Agreement on the processing of personal data

Policy of JSC "Kuzlitmash"
on the processing of personal data

1. This Policy defines the procedure for processing information related to an identified individual or an individual who can be identified (hereinafter referred to as personal data) and measures to ensure the security of personal data taken by Kuzlitmash JSC (hereinafter referred to as the Operator).

2. This Policy has been developed in accordance with the Constitution of the Republic of Belarus, the Law of the Republic of Belarus dated May 7, 2021 No. 99-Z “On the Protection of Personal Data” (hereinafter referred to as the Law on Personal Data), legislative and other regulatory legal acts of the Republic of Belarus in the field of personal data .

3. The operator takes technical, organizational and legal measures to ensure the protection of personal data, the rights and freedoms of individuals in the processing of their personal data.

4. This Policy applies to all personal data processed by the Operator.

5. The purposes of processing personal data are:

• Ensuring compliance with the Constitution, legislative and other regulatory legal acts of the Republic of Belarus, Operator's LPA;
• implementation of the functions, powers and obligations assigned by the legislation of the Republic of Belarus to the Operator, including the provision of personal data to state authorities, to the Social Protection Fund of the Ministry of Labor and Social Protection of the Republic of Belarus, as well as to other state bodies;
• regulation of labor relations with employees of JSC Kuzlitmash (assistance in employment, training and promotion, ensuring personal safety, monitoring the quantity and quality of work performed, ensuring the safety of property);
• protecting the life, health or other vital interests of personal data subjects;
• preparation, conclusion, execution and termination of contracts with counterparties;
• ensuring access and intra-object regimes at the facilities of JSC Kuzlitmash;
• formation of reference materials for internal information support of the Operator's activities;
• enforcement of judicial acts, acts of other bodies or officials subject to execution in accordance with the legislation of the Republic of Belarus on enforcement proceedings;
• implementation of the rights and legitimate interests of JSC Kuzlitmash in the framework of the implementation of the types of activities provided for by the legislation of the Republic of Belarus and other legal entities of JSC Kuzlitmash, or the achievement of socially significant goals;
• for other lawful purposes.

6. The processing of personal data by the Operator is based on the principles of legality, respect for the rights and interests of individuals, and their privacy.

7. The list of personal data processed by the Operator is determined in accordance with the legislation of the Republic of Belarus and the Operator's LPA, taking into account the purposes of processing personal data.

8. The processing of personal data is carried out with the consent of the individual in respect of which the Operator processes personal data (hereinafter referred to as the subject), except as provided for by the Law on Personal Data and other legislative acts

9. The consent of the subject is a free, unambiguous, informed expression of his will, through which he authorizes the processing of his personal data.

The consent of the subject must be obtained in writing, in the form of an electronic document or in another electronic form, unless otherwise provided by the Law on the Protection of Personal Data.

10. Personal data is processed by the Operator in the framework of achieving the goals of processing personal data.

11. The processing of personal data received by the Operator is carried out in accordance with legislative acts and local legal acts of the Operator.

12. The operator ensures the storage of personal data in a form that allows the identification of subjects, no longer than is required in accordance with the stated purposes of processing personal data.

13. Personal data received by the Operator shall not be subject to dissemination, except in cases related to the fulfillment by the Operator of the requirements of the law.

14. The protection of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures to ensure the protection of personal data from unauthorized or accidental access to them, modification, blocking, copying, distribution, provision, deletion of personal data, as well as from other illegal actions in relation to personal data.

The Operator ensures the safety of personal data and takes all possible measures to exclude access to personal data of unauthorized persons.

15. The operator provides unlimited access, including using the global computer network Internet, to this policy.