Regulation for processing and protection of personal data of On Russia Application Users

  1. 1. General provisions.
    1. This Regulation for processing and protection of personal data (hereinafter — the Regulation) is an official document of Primary Trade Union Organization of Students and Postgraduates of the Tomsk Polytechnic University of the Tomsk Territorial Organization of the Trade Union of Public Education and Science of Russian Federation (PTUOS&P TPU), OGRN 1027000001071, INN 7018014582, located at: main building 311-30, Lenina avenue, Tomsk, postcode 634050 (hereinafter – Mobile Application Operator, the Operator), and determine the procedure for processing and protecting information on individuals using the services of the On Russia Mobile Application and its services (hereinafter - the Users).
    2. This Regulation was developed in accordance with the Constitution of the Russian Federation, the Civil Code of the Russian Federation, Federal Law No. 149-FZ from July 27, 2006 "About Information, Information Technologies and Information Protection", Federal Law No. 52-FZ from July 27, 2006 "About Personal Data ", other federal laws and regulations, as well as other official documents of the Mobile Application.
    3. The purpose of the development of the Regulation is to define the procedure for processing and protecting the personal data of all users of the On Russia Mobile application whose data are subject to processing on the basis of the Operator's authority; ensuring the protection of human rights and fundamental freedoms while processing his personal data, including protection of privacy rights, personal and family secrets against unauthorized access and disclosure.
    4. The Current version of The Regulation which is a public document is available to any Internet user when clicking on the link http://www.on-russia.com/. The Operator has the right to amend the Regulation. When making changes to the Regulation, the Operator notifies the users about this by posting a new version of the Regulation on the Site not later than 10 days before the relevant changes come into force.
    5. This Regulation has been developed and is being used in accordance with the Rules for Use of the On Russia Mobile Application posted on the Site at http://www.on-russia.com/. If there are any contradictions between this Regulation and other official documents of the Mobile Application Operator, the Regulation is the subject to apply.
    6. By registering and using the Mobile application, the User agrees with the terms of these Regulations.
    7. If the User disagrees with the terms of the Regulation, the use of the Mobile Application and its services should be immediately terminated.
  2. Terms and Definitions.
    1. Personal data –
      any information related to an individual identified or identifiable on the basis of such information (the personal data subject), including inter alia, the individual’s first name, patronymic, last name, year, month, date and place of birth, address, the individual’s family, social and wealth status, education, professional occupation, income, and other information.
    2. Personal data processing
      actions (operations) with personal data, including collection, classification, accumulation, storage, refinement (update, change), use, dissemination (including transfer), anonymization, blocking and destruction of personal data.
    3. Confidentiality of personal data –
      mandatory to comply with the designated person in charge of accessing personal data, the requirement not to allow their distribution without the consent of the subject or other legal basis.
    4. Dissemination of personal data –
      actions aimed at the transfer of personal data to a certain range of persons (transfer of personal data) or for acquaintance with personal data of an unlimited number of persons, including the disclosure of personal data in the media, placement in information and telecommunications networks or provision of access to personal data in any other way.
    5. Использование персональных данных
      действия (операции) с персональными данными, совершаемые в целях принятия решений или совершения иных действий, порождающих юридические последствия в отношении субъектов персональных данных либо иным образом затрагивающих их права и свободы или права и свободы других лиц.
    6. Use of personal data
