4. Legal grounds for processing personal data

This policy regarding the processing of personal data is compiled in accordance with the requirements of the following regulatory legal acts of the Russian Federation:

• Constitution of the Russian Federation;
• The Labor Code of the Russian Federation;
• Federal Law No. 152-FZ of July 27, 2006 "On Personal Data";
• Decree of the President of the Russian Federation No. 188 dated March 06, 1997 "On approval of the List of confidential information";
• Resolution of the Government of the Russian Federation No. 687 of September 13, 2008 "On Approval
• Provisions on the specifics of personal data processing carried out without the use of automation tools";
• Decree of the Government of the Russian Federation No. 512 dated July 06, 2008 "On Approval of Requirements for Material Carriers of Biometric personal Data and technologies for Storing such Data outside of Personal Data information systems";
• Resolution of the Government of the Russian Federation No. 1119 dated November 01, 2012 "On Approval of requirements for the protection of personal data during their Processing in Personal Data information systems";
• Order No. 21 of the FSTEC of Russia dated February 18, 2013 "On Approval of the Composition and content of organizational and technical measures to ensure the security of personal data during their Processing in Personal Data information Systems";
• Roskomnadzor Order No. 996 dated September 05, 2013 "On Approval of requirements and methods for depersonalization of personal data";
• Other regulatory legal acts of the Russian Federation and regulatory documents of authorized state authorities.

5. Purposes of personal data processing

IP Shamova Yulia Aleksandrovna; processes personal data solely for the purposes of:

• Carrying out economic activities aimed at making a profit;
• Provision of forwarding and transport services necessary for the provision of services;
• Provision of supply, sales, legal, financial, information and consulting and marketing services;
• Execution of the contract, one of the parties (or beneficiary) of which is the subject of personal data (including employment relations with employees of the Operator, relations with contractors / suppliers and with buyers / customers of the Operator).
• Processing of personal data that does not meet the purposes of processing is not allowed.

6. Subjects and categories of personal data

In the information data systems of IP Shamova Yulia Aleksandrovna; personal data of the following personal data subjects are processed:

• Regular and non-regular employees who are in labor/contractual relations with IP Shamova Yulia Aleksandrovna;
• Individuals – buyers /clients of IP Shamova Yulia Aleksandrovna;
• Individuals – contractors under contracts concluded by IP Shamova Yulia Aleksandrovna;.

IP Shamova Julia Alexandrovna; processes the following categories of general personal data: surname, first name, patronymic, date of birth, month of birth, year of birth, place of birth, data of identity documents, military registration documents, address (registration at the place of residence and actual residence), contact data (phone numbers, email addresses), data about the place of work and position, data contained in the work record, data on education (including information on income, financial obligations of the subject of personal data), TIN, the data of the insurance certificate of the state pension fund, the details of the power of attorney or other document confirming the authority.

7. Basic principles of personal data processing

Processing of personal data in IP Shamova Yulia Alexandrovna; is conducted taking into account the protection of the rights and freedoms of both employees of IP Shamova Yulia Alexandrovna; and other persons when processing their personal data, including the rights to privacy, personal and family secrets based on the principles:

• Legality and fairness of personal data processing;
• Restrictions on the processing of personal data to achieve specific, predetermined and legitimate goals;
• Compliance of the purposes and methods of personal data processing with the purposes that were stated during data collection;
• The inadmissibility of combining databases created for different purposes for the processing of personal data;
  compliance with the necessity and sufficiency of the volume, nature and methods of personal data processing with the stated purposes of their processing;
• Ensuring accuracy, reliability and, if necessary, relevance in relation to the purposes of processing;
  storage of personal data in a form that allows you to identify the subject of personal data for no longer than required by the purposes of processing, the requirements of legislation or the contract under which the beneficiary is the subject of personal data;