For the proper functioning of the website, we process cookies and use Yandex.Metrica analytics tools. By continuing to use the site, you agree to the cookie usage policy
When completing the feedback form on the web-site of the Closed Joint Stock Company "Production Association "Gummy" (OGRN 1025200933911, INN (Taxpayer identification Number) 5217003285, hereinafter referred to as the "Processor") on the Internet at: https://gummi.ru/ (including any of its subdomains and pages), the Visitor hereby consents to processing of his/her personal data on the flilowing conditions:
of the Closed Joint Stock Company "Production Association "Gummy"
1. General Provisions
1.1. This Personal Data Processing Policy of the Closed Joint Stock Company "Production Association "Gummy" (hereinafter referred to as the Policy) has been developed for the purpose of requirements of cl. 2, Part 1, Article 18.1 of the Federal Law №152-FZ dated 27.07.2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) in order to protect the rights and freedoms of a person and citizen when processing his/her personal data, including the protection of rights to privacy, personal, and family secrets.
1.2. The Policy applies to all personal data processed by Closed Joint Stock Company "Production Association "Gummy" (hereinafter referred to as the Processor, CJSC PA “Gummy”).
1.3. The Policy applies to the Processor’s relations in the field of the personal data processing established after and before approval thereof.
1.4. For the purpose of requirements of Part 2, Art. 18.1 of the Personal Data Law, this Policy is made available to the public on the Internet information and telecommunication network at Processor’s web-site: https://gummi.ru/ (hereinafter referred to as the web-site) and on the information stand of CJSC PA “Gummy”.
1.5. Basic terms used in the Policy:
personal data — any information related to an individual defined or definable directly or indirectly (personal data subject);
personal data processor (processor) — a public authority, municipal body, legal entity or individual arranging and(or) carrying out — independently or jointly with other persons — the personal data processing, and determining the purposes of the personal data processing, composition of the personal data to be processed, actions (operations) performed with the personal data;
personal data processing — any action (operation) or a number of actions (operations) with the personal data performed with or without the automation facilities. The personal data processing includes, but is not limited to:
automated processing of personal data — personal data processing using the computing equipment;
personal data distribution — actions aimed at disclosure of the personal data to the general public;
personal data provision — actions aimed at disclosure of the personal data to a specific person or specific range of persons;
personal data blocking — suspension of the personal data processing (except when processing is necessary to refine the personal data);
personal data destruction — actions resulting in impossibility to restore the content of the personal data in the personal data information system and(or) resulting in destruction of the tangible media for personal data storage;
personal data depersonalisation — actions resulting in impossibility to determine that personal data refer to a specific personal data subject without the use of additional information;
personal data information system — the aggregate of personal data contained in the personal data databases, as well as information technologies and technical means ensuring processing thereof;
cookie files — small pieces of data, which a web-site requests from the browser used on the User's computer or mobile device. Cookie files reflect the User’s preferences or actions on a web-site as well as information on the User’s equipment, session date and time.
web-site — the aggregate of graphic and information materials as well as computer programs and databases ensuring availability thereof on the Internet at: https://gummi.ru/.
1.6. Basic rights and obligations of the Processor.
1.6.1. The Processor shall be entitled to:
1.6.2. The Processor shall:
1.7. Basic rights of the personal data subject. The personal data subject shall be entitled to:
1.8. The compliance with the requirements of this Policy must be controlled by the authorised person responsible for organisation of the personal data processing by the Processor.
1.9. The responsibility for violation of the requirements of the Russian Federation legislation and regulatory acts of CJSC PA “Gummy” in the field of the personal data processing and protection is established according to the legislation of the Russian Federation.
2. Purposes of the personal data processing
2.1. The personal data processing is limited to achievement of specific predetermined and legitimate purposes. The personal data processing that is incompatible with the purposes of the personal data acquisition is prohibited.
2.2. Only the personal data that serve the purposes of processing may be processed.
2.3. The personal data may be processed by the Processor for the following purposes:
2.4. Processing of employees’ personal data may be carried out solely for the purpose of compliance with the laws and other regulatory legal acts.
3. Legal grounds for the personal data processing
3.1. The legal grounds for the personal data processing are the aggregate of regulatory legal acts, for the purpose of and according to which the Processor processes the personal data, including:
3.2. The legal grounds for the personal data processing shall also include:
4. Volume and categories of the processed personal data, categories of the personal data subjects
4.1. The volume and content of the processed personal data shall meet the stated purposes of processing provided for by Section 2 hereof. The processed personal data shall not be excessive with respect to the stated purposes of processing thereof.
