Personal data processing policy
Personal data processing policy
1. General Provisions
1.1. The personal data processing policy at Fergana Oil Refinery LLC (hereinafter - the Policy) defines the basic principles, goals, conditions and methods of personal data processing, lists of subjects and personal data processed at Fergana Oil Refinery LLC, the functions of Fergana Oil Refinery LLC when processing personal data, the rights of subjects of personal data, as well as the requirements for the protection of personal data implemented in Fergana Oil Refinery LLC.
1.2. The policy was developed taking into account the requirements of the Constitution of the Republic of Uzbekistan, legislative and other regulatory legal acts of the Republic of Uzbekistan in the field of personal data.
1.3. The provisions of the Policy serve as the basis for the development of local regulations governing the processing of personal data of employees of Fergana Oil Refinery LLC and other subjects of personal data in Fergana Oil Refinery LLC.
1.4. The policy is the basis for the development of local regulations by subsidiaries and organizations of Fergana Oil Refinery LLC, which determine the policy of processing personal data of these organizations.
2. Legislative and other regulatory legal acts of the Republic of Uzbekistan, in accordance with which the Policy for the processing of personal data in Fergana Oil Refinery LLC is determined
2.1. The personal data processing policy at Fergana Oil Refinery LLC is determined in accordance with the following regulatory legal acts:
· Labor Code of the Republic of Uzbekistan;
· Other regulatory legal acts of the Republic of Uzbekistan and regulatory documents of authorized government bodies.
2.2. In order to implement the provisions of the Policy, Fergana Oil Refinery LLC develops appropriate local regulations and other documents, including:
· Regulation on the processing of personal data at Fergana Oil Refinery LLC;
· Regulation on ensuring the security of personal data during their processing in personal data information systems of Fergana Oil Refinery LLC, its subsidiaries and organizations;
· A list of positions of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices, in case of replacement of which the processing of personal data is carried out;
· Regulations for the processing of personal data of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices;
· Other local regulations and documents regulating the processing of personal data in Fergana Oil Refinery LLC.
3. Basic terms and definitions used in the local regulations of Fergana Oil Refinery LLC governing the processing of personal data
Personal data - any information relating directly or indirectly to a specific or identifiable individual (subject of personal data).
Information - information (messages, data), regardless of the form of their presentation.
Operator - a state body, a municipal body, a legal entity or an individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.
Processing of personal data - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
Automated processing of personal data - processing of personal data using computer technology.
Provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons.
Dissemination of personal data - actions aimed at disclosing personal data to an indefinite circle of persons.
Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state to a foreign state authority, a foreign individual or a foreign legal entity.
Blocking of personal data - a temporary suspension of the processing of personal data (except for cases when the processing is necessary to clarify personal data).
Destruction of personal data - actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed.Depersonalization of personal data - actions, as a result of which it becomes impossible to determine the ownership of personal data by a specific subject of personal data without using additional information.
Personal data information system - a set of personal data contained in databases and information technologies and technical means that ensure their processing.
4. Principles and purposes of personal data processing
4.1. Fergana Oil Refinery LLC, being the operator of personal data, processes personal data of employees of Fergana Oil Refinery LLC and other subjects of personal data that are not in labor relations with Fergana Oil Refinery LLC.
4.2. The processing of personal data at Fergana Oil Refinery LLC is carried out taking into account the need to ensure the protection of the rights and freedoms of employees of Fergana Oil Refinery LLC and other subjects of personal data, including the protection of the right to privacy, personal and family secrets, based on the following principles:
· Processing of personal data is carried out in Fergana Oil Refinery LLC on a legal and fair basis;
· The processing of personal data is limited to the achievement of specific, predetermined and legitimate goals;
Processing of personal data that is incompatible with the purposes of collecting personal data is not allowed;
· It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
Only personal data that meet the purposes of their processing are subject to processing;
· The content and volume of processed personal data corresponds to the stated purposes of processing. The redundancy of the processed personal data in relation to the stated purposes of their processing is not allowed;
When processing personal data, the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of processing personal data are ensured. Fergana Oil Refinery LLC takes the necessary measures or ensures their adoption to remove or clarify incomplete or inaccurate personal data;
Storage of personal data is carried out in a form that allows you to determine the subject of personal data, no longer than the purpose of processing personal data requires, if the storage period for personal data is not established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor;
· The processed personal data is destroyed or depersonalized upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.
