Law of July 24, 2009 No. 212-ФЗ “On Insurance Contributions to the Pension Fund of the Russian Federation, the Social Insurance Fund of the Russian Federation, the Federal Fund for Compulsory Medical Insurance and Territorial Funds of Mandatory Medical Insurance”;
• Federal Law of 06.04.2011 No. 63-F3 On Electronic Signature;

Federal Law of 06.12.2011 No. 402-ФЗ On Accounting;

Decree of the Government of the Russian Federation of July 27, 2011 No. 797 “On the interaction between multifunctional centers of the provision of state (municipal) services and federal executive bodies, state extra -budgetary funds, state authorities of the constituent entities of the Russian Federation, local authorities”;

Decree of the Government of the Russian Federation of December 22, 2012 No. 1376 “Rules for organizing the activities of multifunctional centers for the provision of state and municipal services”;

Decree of the Government of the Russian Federation of November 1, 2012 N 1119 On approval of the requirements for the protection of personal data in their processing in personal data information systems;

Decree of the Government of the Russian Federation of September 15, 2008 N 687 On approval of the Regulation on the features of the processing of personal data carried out without the use of automation means;

• Decree of the Government of the Russian Federation of 24.12.2007 No. 922 On the features of the procedure for calculating the average wage;
• Resolution of the State Statistics Committee of Russia dated 05.01.2004 N 1 “On approval of unified forms of primary accounting documentation for labor accounting and its payment”;
• Order of the FSTEK of Russia No. 55, FSB of Russia No. 86, mininforms of Russia No. 20 of February 13, 2008 “On approval of the procedure for conducting the classification of personal data information systems”;
• Order of the FSTEC of Russia dated February 18, 2013 No. 21 “On approval of the composition and content of organizational and technical measures to ensure the safety of personal data when processing in the information systems of personal data”;
• Order of Roskomnadzor dated September 05, 2013 No. 996 “On approval of the requirements and methods for depersonalization of personal data”;
• Order of the Federal Tax Service of November 17, 2010 No. MMV-7-3/611 On approval of the form of information on the income of individuals and recommendations for its filling, the format of information on the income of individuals in electronic form, reference books;
• Order of the Government of the Nizhny Novgorod Region dated 02.21.2013 No. 380-r On the creation of the State Budget Institution of the Nizhny Novgorod Region The Commissioner of the Multifunctional Center for the Provision of State and Municipal Services in the Nizhny Novgorod Region ;
• Charter of the State Budgetary Institution but Authorized MFC;
• contracts between the operator and the subject of personal data;
• consent to the processing of personal data;
• Other regulatory legal acts of the Russian Federation and regulatory documents of authorized state authorities.
• 4. The basic terms and definitions used in local regulatory acts of the State Budgetary Institution of Higher School of State Budgetary Educational Establishment of the MFC, which regulate personal data processing issues
• 4.1. Personal data – any information related to directly or indirectly defined or determined by an individual (subject of personal data).

4.2. Information – information (message, data) regardless of the form of their presentation.

4.3. Operator – a state body, municipal body, legal or individual, independently or together with other persons organizing and (or) processing personal data, as well as determining the purpose of processing personal data, the composition of personal data subject to processing, actions (operations) performed with personal data.

4.4.Personal data processing – any action (operation) or a set of actions (operations) performed using automation tools or without the use of such means with personal data, including:

collection;

recording;

systematization;

accumulation;

storage;

clarification (update, change);

extraction;

usage;

transmission (distribution, provision, access);

• depersonalization;
• blocking;
• removal;
• destruction.
• 4.5. Automated personal data processing – processing of personal data using computer equipment.
• 4.6. Providing personal data – actions aimed at disclosing personal data to a specific person or a certain circle of persons.

