This policy on processing of personal data is drawn up in accordance with paragraph 2 of Article 18.1 of the Federal Law "On Personal Data" dated 27.07.2006 No. 152-FZ and applies to all personal data processed by the operator — PJSC "Kaluga Turbine Works".

1. Information about the operator of personal data:

Name: Open Joint Stock Company "Kaluga Turbine Works"
Legal address: 248010, Russia, Kaluga city, Moskovskaya str., h. 241

2. The legal basis for personal data processing:

Processing of personal data is carried out in accordance with the following regulatory legal acts of the Russian Federation:
– Labor Code of the Russian Federation;
– Articles 23, 24 of the Constitution of the Russian Federation;
– Federal Law No. 152-FZ "On Personal Data" dated 27.07.2006;
– Federal Law No. 149-FZ "On Information, Informational Technologies and Information Protection" dated 27.07.2006;
– Family Code of the Russian Federation;
– Civil Code of the Russian Federation;
– Tax Code of the Russian Federation;
– Federal Law No. 27-FZ "On Individual (Personalized) Record-Keeping in the Compulsory Pension Insurance System" dated 01.04.1996;
– Federal Law No. 326-FZ "On Compulsory Health Insurance in the Russian Federation" dated 29.11.2010;
as well as other legal acts of the Russian Federation and consent to personal data processing.

3. Purposes of personal data processing.

3.1. Processing of personal data is carried out for the following purposes:
- organization of personnel records of the enterprise, ensuring compliance with laws and other normative legal acts,
- assistance to employees in employment, training, and promotion;
- ensuring personal safety of the employee;
- protection of property;
- provision of medical and social insurance, labor protection;
- fulfillment of tax legislation requirements regarding calculation and payment of personal income tax, as well as a unified social tax; fulfilment of pension legislation in formation and presentation of personalized data on each income recipient, which are taken into account during calculation of insurance premiums for compulsory pension insurance and coverage;
- compliance with the access control regime in accordance with the legislation of the Russian Federation;
- execution of contracts with other legal entities;
- archival storage of documents in accordance with the legislation of the Russian Federation, including issuance of archive transcripts at the request of the subject of personal data or his legal representative;

3.2. The Operator has the right to determine other purposes of processing personal data within the framework of the legislation of the Russian Federation.

4. Categories of processed data, data sources, processing time.

4.1. Processing of personal data in PJSC “Kaluga Turbine Works” is carried out for the purposes and in amounts specified by the legislation of the Russian Federation or in accordance with the properly executed consent to the personal data processing.

4.2. PJSC "Kaluga Turbine Works" processes the following categories of personal data:
– personal data of employees of PJSC "Kaluga Turbine Works". Data source: subjects of personal data;
– personal data of candidates for vacant positions in the divisions of PJSC "Kaluga Turbine Works". Data sources: subjects of personal data, recruitment agencies, public sources;
– personal data of visitors. Data source: subjects of personal data;
– personal data of business partners. Data source: subjects of personal data;
– personal data of shareholders. Data source: subjects of personal data.

4.3. PJSC "Kaluga Turbine Works" does not process personal data related to race, political views, religious or philosophical beliefs, and intimate life.

4.4. PJSC "Kaluga Turbine Works" carries out the processing of personal data related to the state of health only in cases stipulated by the legislation of the Russian Federation.

4.5. The time limits for processing of personal data are set in accordance with the legal acts of the Russian Federation.

5. Basic principles of personal data processing.

5.1. During personal data processing PJSC "Kaluga Turbine Works" complies with the principles established by Art. 5 of Federal Law No. 152-FZ "On Personal Data" dated 27.07.2006.

5.2. PJSC "Kaluga Turbine Works" have created public sources of personal data (address book of the corporate postal system, telephone directory). Personal data are included in such sources on the basis of the written consent of the personal data subjects.

5.3. Personal data processing shall be terminated and personal data shall be destroyed in the following cases:
– upon achievement of the processing purposes or in case of loss of the need to achieve them, unless otherwise provided by the legislation of the Russian Federation;
– upon withdrawal by the employee of consent to personal data processing, except for the case when the obligation to further process personal data is defined by the legislation of the Russian Federation;
– in case of detection of illegal actions with personal data and the inability to eliminate violations within the time limit established by the legislation of the Russian Federation.

6. Information about third parties involved in personal data processing.

6.1.PJSC "Kaluga Turbine Works" ensures confidentiality of personal data and does not transfer it (does not provide access to it) to third parties without the consent of personal data subjects unless otherwise is provided for by the legislation of the Russian Federation.

6.2. PJSC "Kaluga Turbine Works" transfers personal data (provides access to them) to the authorities of the Russian Federation in accordance with their jurisdiction and in the amounts set by legislation of the Russian Federation.

6.3. Transfer of personal data to other third parties is carried out by PJSC "Kaluga Turbine Works" on the basis of a contract, which shall determine:
– the purpose of personal data processing;
– the list of actions (operations) with personal data that will be performed by the third party;
– the obligation of the third party to respect the confidentiality of personal data data and ensure the security of personal data during their processing;
– requirements for the protection of processed personal data in accordance with Article 19 of the Federal Law No. 152-FZ dated 27.07.2006 "On personal data";
as well as, in cases established by law, with the execution of written consent to the transfer of personal data.

7. Ensuring the security of personal data.

7.1. PJSC "Kaluga Turbine Works" takes the necessary organizational and technical measures to ensure the confidentiality of personal data during their processing in the Company's divisions, as well as in their transfer to third parties.

7.2. The procedure for personal data processing and protection is set out in the "Regulations on the procedure of processing, storage and protection of personal data in PJSC "Kaluga Turbine Works", implemented by the order of the PJSC "Kaluga Turbine Works" General Director No. 142 dated 14.04.2016.

7.3. PJSC "Kaluga Turbine Works" takes all measures necessary and sufficient to ensure compliance with the obligations stipulated by Federal Law No. 152-FZ and adopted in accordance with it normative legal acts of the Russian Federation.

7.4. PJSC "Kaluga Turbine Works" independently determines the structure and list of measures necessary and sufficient to ensure fulfillment of its duties, unless otherwise provided by legal acts of the Russian Federation.

8. The rights of subjects of personal data.

8.1. The subject of personal data has the right to:
- receive information relating to processing of his personal data;
- have free access to his personal data, including the right to receive copies of any record containing personal data;
- ask PJSC "Kaluga Turbine Works" to verify his personal data, block or destroy it in case the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, and also to take legal measures to protect his rights.

8.2. The rights of the subject of personal data may be limited only in cases stipulated by the legislation of the Russian Federation.

8.3. In order to exercise his rights, the subject of personal data has the right to file a relative request with PJSC "Kaluga Turbine Works".

9. Contact information.

Contact information for requests of personal data subjects, business partners and other third parties:
PJSC "Kaluga Turbine Works" corporate website http://oaoktz.ru
Human resources department +7 (4842) 767-332
Department of Economic and Information Protection +7 (4842) 554-529