Privacy
Policy

The purpose of collecting, processing, storing, as well as other actions with personal data of clients is to fulfill the obligations of JSC «CSD» to the client under an agreement with him.

When processing personal data of clients, CSD JSC adheres to the following principles:

1. compliance with the legality of receiving, processing, storing, as well as other actions with personal data;
2. processing of personal data solely for the purpose of fulfilling its obligations under the service agreement;
3. collection of only those personal data that are minimally necessary to achieve the stated processing goals;
4. implementation of measures to ensure the security of personal data during their processing and storage;
5. compliance with the rights of the subject of personal data to access his personal data.

The personal data of clients processed by the company may include:

1. last name, first name, patronymic;
2. phone number, fax number, e-mail address (at the request of the client);
3. location address, etc.

The company receives personal data of clients only personally from the client in the process of communication or by filling out an electronic form on the websites of JSC «CSD»

The processing of personal data of clients in the company takes place both in a non-automated and automated way. Only employees who have passed a certain admission procedure are allowed to process personal data in the company, which include:

1. familiarization of the employee with the company’s local regulations (provisions, instructions, etc.), strictly regulating the process and procedure for working with personal data of clients;
2. taking a subscription from an employee about confidentiality with respect to personal data of clients when working with them;
3. obtaining by an employee and using in the work of individual attributes of access to the company’s information systems containing personal data of clients. At the same time, each employee is given the minimum rights necessary for the performance of work duties to access information systems.

Employees who have access to personal data of clients receive only those personal data that they need to perform specific work functions.

Personal data of clients are stored in paper (contract) and electronic form. In electronic form, personal data of clients are stored in the information systems of personal data of JSC «CSD», as well as in archival copies of databases of these systems. The procedure for archiving and storage periods of archived copies of databases of the company’s personal data information systems are defined in the instructions on backup, which is mandatory for the administrators of the relevant systems. When storing personal data of clients, organizational and technical measures are observed to ensure their safety and exclude unauthorized access to them. These include:

1. appointment of a department or employee responsible for a particular method of storing personal data;
2. restriction of physical access to storage locations and media;
3. accounting of all information systems and electronic media, as well as archival copies.

The transfer of personal data to third parties by «CSD» JSC is not provided.

Ensuring the security of personal data in the company is achieved by the following measures:

1. appointment of an employee responsible for the organization of personal data processing;
2. conducting an internal audit of the company’s information systems containing personal data, conducting their classification;
3. development of a private model of personal data security threats;
4. the appointment of a responsible administrator for each information system;
5. determination of the list of persons allowed to work with personal data;
6. development and approval of the company’s local regulations governing the processing of personal data. Development of working instructions for operators and administrators of information systems;
7. implementation of technical measures that reduce the likelihood of personal data security threats;
8. conducting periodic security checks of the company’s information systems.

The subject of personal data has the right to receive information concerning the processing of his personal data, including information containing:

1. confirmation of the fact of personal data processing;
2. llegal basis and purposes of personal data processing;
3. purposes and methods of personal data processing used;
4. information about persons (with the exception of company employees) who have access to personal data or to whom personal data may be disclosed on the basis of a contract or on the basis of federal law;
5. processed personal data related to the relevant subject of personal data, the source of their receipt;
6. terms of processing of personal data, including the terms of their storage;
7. the procedure for the exercise by the subject of personal data of their rights.

The client can get this information by contacting the office of JSC «CSD» with a written request. The response is sent to the address specified in the request within 30 days.