4.7. Distribution of personal data – actions aimed at revealing personal data to an indefinite circle of people.

• 4.8. Blocking personal data – temporary termination of personal data processing (except when processing is necessary to clarify personal data).
• 4.9. The destruction of personal data is actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed.
• 4.10. Immersion of personal data is actions, as a result of which it becomes impossible without the use of additional information to determine the belonging of personal data to a particular subject of personal data.
• 4.11. The information system of personal data is a set of personal data contained in the databases and ensuring their processing of information technologies and technical means.
• 5. List of actions with personal data
• When processing PDN, the operator will carry out the following actions with PDN: collection, recording, systematization, accumulation, storage, clarification (update, change), use, transfer (provision, access), removal, depersonalization, blocking, extraction and destruction of personal data.
• 6. The composition of the processed personal data
• 6.1. The content and scope of the processed personal data must correspond to the stated purposes of processing. The processed personal data should not be excessive in relation to the stated purposes of their processing;
• 6.2. Processing by the Operator is subject to PD of the following PD subjects:
• employees (subjects) who are in labor relations with the Operator, former employees, candidates for filling vacant positions, as well as relatives of employees;
• individuals dependent on the employee; individuals (subjects) who are in contractual and other civil law relations with the Operator;
• individuals or their authorized representatives (subjects) who applied to the multifunctional center for the provision of state and municipal services with a request for the provision of state or municipal services, expressed orally or in writing;
• individuals or their authorized representatives (subjects) who applied to the Operator on legal grounds;
• representatives/employees of the Operator's clients and counterparties (legal entities);
• individuals or their authorized representatives (subjects) who applied to the Operator through electronic forms located on the official portal of the State Budgetary Institution of Non-Profit Organization Authorized MFC on the Internet.
• 6.3. The composition of the PD of each of the categories of subjects listed in clause 6.2 of this Policy is determined for each information system of the Operator's personal data:
• surname, name, patronymic (including previous surnames, first names and (or) patronymics in case of their change, the reason for the change);
• floor;
• date, month, year of birth;
• place of birth, birth certificate data;
• information about citizenship (including previous citizenships, other citizenships);
• type, series, number, identity document on the territory of the Russian Federation, name of the authority that issued the document, subdivision code, date of issue;
• type, series, number, identity document outside the territory of the Russian Federation, name of the authority that issued the document, subdivision code, date of issue;
• address of the place of residence (address of registration and actual residence, date of registration at the place of residence);
• Contact phone number, email address or information about other communication methods;
• marital status, details of certificates of state registration of acts of civil status;
• The composition of the family, data of birth certificates (if any), the degree of kinship, surname, names, patronymic, date of birth of close relatives (father, mother, brothers, sisters and children), as well as husband (wife);
• details of the insurance certificate of state pension insurance;
• taxpayer identification number;
• details of the compulsory medical insurance insurance policy;
• knowledge of foreign languages ​​and languages ​​of the peoples of the Russian Federation;
• attitude to military duty, military accounting;
• education (when and what educational institutions have completed, diplomas numbers, direction of training or specialty in a diploma, qualifications for a diploma);
• Hardwork vocational education (name of the educational or scientific institution, year of graduation), academic degree, academic title (when assigned, diplomas, certificates);
• Place of work, position;
• information contained in the contract (employment contract),
• additional agreements to the contract (employment contract);
• information specified in the originals and copies of orders for personnel; work performed from the beginning of work (including studying at higher and secondary specialized educational institutions, military service, part -time work, entrepreneurial activity);
• state awards, other awards and insignia (whom he was awarded and when);
• registration address and actual residence;
• date of registration at the place of residence;

attitude to military duty; the presence (absence) of a criminal record;

Information about inclusion in the personnel reserve;

information about the imposition of disciplinary sanction before it is removed or canceled;

• information contained in the materials on the investigation and registration of accidents at work and occupational diseases;
• information contained in copies of court decisions;
• information submitted to the tax office, pension fund, social insurance fund and other institutions;

information contained in accounting registers and internal financial statements;

health information;

information contained in the disability certificate;

information about wages (numbers of the current account and bank card, data of contracts, amount of monetary maintenance);

social status;

photo;

personal signature;

driver's license details;

copy of the passport;

other information provided for by standard forms and regulations with the established procedure for performing the functions and powers assigned to the Operator.

6.4. The processing of special categories of personal data relating to race, nationality, political views, religious or philosophical beliefs, intimate life is not carried out in the State Budgetary Institution of Non-Profit Organization Authorized MFC.

• 7. Procedure and conditions for processing personal data
• 7.1. The processing of personal data in the GBU NO Authorized MFC is carried out in the following ways:
• manual processing of personal data;

automated processing of personal data with or without transmission of the received information via information and telecommunication networks;

mixed processing of personal data.