      actions (operations) with personal data, made for the purpose of making decisions or performing other actions that give rise to legal consequences with respect to subjects of personal data or otherwise affecting their rights and freedoms or the rights and freedoms of others.
    7. Blocking of personal data
      temporary suspension of collection, systematization, accumulation, use, dissemination of personal data, including their transfer.
    8. Destruction of personal data
      actions, as a result of which it is impossible to restore the contents of personal data in the information system of personal data or as a result of which material carriers of personal data are destroyed.
    9. Publicly available personal data
      are personal data, unrestricted access to which is granted with the consent of the entity or for which confidentiality requirements do not apply in accordance with federal laws.
    10. The user (the subject of personal data)
      is an individual who uses the On Russia Mobile application, the consumer of the PTUOS&P TPU services.
    11. Operator
      a state body, a municipal body, a legal entity or an individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as defining the purposes of processing personal data, the composition of personal data subject to processing, the actions (operations) performed with personal data. Within the framework of these Regulations, the Operator is the Primary Trade Union Organization of Students and Postgraduates of the Tomsk Polytechnic University of the Tomsk Territorial Organization of the Trade Union of Public Education and Science of Russian Federation (PTUOS&P TPU);
  3. Scope of Personal Data.
    1. The Users’ Personal data includes:
      1. Full name;
      2. Date of birth;
      3. Place of birth;
      4. Passport data;
      5. Residence address (according to the passport and the actual address);
      6. Federal Tax ID;
      7. Number and series of the state pension insurance certificate; information about non-state pension provision;
      8. E-mail address
      9. Telephones (mobile and home numbers) if such are registered in the name of the personal data subject or at the place of the subject’s residence or at the place of stay.
    2. The following documents and information containing data about Users may be created (created, collected) and stored by the Operator, including electronic form:
      1. Account, User's personal profile.
      2. Application for registration - an individual.
      3. Contract (public offer).
      4. Accession Confirmation.
      5. Records of telephone conversations and electronic correspondence.
    3. Personal data of Users collected and stored by the Operator includes:
      1. Provided by Users and required minimum for registration in the On Russia Mobile Application: name, surname, gender, mobile phone number and / or e-mail address;
      2. Provided by Users by using the edit section of their profile (Account) in the Mobile application;
      3. Additionally provided by Users on request of the Operator in order to fulfill the Mobile Application's obligations to the Users arising from the Mobile Application Services Agreement.
  4. The purpose of processing personal data.
    1. The purpose of processing personal data is implementation of set of actions aimed to achieve the goal including:
      1. Providing consulting, information and intermediary services.
      2. Other transactions not prohibited by law, as well as a set of actions with personal data necessary for the execution of the above transactions.
      3. In order to fulfill the requirements of the legislation of the Russian Federation.
      4. Furnishing of information of notification or marketing nature, including new services, promotions, events (for which there is advance User’s consent to receive them).
      5. Handling User’s requests / complaints.
    2. The condition for the termination of the processing of personal data is the liquidation of the Organization, as well as the relevant User’s request.
  5. Collection, processing and protection of personal data.
    1. Sequence of personal data receipt.
      1. The collection of the User's personal data is carried out in the Application during registration, as well as later when the User by his own initiative updates information about himself using the Application toolkit.

        Personal data provided for in paragraph 3.3.1. of the Regulation are provided by the User and are the necessary minimum for registration.

        All the User’s personal data is received from him personally with his consent (received in writing and / or electronically), except for the cases specified in clauses 5.1.4 and 5.1.6 of this Regulation and in other cases set forth by Russian legislation.

      2. The User's consent to the use of his personal data is stored in the Organization in paper and / or electronic form.
      3. The User’s consent for the processing of personal data is valid during the entire term of the contract (public offer), as well as within 5 years from the date of termination of the contractual relationship between the User and the Organization. After the expiration of the specified period, the consent is deemed extended for every five years thereafter if there is no information about its revocation by the User.
      4. If the User's personal data can only be obtained from a third party, the User must be notified of this in advance and consent must be obtained from him. The third person providing the personal data of the User must have the User’s consent to transfer the personal data to the Operator. The operator is obliged to receive a confirmation from a third party transmitting the User's personal data stating that the personal data is transmitted with his consent. The operator is obliged, in cooperation with third parties, to enter into an agreement with them regarding the confidentiality of information concerning the personal data of Users.
      5. The operator is obliged to inform the User about the purposes, prospective sources and methods of obtaining personal data, as well as the nature of the personal data to be received and the consequences of the User's denial to give written consent for their receipt.
      6. Processing of the User’s personal data without their consent is carried out in the following cases:
        1. Personal data is publicly available.
        2. At the request of authorized state bodies in cases provided for by the federal law of the Russian Federation.
        3. Processing of personal data is carried out on the basis of the federal law establishing its purpose, the conditions for obtaining personal data and the circle of subjects whose personal data are subject to processing, as well as determining the Operator’s powers.
        4. The processing of personal data is carried out for the purpose of concluding and executing a contract, one of which is the subject of personal data - the User.
        5. The processing of personal data is carried out for statistical purposes and in order to improve the quality of the Operator's service provided that personal data is strictly depersonalized.
        6. In other cases provided for by law.
        7. The operator has no right to receive and process the User's personal data about his race, nationality, political views, religious or philosophical beliefs, health status, intimacies.
    2. Procedure for processing personal data:
      1. Processing of personal data is based on the following principles:
        • а) the legitimacy of the purposes and methods of processing personal data;
        • b) fairness;
        • c) the correspondence of the purposes of processing personal data to the purposes predetermined and claimed in the collection of personal data, as well as the powers of the Mobile Application Operator;
        • d) the correspondence between the volume and nature of the personal data being processed, the methods of processing personal data for the purposes of processing personal data;
        • e) inadmissibility of combining the databases created for incompatible purposes of the database containing personal data.
      2. Only the Operator’s employees authorized to work with the User's personal data and who have signed the Agreement on the non-disclosure of the User's personal data may have access to the processing of the User’s personal data.
    3. Protection of personal data:
      1. Under the protection of the User's personal data a set of measures (organizational, administrative, technical, legal) aimed to prevent unauthorized or accidental access to them, destruction, modification, blocking, copying, distribution of User’s personal data, as well as other illegal actions is understood.
      2. Protection of the User's personal data is carried out at the expense of the Operator in the manner established by the federal law of the Russian Federation.
      3. The Operator during the protection of the User’s personal data takes all necessary organizational, administrative, legal and technical measures, including:
        • Encryption (cryptographic) tools.
        • Antivirus protection.
        • Security analysis.
        • Intrusion detection and prevention.
        • Access control.
        • Registration and accounting.
        • Ensuring integrity.
        • Organization of regulatory and methodological local acts that regulate the protection of the User’s personal data.
      4. Access to the User’s personal data is available to the Operator's employees, who need personal data in connection with the performance of their work duties.
      5. All employees associated with the receipt, processing and protection of the User’s personal data are required to sign an Agreement on the non-disclosure of the User’s personal data.
    4. Storage of personal data:
      • User’s Personal data are stored exclusively in electronic media and processed using automated systems, except for cases when manual processing of personal data is necessary in connection with the implementation of legal requirements.
    5. Transfer and storage of personal data
      1. Transfer of personal data
        • User’s Personal data are not transferred to any third parties, except for the cases directly provided by this Regulation.
        • When specifying the user or with the User’s consent, it is possible to transfer the User's personal data to third parties who are contractors of the On Russia Mobile Application Operator with the condition that such counterparties take obligations to ensure the confidentiality of the information received.
        • Provision of the User’s personal data on the request of state bodies (local governments) is carried out in the manner prescribed by law.
        • In order to execute the agreement between the User and the Mobile Application Operator and provide the User with access to the Application's functionality, the Operator develops provided services and products, develops and introduces new services and products, optimizes the quality of services and products, improves the available functionality of the Application and services. To ensure the implementation of these objectives, the User agrees to the implementation by the Operator of the Mobile Application in accordance with the applicable law, the collection, storage, accumulation, systematization, extraction, comparison, use, filling (clarification) of their data, as well as receiving and transferring to the affiliated parties and partners the results of automated processing of such data using different models of information evaluation, in the form of integer and / or text values and identifiers corresponding to given in the requests to the evaluation criteria, for processing by the Administration of the Site and / or persons specified in this clause.
