{"id":2729,"date":"2022-01-18T13:08:05","date_gmt":"2022-01-18T10:08:05","guid":{"rendered":"https:\/\/nomacon.by\/?page_id=2729"},"modified":"2022-01-18T13:21:27","modified_gmt":"2022-01-18T10:21:27","slug":"politika-v-otnoshenii-obrabotki-personalnyh-dannyh","status":"publish","type":"page","link":"https:\/\/nomacon.by\/en\/politika-v-otnoshenii-obrabotki-personalnyh-dannyh\/","title":{"rendered":"Policy regarding the processing of personal data"},"content":{"rendered":"

Policy regarding the processing of personal data<\/strong><\/p>\n

 <\/p>\n

1. General Provisions<\/strong><\/p>\n

 <\/p>\n

1.1. This Policy of the additional liability company Eurolinia and the additional liability company Nomacon regarding the processing of personal data (hereinafter referred to as the Policy) has been developed in pursuance of the requirements of par. 1 p. 3 art. 17 of the Law of 07.05.2021 N 99-Z \"On the Protection of Personal Data\" (hereinafter referred to as the Law on Personal Data) in order to ensure the protection of the rights and freedoms of a person and citizen in the processing of his personal data, including the protection of the rights to privacy, personal and family secrets.<\/p>\n

1.2. The Policy applies to all personal data processed by Eurolinia Additional Liability Company and Nomacon Additional Liability Company (hereinafter referred to as the Operator).<\/p>\n

1.3. The Policy applies to relations in the field of personal data processing that arose with the Operator both before and after the approval of the Policy.<\/p>\n

1.4. In pursuance of the requirements of paragraph 4 of Art. 17 of the Law on Personal Data, this Policy is published in the public domain on the Internet information and telecommunication network on the Operator's website.<\/p>\n

1.5. Basic concepts used in the Policy:<\/strong><\/p>\n

personal data<\/strong> \u2014 any information relating to an identified natural person or an identifiable natural person;<\/p>\n

subject of personal data<\/strong> \u2014 an individual in respect of whom the processing of personal data is carried out;<\/p>\n

personal data operator (operator)<\/strong> - a state body, a legal entity of the Republic of Belarus, another organization, an individual, including an individual entrepreneur, independently or jointly with other specified persons organizing and (or) carrying out the processing of personal data;<\/p>\n

processing of personal data<\/strong> - any action (operation) or a set of actions (operations) with personal data performed with or without the use of automation tools. The processing of personal data includes, among other things:<\/p>\n

\u2014 collection;<\/p>\n

\u2014 record;<\/p>\n

\u2014 systematization;<\/p>\n

\u2014 accumulation;<\/p>\n

\u2014 storage;<\/p>\n

\u2014 clarification (update, change);<\/p>\n

\u2014 extraction;<\/p>\n

\u2014 usage;<\/p>\n

\u2014 transfer (distribution, provision, access);<\/p>\n

\u2014 depersonalization;<\/p>\n

\u2014 blocking;<\/p>\n

\u2014 removal;<\/p>\n

\u2014 destruction;<\/p>\n

automated processing of personal data<\/strong> \u2014 processing of personal data using computer technology;<\/p>\n

dissemination of personal data<\/strong> \u2014 actions aimed at disclosing personal data to an indefinite circle of persons;<\/p>\n

provision of personal data<\/strong> \u2014 actions aimed at getting acquainted with the personal data of a certain person or circle of persons;<\/p>\n

blocking of personal data<\/strong> \u2014 termination of access to personal data without their deletion;<\/p>\n

deletion of personal data<\/strong> \u2014 actions, as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed;<\/p>\n

depersonalization of personal data<\/strong> \u2014 actions as a result of which it becomes impossible to determine the ownership of personal data by a specific subject of personal data without the use of additional information;<\/p>\n

personal data information system<\/strong> \u2014 a set of personal data contained in databases and information technologies and technical means that ensure their processing;<\/p>\n

1.6. Basic rights and obligations of the Operator.<\/strong><\/p>\n

1.6.1. The operator has the right:<\/p>\n

1) independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations provided for by the Law on Personal Data and regulatory legal acts adopted in accordance with it, unless otherwise provided by law;<\/p>\n

2) entrust the processing of personal data to another person, unless otherwise provided by law, on the basis of an agreement concluded with this person. A person who processes personal data on behalf of the Operator is obliged to comply with the principles and rules for the processing of personal data provided for by the Law on Personal Data;<\/p>\n

3) in the event that the subject of personal data withdraws consent to the processing of personal data, the Operator has the right to continue processing personal data without the consent of the subject of personal data if there are grounds specified in the Law on Personal Data.<\/p>\n

1.6.2. The operator is obliged:<\/p>\n

1) organize the processing of personal data in accordance with the requirements of the Law on Personal Data;<\/p>\n

