This Policy defines the procedure of personal data processing and measures to ensure personal data security at Engine Performance Chip (hereinafter referred to as the Operator) in order to protect the rights and freedoms of a person and citizen during the processing of his/her personal data, including the protection of the rights to privacy, personal and family secret.
Principles of personal data processing
Processing of personal data at the Operator is carried out on the basis of the following principles:
- legality and fair basis;
- limitation of personal data processing to the achievement of specific, predetermined and legitimate purposes;
- prevention of personal data processing incompatible with the purposes of personal data collection;
- preventing the merging of databases containing personal data processed for incompatible purposes;
processing only those personal data that meet the purposes of their processing; - compliance of the content and scope of processed personal data with the stated processing purposes;
- preventing the processing of personal data that are redundant in relation to the stated purposes of their processing;
- ensuring accuracy, sufficiency and relevance of personal data in relation to the purposes of personal data processing;
- destruction or depersonalization of personal data upon achievement of the purposes of their processing or in case of loss of necessity in achievement of these purposes, in case of impossibility of elimination of personal data violations by the Operator, unless otherwise provided by the federal law.
Conditions of personal data processing
The Operator processes personal data under at least one of the following conditions:
- personal data processing is performed with the consent of the personal data subject to the processing of his/her personal data;
- the processing of personal data is necessary for the execution of an agreement to which the personal data subject is a party or a beneficiary or guarantor, as well as for the conclusion of an agreement at the initiative of the personal data subject or an agreement under which the personal data subject will be a beneficiary or guarantor;
- processing of personal data is necessary for the exercise of rights and legitimate interests of the operator or third parties or for the achievement of socially important purposes, provided that the rights and freedoms of the personal data subject are not violated;
- processing of personal data is carried out, access to which is granted by the subject of personal data or at his/her request (hereinafter – publicly available personal data).
Confidentiality of personal data
The Operator and other persons who have access to personal data are obliged not to disclose to third parties and not to disseminate personal data without the consent of the subject of personal data, unless otherwise provided by federal law.
Publicly available sources of personal data
For the purpose of information support, the Operator may create publicly available sources of personal data of personal data subjects, including directories and address books. Publicly available sources of personal data may include, with the written consent of the subject of personal data, his/her surname, name, patronymic, date and place of birth, position, contact telephone numbers, e-mail address and other personal data provided by the subject of personal data.
Information about the subject of personal data shall be excluded at any time from publicly available sources of personal data at the request of the subject of personal data, the authorized body for the protection of the rights of personal data subjects or by court decision.
Trans-border transfer of personal data
The operator is obliged to make sure that the foreign state, to the territory of which the transfer of personal data is supposed to be carried out, provides adequate protection of the rights of personal data subjects, before the beginning of such transfer.
Transborder transfer of personal data to the territory of foreign states, which do not provide adequate protection of the rights of personal data subjects, may be carried out in cases of:
- availability of the personal data subject’s written consent to the trans-border transfer of his/her personal data;
- execution of an agreement to which the personal data subject is a party.
Consent of the personal data subject to the processing of his/her personal data
The personal data subject decides to provide his/her personal data and consents to their processing freely, of his/her own free will and in his/her own interest. Consent to the processing of personal data may be given by the subject of personal data or his/her representative in any form allowing to confirm the fact of its receipt, unless otherwise provided by federal law.
Rights of the subject of personal data
The subject of personal data has the right to receive information from the Operator regarding the processing of his/her personal data, unless such right is restricted in accordance with federal laws. The subject of personal data has the right to demand from the Operator to clarify his/her personal data, block or destroy it if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as to take measures provided for by law to protect his/her rights.
Processing of personal data for the purpose of promotion of goods, works, services on the market by means of direct contacts with the personal data subject (potential consumer) by means of communication means, as well as for political agitation purposes is allowed only with the prior consent of the personal data subject.
The operator is obliged to immediately stop processing of his personal data for the aforementioned purposes at the request of the personal data subject.
It is prohibited to make decisions based solely on the automated processing of personal data that give rise to legal consequences in respect of the personal data subject or otherwise affect his/her rights and legitimate interests, except in cases provided for by federal laws or with the written consent of the personal data subject.
If the personal data subject believes that the Operator processes his/her personal data in violation of the requirements of the Federal Law-152 or otherwise violates his/her rights and freedoms, the personal data subject has the right to appeal the actions or inaction of the Operator to the Authorized Body for the Protection of the Rights of Personal Data Subjects or in court.
The subject of personal data has the right to protection of his/her rights and legitimate interests, including compensation for losses and (or) compensation for moral damage.
Final provisions
The Operator’s employees guilty of violating the norms regulating the processing and protection of personal data shall bear material, disciplinary, administrative, civil or criminal liability in accordance with the procedure established by federal laws.