    6. Blocking, destruction of personal data
      1. The procedure for blocking and unlocking personal data:
        1. Blocking of the User’s personal data is carried out with the written application of the User.
        2. Blocking of the User’s personal data means:
        3. Prohibition of editing personal data.
        4. Prohibition of the distribution of personal data by any means (e-mail, cellular communication, material carriers, etc.).
        5. The prohibition of the use of personal data in mass mailings (sms, e-mail, mail, etc.).
        6. Blocking of the User’s personal data can be temporarily withdrawn, if it is required for observance of the legislation of the Russian Federation.
        7. Unblocking of the User's personal data is carried out with his consent (if there is a need to obtain consent) or by the User's application.
        8. The User's repeated consent to the processing of his personal data (if it is necessary to receive it) entails the unblocking of his personal data.
      2. Destruction of personal data
        • Personal data of the user is destroyed by:
          • the User's own removal of data from his personal page;
          • the User's own removal of his personal page;
          • the removal by the Mobile Application Operator of information placed by the User, as well as the User's personal page in the cases established by the Rules for the On Russia Mobile Application.
    7. After the User’s account has been deleted or deactivated, the On Russia Mobile application can store information (including User Profile information) and User Materials during a commercially viable period of time, but not more than five years, in order to create backup copies and archives, and for audit purposes.
    8. By posting information on a personal page, including his personal data, the User is aware and agrees that the specified information may be available to other users taking into account the architecture and functionality of the Mobile Application.
  6. Rights and obligations of Users and Operators
    1. Users are entitled to:
      1. to provide free access to information about themselves by uploading their accounts (profiles) in the On Russia Mobile application using the identification data (login and password);
      2. independently make changes and corrections to the information about themselves in the User’s account (profile) in the On Russia Mobile application, provided that such changes and corrections contain up-to-date and reliable information;
      3. Delete information about themselves from their Account (profile) in the On Russia Mobile Application;
      4. to require the Operator to clarify their personal data, blocking or destroying it in case such data are incomplete, outdated, unreliable, illegally obtained or are not necessary for the stated purpose of processing and if it is impossible to carry out the actions provided for in 6.1.2. and 6.1.3. of these Regulations;
      5. on the basis of a request to receive information from the Operator concerning the processing of their personal data.
      6. Appeal to the authorized body for the protection of the rights of subjects of personal data or in the judicial order illegal actions or omissions while processing the personal data of the User.
    2. The Operator has the right:
      1. Defend its interests in court.
      2. Provide the User’s personal data to third parties, if it is provided by the current legislation (tax, law enforcement agencies, etc.) or by agreement with the User.
      3. Refuse to provide personal data in cases stipulated by the legislation of the Russian Federation.
      4. Use the personal data of the User without his consent, in cases stipulated by the legislation of the Russian Federation.
  7. Measures to protect User’s personal data
    1. The operator takes technical, organizational and legal measures to protect the User's personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, distribution, as well as from other illegal actions.
    2. To authorize access to the Mobile application, the login (e-mail address or mobile phone number) and the User's password are used. The User is responsible for the safety of this information. The user does not have the right to transfer their own login and password to third parties, and also must take measures to ensure their confidentiality.
    3. In order to provide more reliable protection of information about Users, the Operator uses the page binding system to the mobile phone. To implement this system, the User must provide the Operator with his mobile phone number.
  8. Limitation upon the Rules
    • The present Rules do not apply to actions and Internet resources of third parties.
    • The operator is not responsible for the actions of third parties who, as a result of using the Internet, have access to information about the User.
  9. User’s references
    1. Users have the right to send their inquiries to the Operator, including requests about the use of their personal data, provided for in clause 6.1.5 of this Regulation, in writing at the address: main building 311-30, Lenina avenue, Tomsk, postcode 634050, or in the form of an electronic document signed by a qualified electronic signature in accordance with the legislation of the Russian Federation, by e-mail: email@on-russia.com/.
    2. The request sent by the User must contain the following information:
      1. number of the main identification document of the User or his representative;
      2. information about the date of issue of the named document and the issuing authority;
      3. information confirming the relationship between the User and the Operator (User ID);
      4. signature of the User or his representative.
    3. The operator undertakes to review and forward the response to the received request from the User within 30 days from the receipt of the request.
    4. All correspondence received by the Operator from Users (references in writing or electronic form) refers to information of limited access and is not disclosed without the written consent from the User. Personal data and other information about the User who sent the request can not be used without the special consent from the User in any other way than to respond to the subject of the received request or in cases directly provided by law.
Have an idea?
Attache file

If you click "Offer", you will consent to processing of your personal data

Thanks for the suggestion!

The message was sent as soon as we process the request - we will contact you immediately.

Thanks for the question

The message was sent as soon as we process the request - we will contact you immediately.