Privacy Policy
1.1 This Privacy Policy of LLC “Toliman” (TIN 9701161108) regarding the processing of personal data (hereinafter - the Policy) has been developed in accordance with Clause 2, Part 1, Article 18.1 of Federal Law No. 152-FZ dated July 27, 2006 “On Personal Data” and is aimed at protecting the rights and freedoms of individuals in the processing of their personal data, including the right to privacy and personal and family confidentiality.
1.2 The Policy applies to all personal data processed by LLC “Toliman” (hereinafter - the Operator, the Company).
1.3 This Policy applies to all relations associated with the processing of personal data that arose for the Operator both before and after its approval.
1.4 In accordance with Part 2 of Article 18.1 of Federal Law No. 152-FZ, this Policy is published in open access on the Operator’s official website on the Internet.
1.5.1 Personal data - any information relating to an identified or identifiable natural person (the data subject).
1.5.2 Operator - an organization that independently or jointly with other persons organizes and/or carries out the processing of personal data and determines the purposes of such processing.
1.5.3 Processing of personal data - any action or set of actions performed with personal data, including collection, recording, systematization; storage, clarification, use; transfer, anonymization, blocking; deletion, destruction.
1.5.4 Automated processing - processing of personal data using computer technology.
1.5.5 Blocking of personal data - temporary suspension of processing (except where necessary to clarify the data).
1.5.6 Destruction of personal data - actions that make it impossible to restore personal data.
1.6.1 The Operator has the right to independently determine measures to ensure compliance with personal data legislation, unless otherwise provided by law.
1.6.2 To entrust the processing of personal data to third parties with the consent of the data subject, unless otherwise provided by law.
1.6.3 To continue processing personal data after withdrawal of consent if there are lawful grounds.
1.6.4 The Operator is obliged to comply with the requirements of Federal Law No. 152-FZ when processing personal data, respond to requests from data subjects and their representatives, provide information at the request of Roskomnadzor, and interact with state cybersecurity systems.
1.7.1 To receive information about the processing of their personal data, except in cases provided for by federal law.
1.7.2 To demand clarification, blocking, or deletion of inaccurate personal data.
1.7.3 To give consent for the use of personal data for marketing purposes.
1.7.4 To appeal the actions of the Operator to Roskomnadzor or a court.
2.1 Personal data processing is limited to lawful and pre-defined purposes.
2.2 Only personal data necessary to achieve these purposes are processed.
2.3.1 Conducting activities in accordance with the Charter of LLC “Toliman”, including preparation, conclusion, and performance of civil law contracts.
2.3.2 Compliance with labor legislation (personnel records, candidate selection, accounting).
2.3.3 Promotion of the Company’s goods and services.
3.1 Personal data processing is carried out on the basis of:
3.2 The Constitution of the Russian Federation, the Civil Code of the Russian Federation, the Labor Code of the Russian Federation, the Tax Code of the Russian Federation.
3.3 Federal laws (No. 14-FZ, No. 402-FZ, No. 167-FZ, etc.).
3.4 The Charter of LLC “Toliman”.
3.5 Contracts concluded with personal data subjects.
3.6 Consents to the processing of personal data.
4.1 The scope and content of personal data correspond to the stated purposes of processing.
4.2 Categories of data subjects and data processed: Job candidates (full name, contact details, education, citizenship, gender, date and place of birth) - stored for 3 years.
4.3 Employees (last name, first name, patronymic, gender, citizenship, date and place of birth, passport details, registered address, actual residence address, contact details, taxpayer identification number, individual insurance account number (SNILS), education, qualifications, professional training and advanced training, marital status, children, family relations, employment history including incentives, awards and/or disciplinary actions, marriage registration data, military registration data, disability data, alimony withholding data, income data from previous employment, facial image (photograph), other personal data provided by employees in accordance with labor legislation) - stored for 10 years after termination of employment.
4.4 Individual clients (last name, first name, patronymic, date and place of birth, passport details, registered address, contact details, taxpayer identification number, bank account number, other personal data provided by clients and counterparties (individuals) necessary for the conclusion and performance of contracts) - stored for 5 years after contract termination.
4.5 Website visitors (cookies, IP addresses) - stored for up to 3 years.
4.6 Biometric personal data are processed in accordance with applicable law.
4.7 Special categories of personal data (race, religion, health) are not processed, except in cases provided for by law.
5.1 Personal data processing is carried out in accordance with the legislation of the Russian Federation.
5.2 Processing is carried out both with the consent of the data subject and without it, where permitted by law.
5.3 Processing methods: automated; non-automated; mixed.
5.4 Access to personal data is granted only to authorized employees.
5.5 Security measures include: identification of information security threats; appointment of responsible persons; employee training; control over data storage. Transfer of personal data to government authorities is carried out upon lawful requests.
5.6 Retention periods: on paper media - in accordance with archival legislation; in electronic systems - in accordance with the same periods as for paper media.
5.7.1 achievement of processing purposes;
5.7.2 withdrawal of consent, unless there are other lawful grounds for processing.
6.1 A data subject has the right to request information about their personal data. The response period is 10 business days (may be extended by up to 5 business days).
6.2 If inaccuracies are identified, personal data are blocked for the period of verification.
6.3 In the event of a personal data breach, the Operator notifies Roskomnadzor within 24 hours.
6.4.1 upon achievement of the purposes of processing;
6.4.2 upon expiration of retention periods;
6.4.3 at the request of the data subject, if there are no lawful grounds for further processing.