Personal Data Processing Policy

This Personal Data Processing Policy (hereinafter — the Policy) defines the procedure for processing personal data and the measures to ensure its security applied by the administration of the website contract-russia.com (hereinafter — the Operator), in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".

Date of publication: current version. The latest version is always available at /en/confidential/.

1. General provisions

The Policy is developed in accordance with the Constitution of the Russian Federation, Federal Law No. 152-FZ and other regulatory acts in the field of personal data.
The Policy defines the basic principles, purposes, conditions and methods of personal data processing, as well as measures to ensure its security.
The Policy applies to all personal data that the Operator receives from data subjects through the website contract-russia.com.
Use of the website and submission of forms means that the data subject agrees to the terms of this Policy.

2. Basic concepts

Personal data — any information relating to a directly or indirectly identified or identifiable individual (data subject).
Operator — the administration of the website contract-russia.com, which independently or jointly with other persons organizes and (or) carries out personal data processing.
Personal data processing — any action (operation) or set of actions with personal data performed with or without the use of automation tools.
Data subject — an individual whose personal data is processed by the Operator.
Confidentiality of personal data — a mandatory requirement for the Operator not to disclose personal data to third parties and not to distribute it without the consent of the data subject.

3. Principles of personal data processing

Processing is carried out on a lawful and fair basis.
Processing is limited to the achievement of specific, predetermined and lawful purposes.
Processing of personal data incompatible with the purposes of their collection is not allowed.
Only personal data that meets the purposes of their processing is processed.
The content and volume of processed personal data correspond to the stated purposes of processing.
Accuracy, sufficiency and relevance of personal data are ensured during processing.
Personal data is stored no longer than required by the purposes of processing.

4. Purposes of personal data processing

Reviewing applications received through forms on the website.
Establishing contact with the data subject.
Verifying the candidate's compliance with the basic requirements for contract military service.
Arranging a work visa, migration registration and other documents.
Interaction with state authorities within the processing procedure.
Informing the data subject about the processing progress.
Compliance with the requirements of the legislation of the Russian Federation.

5. Legal grounds for personal data processing

Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
Consent of the data subject to the processing of his or her personal data.
Other regulatory acts of the Russian Federation governing personal data processing.

6. Scope of processed personal data

The Operator processes the following categories of personal data:

Last name, first name, patronymic (if any).
Date of birth, age.
Contact phone number.
Email address.
Username or number in a messenger.
Country of residence and citizenship.
Information on citizenship, place of birth.
Information on military duty.
Data contained in identity documents, to the extent necessary for processing.
Other information voluntarily provided by the data subject through forms on the website.

7. Procedure and conditions for personal data processing

Personal data is processed with the consent of the data subject.
Processing is carried out both with and without the use of automation tools.
The Operator takes the necessary legal, organizational and technical measures to protect personal data from unlawful access, destruction, modification, blocking, copying, distribution.
Personal data may be transferred to state authorities of the Russian Federation and other persons to the extent necessary to achieve the purposes of processing.
Cross-border transfer of personal data is carried out in accordance with the legislation of the Russian Federation.

8. Measures to ensure personal data security

Appointment of persons responsible for organizing personal data processing and protection.
Restriction of employee access to personal data in accordance with their job duties.
Application of organizational and technical information security measures.
Accounting of personal data carriers and control of access to them.
Internal control over compliance of personal data processing with legal requirements.
Familiarization of employees with the provisions of personal data legislation.

9. Terms of personal data processing

Personal data processing is terminated upon achievement of the purposes of processing, upon withdrawal of consent by the data subject, as well as in other cases provided for by the legislation of the Russian Federation. Upon achievement of the purposes of processing or in case of withdrawal of consent, personal data is subject to destruction or depersonalization within a period not exceeding 30 days.

10. Rights of the data subject

Receive information about the processing of his or her personal data.
Request clarification, blocking or destruction of personal data.
Withdraw consent to personal data processing.
Appeal the actions or inaction of the Operator to the authorized body or in court.
Exercise other rights provided for by Federal Law No. 152-FZ.

11. Contact information

For matters related to personal data processing, the data subject may contact the Operator through the feedback forms on the website contract-russia.com or via the contact details specified in the "Contacts" section.

12. Amendments to the Policy

The Operator has the right to make amendments to this Policy. The current version is always posted at /en/confidential/. Amendments take effect from the moment of publication of the new version, unless otherwise provided by the version itself.