4.2. The Processor may process the personal data of the personal data subjects of the following categories:
4.2.1. Candidates for employment with the Processor — for the purpose of compliance with the labour legislation within the framework of labour and other directly associated relations, ensuring access control:
4.2.2. Current and former employees of the Processor — for the purpose of compliance with the labour legislation within the framework of labour and other directly associated relations, ensuring access control:
4.2.3. Family members of the Processor’s employees — for the purpose of compliance with the labour legislation within the framework of labour and other directly associated relations:
4.2.4. Clients and counterparties of the Processor (individuals) — for the purpose of carrying out their activities according to the Charter of CJSC PA “Gummy”, ensuring access control:
4.2.5. Representatives (employees) of clients and counterparties of the Processor (legal entities) — for the purpose of carrying out their activities according to the Charter of CJSC PA “Gummy”, ensuring access control:
4.2.6. Web-site visitors who are any persons accessing the web-site and/or using the web-site and information posted on the web-site — for the purpose of carrying out their activities according to the Charter of CJSC PA “Gummy”, including the conclusion and implementation of agreements with counterparties:
4.3. Processing by the Processor of biometric personal data (information that characterises the physiological and biological characteristics of a person, based on which his or her identity can be established) is carried out according to the legislation of the Russian Federation.
4.4. The Processor does not process the special categories of the personal data concerning racial, national identity, political views, religious and philosophical believes, health status, intimate life, except as provided for by the legislation of the Russian Federation.
5. Cookie files use policy.
5.1. The web-site uses cookie identification files to collect the necessary information for statistical purposes.
5.2 When a user visits the web-site for the first time, using a new browser or in private browsing mode, the banner pops up to warn the Visitor about the collection of cookie files and to request the Visitor's consent to processing thereof.
5.3. While browsing the web-site, the page itself is downloaded to the computer, as well as the text file called “cookie”, which simplifies the User’s interaction with the web-site. Other technologies are also used for these purposes, including unique identifiers required to recognise the applications and/or devices used, pixels, and local storage. The cookie files are automatically placed on your computer's hard drive each time you visit the web-site.
5.4. Cookie files used on the web-site:
_ga, _gat_*, _gid – these are analytical files that are used to improve the web-site. The Company uses the Yandex.Metrica service to analyse the use of the web-site. The transfer of the above data is completely secure as these files are fully anonymous and do not allow for identification of a specific person.
5.5. The user may disable the collection of cookie files by following the instructions in the browser settings.
5.6. By using the web-site, the user agrees to this Policy and confirms the consent to the use of cookie files in the established manner, as well as to processing of these files using the Yandex.Metrica service. If the User does not agree with the specified procedure, he/she may restrict the use of cookie files in the browser settings or not use the web-site.
5.7. The information on the web-site use by a visitor, collected with the help of cookie files, shall be transferred to Yandex LLC (OGRN (Primary State Registration Number) 1027700229193119021) and stored on servers located in the Russian Federation. Yandex LLC processes the received information to evaluate the use of the website by the Visitor and to compile reports on the operation of the website.
5.8. In case of any questions regarding the processing and use of the user's personal cookie files or the exercise of the rights of the personal data subject, contact us using one of the methods indicated on the web-site.
6. Personal data processing procedure and conditions
6.1. The personal data is processed by the Processor according to requirements of the Russian Federation legislation.
6.2. The personal data is processed with the consent of the personal data subjects to processing of his/her personal data, and without it in cases contemplated by the Russian Federation legislation.
6.3. The Processor processes the personal data for each purpose of processing thereof in the following manner:
6.4. The personal data may be processed by the Processor’s employees, whose job duties include the personal data processing.
6.5. The personal data processing for each processing purpose specified in cl. 2.3 hereof is carried out by:
6.6. The personal data shall not be disclosed to third parties or distributed without the consent of the personal data subject, unless otherwise provided for by the federal law. The consent of the personal data subject to the personal data processing for distribution is executed separately from other consents of the personal data subject to the personal data processing. The requirements to the scope of consent to the personal data processing permitted by the personal data subject for distribution are approved by the Order of Roskomnadzor №18 dated 24.02.2021.
6.7. The personal data is transferred to inquiry and investigative bodies, the Federal Tax Service, the Social Fund of Russia and other authorised executive bodies and organisations according to the requirements of the Russian Federation legislation.
6.8. The Processor takes all the necessary legal, organisational, and technical measures to protect the personal data from unlawful or accidental access, destruction, modification, blocking, distribution, and other unauthorised actions, namely:
6.9. The Processor keeps the personal data in the form allowing for identification of the personal data subject no longer than required for each purpose of the personal data processing, unless the personal data storage period is established by the federal law, agreement.
