1. GENERAL PROVISIONS

1.1. The policy of the Limited Liability Company UAITI LLC (OGRN 1220200035660, TIN 0278974648, legal address 450001, Republic of Bashkortostan, Ufa, Komsomolskaya str., 23/3, room 2) (hereinafter referred to as the Operator) represented by Garifullin I.M. regarding the processing of personal data (hereinafter referred to as the Policy) is developed in order to ensuring the protection of the rights and freedoms of the personal data subject in the processing of his personal data, including the protection of the rights to privacy, personal and family secrets.

1.2. The Policy applies to all personal data that the Operator receives from personal data subjects.

1.3. The Policy has been developed in accordance with the provisions of Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" (hereinafter - the Federal Law "On Personal Data") and the recommendations of the Federal Service for Supervision of Communications, Information Technology and Mass Communications dated July 31, 2017 "Recommendations for drafting a document defining the operator's policy regarding the processing of personal data, in accordance with the procedure established by Federal Law No. 152-FZ of July 27, 2006 "On Personal Data".

1.4. The Policy applies to personal data processing relationships that have arisen with the Operator, both before and after the approval of this Policy.

1.5. The Operator publishes the Policy in the public domain by posting it on the Internet at https://migrant-assist.ru / and the mobile application "MIGRANT Assistant" used in their activities.

1.6. Control over the fulfillment of the requirements of this Policy is carried out by an authorized person of the Operator responsible for organizing the processing of personal data.

2. BASIC CONCEPTS USED IN POLITICS

2.1. Personal data - any information related directly or indirectly to a specific or identifiable individual (subject of personal data).

2.2. Processing of personal data - any action (operation) or a set of actions (operations) with personal data performed using automation tools or without their use. The processing of personal data includes, inter alia:

2.2.1. collection;

2.2.2. recording;

2.2.3. systematization;

2.2.4. accumulation;

2.2.5. storage;

2.2.6. clarification (update, change);

2.2.7. extraction;

2.2.8. usage;

2.2.9. transfer (distribution, provision, access);

2.2.10. depersonalization;

2.2.11. blocking;

2.2.12. deletion;

2.2.13. destruction.

2.3. Automated processing of personal data - processing of personal data using computer technology.

2.4. Blocking of personal data - temporary termination of the processing of personal data (except in cases where processing is necessary to clarify personal data).

2.5. Dissemination of personal data - actions aimed at disclosing personal data to an indefinite circle of persons.

2.6. Provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons.

2.7. Destruction of personal data - actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed.

2.8. Depersonalization of personal data - actions as a result of which it becomes impossible to determine the identity of personal data to a specific personal data subject without using additional information.

2.9. Personal data operator (operator) - a state body, municipal body, legal entity or individual, independently or jointly with other persons organizing and (or) processing personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data. Within the framework of this Policy, YUITI LLC is recognized as the Operator.

3. PRINCIPLES AND PURPOSES OF PERSONAL DATA PROCESSING

3.1. The processing of personal data is carried out by the Operator legally on the basis of certain principles, namely:

3.1.1. legality and fairness of the purposes and methods of personal data processing, compliance of the purposes of personal data processing with the goals defined in advance and declared when collecting personal data;

3.1.2. the reliability of personal data, their sufficiency for the purposes of processing, the inadmissibility of processing personal data excessive in relation to the purposes stated during the collection of personal data;

3.1.3. restrictions on the processing of personal data by achieving specific, predetermined and legitimate goals within the time limits stipulated by the contract or the local regulatory legal act of the Operator;

3.1.4. preventing the processing of personal data incompatible with the purposes of personal data collection;

3.1.5. preventing the merging of databases containing personal data, the processing of which is carried out for purposes incompatible with each other;

3.1.6. processing only those personal data that meet the purposes of processing;

3.1.7. compliance of the content and volume of personal data with the stated purposes of processing;

3.1.8. ensuring the accuracy, reliability and relevance of personal data in relation to the purposes of personal data processing;

3.1.9. personal data is stored in a form that allows you to identify the subject of personal data, no longer than the purposes of their processing require;

3.1.10. the destruction of personal data or depersonalization is carried out upon achievement of the purposes of their processing or in case of loss of the need to achieve them, if the period of storage of personal data is not established by the legislation of the Russian Federation, other documents defining such a period.

3.2. The processing of personal data is limited to achieving specific, predetermined and legitimate goals. Processing of personal data incompatible with the purposes of personal data collection is not allowed.

3.3. The purposes of personal data processing are defined by the legal acts regulating the Operator's activities.

3.4. The purposes of processing personal data by the Operator include:

3.4.1. ensuring compliance with the Constitution of the Russian Federation, regulatory legal acts of the Russian Federation;

3.4.2. conclusion, execution and termination of contracts with individuals, legal entities and other persons in cases provided for by the current legislation and the charter of the Operator;

3.4.3. organization of personnel records of the Operator, ensuring compliance with laws and other regulatory legal acts, conclusion and fulfillment of obligations under labor and civil law contracts; personnel records management, assistance to employees in employment, training and promotion, use of various types of benefits, compliance with the requirements of tax legislation in connection with the calculation and payment of personal income tax, as well as the unified social tax, pension legislation in the formation and presentation of personalized data on each recipient of income taken into account when calculating insurance premiums for compulsory pension insurance and provision, filling in primary statistical documentation in accordance with the Labor Code of the Russian Federation, the Tax Code of the Russian Federation, federal laws, in particular "On individual (personalized) accounting in the compulsory pension insurance system", "On personal data", as well as the charter and internal documents of the Operator.

3.4.3.

4. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

4.1. The Operator processes the personal data of personal data subjects, guided by:

4.1.1. The Constitution of the Russian Federation;

4.1.2. The Civil Code of the Russian Federation;

4.1.3. The Labor Code of the Russian Federation;

4.1.4. this Policy;

4.1.5. the Operator's statutory documents;

4.1.6. local legal acts of the Operator developed in the development of this Policy;

4.1.7. contracts concluded between the Operator and the subjects of personal data;

4.1.8. consent to the processing of personal data.

5. THE VOLUME AND CATEGORIES OF PERSONAL DATA PROCESSED, CATEGORIES OF PERSONAL DATA SUBJECTS

5.1. The content and volume of the processed personal data correspond to the stated purposes of processing.

5.2. The categories of subjects of personal data processed by the Operator include:

5.2.1. individuals – clients, contractors, customers of the Operator, users of the Internet site located at https://migrant-assist.ru / including users of the Mobile application "MIGRANT Assistant";

5.2.2. representatives/employees of clients, contractors and customers of the Operator and (individuals and legal entities).

5.2.3. employees of the Operator, former employees, candidates for vacant positions, as well as relatives of employees.

5.2.4. Processing of special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, and health status is allowed:

5.2.5. if the personal data subject has given written consent to the processing of their personal data;

5.2.6. in accordance with the legislation on state social assistance, labor legislation, and pension legislation of the Russian Federation.

5.3. The processing of biometric personal data may be carried out only with the written consent of the personal data subject.

5.4. When implementing the functions of the copyright holder of the mobile application "MIGRANT Assistant", the Operator processes the following personal data of users:

5.2.7. last name, first name, patronymic;

5.2.8. mobile phone number;

5.2.9. e-mail address;