2) respond to requests and requests from personal data subjects in accordance with the requirements of the Personal Data Law;<\/p>\n

3) notify the authorized body for the protection of the rights of subjects of personal data;<\/p>\n

4) require the Operator to block or delete his personal data, illegally obtained or not necessary for the stated purpose of processing, as well as take legal measures to protect their rights;<\/p>\n

5) at any time, without giving reasons, withdraw their consent to the processing of personal data;<\/p>\n

6) comply with the requirements of the authorized body for the protection of the rights of subjects of personal data to eliminate violations of the legislation on personal data.<\/p>\n

1.7. The subject of personal data has the right:<\/p>\n

1) receive information regarding the processing of his personal data, except as otherwise provided by law. The information is provided to the subject of personal data by the Operator in an accessible form, and it should not contain personal data relating to other subjects of personal data, unless there are legal grounds for disclosing such personal data. The list of information and the procedure for obtaining it are established by the Law on Personal Data;<\/p>\n

2) require the Operator to clarify his personal data if the personal data is incomplete, outdated, inaccurate;<\/p>\n

3) appeal against the actions (inaction) and decisions of the Operator that violate his rights in the processing of personal data to the authorized body for the protection of the rights of subjects of personal data in the manner prescribed by law on appeals of citizens and legal entities.<\/p>\n

1.8. Control over the fulfillment of the requirements of the Policy is carried out by the person responsible for organizing the processing of personal data by the Operator.<\/p>\n

1.9. Responsibility for violation of the requirements of the legislation of the Republic of Belarus and the regulations of the Operator in the field of processing and protection of personal data is determined in accordance with the legislation of the Republic of Belarus.<\/p>\n

 <\/p>\n

2. Purposes of collecting personal data<\/strong><\/p>\n

 <\/p>\n

2.1. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. It is not allowed to process personal data that is incompatible with the purposes of collecting personal data.<\/p>\n

2.2. Only personal data that meet the purposes of their processing are subject to processing.<\/p>\n

2.3. The processing of personal data by the Operator is carried out for the following purposes:<\/p>\n

\u2014 ensuring compliance with the legislation of the Republic of Belarus;<\/p>\n

\u2014 carrying out its activities in accordance with the Charter of the Operator;<\/p>\n

\u2014 HR administration;<\/p>\n

\u2014 assistance to employees in employment, education and promotion, ensuring the personal safety of employees, monitoring the quantity and quality of work performed, ensuring the safety of property;<\/p>\n

\u2014 attraction and selection of candidates for work with the Operator;<\/p>\n

\u2014 organization of individual (personalized) registration of employees in the mandatory pension insurance system;<\/p>\n

\u2014 filling in and submitting the required reporting forms to the executive authorities and other authorized organizations;<\/p>\n

\u2014 implementation of civil law relations;<\/p>\n

\u2014 accounting;<\/p>\n

\u2014 implementation of the access control.<\/p>\n

2.4. The processing of personal data of employees may be carried out solely for the purpose of ensuring compliance with laws and other regulatory legal acts.<\/p>\n

 <\/p>\n

3. Legal grounds for the processing of personal data<\/strong><\/p>\n

 <\/p>\n

3.1. The legal basis for the processing of personal data is a set of regulatory legal acts, in pursuance of which and in accordance with which the Operator processes personal data, including:<\/p>\n

\u2014 The Constitution of the Republic of Belarus;<\/p>\n

\u2014 Civil Code of the Republic of Belarus;<\/p>\n

\u2014 Labor Code of the Republic of Belarus;<\/p>\n

\u2014 Tax Code of the Republic of Belarus;<\/p>\n

\u2014 Law on personal data;<\/p>\n

\u2014 other regulatory legal acts regulating relations related to the activities of the Operator.<\/p>\n

3.2. The legal basis for the processing of personal data is also:<\/p>\n

\u2014 Charter of the Operator;<\/p>\n

\u2014 agreements concluded between the Operator and subjects of personal data;<\/p>\n

\u2014 consent of personal data subjects to the processing of their personal data.<\/p>\n

 <\/p>\n

4. Scope and categories of personal data processed,<\/strong><\/p>\n

categories of personal data subjects<\/strong><\/p>\n

 <\/p>\n

4.1. The content and scope of the processed personal data must comply with the stated purposes of processing, provided for in sect. 2 Policies. The processed personal data should not be excessive in relation to the stated purposes of their processing.<\/p>\n

4.2. The Operator may process the listed personal data of the following categories of personal data subjects.<\/p>\n

4.2.1. Candidates for employment with the Operator:<\/p>\n

\u2014 Full Name;<\/p>\n

\u2014 gender;<\/p>\n

\u2014 citizenship;<\/p>\n

\u2014 Date and place of birth;<\/p>\n

\u2014 Contact details;<\/p>\n

\u2014 information about education, work experience, qualifications;<\/p>\n

\u2014 other personal data reported by candidates in resumes and cover letters.<\/p>\n