7.2. Interaction with third parties in the framework of achieving the goals of processing personal data is carried out on the basis of contracts for the processing of personal data.

7.3. The operator has the right to transfer personal data to the bodies of inquiry and investigation, other authorized bodies on the grounds provided for by the current legislation of the Russian Federation.

• 7.4. Personal data, the purposes of processing of which are incompatible with each other, are processed by the Operator in various databases.
• 7.5. Only those personal data that meet the purpose of their processing are subject to processing.
• 7.6. The operator stops the processing of personal data when achieving the goals of processing personal data, the expiration of the consent or the review of the consent of the subject of personal data for the processing of his personal data, as well as the identification of unlawful processing of personal data in terms of the operator’s internal organizational and administrative documents.
• 7.7. Personal data by the operator is carried out in a form that allows you to determine the subject of personal data.
• 7.8. When storing personal data, the operator uses databases located in the Russian Federation in accordance with Part 5 of Art. 18 of the Federal Law On Personal Data.
• 7.9. When processing personal data, the accuracy of personal data is ensured, their sufficiency, and, if necessary, and relevance in relation to the goals of the processing of personal data. The operator ensures the necessary measures to remove or clarify incomplete or inaccurate data.
• 8. Actualization, correction, deletion and destruction of personal data, answers to the requests of subjects to access to personal data
• 8.1. In case of confirmation of the fact of the inaccuracy of personal data or the unlawfulness of their processing by the operator, personal data must be updated, and the processing of personal data is terminated.
• 8.2. When achieving the goals of processing personal data, as well as if the subject of personal data of consent to their processing, personal data must be destroyed if:
• Other is not provided for by the agreement, the party of which, the beneficiary or guarantor, according to which the subject of personal data is;
• The operator is not entitled to process without the consent of the subject of personal data on the grounds provided for by the Federal Law On Personal Data or other federal laws;

otherwise is not provided by another agreement between the operator and the subject of personal data.

8.3. The operator informs the subject of personal data or his representative information about the processing of personal data of such subject carried out by him at the request of the latter.

• 9. Ensuring the protection of personal data during their processing by the Operator
• 9.1. The operator takes measures necessary and sufficient to ensure the fulfillment of the obligations stipulated by the Federal Law of July 27, 2006 No. 152-FZ On Personal Data and the regulatory legal acts adopted in accordance with it
• 9.2. The operator independently determines the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations stipulated by the Federal Law of July 27, 2006 No. 152 On Personal Data, Government Decree of September 15, 2008 No. 687 On Approval of the Regulations on the Features of the Processing of Personal Data carried out without the use of automation tools, by Government Decree of November 01, 2012 No. 1119 On approval of requirements for the protection of personal data when they are processed in personal data information systems, by order of the FSTEC of February 18, 2013 No. 21 On approval of the composition and content organizational and technical measures to ensure the security of personal data during their processing in personal data information systems, by order of the FSTEC dated February 11, 2017 No. 17 On approval of requirements for the protection of information that is not a state secret contained in state information systems and d other normative legal acts, unless otherwise provided by federal laws. These measures include:

appointment by the Operator of a person responsible for organizing the processing of personal data;

publication by the Operator of documents defining the operator's policy regarding the processing of personal data, local acts on the processing of personal data, as well as local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation, eliminating the consequences of such violations;

implementation of internal control and (or) audit of compliance of personal data processing by the Federal Law On Personal Data and regulatory legal acts adopted in accordance with it, requirements for the protection of personal data, the operator’s policy in relation to personal data processing, and local acts of the operator;

