Personal Data Processing and Protection Policy

1. General provisions

1.1. In the course of its principal activities, the Operator of the Website https://it-link.ru/ processes the personal data of personal data subjects (users of the website https://it-link.ru/, hereinafter also referred to as “Users”).

1.2. This policy sets out the procedure and conditions for processing personal data, both by automated means and without the use of such means; defines the purposes and content of personal data processing, measures aimed at protecting personal data, and procedures aimed at identifying and preventing violations of the legislation of the Russian Federation on personal data and remedying such violations.

1.3. When organizing and carrying out the processing of personal data, the Operator is guided by the requirements of Federal Law No. 152-FZ of July 27, 2006, “On Personal Data”.

1.4. For the purposes of this Policy, personal data means any information provided through the Operator’s website and/or collected using the website that relates to an individual (the personal data subject).

2. Purposes, conditions, and procedure for processing personal data

2.1. The purposes for which the Operator processes personal data are:

• maintaining records of candidates (applicants) in order to determine the possibility of further cooperation with the Operator;
• ensuring compliance with the legislation of the Russian Federation, its constituent entities, local self-government bodies, and other regulatory legal acts;
• providing information to Users through this Website and enabling User information to be communicated to third parties interested in receiving it;
• ensuring user safety;
• maintaining and improving the Website;
• placing advertising information.

2.2. The Operator collects information from Users who are ready to cooperate with the Operator (job applicants), as well as from other Website visitors, including those who contact the Operator with inquiries, messages, applications, complaints, or proposals using contact information or feedback tools on the Website, and those who participate in interviews, surveys, and analytical and marketing research related to the Operator’s activities.

2.3. Processing of Users’ personal data.

2.3.1. The Operator may collect and process the following categories of Users’ personal data:

• surname, first name, and patronymic;
• gender;
• date and place of birth;
• citizenship;
• details of an identity document;
• details contained in a birth certificate;
• registration address and actual residential address;
• military service status;
• telephone number;
• email address;
• details of education, profession, qualifications, professional training, and advanced training documents;
• information contained in an employment record book and information about the applicant’s employment history;
• marital status and information about family members that may be required by the Operator;
• employment record and previous places of work of the User;
• information about standard, social, and property tax deductions;
• health information related to the ability to perform the job function;
• additional information voluntarily provided by individuals, including information contained in resumes submitted by applicants;
• other personal data required by the Operator in accordance with the applicable legislation of the Russian Federation on personal data.

2.4. The processing of personal data includes the following actions: collection, recording, systematization, accumulation, storage, clarification (updating and modification), extraction, use, transfer (dissemination, provision, and access), depersonalization, blocking, deletion, and destruction of personal data.

2.5. The collection, recording, systematization, accumulation, and clarification (updating and modification) of Users’ personal data is carried out by receiving resumes; receiving originals, copies, and photographs of necessary documents (applications, employment record books, other documents required by labor legislation and other special legislation, and copies of service agreements confirming relevant experience); copying original documents and/or electronic files; and entering information into record-keeping forms on paper and electronic media.

3. Principles of personal data processing

3.1. The Operator processes personal data on a lawful basis and limits processing to the achievement of specific, predetermined, and lawful purposes, including the purposes set out in this Policy.

3.2. Only personal data that meet the purposes of their processing are subject to processing. The content and scope of the personal data processed by the Operator correspond to the stated purposes of processing; excessive processing of personal data is not permitted.

3.3. When processing personal data, the Operator ensures the accuracy, sufficiency, and, where necessary, relevance of personal data in relation to the purposes of processing. The Operator takes, or ensures that the necessary measures are taken, to delete or clarify incomplete or inaccurate personal data.

3.4. In the course of its activities, the Operator may provide personal data to, and/or entrust the processing of personal data to, another person with the consent of the personal data subject, unless otherwise provided by the legislation of the Russian Federation on personal data. A mandatory condition for providing and/or entrusting the processing of personal data to another person is that the parties observe confidentiality and ensure the security of personal data during processing.

3.5. The Operator destroys personal data in accordance with the law.

4. Rights of the personal data subject

4.1. The personal data subject has the right, unless otherwise provided by law, to:

• request clarification, blocking, or destruction of their personal data if the personal data are incomplete, outdated, inaccurate, or unnecessary for the stated processing purpose, and to take measures provided by law to protect their rights;
• request a list of their personal data processed by the Operator and the source from which it was obtained;
• receive information about the periods for processing their personal data, including the periods of storage;
• request that all persons to whom their incorrect or incomplete personal data were previously communicated be notified of all exclusions, corrections, or additions made to those data;
• appeal unlawful actions or omissions in the processing of their personal data to the authorized body for the protection of the rights of personal data subjects or through the courts;
• protect their rights and legitimate interests, including through the courts.

4.2. If you have questions about the nature of the processing, use, modification, or deletion of your personal data that you provided, or if you wish to refuse further processing by the Operator, please contact us by email at info@it-link.ru.

4.3. The Operator is not responsible for inaccurate information provided by the personal data subject.

5. Implementation of personal data protection requirements

5.1. In order to maintain its business reputation and ensure compliance with federal legislation, the Operator considers ensuring the lawfulness of personal data processing in its business processes and ensuring an appropriate level of security for the personal data processed by the Operator to be among its most important tasks.

5.2. The Operator requires other persons who have access to personal data not to disclose or disseminate personal data to third parties without the consent of the personal data subject, unless otherwise provided by federal law.

5.3. In order to ensure the security of personal data during processing, the Operator takes necessary and sufficient legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination, and other unlawful actions concerning personal data.

5.4. The Operator ensures that all organizational and technical personal data protection measures it implements are carried out on lawful grounds, including in accordance with the requirements of the legislation of the Russian Federation concerning the processing of personal data.

5.5. In order to ensure adequate protection of personal data, the Operator assesses the harm that may be caused to personal data subjects if the security of their personal data is violated and identifies current threats to the security of personal data during their processing in the Personal Data Information Resource.

5.6. In accordance with the identified current threats, the Operator applies necessary and sufficient legal, organizational, and technical measures to ensure the security of personal data, including the use of information security tools, detection of unauthorized access to personal data and response measures, restoration of personal data, restriction of access to personal data, registration and recording of actions involving personal data, and monitoring and evaluating the effectiveness of the measures applied, including internal control.

5.7. The Operator recognizes the importance and necessity of ensuring the security of personal data and promotes the continuous improvement of the personal data protection system used in the course of its principal activities.

5.8. The Operator has appointed persons responsible for organizing the processing and ensuring the security of personal data.