Personal Data Management Policy

REGULATION on the processing of personal data of members of the International Union of Non-Governmental Organizations "World Peoples Assembly"

1. General provisions

1.1. This Regulation on the processing of personal data of members (hereinafter referred to as the Regulation) The International Union of Non-Governmental Organizations "World Peoples Assembly" (hereinafter referred to as the World Peoples Assembly) was developed in accordance with the Labor Code of the Russian Federation, the Constitution of the Russian Federation, the Civil Code of the Russian Federation, the Federal Law "On Information, Information Technologies and Information Protection", the Federal Law "About personal data.

1.2. The purpose of the Regulation is to determine the procedure for processing personal data of members of the World Peoples Assembly; to ensure the protection of the rights and freedoms of members of the World Peoples Assembly when processing their personal data, as well as to establish the responsibility of officials with access to the personal data of members of the World Peoples Assembly for non-compliance with the requirements of the norms governing the processing and protection of personal data data.

1.3. The procedure for putting into effect and changing the Position.

1.3.1. This Regulation comes into force from the moment of its approval by the Presidium of the General Council of the World Peoples Assembly and is valid indefinitely until it is replaced by a new Regulation.

1.3.2. All changes to the Regulations are made by the decision of the Presidium of the General Council of the World Peoples Assembly.

1.4. The members of the World Peoples Assembly should be familiar with these Regulations.

1.5. The confidentiality regime of personal data is lifted in cases of their depersonalization and after the expiration of 75 years of their storage period, or extended on the basis of the conclusion of the expert commission of the World Peoples Assembly, unless otherwise specified by law.

2. Basic concepts and composition of personal data of members

2.1. For the purposes of these Regulations, the following basic concepts are used: - personal data of a member - surname, first name, patronymic, year, month, date and place of birth, address, education, profession, other information required by the General Secretariat of the World Peoples Assembly; - personal data processing collection, accumulation, storage, clarification (updating, modification), use, dissemination (including transfer), depersonalization, blocking, destruction of personal data of members of the World Peoples Assembly;; confidentiality of personal data; mandatory requirement for the appointed responsible person who has access to the personal data of members to prevent their dissemination without the consent of the member or other legitimate reason; use of personal data; actions (operations) with personal data performed by an official of the World Peoples Assembly for decision-making purposes or performing other actions that give rise to legal consequences in relation to members. - blocking of personal data; temporary termination of the collection, accumulation, use, and dissemination of personal data of members, including their transfer; destruction of personal data; actions that make it impossible to restore the content of personal data in the information system of personal data of members; depersonalization of personal data; actions that make it impossible determine whether personal data belongs to a specific member; publicly available personal data; personal data to which an unlimited number of persons have access with the consent of a member or which, in accordance with federal laws, are not subject to confidentiality requirements. information (messages, data), regardless of the form of their presentation. Documented information is information recorded on a tangible medium by documenting information with details that allow you to identify such information or its tangible medium.

2.2. The personal data of members of the World Peoples Assembly includes documents containing information about passport data, education, place of residence:

2.3. A member of the World Peoples Assembly shall present to the General Secretariat of the World Peoples Assembly: - passport or other identity document; - job information; - e-mail address; - mobile phone number.

3. Collection, processing and protection of personal data

3.1. The procedure for obtaining personal data.

3.1.1. All personal data of a member of the World Peoples Assembly should be obtained from him. If a member's personal data can only be obtained from a third party, the member must be notified in advance and written consent must be obtained from him. The official of the General Secretariat must inform the member of the World Peoples Assembly about the purposes, intended sources and methods of obtaining personal data, as well as the nature of the personal data to be obtained.

3.1.2. The General Secretariat has no right to receive and process personal data of a member of the World Peoples Assembly about his race, nationality, political views, religious or philosophical beliefs, health status, intimate life.

3.1.3. The General Secretariat has the right to process the personal data of a member only with their written consent.

3.1.4. The consent of a member is not required in the following cases:

3.1.4.1. personal data is processed on the basis of the Labor Code of the Russian Federation or another federal law that establishes the purpose, conditions for obtaining personal data and the range of subjects whose personal data is being processed;

3.1.4.2. personal data is processed for the purpose of fulfilling an employment contract;

<3.1.4.3. personal data is processed for statistical or other scientific purposes, subject to mandatory depersonalization of personal data; 3.1.4.4. the processing of personal data is necessary to protect the life, health or other vital interests of a member if obtaining his consent is impossible.

3.2. The procedure for processing, transferring and storing personal data.

3.2.1. A member of the World Peoples Assembly provides reliable information about himself. The responsible employee of the General Secretariat verifies the accuracy of the information.

3.2.2. In accordance with Article 86, Chapter 14 of the Labor Code of the Russian Federation, in order to ensure the rights and freedoms of man and citizen, the Head of the General Secretariat and the staff of the General Secretariat must comply with the general requirements when processing personal data of a member.:

3.2.2.1. protection of the member's personal data from misuse;

3.2.2.2. protection of the member's personal data from loss.

3.2.3. The protection of personal data of members of the World Peoples Assembly is provided by the Head of the General Secretariat at the expense of the General Secretariat and in accordance with the procedure established by federal law.

4. Transfer and storage of personal data

4.1. When transferring personal data of a member, the Head of the General Secretariat must comply with the following requirements:

3.1.1. Do not disclose a member's personal data to a third party without the written consent of the member, except in cases where this is necessary to prevent a threat to the life and health of the member, as well as in cases established by federal law.

4.1.2. Not to disclose personal data of a member for commercial purposes without his written consent.

4.1.3. To warn the persons who have received the member's personal data that this data can only be used for the purposes for which it is provided, and to require these persons to confirm that this rule has been observed. Persons who have received personal data of a member are required to observe the secrecy (confidentiality) regime. This Provision does not apply to the exchange of personal data of a member in accordance with the procedure established by federal laws.

4.1.4. Allow access to a member's personal data only to specially authorized persons, while these persons should have the right to receive only those personal data of the member that are necessary to perform a specific function.

4.2. Storage and use of personal data of a member:

4.2.1. The member's personal data is processed and stored in the World Peoples Assembly.

4.2.2. Personal data of a member may be obtained, further processed and stored on paper and electronic media.

4.3. When receiving personal data from a non-member (except in cases where the personal data was provided to the General Secretariat on the basis of a federal law or if the personal data is publicly available), the General Secretariat must provide the member with the following information prior to processing such personal data: name (surname, first name, patronymic) and address of the operator or his representative; purpose of personal data processing and its legal basis; intended users of personal data;; the rights of the personal data subject established by this Federal Law.

5. Access to personal data

5.1. The following persons have the right to access a member's personal data: the Secretary General, the First Deputy Secretary General, the Head of the General Secretariat, and the Deputy Heads of the General Secretariat.

5.2. A member of the World Peoples Assembly has the right:

5.2.1. To access and get acquainted with their personal data, including the right to receive copies of any record containing a member's personal data free of charge.