Privacy policy

1. GENERAL PROVISIONS
1.1. This document defines the policy of LLC "FRENDVORK" regarding the processing of personal data (hereinafter referred to as PD) and contains information about the implemented measures for PD protection.
1.2. LLC "FRENDVORK" independently carries out PD processing, determines the purposes of PD processing, the composition of PD subject to processing, the actions (operations) performed with PD, and in certain cases, entrusts PD processing to other persons.
1.3. When processing PD, LLC "FRENDVORK" is guided by the following principles:

• processing is carried out on a lawful and fair basis;
• processing is limited to achieving specific, predetermined, and lawful purposes;
• processing incompatible with the purposes of PD collection is not permitted;
• combining databases containing PD processed for incompatible purposes is not permitted;
• only PD that correspond to the purposes of their processing are subject to processing;
• the content and scope of the processed PD correspond to the stated purposes of processing;
• during PD processing, their accuracy, sufficiency, and, where necessary, relevance in relation to the purposes of PD processing are ensured;

1.4. Based on this policy, LLC "FRENDVORK" develops internal regulatory documents establishing procedures for the processing and protection of processed PD.

2. TERMS AND DEFINITIONS
2.1. Personal Data- any information relating to a directly or indirectly identified or identifiable natural person (data subject).
2.2. Operator (of personal data) — a state body, municipal body, legal entity, or individual who, independently or jointly with other persons, organizes and (or) carries out the processing of personal data, and also determines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.3. Processing of Personal Data- any action (operation) or set of actions (operations) performed with PD using automation tools or without such tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
2.4. Automated Processing of Personal Data- processing of PD using computer technology;
2.5. Dissemination of Personal Data- actions aimed at disclosing PD to an indefinite number of persons;
2.6. Provision of Personal Data- actions aimed at disclosing PD to a specific person or a specific circle of persons;
2.7. Blocking of Personal Data- temporary cessation of PD processing (except for cases where processing is necessary to clarify PD);
2.8. Destruction of Personal Data- actions as a result of which it becomes impossible to restore the content of PD in the personal data information system and (or) as a result of which the material carriers of PD are destroyed;
2.9. Personal Data Information System- a set of PD contained in databases and the information technologies and technical means ensuring their processing;
2.10. Cross-Border Transfer of Personal Data- transfer of PD to the territory of a foreign state to a foreign state authority, foreign individual, or foreign legal entity.

3. PROCESSING PURPOSES
3.1. LLC "FRENDVORK" processes PD for the following purposes:

• selection of candidates for employment in vacant positions at LLC "FRENDVORK";
• selection of candidates for forming the "personnel reserve" of LLC "FRENDVORK";
• maintaining personnel records — hiring employees, processing and organizing business trips, processing leaves, sick leave certificates, changing employees' personal data, transferring employees to another position, issuing certificates and extracts, dismissing employees;
• calculation and payment or withholding of funds to employees — wages, bonuses, allowances, compensations, benefits;
• formation and submission of reports to state and supervisory authorities, funds (FTS Russia, PFR);
• fulfillment of obligations stipulated by local regulatory acts and employment contracts;
• fulfillment of obligations stipulated by the current legislation of the Russian Federation (in particular, Federal Law No. 181-FZ dated 24.11.1995 "On Social Protection of Disabled Persons in the Russian Federation", Federal Law No. 340−1 dated 20.11.1990 "On State Pensions in the Russian Federation", calculation and payment (transfer) of insurance contributions to the Pension Fund of the Russian Federation, calculation, withholding, transfer of taxes to the budgetary system of the Russian Federation, etc.);
• conclusion, support, termination of civil law contracts, calculation and accrual of remuneration, payment for works and services to performers under civil law contracts;
• fulfillment of obligations stipulated by civil law contracts (in particular, carrying out calculation and payment of funds);
• verification of the authority of persons acting on behalf of a counterparty (in particular, verification of authority to sign a contract);
• conclusion, execution, termination of contracts with counterparties, interaction with contact persons of counterparties;
• execution of contracts with counterparties (clients) related to the processing of personal data of candidates for vacant positions of client companies in the Friendwork Recruiter system;
• organization and holding of events.

3.2. To achieve the purposes of PD processing, LLC "FRENDVORK" carries out the following operations with PD: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of PD.

4. OBTAINING AND PROCESSING
4.1. The processed PD is obtained by LLC "FRENDVORK":
directly from the PD subject themselves;
from a person who is not the PD subject;
from publicly available sources of PD.
4.2. PD processing at LLC "FRENDVORK" is carried out exclusively on legal grounds. In all cases provided for by the legislation of the Russian Federation, LLC "FRENDVORK" organizes obtaining the consent of the PD subject for the processing of their PD in written form or another form that allows confirming the fact of its receipt.
4.3. Obtaining PD from a person who is not the PD subject is carried out if the following grounds exist:

• for the conclusion of a contract at the initiative of the PD subject, as well as for the execution of a contract where the PD subject is a party, beneficiary, or guarantor;
• for achieving purposes stipulated by the legislation of the Russian Federation, or for carrying out and fulfilling the functions, powers, and duties assigned to LLC "FRENDVORK" by the legislation of the Russian Federation;
• for exercising the rights and legitimate interests of LLC "FRENDVORK" or third parties, provided that this does not violate the rights and freedoms of the PD subject;
• processing of PD to which unlimited access has been granted by the PD subject or at their request (PD made publicly available by the PD subject);
• processing of PD subject to publication or mandatory disclosure in accordance with federal legislation;
• processing of PD on behalf of another legal entity, subject to mandatory receipt of consent from said entity to entrust PD processing to LLC "FRENDVORK".