6.9.1. Hard-copy personal data is kept in CJSC PA “Gummy” during the document retention period, the period for which is provided for by the archiving laws of the Russian Federation (Federal Law №125-FZ dated 22.10.2004 “On Archiving in the Russian Federation”, List of Standard Management Archival Documents Generated during Activities of the State Bodies, Local Authorities and Organisations and the Period of Retention Thereof (approved by the Order of the Federal Archival Agency №236 dated 20.12.2019)).
6.9.2. The period of retention of the personal data processed in the personal data information systems corresponds to the period of retention of the hard-copy personal data.
6.10. The Processor shall stop the personal data processing in the following cases:
6.11. As the purpose of the personal data processing is achieved and in case of withdrawal of the personal data subject’s consent to processing of such data, the Processor shall stop processing thereof:
6.12. In case the personal data subject claims from the Processor to stop the processing of their personal data, the personal data processing shall be stopped within the time not exceeding 10 business days from the date of the corresponding claim receipt by the Processor, except as provided for by the Personal Data Law. The specified period may be extended by five business days maximum. For that purpose, the Processor shall provide the personal data subject with the reasoned notice specifying the reason for extending the period.
6.13. When acquiring the personal data, including by means of Internet information and telecommunications network, the Processor shall ensure recording, classification, accumulation, storage, refinement (updating, modification), retrieval of personal data of the Russian Federation citizens making use of databases located in the territory of the Russian Federation, except as provided for by the Personal Data Law.
7. Updating, correction, deletion, destruction of personal data, answers to applications of the subjects to access the personal data
7.1. Confirmation of the personal data processing by the Processor, the legal grounds for and purposes of the personal data processing, as well as other information mentioned in Part 7, Art. 14 of the Personal Data Law are provided by the Processor to the personal data subject or his/her representative within 10 business days upon receipt of the request from the personal data subject or his/her representative. This period may be extended by five business days maximum. For that purpose, the Processor should provide the personal data subject with the reasoned notice specifying the reason for extending the period of provision of the requested information.
The provided information shall not include personal data concerning other personal data subjects, except when there are legitimate grounds to disclose such personal data.
The request shall contain:
The request may be sent in the form of an electronic document and signed with a digital signature according to the legislation of the Russian Federation.
The Processor provides the information specified in Part 7, Article 14 of the Personal Data Law to the personal data subject or his/her representative in the form in which the relevant application or request was sent, unless otherwise specified in the application or request.
If the personal data subject’s application (request) does not contain all necessary information according to the requirements of the Personal Data Law, or the subject has no right to access the requested information, the reasoned refusal is sent to him/her.
The personal data subject’s right to access his/her personal data may be restricted according to Part 8, Art. 14 of the Personal Data Law, including if the personal data subject’s access to his/her personal data infringes the rights and legitimate interests of third parties.
7.2. Where inaccurate personal data is discovered, upon application of the personal data subject or his/her representative or by their request or by the request of Roskomnadzor, the Processor shall block the personal data related to that personal data subject from the date of such application or upon receipt of the above request for the period of verification, unless blocking of the personal data infringes the rights and legitimate interest of the personal data subject or third parties.
Where inaccuracy of the personal data is confirmed, the Processor shall, based on the information provided by the personal data subject or his/her representative or Roskomnadzor, or other necessary documents, refine the personal data within seven business days following the provision of such information and unblock the personal data.
7.3. In the event of detection of unlawful processing of the personal data, upon application (request) of the personal data subject or his/her representative or Roskomnadzor, the Processor shall block the unlawfully processed personal data related to such personal data subject from the date of such application or request.
7.4. Where the Processor, Roskomnadzor or other concerned party discovers unlawful or accidental transfer (provision, distribution) of the personal data (access to the personal data) resulting in infringement of rights of the personal data subjects, the Processor shall:
7.5. Procedure for the personal data destruction by the Processor.
7.5.1. Conditions and terms of the personal data destruction by the Processor:
7.5.2. As the purpose of the personal data processing is achieved and in case of withdrawal of the personal data subject’s consent to processing of such data, the data must be destroyed:
7.5.3. The personal data is destroyed by the committee set up by order of the General Director of CJSC PA “Gummy”.
7.5.4. The methods of the personal data destruction are established by the Processor’s local regulatory acts.
When visiting and staying on the web-site of the Closed Joint Stock Company "Production Association "Gummy" (OGRN (Primary State Registration Number)1025200933911, INN (Taxpayer identification Number) 5217003285, hereinafter referred to as the "Processor") on the Internet at: https://gummi.ru/ (including any of its subdomains and pages), the Visitor hereby gives his/her consent to processing of his/her personal data on the following conditions: