<\/p>\n
1. Purpose of the Policy<\/strong><\/p>\n 1.1. This Policy (hereinafter \u2014 the Policy) on the processing of personal data at LLC \u00abUnited Glass Plants \u2013 Management Company\u00bb (hereinafter \u2014 the Company, the Operator) has been developed in accordance with Federal Law No. 152-FZ of July 27, 2006 \u00abOn Personal Data\u00bb (hereinafter \u2014 FZ-152).<\/p>\n 1.2. The Policy enters into force from the moment of its approval by the General Director of the Company.<\/p>\n 1.3. The Policy is subject to review during periodic analysis by authorized persons of the Company, as well as in cases of changes to the legislation of the Russian Federation in the field of personal data.<\/p>\n 1.4. The Policy shall be published on the official website of the Company.<\/p>\n 2.2. Purposes of the Policy<\/p>\n 2.1. The purpose of the Policy is to ensure the protection of the rights and freedoms of personal data subjects when their personal data are processed by the Company.<\/p>\n 3. Basic Terms<\/strong><\/p>\n 3.1. For the purposes of the Policy, the following terms are used:<\/p>\n 3.2. Scope<\/p>\n 3.2.1 The provisions of the Policy apply to all relations related to the processing of personal data carried out by the Company:<\/p>\n 3.2.2. All employees of the Company who process personal data or have access to them shall be guided by the Policy.<\/p>\n 3.2.3. All local acts of the Company are developed on the basis of the Policy.<\/p>\n 4. Personal data are processed by the Company for the following purposes:<\/p>\n 5. The following regulations and documents are the grounds for personal data processing by the Company:<\/strong><\/p>\n 5.1. In cases not directly provided for by the legislation of the Russian Federation, but corresponding to the powers of the Company, personal data processing is carried out with the consent of the personal data subject to the processing of his\/her personal data.<\/p>\n 5.2. Personal data processing is terminated upon reorganization or liquidation of the Company.<\/p>\n 6. In accordance with the purposes of personal data processing specified in Section II of the Policy, the Company processes personal data in relation to the following categories of persons:<\/strong><\/p>\n 6.1. For the purposes of maintaining personnel and accounting records in relation to employees, relatives of employees and former employees, the following personal data are processed:<\/p>\n surname, first name, patronymic (if available), as well as previous surname, first name, patronymic (if available), date and place of their change (in case of change); gender; date (day, month, year) and place of birth; citizenship information; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); taxpayer identification number (INN); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; details of certificates of state registration of civil status acts and information contained therein; information on marital status and family composition (degree of kinship, surnames, first names, patronymics (if available), dates (day, month, year) and places of birth); information on education and (or) qualification or availability of special knowledge (including name of educational and (or) other organization, year of graduation, education level, qualification, details of education document); information on foreign language proficiency; information on military duty, military registration and details of military registration documents (series, number, date of issue of the document, name of the issuing authority); information on employment, as well as information on previous places of work, periods and length of service; information contained in documents granting the right to stay and work in the territory of the Russian Federation (for foreign citizens staying in the Russian Federation); information contained in a temporary residence permit, temporary residence permit for educational purposes (for foreign citizens temporarily residing in the Russian Federation), residence permit (for foreign citizens permanently residing in the Russian Federation), certificate of asylum, temporary certificate of a stateless person; income information, obligations under enforcement documents; bank account numbers; health status information (for certain categories of applicants); information on the presence (absence) of a criminal record and (or) the fact of criminal prosecution or termination of criminal prosecution on rehabilitative grounds (for certain categories of employees); other personal data contained in documents the submission of which is provided for by the legislation of the Russian Federation, including audio and video recording files of security control systems for facilities and personnel at facilities; health status information related to the ability to perform labor functions; data of a mandatory health insurance policy; data of a voluntary health insurance policy; information on social benefits; information on pensions on preferential terms due to old age (by age); facial image data; information on advanced training; identification details of a sick leave certificate.