4.3. Personal data is processed by Fergana Oil Refinery LLC in order to:
· Ensuring compliance with the Constitution of the Republic of Uzbekistan, legislative and other regulatory legal acts of the Republic of Uzbekistan, local regulatory acts of Fergana Oil Refinery LLC;
· Implementation of the functions, powers and duties imposed by the legislation of the Republic of Uzbekistan on Fergana Oil Refinery LLC, including the provision of personal data to government bodies, to the Pension Fund of the Republic of Uzbekistan, to the Social Insurance Fund of the Republic of Uzbekistan, to the Federal Fund of Compulsory Health Insurance , as well as to other state bodies;
· Regulation of labor relations with employees of Fergana Oil Refinery LLC (assistance in employment, training and promotion, personal safety, control of the quantity and quality of work performed, ensuring the safety of property);
· Providing employees of Fergana Oil Refinery LLC and their family members with additional guarantees and compensations, including non-state pension provision, voluntary medical insurance, medical care and other types of social security;
· Protection of life, health or other vital interests of subjects of personal data;
· Preparation, conclusion, execution and termination of contracts with counterparties;
· Ensuring throughput and intra-facility modes at the facilities of Fergana Oil Refinery LLC;
· Formation of reference materials for internal information support of the activities of Fergana Oil Refinery LLC, its branches and representative offices, as well as subsidiaries and organizations of Fergana Oil Refinery LLC;
· Execution of judicial acts, acts of other bodies or officials, subject to execution in accordance with the legislation of the Republic of Uzbekistan on enforcement proceedings;
· To exercise the rights and legitimate interests of Fergana Oil Refinery LLC in the framework of the activities provided for by the Charter and other local regulations of Fergana Oil Refinery LLC, or third parties, or to achieve socially significant goals;
· For other lawful purposes.5. List of subjects whose personal data are processed at Fergana Oil Refinery LLC
5.1. Fergana Oil Refinery LLC processes personal data of the following categories of subjects:
· Employees of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices;
· Employees of subsidiaries and organizations of Fergana Oil Refinery LLC;
Other subjects of personal data (to ensure the implementation of the processing purposes specified in section 4 of the Policy).
6. List of personal data processed by Fergana Oil Refinery LLC
6.1. The list of personal data processed in Fergana Oil Refinery LLC is determined in accordance with the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC, taking into account the purposes of personal data processing specified in Section 4 of the Policy.
6.2. The processing of special categories of personal data concerning race, nationality, political views, religious or philosophical beliefs, intimate life is not carried out at Fergana Oil Refinery LLC.
7. Functions of Fergana Oil Refinery LLC when processing personal data
7.1. Fergana Oil Refinery LLC when processing personal data:
· Takes measures necessary and sufficient to ensure compliance with the requirements of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data;
Takes legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data;
· Appoints a person responsible for organizing the processing of personal data at Fergana Oil Refinery LLC;
· Publishes local regulations defining the policy and issues of processing and protecting personal data at Fergana Oil Refinery LLC;
· Familiarizes the employees of Fergana Oil Refinery LLC, its branches and representative offices directly engaged in the processing of personal data, with the provisions of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including the requirements for the protection of personal data, and training of these workers;
· Publishes or otherwise provides unrestricted access to this Policy;
Informs in the prescribed manner to the subjects of personal data or their representatives information on the availability of personal data relating to the relevant subjects, provides an opportunity to familiarize themselves with these personal data when contacting and (or) receiving requests from these subjects of personal data or their representatives, unless otherwise provided by law Republic of Uzbekistan;
· Stops processing and destroys personal data in cases stipulated by the legislation of the Republic of Uzbekistan in the field of personal data;
· Performs other actions provided for by the legislation of the Republic of Uzbekistan in the field of personal data.