• Familiarization of the employees of the operator who directly process personal data with the provisions of the legislation of the Russian Federation on personal data, including the requirements for the protection of personal data, documents that define the operator’s policy regarding the processing of personal data, local acts on personal data processing, (or ) training of these employees;
• determination of the assessment of the harm that can be caused to the subjects of personal data in case of violation of the Federal Law On Personal Data, the ratio of the specified harm and the measures taken by the operator aimed at ensuring the obligations provided for by the Federal Law On Personal Data;
• the application of legal, organizational and technical measures to ensure the safety of personal data in their processing in the information systems of personal data, necessary to fulfill the requirements for the protection of personal data;
• accounting for machine carriers of personal data;
• fulfillment of measures to detect facts of unauthorized access to personal data and taking appropriate measures;
• determination of a set of measures to restore personal data modified or destroyed due to unauthorized access to them;
• fulfillment of the rules for access to personal data processed in personal data information systems, ensuring monitoring all actions with personal data;
• Monitoring the taken security of personal data taken.
• 9.3. The operator when processing personal data accepts the necessary legal,Organizational and technical measures or ensure their adoption to protect personal data from unlawful or accidental access to them, destroy, change, block, copy, provide personal data, as well as from other unlawful actions in relation to personal data.
• 9.4. When processing personal data without using automation tools, the following features are performed by the conditions for storing personal data, including:
• In relation to each category of personal data, it is possible to determine the storage places of personal data (material carriers) and establish a list of persons who process personal data or have access to them;
• Separate storage of personal data (material carriers) is ensured, the processing of which is carried out for various purposes;

When storing material media, conditions are observed that ensure the safety of personal data and exclude unauthorized access to them. The list of measures necessary to ensure such conditions, as well as the list of persons responsible for the implementation of these measures, is established by the operator.

10. Conditions for processing personal data in the State Budgetary Institution but Commissioner of the MFC

10.1. The condition for processing personal data is compliance with the principles and rules provided for by the Federal Law “On Personal Data”.

10.2. Personal data processing is allowed in the following cases:

The processing of personal data is carried out with the consent of the subject of personal data to the processing of his personal data;

The processing of personal data is necessary to achieve the goals stipulated by the International Treaty of the Russian Federation or the Law, for the implementation and implementation of functions, powers and duties assigned by the legislation of the Russian Federation;

The processing of personal data is carried out in connection with the participation of a person in constitutional, civil, administrative, criminal proceedings, legal proceedings in arbitration courts;

the processing of personal data is necessary for the execution of a judicial act, an act of another body or official subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings (hereinafter referred to as the execution of a judicial act);

• the processing of personal data is necessary for the exercise of the powers of federal executive bodies, bodies of state off-budget funds, executive bodies of state power of the constituent entities of the Russian Federation, local authorities and the functions of organizations involved in the provision of state and municipal services, respectively, provided for by Federal Law No. 210 of July 27, 2010 -FZ On the organization of the provision of state and municipal services, including the registration of a personal data subject on a single portal of state and municipal services and (or) regional portals of state and municipal services;
• the processing of personal data is necessary for the performance of an agreement to which the subject of personal data is a party or beneficiary or guarantor, as well as to conclude an agreement on the initiative of the subject of personal data or an agreement under which the subject of personal data will be the beneficiary or guarantor;
• the processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data, if obtaining the consent of the subject of personal data is impossible;
• the processing of personal data is necessary for the exercise of the rights and legitimate interests of the operator or third parties, including in cases provided for by the Federal Law On the Protection of the Rights and Legitimate Interests of Individuals in the Implementation of Activities for the Return of Overdue Debts and on Amendments to the Federal Law On Microfinance activities and microfinance organizations”, or to achieve socially significant goals, provided that this does not violate the rights and freedoms of the subject of personal data;

the processing of personal data is necessary for the professional activities of a journalist and (or) the legitimate activities of the mass media or scientific, literary or other creative activities, provided that the rights and legitimate interests of the subject of personal data are not violated;

• the processing of personal data is carried out for statistical or other research purposes, with the exception of the purposes specified in Article 15 of the Federal Law On Personal Data, subject to the mandatory depersonalization of personal data;
• processing of personal data is carried out, access of an unlimited circle of persons to which is provided by the subject of personal data or at his request (hereinafter referred to as personal data made public by the subject of personal data);
• processing of personal data subject to publication or mandatory disclosure in accordance with federal law is carried out.
• 10.3. GBU NO Authorized MFC without the consent of the subject of personal data does not disclose to third parties and does not distribute personal data, unless otherwise provided by federal law.
• 10.4. GBU NO Authorized MFC has the right to entrust the processing of personal data to another person with the consent of the subject of personal data on the basis of an agreement concluded with this person. The contract must contain a list of actions (operations) with personal data that will be performed by the person processing personal data, the purposes of processing, the obligation of such a person to maintain the confidentiality of personal data and ensure the security of personal data during their processing, as well as requirements for the protection of processed personal data in in accordance with Article 19 of the Federal Law On Personal Data.
• 10.5. If the Operator entrusts the processing of personal data to another person, the Operator shall be liable to the subject of personal data for the actions of the said person.The person who processes personal data on behalf of the Operator is liable to the Operator.