<\/p>\n 6.2. For the purposes of compliance with labor legislation of the Russian Federation in relation to employees, relatives of employees and former employees, the following personal data are processed:<\/p>\n surname, first name, patronymic (if available), as well as previous surname, first name, patronymic (if available), date and place of their change (in case of change); gender; date (day, month, year) and place of birth; citizenship information; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); taxpayer identification number (INN); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; details of certificates of state registration of civil status acts and information contained therein; information on marital status and family composition (degree of kinship, surnames, first names, patronymics (if available), dates (day, month, year) and places of birth); information on education and (or) qualification or availability of special knowledge (including name of educational and (or) other organization, year of graduation, education level, qualification, details of education document); information on foreign language proficiency; information on military duty, military registration and details of military registration documents (series, number, date of issue of the document, name of the issuing authority); information on employment, as well as information on previous places of work, periods and length of service; information contained in documents granting the right to stay and work in the territory of the Russian Federation (for foreign citizens staying in the Russian Federation); information contained in a temporary residence permit, temporary residence permit for educational purposes (for foreign citizens temporarily residing in the Russian Federation), residence permit (for foreign citizens permanently residing in the Russian Federation), certificate of asylum, temporary certificate of a stateless person; income information, obligations under enforcement documents; bank account numbers; health status information (for certain categories of employees); information on the presence (absence) of a criminal record and (or) the fact of criminal prosecution or termination of criminal prosecution on rehabilitative grounds (for certain categories of employees); other personal data contained in documents the submission of which is provided for by the legislation of the Russian Federation, including audio and video recording files of security control systems for facilities and personnel at facilities; other personal data that the employee wished to provide about himself\/herself and the processing of which corresponds to the purpose of processing; health status information related to the ability to perform labor functions.<\/p>\n 6.3. For the purposes of compliance with tax legislation in relation to employees, counterparties, representatives of counterparties, legal representatives and patients, the following personal data are processed:<\/p>\n surname, first name, patronymic; year of birth; month of birth; date of birth; place of birth; income; gender; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); taxpayer identification number (INN); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; bank account number; position; information on family composition; information on social benefits; information on the organization that provided medical services; type of medical care provided; fact of a citizen’s request for medical care; bank account number.<\/p>\n 6.4. For the purposes of compliance with pension legislation in relation to employees and patients, the following personal data are processed:<\/p>\n surname, first name, patronymic; year of birth; month of birth; date of birth; place of birth; citizenship; income information; gender; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; place of work, position; information on family composition; information on social benefits; information on the organization that provided medical services; type of medical care provided; fact of a citizen’s request for medical care; health status information.<\/p>\n 6.5. For the purposes of concluding civil law contracts in relation to employees, counterparties and representatives of counterparties, the following personal data are processed:<\/p>\n surname, first name, patronymic; year of birth; month of birth; date of birth; place of birth; citizenship; income information; gender; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); taxpayer identification number (INN); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; bank account number.<\/p>\n 6.6. For the purposes of recruiting personnel (applicants) for vacant positions of the Company in relation to applicants, the following personal data are processed:<\/p>\n surname, first name, patronymic (if available), as well as previous surname, first name, patronymic (if available), date and place of their change (in case of change); gender; date (day, month, year) and place of birth; citizenship information; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); taxpayer identification number (INN); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; details of certificates of state registration of civil status acts and information contained therein; information on marital status and family composition (degree of kinship, surnames, first names, patronymics (if available), dates (day, month, year) and places of birth); information on education and (or) qualification or availability of special knowledge (including name of educational and (or) other organization, year of graduation, education level, qualification, details of education document); information on foreign language proficiency; information on military duty, military registration and details of military registration documents (series, number, date of issue of the document, name of the issuing authority); information on employment, as well as information on previous places of work, periods and length of service; information contained in documents granting the right to stay and work in the territory of the Russian Federation (for foreign citizens staying in the Russian Federation); information contained in a temporary residence permit, temporary residence permit for educational purposes (for foreign citizens temporarily residing in the Russian Federation), residence permit (for foreign citizens permanently residing in the Russian Federation), certificate of asylum, temporary certificate of a stateless person; income information, obligations under enforcement documents; bank account numbers; health status information (for certain categories of applicants); information on the presence (absence) of a criminal record and (or) the fact of criminal prosecution or termination of criminal prosecution on rehabilitative grounds (for certain categories of employees); other personal data contained in documents the submission of which is provided for by the legislation of the Russian Federation, including audio and video recording files of security control systems for facilities and personnel at facilities; other personal data that the applicant wished to provide about himself\/herself; health status information related to the ability to perform labor functions.<\/p>\n 6.7. For the purposes of completing introductory, production or pre-graduation internships in relation to employees, students and pupils, the following personal data are processed:<\/p>\n surname, first name, patronymic (if available), as well as previous surname, first name, patronymic (if available), date and place of their change (in case of change); gender; date (day, month, year) and place of birth; citizenship information; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); taxpayer identification number (INN); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; education information.<\/p>\n 6.8. For the purposes of creating publicly available sources of information support (including directories, address books, maintenance of the official website of the Company), shaping the company’s image in the external market and building an HR brand in relation to employees, the following personal data are processed:<\/p>\n surname, first name, patronymic (if available); email address; phone number; position; length of service; education information; year of birth; accreditation information; information on degree awarded; information on state awards, other awards, incentives and distinctions; information on scientific and practical activities; facial image.<\/p>\n 6.9. For the purposes of promoting goods, works and services on the market through direct contact with a potential consumer by means of communication, sending advertising and information materials, information on medical care provided, notifications, requests and other information, as well as posting photo, video and audio materials on the Internet, TV channels and printed products (brochures, catalogs, booklets, etc.), ensuring the provision of services on the Internet, improving service quality, and conducting marketing and other strategic research in relation to patients and legal representatives, the following personal data are processed:<\/p>\n surname, first name, patronymic; year of birth; month of birth; date of birth; place of birth; citizenship; income information; gender; type, series, number of identity document, name of the issuing authority, date of issue; insurance number of an individual personal account (SNILS); taxpayer identification number (INN); address and date of registration at place of residence (place of stay), actual residence address; contact phone number, email address and (or) information about other means of communication; bank account number; position; information on concluded contracts and results of their performance; bank account number; results of control of volumes, deadlines, quality and conditions of medical care provided; facial image.<\/p>\n 7. Principles of personal data processing.<\/strong><\/p>\n 7.1. Personal data are processed by the Company in accordance with the following principles:<\/p>\n 8. Conditions for personal data processing.<\/strong><\/p>\n Conditions for personal data processing other than obtaining the consent of the personal data subject to the processing of his\/her personal data are alternative.<\/p>\n 8.1. Conditions for processing special categories of personal data<\/p>\n Special categories of personal data are processed by the Company subject to the following conditions:<\/p>\n 8.2. Conditions for processing biometric personal data<\/p>\n Information that characterizes the physiological and biological characteristics of a person, and on the basis of which one can establish his identity (biometric personal data) and which is used by the Company to establish the identity of the subject of personal data, is not processed by the Company with the exception of the image of the face.<\/p>\n 8.3. Conditions for processing other categories of personal data.<\/p>\n The processing of other categories of personal data is carried out by the Company in compliance with the following conditions.<\/p>\n 8.4. Entrustment of personal data processing.<\/p>\n 8.4.1. The Company has the right to entrust the processing of personal data to another person with the consent of the subject of personal data, unless otherwise provided by federal law.<\/p>\n 8.4.2. The Company has the right to entrust the processing of personal data of patients for the purpose of exchanging information with medical organizations, including those posted in medical information systems, for the purpose of providing medical care, including transfer to insurance organizations within the framework of voluntary medical insurance, transfer of information on the results of laboratory, clinical and other studies in organizations established by additional local acts of the Company and on the basis of an order.