8. Conditions for processing personal data at Fergana Oil Refinery LLC
8.1. The processing of personal data in Fergana Oil Refinery LLC is carried out with the consent of the subject of personal data to the processing of his personal data, unless otherwise provided by the legislation of the Republic of Uzbekistan in the field of personal data.
8.2. Fergana Oil Refinery LLC does not disclose to third parties and does not distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.
8.3. Fergana Oil Refinery LLC has the right to entrust the processing of personal data to another person with the consent of the subject of personal data on the basis of an agreement concluded with this person. The contract must contain a list of actions (operations) with personal data that will be performed by the person processing personal data, the purposes of processing, the obligation of such a person to maintain the confidentiality of personal data and ensure the security of personal data during their processing, as well as requirements for the protection of processed personal data in in accordance with Article 19 of the Federal Law "On Personal Data".
8.4. For the purpose of internal information support, Fergana Oil Refinery LLC can create internal reference materials, which, with the written consent of the subject of personal data, unless otherwise provided by the legislation of the Republic of Uzbekistan, may include his last name, first name, patronymic, place of work, position, year and place birth, address, subscriber number, e-mail address, other personal data provided by the subject of personal data.
8.5. Access to the personal data processed in Fergana Oil Refinery LLC is allowed only to employees of Fergana Oil Refinery LLC holding positions included in the list of positions of structural divisions of the Fergana Oil Refinery LLC administration, its branches and representative offices, upon replacement of which personal data is processed.
9. List of actions with personal data and methods of their processing
9.1. Fergana Oil Refinery LLC collects, records, systematizes, accumulates, stores, clarifies (updates, changes), retrieves, uses, transfers (distribution, provision, access), depersonalization, blocking, deletion and destruction of personal data.
9.2. The processing of personal data at Fergana Oil Refinery LLC is carried out in the following ways:
· Non-automated processing of personal data;
· Automated processing of personal data with or without the transfer of the information received via information and telecommunication networks;
· Mixed processing of personal data.
10. Rights of subjects of personal data
10.1. Personal data subjects have the right to:
· Complete information about their personal data processed by Fergana Oil Refinery LLC;
· Access to their personal data, including the right to receive a copy of any record containing their personal data, with the exception of cases provided for by federal law, as well as to access medical data related to them with the help of a medical specialist of their choice;
Clarification of your personal data, their blocking or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
· Withdrawal of consent to the processing of personal data;
· The adoption of measures provided by law to protect their rights;
· Appeal against the action or inaction of Fergana Oil Refinery LLC, carried out in violation of the requirements of the legislation of the Republic of Uzbekistan in the field of personal data, to the authorized body for the protection of the rights of subjects of personal data or to the court;
· Exercise of other rights stipulated by the legislation of the Republic of Uzbekistan.
11. Measures taken by Fergana Oil Refinery LLC to ensure the fulfillment of the operator's duties when processing personal data
11.1. The measures necessary and sufficient to ensure that Fergana Oil Refinery LLC fulfills the operator's obligations stipulated by the legislation of the Republic of Uzbekistan in the field of personal data, include:
· Appointment of a person responsible for organizing the processing of personal data at Fergana Oil Refinery LLC;
· Adoption of local regulations and other documents in the field of processing and protection of personal data;
· Organizing training and conducting methodological work with employees of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices, occupying positions included in the list of positions of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices, when replacing them, personal data;
· Obtaining the consent of the subjects of personal data to the processing of their personal data, with the exception of cases provided for by the legislation of the Republic of Uzbekistan;
Segregation of personal data processed without the use of automation tools from other information, in particular by fixing them on separate material carriers of personal data, in special sections;
Ensuring the separate storage of personal data and their material carriers, the processing of which is carried out for different purposes and which contain different categories of personal data;
· Imposing a ban on the transfer of personal data via open communication channels, computer networks outside the controlled area, EVSPD of Fergana Oil Refinery LLC and Internet networks without the use of measures established at Fergana Oil Refinery LLC to ensure the security of personal data (with the exception of public and (or ) anonymized personal data);
Storage of tangible carriers of personal data in compliance with the conditions ensuring the safety of personal data and excluding unauthorized access to them;
· Implementation of internal control over the compliance of personal data processing with the Federal Law "On Personal Data" and the regulatory legal acts adopted in accordance with it, the requirements for the protection of personal data, this Policy, local regulatory acts of Fergana Oil Refinery LLC;
Other measures provided for by the legislation of the Republic of Uzbekistan in the field of personal data.
