Policy on personal data processing

1. General provisions

This policy of personal data processing is drawn up in accordance with the requirements of the Federal Law dated 27.07.2006. No. 152-FZ "On Personal Data" and defines the procedure of personal data processing and measures to ensure personal data security taken by LLC "ESC Energomost" (hereinafter referred to as the Operator).
1.1. The Operator shall aim and condition of its activity at observance of human and citizen's rights and freedoms during processing of personal data, including protection of rights to privacy, personal and family secrecy.
1.2. This Operator's policy regarding the processing of personal data (hereinafter — the Policy) shall apply to all information that the Operator may obtain about the visitors of the website www.energomost.com.

2. Key concepts used in the Policy

2.1. Automated processing of personal data means processing of personal data by means of computer equipment;
2.2. Blocking of personal data means temporary cessation of personal data processing (except for cases when processing is necessary to clarify personal data);
2.3. Website means a set of graphic and informational materials, as well as computer programmes and databases, ensuring their availability on the Internet at the network address www.energomost.com;
2.4. Personal data information system means a set of personal data contained in databases and information technologies and technical means ensuring their processing;
2.5. Impersonalisation of personal data means actions as a result of which it is impossible to determine, without using additional information, whether personal data belong to a particular User or other subject of personal data;
2.6. Processing of personal data means any action (operation) or set of actions (operations) performed with or without the use of automation means with personal data, including collection, recording, systematisation, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion, destruction of personal data;
2.7. Operator means a state authority, municipal authority, legal or natural person, independently or jointly with other persons organising and (or) carrying out processing of personal data, as well as determining the purposes of personal data processing, composition of personal data subject to processing, actions (operations) performed with personal data;
2.8. Personal data means any information relating directly or indirectly to a specific or identifiable User of the www.energomost.com website;
2.9. User is any visitor to the www.energomost.com website;
2.10. Provision of personal data means actions aimed at disclosure of personal data to a certain person or a certain circle of persons;
2.11. Dissemination of personal data means any actions aimed at disclosure of personal data to an indefinite number of persons (transfer of personal data) or familiarisation of personal data to an unlimited number of persons, including disclosure of personal data in mass media, placement in information and telecommunication networks or providing access to personal data in any other way;
2.12. Cross-border transfer of personal data means transfer of personal data to the territory of a foreign country to a foreign government authority, a foreign individual or a foreign legal entity;
2.13. Destruction of personal data means any actions as a result of which personal data are irretrievably destroyed with the impossibility of further recovery of the content of personal data in the information system of personal data and (or) destruction of material carriers of personal data.

3. The Operator may process the following personal data of the User

3.1. Surname Name Patronymic;
3.2. Email;
3.3. Phone numbers;
3.4. Year, month, day and place of birth;
3.5. Photographs;
3.6. Address of the actual place of residence and registration at the place of residence and (or) place of stay;
3.7. Information on education, profession, speciality and qualification, details of education documents;
3.8. Information on marital status and family composition;
3.9. Information on previous positions and length of service, military duty, military registration;
3.10. The website also collects and processes anonymised visitor data (including cookies) using Internet statistics services (Yandex Metrica, Google Analytics and others).
3.11. The above-mentioned data are further on in the text of the Policy united by the general term Personal Data.

4. Purposes of personal data processing

4.1. The purpose of processing the User's personal data is to inform the User by sending emails.
4.2. Also, the Operator has the right to send the User notifications about new products and services, special offers and various events.
The User can always unsubscribe from receiving information messages by sending a letter to the Operator to the email address energomost@energomost.com with the note "Unsubscribe from notifications about new products and services and special offers".
4.3. The depersonalised data of Users collected by means of Internet statistics services shall serve to collect information about Users' activities on the website, to improve the quality of the website and its content.

5. Legal basis for processing personal data

5.1.  The Operator shall process the User's personal data only if it is filled in and/or sent by the User himself via special forms located on the website www.energomost.com.
By filling in the relevant forms and/or sending their personal data to the Operator, the User expresses their consent to this Policy.
5.2. The Operator shall process anonymised data about the User if it is allowed in the User's browser settings (cookie saving and use of JavaScript technology is enabled).

6. Procedure for collection, storage, transfer and other types of personal data processing

The security of personal data processed by the Operator shall be ensured by implementing legal, organisational and technical measures necessary for full compliance with the requirements of the applicable legislation in the field of personal data protection.

6.1. The Operator shall secure the safety of personal data and take all possible measures to prevent unauthorised persons from accessing personal data.
6.2. The User's personal data shall never, under no circumstances, be disclosed to third parties, except in cases related to the execution of applicable law.
6.3. In case of identifying inaccuracies in personal data, the User can update them independently by sending a notification to the Operator to the Operator's email address energomost@energomost.com with the note "Personal Data Update".
6.4. The period of personal data processing is unlimited.
The User may withdraw his/her consent to the processing of personal data at any time by sending a notice to the Operator by email to the Operator's email address energomost@energomost.com marked "Withdrawal of consent to the processing of personal data".

7. Cross-border transfer of personal data

7.1. Before commencing a trans-border transfer of personal data, the Operator shall verify that a reliable protection of the rights of personal data subjects is ensured by the foreign state to whose territory the transfer of personal data is to be carried out.
7.2. Trans-border transfer of personal data to the territories of foreign states that do not meet the above requirements can only be performed if there is a written consent of the personal data subject to the trans-border transfer of his/her personal data and/or fulfilment of an agreement to which the personal data subject is a party.

8. Final provisions

8.1. The User can get any clarifications on the issues of interest regarding the processing of his/her personal data by contacting the Operator via email at energomost@energomost.com.

8.2. This document will reflect any changes to the Operator's personal data processing policy.
The Policy is in effect indefinitely until it is replaced by a new version.
8.3. The current version of the Policy is freely available on the Internet at www.en.energomost.com/policy.