<\/p>\n 8.4.3. The person processing personal data on behalf of the Company complies with the principles and rules for processing personal data provided for in the Policy. The Company’s order defines a list of actions (operations) with personal data that will be performed by the person processing personal data, the methods and purposes of processing, establishes the obligation of such a person to maintain the confidentiality of personal data and ensure the security of personal data during their processing, and also specifies requirements for the protection of processed personal data.<\/p>\n When entrusting the processing of personal data to another person, the Company bears responsibility to the subject of personal data for the actions of said person. The person processing personal data on behalf of the Company is responsible to the Company.<\/p>\n 8.5. Transfer of personal data.<\/p>\n The Company has the right to transfer personal data to authorized bodies on the grounds provided for by the current legislation of the Russian Federation.<\/p>\n 8.6. Confidentiality of personal data.<\/p>\n Company employees who have access to personal data do not disclose or distribute personal data to third parties without the consent of the subject of personal data, unless otherwise provided by federal law.<\/p>\n 8.7. Publicly available sources of personal data.<\/p>\n 8.7.1 For the purpose of information support, the Company creates publicly available sources of personal data. Personal data is included in publicly available sources on the basis of the consent of the subject of personal data to include personal data in publicly available sources or for the purpose of fulfilling the functions, powers and responsibilities assigned by the legislation of the Russian Federation to federal executive authorities, executive authorities of constituent entities of the Russian Federation, local self-government bodies. Information about the subject of personal data is excluded from publicly available sources of personal data at the request of the subject of personal data or by decision of a court or other authorized government bodies.<\/p>\n 8.7.2. Public sources of personal data include the information named in clause 6.8 of the Policy:<\/p>\n 8.8. Consent of the subject of personal data to the processing of his personal data.<\/p>\n 8.8.1. If it is necessary to ensure the conditions for processing the subject\u2019s personal data, the consent of the subject of personal data to the processing of his personal data may be provided.<\/p>\n 8.8.2. The subject of personal data decides to provide his personal data and consents to their processing freely, of his own free will and in his own interest. Consent to the processing of personal data must be specific, informed and conscious. Consent to the processing of personal data can be given by the subject of personal data or his representative in any form that allows confirmation of the fact of its receipt, unless otherwise provided by current legislation. If consent to the processing of personal data is received from a representative of the subject of personal data, the authority of this representative to give consent on behalf of the subject of personal data is verified by the Company.<\/p>\n 8.8.3. Consent to the processing of personal data may be withdrawn by the subject of personal data. If the subject of personal data withdraws consent to the processing of personal data, the Company has the right to continue processing personal data without the consent of the subject of personal data if alternative conditions for processing personal data are met.<\/p>\n 8.8.4. The obligation to provide proof of obtaining the consent of the subject of personal data to the processing of his personal data or proof of compliance with alternative conditions for processing personal data rests with the Company.<\/p>\n 8.8.5. In cases provided for by federal law, the processing of personal data is carried out only with the written consent of the subject of personal data. Consent in the form of an electronic document signed in accordance with federal law with a qualified electronic signature (QES or UQES) is equivalent to consent containing the personal data subject\u2019s handwritten signature in writing on paper. The written consent of the personal data subject to the processing of his personal data must include:<\/p>\n 8.8.6. In case of incapacity of the subject of personal data, consent to the processing of his personal data is given by the legal representative of the subject<\/p>\n 8.8.7. In the event of the death of the subject of personal data, consent to the processing of his personal data is given by the heirs of the subject of personal data, if such consent was not given by the subject of personal data during his lifetime.<\/p>\n 8.8.8. Personal data may be received by the Company from a person who is not the subject of personal data, subject to the Company providing confirmation of the availability of alternative conditions for processing the information.<\/p>\n 8.9. The Company does not carry out cross-border transfer of personal data.<\/p>\n 8.10. Features of the processing of personal data authorized by the subject of personal data for distribution.<\/p>\n 8.10.1. The processing of personal data authorized by the subject of personal data for distribution is carried out on the basis of the appropriate consent of the subject of personal data.