11.2. Measures to ensure the security of personal data during their processing in personal data information systems are established in accordance with the local regulations of Fergana Oil Refinery LLC, regulating the issues of ensuring the security of personal data when processing them in personal data information systems of Fergana Oil Refinery LLC.
12. Monitoring compliance with the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data
12.1. Control over the observance by the structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data, is carried out in order to verify the compliance of personal data processing in the structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data, as well as measures taken to prevent and identify violations of the legislation of the Republic of Uzbekistan in the field of personal data, identification of possible channels of leakage and unauthorized access to personal data, elimination of the consequences of such violations.
12.2. Internal control over the observance by the structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data, is carried out by the person responsible for organizing the processing personal data in Fergana Oil Refinery LLC.
12.3. Internal control over the compliance of personal data processing with the Federal Law "On Personal Data" and the regulatory legal acts adopted in accordance with it, the requirements for the protection of personal data, this Policy, local regulations of Fergana Oil Refinery LLC is carried out by the Corporate Security Service of Fergana Oil Refinery LLC.
12.4. Personal responsibility for compliance with the requirements of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data in the structural division of the administration of Fergana Oil Refinery LLC, its branch and representative office, as well as for ensuring the confidentiality and security of personal data in these divisions of LLC Fergana Oil Refinery ”is assigned to their managers.
1. General Provisions
1.1. The personal data processing policy at Fergana Oil Refinery LLC (hereinafter - the Policy) defines the basic principles, goals, conditions and methods of personal data processing, lists of subjects and personal data processed at Fergana Oil Refinery LLC, the functions of Fergana Oil Refinery LLC when processing personal data, the rights of subjects of personal data, as well as the requirements for the protection of personal data implemented in Fergana Oil Refinery LLC.
1.2. The policy was developed taking into account the requirements of the Constitution of the Republic of Uzbekistan, legislative and other regulatory legal acts of the Republic of Uzbekistan in the field of personal data.
1.3. The provisions of the Policy serve as the basis for the development of local regulations governing the processing of personal data of employees of Fergana Oil Refinery LLC and other subjects of personal data in Fergana Oil Refinery LLC.
1.4. The policy is the basis for the development of local regulations by subsidiaries and organizations of Fergana Oil Refinery LLC, which determine the policy of processing personal data of these organizations.
2. Legislative and other regulatory legal acts of the Republic of Uzbekistan, in accordance with which the Policy for the processing of personal data in Fergana Oil Refinery LLC is determined
2.1. The personal data processing policy at Fergana Oil Refinery LLC is determined in accordance with the following regulatory legal acts:
· Labor Code of the Republic of Uzbekistan;
· Other regulatory legal acts of the Republic of Uzbekistan and regulatory documents of authorized government bodies.
2.2. In order to implement the provisions of the Policy, Fergana Oil Refinery LLC develops appropriate local regulations and other documents, including:
· Regulation on the processing of personal data at Fergana Oil Refinery LLC;
· Regulation on ensuring the security of personal data during their processing in personal data information systems of Fergana Oil Refinery LLC, its subsidiaries and organizations;
· A list of positions of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices, in case of replacement of which the processing of personal data is carried out;
· Regulations for the processing of personal data of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices;
· Other local regulations and documents regulating the processing of personal data in Fergana Oil Refinery LLC.
3. Basic terms and definitions used in the local regulations of Fergana Oil Refinery LLC governing the processing of personal data
Personal data - any information relating directly or indirectly to a specific or identifiable individual (subject of personal data).
