Scope and Categories of Processed Personal Data, Categories of Personal Data Subjects
4.1. The content and scope of processed personal data correspond to the declared purposes of processing. The processed personal data must not be excessive in relation to the declared purposes of their processing.
4.2. The processing of personal data is allowed in the following cases:
— personal data processing is carried out with the consent of the personal data subject to the processing of their personal data;
— personal data processing is necessary for the execution of a contract to which the personal data subject is a party, beneficiary, or guarantor, as well as for concluding a contract on the initiative of the personal data subject or a contract under which the personal data subject will be a beneficiary or guarantor;
— personal data processing is necessary to protect the life, health, or other vital interests of the personal data subject if obtaining the consent of the personal data subject is impossible;
— personal data processing is necessary to exercise the rights and legitimate interests of the operator or third parties, provided that this does not violate the rights and freedoms of the personal data subject;
— personal data processing is necessary for the professional activities of a journalist and (or) the legitimate activities of the media, or for scientific, literary, or other creative activities, provided that this does not violate the rights and legitimate interests of the personal data subject;
— personal data processing is carried out, access to which is granted to an unlimited number of persons by the personal data subject or at their request (hereinafter — personal data made publicly available by the personal data subject);
— personal data processing is carried out, which is subject to publication or mandatory disclosure in accordance with the law;
4.3. Categories of personal data subjects include:
4.3.1. Operator’s employees, former employees, candidates for vacant positions:
— surname, first name;
— gender;
— citizenship;
— nationality;
— date (day, month, year) and place of birth (country, republic, territory, region, district, city, town, village, other locality);
— address of residence (postal code, country, republic, territory, region, district, city, town, village, other locality, street, house, building, apartment);
— information about registration at the place of residence or stay (postal code, country, republic, territory, region, district, city, town, village, other locality, street, house, building, apartment);
— phone numbers (home, mobile, work), email address;
— position held;
— information about work activity (names of organizations (bodies) and positions held, duration of work (service) in these organizations (bodies));
— taxpayer identification number (date (day, month, year) and place of registration, date (day, month, year) of certificate issuance);
— data of the document confirming registration in the individual (personalized) accounting system, including in the form of an electronic document;
— data of the mandatory health insurance policy;
— data of the passport or other identity document;
— information on obtaining additional professional education (date (day, month, year), place, program, details of documents issued based on results);
— information on proficiency in foreign languages (foreign languages, proficiency level);
— information on criminal record (presence (absence) of a criminal record, date (day, month, year) of prosecution (expungement or removal of the criminal record), article);
— information on legal capacity (details of the document establishing guardianship (custodianship), reasons for limitation of legal capacity, court decision details);
— information on participation in the management of a business entity (excluding housing, housing construction, garage cooperatives, gardening, vegetable gardening, dacha consumer cooperatives, homeowners' associations, and trade unions registered in the prescribed manner), engagement in entrepreneurial activities;
— information on disciplinary actions;
— information contained in internal investigations;
— information on marital status (married (unmarried), married (remarried), divorced, widowed, duration of marriage, duration of divorce, number of marriages, family composition, marriage certificate details);
— information on close relatives, relatives by marriage (degree of kinship, surname, first name, patronymic, date (day, month, year) and place of birth, place and address of work (service), address of residence, information on registration at the place of residence or stay);
— information contained in income, expense, property, and property obligations declarations;
— bank account number;
— information on state secret clearance;
— photographs.
4.3.2. Clients and contractors of the operator (individuals):
— surname, first name;
— gender;
— phone numbers (home, mobile, work), email address.
4.3.3. Representatives/employees of the operator’s contractors (legal entities):
— surname, first name;
— gender;
— phone numbers (home, mobile, work), email address;
— position held;
— data of the passport or other identity document;
— information on participation in the management of a business entity, engagement in entrepreneurial activities.