4.2.2. Employees and former employees of the Operator:<\/p>\n

\u2014 Full Name;<\/p>\n

\u2014 gender;<\/p>\n

\u2014 citizenship;<\/p>\n

\u2014 Date and place of birth;<\/p>\n

\u2014 image (photo);<\/p>\n

\u2014 passport data;<\/p>\n

\u2014 address of registration at the place of residence;<\/p>\n

\u2014 address of the actual residence;<\/p>\n

\u2014 Contact details;<\/p>\n

\u2014 individual taxpayer number;<\/p>\n

\u2014 information about education, qualifications, professional training and advanced training;<\/p>\n

\u2014 marital status, presence of children, family ties;<\/p>\n

\u2014 information about labor activity, including the presence of incentives, awards and (or) disciplinary sanctions;<\/p>\n

\u2014 data on marriage registration;<\/p>\n

\u2014 military registration information;<\/p>\n

\u2014 information about disability;<\/p>\n

\u2014 information about the withholding of alimony;<\/p>\n

\u2014 information about income from the previous place of work;<\/p>\n

\u2014 other personal data provided by employees in accordance with the requirements of labor legislation.<\/p>\n

4.2.3. Family members of the Operator's employees:<\/p>\n

\u2014 Full Name;<\/p>\n

\u2014 relation degree;<\/p>\n

\u2014 year of birth;<\/p>\n

\u2014 other personal data provided by employees in accordance with the requirements of labor legislation.<\/p>\n

4.2.4. Clients and counterparties of the Operator (individuals):<\/p>\n

\u2014 Full Name;<\/p>\n

\u2014 Date and place of birth;<\/p>\n

\u2014 passport data;<\/p>\n

\u2014 address of registration at the place of residence;<\/p>\n

\u2014 Contact details;<\/p>\n

\u2014 individual taxpayer number;<\/p>\n

\u2014 current account number;<\/p>\n

\u2014 other personal data provided by clients and contractors (individuals) necessary for the conclusion and execution of contracts.<\/p>\n

4.2.5. Representatives (employees) of the Operator's clients and counterparties (legal entities):<\/p>\n

\u2014 Full Name;<\/p>\n

\u2014 passport data;<\/p>\n

\u2014 Contact details;<\/p>\n

\u2014 position held;<\/p>\n

\u2014 other personal data provided by representatives (employees) of clients and counterparties necessary for the conclusion and execution of contracts.<\/p>\n

4.3. The processing by the Operator of biometric personal data (for example, photographs) is carried out in accordance with the legislation of the Republic of Belarus.<\/p>\n

4.4. The Operator does not process special categories of personal data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life, except as provided by the legislation of the Republic of Belarus.<\/p>\n

 <\/p>\n

5. Procedure and conditions for processing personal data<\/strong><\/p>\n

 <\/p>\n

5.1. The processing of personal data is carried out by the Operator in accordance with the requirements of the legislation of the Republic of Belarus.<\/p>\n

5.2. The processing of personal data is carried out with the consent of the subjects of personal data to the processing of their personal data, as well as without such consent in cases provided for by the legislation of the Republic of Belarus.<\/p>\n

5.3. The operator carries out both automated and non-automated processing of personal data.<\/p>\n

5.4. Employees of the Operator whose duties include the processing of personal data are allowed to process personal data.<\/p>\n

5.5. The processing of personal data is carried out by:<\/p>\n

\u2014 receiving personal data in oral and written form directly from the subjects of personal data;<\/p>\n

\u2014 obtaining personal data from publicly available sources;<\/p>\n

\u2014 entering personal data into the journals, registers and information systems of the Operator;<\/p>\n

\u2014 use of other methods of processing personal data.<\/p>\n

5.6. It is not allowed to disclose to third parties and distribute personal data without the consent of the subject of personal data, unless otherwise provided by law. Consent to the processing of personal data permitted by the subject of personal data for distribution is issued separately from other consents of the subject of personal data to the processing of his personal data.<\/p>\n

5.7. The transfer of personal data to the bodies of inquiry and investigation, to the tax authorities, the Social Security Fund and other executive authorities and organizations is carried out in accordance with the requirements of the legislation of the Republic of Belarus.<\/p>\n

5.8. The operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, distribution and other unauthorized actions, including:<\/p>\n

\u2014 determines threats to the security of personal data during their processing;<\/p>\n

\u2014 adopts local regulations and other documents regulating relations in the field of processing and protection of personal data;<\/p>\n

\u2014 appoints persons responsible for ensuring the security of personal data in the structural divisions and information systems of the Operator;<\/p>\n

\u2014 creates the necessary conditions for working with personal data;<\/p>\n

\u2014 organizes accounting of documents containing personal data;<\/p>\n

\u2014 organizes work with information systems in which personal data is processed;<\/p>\n

\u2014 stores personal data under conditions that ensure their safety and exclude unauthorized access to them;<\/p>\n

\u2014 organizes training for the Operator's employees who process personal data.<\/p>\n

5.9. The operator stores personal data for no longer than required by the purposes of processing personal data, if the period of storage of personal data is not established by the legislation of the Republic of Belarus, the contract.<\/p>\n

 <\/p>\n

6. Updating, correcting, deleting and destroying<\/strong><\/p>\n

personal data, responses to requests from subjects<\/strong><\/p>\n

to access personal data<\/strong><\/p>\n

 <\/p>\n

6.1. Confirmation of the fact of personal data processing by the Operator, legal grounds and purposes of personal data processing, as well as other information specified in paragraphs 1 and 4 of Art. 11 of the Law on Personal Data are provided by the Operator to the subject of personal data upon receipt of an application from the subject of personal data.<\/p>\n

The information provided does not include personal data relating to other subjects of personal data, unless there are legal grounds for disclosing such personal data.<\/p>\n

The application must contain:<\/p>\n

\u2014 last name, first name, patronymic (if any) of the subject of personal data, address of his place of residence (place of stay);<\/p>\n

\u2014 date of birth of the subject of personal data<\/p>\n

\u2014 identification number of the subject of personal data, in the absence of such a number - the number of the identity document of the subject of personal data, in cases where this information was indicated by the subject of personal data when giving his consent to the operator or the processing of personal data is carried out without the consent of the subject of personal data;<\/p>\n

\u2014 statement of the essence of the requirements of the subject of personal data;<\/p>\n

\u2014 personal signature or electronic digital signature of the subject of personal data.<\/p>\n

The application may be sent in writing, in the form of an electronic document signed with an electronic digital signature in accordance with the legislation of the Republic of Belarus.<\/p>\n

If the application of the subject of personal data does not reflect, in accordance with the requirements of the Law on Personal Data, all the necessary information or the subject does not have the right to access the requested information, then a reasoned refusal is sent to him.<\/p>\n

The subject of personal data may be refused to provide information in accordance with Part 3 of Art. 11 of the Law on Personal Data<\/p>\n

6.2. In the event that inaccurate personal data is revealed when the subject of personal data contacts or at his request or at the request of the authorized body for the protection of the rights of subjects of personal data, the Operator blocks personal data relating to this subject of personal data from the moment of receipt of the specified application or request for the period of verification.<\/p>\n

If the fact of inaccuracy of personal data is confirmed, the Operator, on the basis of information provided by the subject of personal data or the authorized body for the protection of the rights of subjects of personal data, or other necessary documents, clarifies personal data within 15 days from the date of submission of such information and removes the blocking of personal data.<\/p>\n

6.3. If unlawful processing of personal data is detected upon receipt of an application from the subject of personal data or a request from the authorized body for the protection of the rights of subjects of personal data, the Operator shall block the unlawfully processed personal data relating to this subject of personal data from the moment of such an application or receipt of an application (request).<\/p>\n

6.4. Upon reaching the goals of processing personal data, as well as in the event that the subject of personal data withdraws consent to their processing, personal data is subject to deletion, unless otherwise provided by another agreement between the Operator and the subject of personal data or by law.<\/p>","protected":false},"excerpt":{"rendered":"

\u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445   1. \u041e\u0431\u0449\u0438\u0435 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f   1.1. \u041d\u0430\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u00ab\u0415\u0432\u0440\u043e\u043b\u0438\u043d\u0438\u044f\u00bb \u0438 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u00ab\u041d\u043e\u043c\u0430\u043a\u043e\u043d\u00bb \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0434\u0430\u043b\u0435\u0435 — \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430) \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0432\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u0430\u0431\u0437. 1 \u043f. 3 \u0441\u0442. 17 \u0417\u0430\u043a\u043e\u043d\u0430 \u043e\u0442 07.05.2021 N 99-\u0417 «\u041e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445» (\u0434\u0430\u043b\u0435\u0435 — \u0417\u0430\u043a\u043e\u043d […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-2729","page","type-page","status-publish","hentry"],"aioseo_notices":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/nomacon.by\/en\/wp-json\/wp\/v2\/pages\/2729","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nomacon.by\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nomacon.by\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nomacon.by\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nomacon.by\/en\/wp-json\/wp\/v2\/comments?post=2729"}],"version-history":[{"count":0,"href":"https:\/\/nomacon.by\/en\/wp-json\/wp\/v2\/pages\/2729\/revisions"}],"wp:attachment":[{"href":"https:\/\/nomacon.by\/en\/wp-json\/wp\/v2\/media?parent=2729"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}