Information - information (messages, data), regardless of the form of their presentation.
Operator - a state body, a municipal body, a legal entity or an individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.
Processing of personal data - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
Automated processing of personal data - processing of personal data using computer technology.
Provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons.
Dissemination of personal data - actions aimed at disclosing personal data to an indefinite circle of persons.
Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state to a foreign state authority, a foreign individual or a foreign legal entity.
Blocking of personal data - a temporary suspension of the processing of personal data (except for cases when the processing is necessary to clarify personal data).
Destruction of personal data - actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed.Depersonalization of personal data - actions, as a result of which it becomes impossible to determine the ownership of personal data by a specific subject of personal data without using additional information.
Personal data information system - a set of personal data contained in databases and information technologies and technical means that ensure their processing.
4. Principles and purposes of personal data processing
4.1. Fergana Oil Refinery LLC, being the operator of personal data, processes personal data of employees of Fergana Oil Refinery LLC and other subjects of personal data that are not in labor relations with Fergana Oil Refinery LLC.
4.2. The processing of personal data at Fergana Oil Refinery LLC is carried out taking into account the need to ensure the protection of the rights and freedoms of employees of Fergana Oil Refinery LLC and other subjects of personal data, including the protection of the right to privacy, personal and family secrets, based on the following principles:
· Processing of personal data is carried out in Fergana Oil Refinery LLC on a legal and fair basis;
· The processing of personal data is limited to the achievement of specific, predetermined and legitimate goals;
Processing of personal data that is incompatible with the purposes of collecting personal data is not allowed;
· It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
Only personal data that meet the purposes of their processing are subject to processing;
· The content and volume of processed personal data corresponds to the stated purposes of processing. The redundancy of the processed personal data in relation to the stated purposes of their processing is not allowed;
When processing personal data, the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of processing personal data are ensured. Fergana Oil Refinery LLC takes the necessary measures or ensures their adoption to remove or clarify incomplete or inaccurate personal data;
Storage of personal data is carried out in a form that allows you to determine the subject of personal data, no longer than the purpose of processing personal data requires, if the storage period for personal data is not established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor;
· The processed personal data is destroyed or depersonalized upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.
4.3. Personal data is processed by Fergana Oil Refinery LLC in order to:
· Ensuring compliance with the Constitution of the Republic of Uzbekistan, legislative and other regulatory legal acts of the Republic of Uzbekistan, local regulatory acts of Fergana Oil Refinery LLC;
· Implementation of the functions, powers and duties imposed by the legislation of the Republic of Uzbekistan on Fergana Oil Refinery LLC, including the provision of personal data to government bodies, to the Pension Fund of the Republic of Uzbekistan, to the Social Insurance Fund of the Republic of Uzbekistan, to the Federal Fund of Compulsory Health Insurance , as well as to other state bodies;
· Regulation of labor relations with employees of Fergana Oil Refinery LLC (assistance in employment, training and promotion, personal safety, control of the quantity and quality of work performed, ensuring the safety of property);
· Providing employees of Fergana Oil Refinery LLC and their family members with additional guarantees and compensations, including non-state pension provision, voluntary medical insurance, medical care and other types of social security;
· Protection of life, health or other vital interests of subjects of personal data;
· Preparation, conclusion, execution and termination of contracts with counterparties;
· Ensuring throughput and intra-facility modes at the facilities of Fergana Oil Refinery LLC;
· Formation of reference materials for internal information support of the activities of Fergana Oil Refinery LLC, its branches and representative offices, as well as subsidiaries and organizations of Fergana Oil Refinery LLC;
· Execution of judicial acts, acts of other bodies or officials, subject to execution in accordance with the legislation of the Republic of Uzbekistan on enforcement proceedings;
· To exercise the rights and legitimate interests of Fergana Oil Refinery LLC in the framework of the activities provided for by the Charter and other local regulations of Fergana Oil Refinery LLC, or third parties, or to achieve socially significant goals;
· For other lawful purposes.5. List of subjects whose personal data are processed at Fergana Oil Refinery LLC
5.1. Fergana Oil Refinery LLC processes personal data of the following categories of subjects:
· Employees of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices;
· Employees of subsidiaries and organizations of Fergana Oil Refinery LLC;
Other subjects of personal data (to ensure the implementation of the processing purposes specified in section 4 of the Policy).