<\/p>\n 8.10.2. Consent to the processing of personal data authorized by the subject of personal data for distribution is issued separately from other consents of the subject of personal data to the processing of personal data.<\/p>\n 8.10.3. The consent contains a list of personal data for each category of personal data specified in the consent to the processing of personal data authorized by the subject of personal data for distribution.<\/p>\n 8.10.4. Consent to the processing of personal data authorized by the subject of personal data for distribution is provided directly to the Company.<\/p>\n 8.10.5. Silence or inaction of the subject of personal data is not considered consent to the processing of personal data authorized by the subject of personal data for distribution.<\/p>\n 8.10.6. In consent to the processing of personal data authorized by the subject of personal data for distribution, the subject of personal data has the right to establish prohibitions on the transfer (except for providing access) of this personal data to the Company to an unlimited number of persons, as well as prohibitions on the processing or conditions for processing (except for gaining access) of this personal data by an unlimited number of persons. The refusal of the Company to establish by the subject of personal data the prohibitions and conditions provided for in Article 10.1 of FZ-152 is not permitted.<\/p>\n 8.10.7. The prohibitions established by the subject of personal data on the transfer (except for providing access), as well as on the processing or conditions for processing (except for gaining access) of personal data authorized by the subject of personal data for distribution, do not apply to cases of processing personal data in state, public and other public interests determined by the legislation of the Russian Federation.<\/p>\n 8.10.8. The transfer (distribution, provision, access) of personal data authorized by the subject of personal data for distribution must be stopped at any time at the request of the subject of personal data. This requirement must include identification and contact information of the subject of personal data, as well as a list of personal data, the processing of which is subject to termination. The personal data specified in this requirement can only be processed by the operator to whom it is sent. The consent of the subject of personal data to the processing of personal data authorized by the subject of personal data for distribution is terminated from the moment the relevant request is considered by the Company, but no later than 3 business days from the date of receipt of the request.<\/p>\n 8.10.9. The requirements specified above do not apply in the case of processing personal data for the purposes of fulfilling the functions, powers and responsibilities assigned by the legislation of the Russian Federation to federal executive authorities, executive authorities of constituent entities of the Russian Federation, and local government bodies.<\/p>\n 9. Processing of personal data carried out without the use of automation tools.<\/strong><\/p>\n 9.1. The processing of personal data contained in the personal data information system or extracted from such a system is considered to be carried out without the use of automation tools (non-automated), if such actions with personal data, such as the use, clarification, distribution, destruction of personal data in relation to each of the subjects of personal data, are carried out with the direct participation of a person.<\/p>\n 9.1.1. Personal data, when processed without the use of automation tools, is separated from other information, in particular by recording it on separate tangible personal data media, in special sections or in the fields of forms (forms).<\/p>\n 9.1.2. When recording personal data on tangible media, it is not permitted to record personal data on one material medium, the purposes of which are obviously incompatible for processing. To process various categories of personal data, carried out without the use of automation tools, a separate material medium is used for each category of personal data.<\/p>\n 9.1.3. Persons processing personal data without the use of automation tools (including employees of the Company or persons carrying out such processing under an agreement with the Company) are informed about the fact of their processing of personal data, the processing of which is carried out by the Company without the use of automation tools, the categories of processed personal data, as well as the features and rules for such processing established by regulatory legal acts of federal executive authorities, executive authorities of constituent entities of the Russian Federation, as well as local legal acts of the Company.<\/p>\n 9.1.4. When using standard forms of documents, the nature of the information in which suggests or allows the inclusion of personal data (hereinafter referred to as the standard form), the following conditions are met:<\/p>\n 9.1.5. If the purposes of processing personal data recorded on one material medium are incompatible, if the material medium does not allow the processing of personal data separately from other personal data recorded on the same medium, measures are taken to ensure separate processing of personal data, in particular:<\/p>\n\n
\n
II. PURPOSES OF PERSONAL DATA PROCESSING<\/h2>\n
\n
III. LEGAL GROUNDS FOR PERSONAL DATA PROCESSING<\/h2>\n
\n
IV. SCOPE AND CATEGORIES OF PROCESSED PERSONAL DATA, CATEGORIES OF PERSONAL DATA SUBJECTS<\/h2>\n
\n
V. PROCEDURE AND CONDITIONS FOR PERSONAL DATA PROCESSING<\/h2>\n
\n
\n
\n
\n
\n