CHAPTER 1
GENERAL PROVISIONS

1. The policy applies to all personal data processing processes that Lean Sources of Mechanical and Electrical Energy (hereinafter referred to as LSMEE) receives about the subject of personal data and the structural units processing it.

2. The purpose of the Policy is to ensure adequate protection of personal data from unauthorized access and disclosure, respect for the rights and freedoms of a citizen when processing his personal data, including ensuring the protection of rights to privacy, personal and family secrets.

3. By transferring personal data to LSMEE, including through LSMEE Internet resources, the subject of personal data confirms his consent to the processing of the relevant information under the conditions set out in the Policy.

4. The Policy uses the following basic terms and their definitions:

blocking of personal data – termination of access to personal data without deleting it;

depersonalization of personal data – actions as a result of which it becomes impossible, without the use of additional information, to determine the ownership of personal data to a specific subject of personal data;

Internet resource – website, website page, web portal, blog, chat, application for a mobile device and other resources connected to the Internet;

processing of personal data - any action or set of actions performed with personal data, including collection, systematization, storage, modification, use, depersonalization, blocking, distribution, provision, deletion of personal data;

personal data – any information relating to an identified individual or an identifiable individual;

provision of personal data – actions aimed at familiarizing with the personal data of a certain person or group of persons;

dissemination of personal data – actions aimed at familiarizing an indefinite number of persons with personal data;

services – any services, products, programs, events, services of LSMEE;

special personal data – personal data relating to race or nationality, political views, membership in trade unions, religious or other beliefs, health or sexuality, exposure to administrative or criminal liability, as well as biometric and genetic personal data;

subject of personal data – an individual in respect of whom personal data is processed;

deletion of personal data – actions as a result of which it becomes impossible to restore personal data in information resources (systems) containing personal data, and (or) as a result of which material media of personal data are destroyed;

an individual who can be identified is an individual who can be directly or indirectly identified, in particular through his surname, first name, patronymic, date of birth, identification number or through one or more signs characteristic of his physical, psychological, mental , economic, cultural or social identity.

Other terms and their definitions used in the Policy are used in the meanings defined by law.

CHAPTER 2
BASIC PRINCIPLES FOR PROCESSING PERSONAL DATA

5. Processing of personal data is carried out on the basis of the following principles:

is carried out with the consent of the subject of personal data, except for cases established by law. The subject of personal data consents to the processing of personal data for an indefinite period, unless otherwise provided by law;

limited to achieving specific, pre-declared legitimate goals. Processing of personal data that is incompatible with the originally stated purposes of their processing is not permitted;

the content and volume of personal data processed must correspond to the stated purposes of their processing. The personal data processed should not be redundant in relation to the stated purposes of their processing;

when processing personal data, their accuracy, sufficiency, and, where necessary, relevance in relation to the stated purposes of processing is ensured;

must be transparent. For these purposes, the subject of personal data, in cases provided for by the Law, is provided with relevant information regarding the processing of his personal data;

storage of personal data is carried out in a form that allows identification of the subject of personal data no longer than required by the stated purposes of processing personal data, unless the period for storing personal data is established by law or an agreement to which the subject of personal data is a party.

6. Personal data is subject to destruction or depersonalization upon achievement of the processing goals or in the event of the loss of the need to achieve these goals, unless otherwise provided by law.

CHAPTER 3
PURPOSES OF PROCESSING PERSONAL DATA

7. The purposes of LSMEE processing of personal data are:

conclusion of any types of contracts with subjects of personal data and their subsequent execution;

processing messages and requests received from the subject of personal data;

provision of LSMEE services to the subject of personal data;

conducting personnel work and organizing records of LSMEE employees, including attracting and selecting candidates to work at LSMEE;

carrying out economic activities;

processing other requests and inquiries received from personal data subjects;

fulfillment of other duties (powers) provided for by legislative acts.

CHAPTER 4
CATEGORIES OF PERSONAL DATA SUBJECTS AND LIST OF PERSONAL DATA PROCESSED BY LSMEE

8. LSMEE may process personal data of the following personal data subjects:

counterparties – individuals, including potential ones (under contracts);

representatives of potential counterparties;

visitors to Internet resources and users of LSMEE services;

persons who provided personal data to LSMEE in other ways.

9. Personal data processed by LSMEE include:

surname, proper name, patronymic;

sex;

date, month and year of birth;

identification data;

passport details;

Place of Birth;

digital photo portrait;

data:

about occupation;

about work, home (landline) and mobile phone numbers and other methods of communication.

10. LSMEE can process the following technical information:

IP address;

information from the browser;

cookie data;

address of the requested page;

history of requests and views on LSMEE Internet resources.

11. LSMEE processes special personal data only with the consent of the subject of personal data or without consent in cases provided for by law.

CHAPTER 5
BASIC RIGHTS AND OBLIGATIONS OF LSMEE

12. LSMEE has the right:

receive from the subject of personal data reliable information and (or) documents containing personal data;

request from the subject of personal data information about the relevance and reliability of the personal data provided;

13. LSMEE is obliged to:

explain to the subject of personal data his rights related to the processing of personal data;

obtain the consent of the subject of personal data to process personal data;

ensure the protection of personal data during their processing;

provide the subject of personal data with information about his personal data, as well as about the provision of his personal data to third parties;

make changes to personal data that are incomplete, outdated or inaccurate, except in cases where a different procedure for making changes to personal data is established by legislative acts or if the purposes of processing personal data do not imply subsequent changes to such data;

stop processing personal data, as well as delete or block it (ensure the termination of processing of personal data, as well as its deletion or blocking by an authorized person) in the absence of grounds for processing personal data provided for by legislative acts;

perform other duties provided for by legislative acts.

CHAPTER 6
BASIC RIGHTS AND OBLIGATIONS OF THE SUBJECT OF PERSONAL DATA

14. The subject of personal data has the right:

receive information regarding the processing of his personal data;

receive information from LSMEE about providing your personal data to third parties;

receive any clarification on issues of interest regarding the processing of his personal data by contacting LSMEE via email cless.hello@gmail.com;

withdraw consent to the processing of personal data;

appeal in court against unlawful actions or inactions of LSMEE in the processing of personal data;

require from LSMEE:

changes to his personal data if the personal data is incomplete, outdated or inaccurate;

free termination of the processing of your personal data, including their deletion, in the absence of grounds for the processing of personal data provided for by legislative acts;

exercise of other rights provided for by law.

15. The subject of personal data is obliged to:

provide LSMEE with reliable information about yourself;

inform LSMEE about updating (updating, changing) your personal data. Persons who provided LSMEE with false information about themselves or information about another subject of personal data without the latter’s consent are liable in accordance with the law.

CHAPTER 7
FINAL PROVISIONS

16. LSMEE and other persons who have access to personal data are obliged not to disclose to third parties or distribute personal data without the consent of the subject of personal data, unless otherwise provided by law.

17. The security of personal data processed by LSMEE is ensured through the implementation of legal, organizational and technical measures necessary to fully comply with the requirements of legislation in the field of personal data protection.

18. Issues related to the processing of personal data that are not covered by the Policy are regulated by law.