6. List of personal data processed by Fergana Oil Refinery LLC
6.1. The list of personal data processed in Fergana Oil Refinery LLC is determined in accordance with the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC, taking into account the purposes of personal data processing specified in Section 4 of the Policy.
6.2. The processing of special categories of personal data concerning race, nationality, political views, religious or philosophical beliefs, intimate life is not carried out at Fergana Oil Refinery LLC.
7. Functions of Fergana Oil Refinery LLC when processing personal data
7.1. Fergana Oil Refinery LLC when processing personal data:
· Takes measures necessary and sufficient to ensure compliance with the requirements of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data;
Takes legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data;
· Appoints a person responsible for organizing the processing of personal data at Fergana Oil Refinery LLC;
· Publishes local regulations defining the policy and issues of processing and protecting personal data at Fergana Oil Refinery LLC;
· Familiarizes the employees of Fergana Oil Refinery LLC, its branches and representative offices directly engaged in the processing of personal data, with the provisions of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including the requirements for the protection of personal data, and training of these workers;
· Publishes or otherwise provides unrestricted access to this Policy;
Informs in the prescribed manner to the subjects of personal data or their representatives information on the availability of personal data relating to the relevant subjects, provides an opportunity to familiarize themselves with these personal data when contacting and (or) receiving requests from these subjects of personal data or their representatives, unless otherwise provided by law Republic of Uzbekistan;
· Stops processing and destroys personal data in cases stipulated by the legislation of the Republic of Uzbekistan in the field of personal data;
· Performs other actions provided for by the legislation of the Republic of Uzbekistan in the field of personal data.
8. Conditions for processing personal data at Fergana Oil Refinery LLC
8.1. The processing of personal data in Fergana Oil Refinery LLC is carried out with the consent of the subject of personal data to the processing of his personal data, unless otherwise provided by the legislation of the Republic of Uzbekistan in the field of personal data.
8.2. Fergana Oil Refinery LLC does not disclose to third parties and does not distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.
8.3. Fergana Oil Refinery LLC has the right to entrust the processing of personal data to another person with the consent of the subject of personal data on the basis of an agreement concluded with this person. The contract must contain a list of actions (operations) with personal data that will be performed by the person processing personal data, the purposes of processing, the obligation of such a person to maintain the confidentiality of personal data and ensure the security of personal data during their processing, as well as requirements for the protection of processed personal data in in accordance with Article 19 of the Federal Law "On Personal Data".
8.4. For the purpose of internal information support, Fergana Oil Refinery LLC can create internal reference materials, which, with the written consent of the subject of personal data, unless otherwise provided by the legislation of the Republic of Uzbekistan, may include his last name, first name, patronymic, place of work, position, year and place birth, address, subscriber number, e-mail address, other personal data provided by the subject of personal data.
8.5. Access to the personal data processed in Fergana Oil Refinery LLC is allowed only to employees of Fergana Oil Refinery LLC holding positions included in the list of positions of structural divisions of the Fergana Oil Refinery LLC administration, its branches and representative offices, upon replacement of which personal data is processed.
9. List of actions with personal data and methods of their processing
9.1. Fergana Oil Refinery LLC collects, records, systematizes, accumulates, stores, clarifies (updates, changes), retrieves, uses, transfers (distribution, provision, access), depersonalization, blocking, deletion and destruction of personal data.
9.2. The processing of personal data at Fergana Oil Refinery LLC is carried out in the following ways:
· Non-automated processing of personal data;
· Automated processing of personal data with or without the transfer of the information received via information and telecommunication networks;
· Mixed processing of personal data.
