1.1. This document (hereinafter - the Policy) defines the goals and general principles for the processing of personal data, as well as the implemented measures for the protection of personal data at BI FIT LLC (hereinafter - the Operator). The policy is a public document of the Operator and provides for the opportunity to familiarize any person with it.

1.2. The policy is valid indefinitely after approval and until it is replaced with a new version.

1.3. The Policy uses terms and definitions in accordance with their meanings, as defined in Federal Law-152 “On Personal Data”.

1.4. The policy applies to all employees of the Operator (including employees under labor contracts and employees working under work contracts) and all structural divisions of the Company, including separate divisions. The requirements of the Policy are also taken into account and presented in relation to other persons if they need to participate in the processing of personal data by the Operator, as well as in cases when they are transferred to them in the prescribed manner based on agreements, contracts, processing orders.

2.1. The processing of personal data by the Operator is lawful and fair.

2.2. The processing of personal data is limited to the achievement of specific, predetermined and legitimate goals. Processing of personal data that is incompatible with the purposes of collecting personal data is not allowed.

2.3. It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other.

2.4. Only personal data that meets the purposes of their processing are subject to processing.

2.5. The content and volume of processed personal data are consistent with the stated processing goals. The processed personal data is not redundant in relation to the stated purposes of their processing.

2.6. When processing personal data, the accuracy of personal data is ensured, its adequacy, and, if necessary, its relevance to the purposes of processing personal data. The operator takes the necessary measures to delete or clarify incomplete or inaccurate data.

2.7. The storage of personal data is carried out in a form that allows you to determine the subject of personal data, no longer than what is required by the purpose of processing personal data, unless the storage period for personal data is established by federal law, an agreement to which the beneficiary or guarantor is the subject of personal data. The processed personal data is subject to destruction or depersonalization upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.

The processing of personal data must be carried out in compliance with the principles and rules provided for by this Federal Law. The processing of personal data is allowed in the following cases:

3.1 Processing of personal data is carried out with the consent of the subject of personal data to the processing of his personal data;

3.2 The processing of personal data is necessary to achieve the goals stipulated by the international treaty of the Russian Federation or the law, to carry out and fulfill the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;

3.3 Processing of personal data is necessary for the execution of a contract to which either the beneficiary or guarantor is a personal data subject, including if the operator exercises his right to assign rights (claims) under such an agreement, as well as to conclude an agreement on the initiative of the personal data or agreement under which the subject of personal data will be the beneficiary or guarantor; (as amended