10.6. Access to personal data processed in the State Budgetary Institution of Non-Profit Organization Authorized MFC is allowed only to employees of the State Budgetary Institution of Non-Profit Organization Authorized MFC holding positions included in the list of positions of structural divisions of the State Budgetary Institution of Non-Profit Organization Authorized MFC and its branches.

11. Basic rights and obligations of the personal data operator

11.1. When collecting personal data, the operator is obliged to provide the subject of personal data, at his request, with the information provided for by the Federal Law On Personal Data.

11.2. If the provision of personal data is mandatory in accordance with the Federal Law On Personal Data, the operator is obliged to explain to the subject of personal data the legal consequences of the refusal to provide his personal data.

11.3. If personal data is not received from the subject of personal data, the Operator, with the exception of cases provided for by the Federal Law On Personal Data, prior to the processing of such personal data, is obliged to provide the subject of personal data with the following information:

the name and address of the operator or his representative;

• the purpose of processing personal data and its legal basis; intended users of personal data;
• the rights of the subject of personal data established by the Federal Law On Personal Data;
• source of personal data.
• 11.4. The operator is released from the obligation to provide the subject of personal data with the above information in cases where:
• the subject of personal data is notified of the processing of his personal data by the relevant operator;
• personal data was obtained by the operator on the basis of federal law or in connection with the execution of an agreement to which the subject of personal data is a party or beneficiary or guarantor;
• personal data is made publicly available by the subject of personal data or obtained from a publicly available source;
• the operator processes personal data for statistical or other research purposes, for the professional activities of a journalist or for scientific, literary or other creative activities, if the rights are not violated
• and legitimate interests of the subject of personal data;
• providing the subject of personal data with the above information violates the rights and legitimate interests of third parties.

11.5. When collecting personal data, including through the information and telecommunication network Internet, the Operator is obliged to ensure the recording, systematization, accumulation, storage, clarification (updating, change), extraction of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation. Federation, except for the cases specified in clauses 2, 3, 4, 8 of part 1 of Article 6 of the Federal Law On Personal Data.

12. Basic rights and obligations of the subject(s) of personal data

12.1. The PD subject has the right to demand from the Operator the clarification of his personal data, their blocking or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take measures provided by law to protect their rights.

12.2. Information is provided to the subject of personal data or his representative by the operator when applying or upon receipt of a request from the subject of personal data or his representative. The request must contain the number of the main document proving the identity of the subject of personal data or his representative, information about the date of issue of the specified document and the authority that issued it, information confirming the participation of the subject of personal data in relations with the Operator (contract number, date of conclusion of the contract, conditional verbal designation and (or) other information), or information otherwise confirming the fact of processing personal data by the Operator, the signature of the personal data subject or his representative.The request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.

12.3. The operator has the right to refuse the subject of personal data to fulfill a repeated request. Such refusal must be motivated. The obligation to provide evidence of the validity of the refusal to fulfill a repeated request lies with the Operator.

12.4. The subject of personal data has the right to receive information regarding the processing of his personal data, including information containing:

confirmation of the fact of processing personal data by the Operator;

legal grounds and purposes of personal data processing;

the purposes and methods used by the Operator for processing personal data;

the name and location of the Operator, information about persons (excluding employees of the operator) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the operator or on the basis of federal law;

processed personal data relating to the relevant subject of personal data, the source of their receipt, unless a different procedure for the provision of such data is provided by federal law;

terms of processing personal data, including the terms of their storage;

the procedure for the exercise by the subject of personal data of the rights provided for by the Federal Law On Personal Data;

information about the performed or proposed cross-border data transfer;
the name or surname, name, patronymic and address of the person who processes personal data on behalf of the Operator, if the processing is or will be entrusted to such a person.