10. Rights of subjects of personal data
10.1. Personal data subjects have the right to:
· Complete information about their personal data processed by Fergana Oil Refinery LLC;
· Access to their personal data, including the right to receive a copy of any record containing their personal data, with the exception of cases provided for by federal law, as well as to access medical data related to them with the help of a medical specialist of their choice;
Clarification of your personal data, their blocking or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
· Withdrawal of consent to the processing of personal data;
· The adoption of measures provided by law to protect their rights;
· Appeal against the action or inaction of Fergana Oil Refinery LLC, carried out in violation of the requirements of the legislation of the Republic of Uzbekistan in the field of personal data, to the authorized body for the protection of the rights of subjects of personal data or to the court;
· Exercise of other rights stipulated by the legislation of the Republic of Uzbekistan.
11. Measures taken by Fergana Oil Refinery LLC to ensure the fulfillment of the operator's duties when processing personal data
11.1. The measures necessary and sufficient to ensure that Fergana Oil Refinery LLC fulfills the operator's obligations stipulated by the legislation of the Republic of Uzbekistan in the field of personal data, include:
· Appointment of a person responsible for organizing the processing of personal data at Fergana Oil Refinery LLC;
· Adoption of local regulations and other documents in the field of processing and protection of personal data;
· Organizing training and conducting methodological work with employees of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices, occupying positions included in the list of positions of structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices, when replacing them, personal data;
· Obtaining the consent of the subjects of personal data to the processing of their personal data, with the exception of cases provided for by the legislation of the Republic of Uzbekistan;
Segregation of personal data processed without the use of automation tools from other information, in particular by fixing them on separate material carriers of personal data, in special sections;
Ensuring the separate storage of personal data and their material carriers, the processing of which is carried out for different purposes and which contain different categories of personal data;
· Imposing a ban on the transfer of personal data via open communication channels, computer networks outside the controlled area, EVSPD of Fergana Oil Refinery LLC and Internet networks without the use of measures established at Fergana Oil Refinery LLC to ensure the security of personal data (with the exception of public and (or ) anonymized personal data);
Storage of tangible carriers of personal data in compliance with the conditions ensuring the safety of personal data and excluding unauthorized access to them;
· Implementation of internal control over the compliance of personal data processing with the Federal Law "On Personal Data" and the regulatory legal acts adopted in accordance with it, the requirements for the protection of personal data, this Policy, local regulatory acts of Fergana Oil Refinery LLC;
Other measures provided for by the legislation of the Republic of Uzbekistan in the field of personal data.
11.2. Measures to ensure the security of personal data during their processing in personal data information systems are established in accordance with the local regulations of Fergana Oil Refinery LLC, regulating the issues of ensuring the security of personal data when processing them in personal data information systems of Fergana Oil Refinery LLC.
12. Monitoring compliance with the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data
12.1. Control over the observance by the structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data, is carried out in order to verify the compliance of personal data processing in the structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data, as well as measures taken to prevent and identify violations of the legislation of the Republic of Uzbekistan in the field of personal data, identification of possible channels of leakage and unauthorized access to personal data, elimination of the consequences of such violations.
12.2. Internal control over the observance by the structural divisions of the administration of Fergana Oil Refinery LLC, its branches and representative offices of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data, including requirements for the protection of personal data, is carried out by the person responsible for organizing the processing personal data in Fergana Oil Refinery LLC.
12.3. Internal control over the compliance of personal data processing with the Federal Law "On Personal Data" and the regulatory legal acts adopted in accordance with it, the requirements for the protection of personal data, this Policy, local regulations of Fergana Oil Refinery LLC is carried out by the Corporate Security Service of Fergana Oil Refinery LLC.
12.4. Personal responsibility for compliance with the requirements of the legislation of the Republic of Uzbekistan and local regulations of Fergana Oil Refinery LLC in the field of personal data in the structural division of the administration of Fergana Oil Refinery LLC, its branch and representative office, as well as for ensuring the confidentiality and security of personal data in these divisions of LLC Fergana Oil Refinery ”is assigned to their managers.