4.4. At LLC "FRENDVORK", PD processing is carried out both using automation tools and without such tools.
4.5. To achieve the stated purposes, LLC "FRENDVORK" processes the PD of individuals who have entered into an employment contract (employees) with LLC "FRENDVORK", their relatives, dismissed employees, and candidates for employment; employees — individuals engaged under civil law contracts and individual entrepreneurs, authorized representatives of counterparties and their contact persons, as well as candidates for vacant positions of client companies.
4.6. LLC "FRENDVORK" does not carry out actions aimed at disclosing PD to an indefinite number of persons (i.e., does not disseminate PD).
4.7. LLC "FRENDVORK" does not disclose or provide PD to third parties without the consent of the PD subject, obtained in the form required by the legislation of the Russian Federation, except for cases established by the legislation of the Russian Federation.
4.8. To perform the functions, powers, and duties assigned by the legislation of the Russian Federation, as well as to achieve its statutory goals and contractual obligations, LLC "FRENDVORK" provides part of the processed PD:

• to the Pension Fund of the Russian Federation;
• to the Federal Tax Service of the Russian Federation;
• to the Social Insurance Fund of the Russian Federation;
• to banks providing services for maintaining settlement accounts of LLC "FRENDVORK", as well as services for the non-cash transfer of wages and other equivalent payments to the accounts of employees of LLC "FRENDVORK" and performers under civil law contracts;
• to organizations providing services for ticket and visa processing and hotel booking;
• to organizations providing services for the lease of non-residential premises, provision of transport and logistics services;
• to counterparties (clients) under civil law contracts within the framework of processing PD of candidates for vacant positions of client companies;
• to other counterparty organizations under civil law contracts.

4.9. LLC "FRENDVORK" does not process special categories of PD concerning racial or ethnic origin, political views, religious or philosophical beliefs, health status, or intimate life.
4.10. LLC "FRENDVORK" does not process biometric PD.
4.11. Databases used at LLC "FRENDVORK" containing PD of citizens of the Russian Federation are located on the territory of the Russian Federation.
4.13. LLC "FRENDVORK" does not make decisions that give rise to legal consequences for the PD subject or otherwise affect their rights and legitimate interests based solely on automated PD processing.
4.14. Processing of PD at LLC "FRENDVORK" for the purpose of promoting goods and services on the market by making direct contact with a potential consumer via communication means may be carried out only subject to obtaining prior consent from the PD subject.

5. STORAGE OF INFORMATION
5.1. PD processing at LLC "FRENDVORK" is carried out no longer than required by the purposes of PD processing.
5.2. LLC "FRENDVORK" organizes the storage of PD for the period established by the requirements of Federal Law No. 125-FZ dated 22.10.2004 "On Archival Affairs in the Russian Federation" and the "List of Standard Management Archival Documents Generated in the Activities of State Bodies, Local Self-Government Bodies, and Organizations, Indicating Storage Periods" (Appendix to the Order of the Ministry of Culture of the Russian Federation No. 558 dated 25.08.2010), as well as in certain cases for the period established by the contract where the PD subject is a party, beneficiary, or guarantor.
5.3. Upon achieving the purposes of PD processing, in case of loss of necessity to achieve these purposes, or upon expiration of the PD storage periods, the processed PD are destroyed.

6. INFORMATION PROTECTION
6.1. LLC "FRENDVORK" takes necessary legal, organizational, and technical measures to protect processed PD from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination of PD, and from other unlawful actions regarding PD.
6.2. By orders, LLC "FRENDVORK" appoints persons responsible for organizing PD processing and for ensuring PD security.
6.3. LLC "FRENDVORK" defines a list of persons whose access to PD processed in information systems is necessary for them to perform their official (labor) duties.
6.4. LLC "FRENDVORK" implements measures for accounting and ensuring the safety of PD carriers.
6.5. LLC "FRENDVORK" assesses the harm that may be caused to PD subjects and regularly analyzes conditions and factors creating threats to PD security during their processing.
6.6. In cases provided for by the legislation of the Russian Federation, within the framework of the PD protection system, LLC "FRENDVORK" applies information security tools that have undergone the conformity assessment procedure in the established manner.
6.7. Commissioning of new personal data information systems is carried out only after performing procedures for assessing the effectiveness of the measures taken to ensure PD security.
6.8. Within the framework of the PD protection system at LLC "FRENDVORK", the following have been implemented:

• physical security of premises housing the technical means of personal data information systems;
• application of necessary software and software-hardware protection tools, in particular: