APPROVED
order of the director
ArtBioTech LLC
24.04.2024
REGULATION
on the policy regarding the processing personal data
- Organization pays special attention to the protection of personal data during their processing in our organization and respects the rights of personal data subjects.
The approval of the Regulation on the policy on personal data processing (hereinafter – the Policy) is stipulated by Article 17 of the Law of the Republic of Belarus of May 7, 2021 No. 99Z “On personal data protection” (hereinafter – the Law).
The Policy explains to the personal data subjects how and for what purposes their personal data are collected, used or otherwise processed, as well as reflects the rights of personal data subjects in this regard and the mechanism of their realization.
The Policy does not apply to the processing of personal data in the course of employment and administrative procedures (in relation to employees and former employees), as well as users of the website (in terms of cookies).
Postal address of Organization: Minsk, Kuprevicha str. 1, bldg. 3, room. 8, office 306.
Internet address: artbiotech.com.
E-mail: info@qpcr.by.
- Organization processes personal data in the following cases:
Purposes of personal data processing | Categories of personal data subjects whose data are processed | List of processed personal data | Legal basis for personal data processing | Storage period of personal data |
Consideration of appeals, including those entered in the book of comments and suggestions. | 1. Persons who sent the application.
2. Other persons whose personal data are specified in the application. | Surname, first name, patronymic or initials, address of residence (place of stay), essence of the appeal, other personal data specified in the appeal. | Processing of personal data is necessary for the fulfillment of obligations (powers) stipulated by legislative acts (Article 6, paragraph 20 and Article 8, paragraph 2, paragraph 16, paragraph 2 of the Law, Article 3, paragraph 1 of the Law of the Republic of Belarus “On Appeals of Citizens and Legal Entities”). | 5 years from the date of the last request;
5 years after the end of the book of comments and suggestions. |
Pre-registration for a personal appointment. | Persons applying for personal appointments. | Surname, first name, patronymic (if any), contact phone number, the essence of the question. | Processing of personal data is necessary for the fulfillment of obligations (powers) stipulated by legislative acts (Article 6, paragraph 20 of the Law, Article 6, paragraph 7 of the Law of the Republic of Belarus “On Appeals of Citizens and Legal Entities”). | 1 year from the date of preliminary appointment for a personal visit. |
Conclusion and execution of civil law contracts related to the implementation of core tasks (e.g. supply, purchase and sale, etc.). | Persons authorized to sign the contract. | Surname, first name, patronymic or initials of the person, position of the person who signed the agreement, other data in accordance with the terms of agreement (if necessary). | 1. In case of concluding a contract with a natural person – processing on the basis of a contract with the personal data subject (paragraph 15 of Article 6 of the Law). 2. In case of concluding a contract with a legal entity – processing of personal data is necessary for the fulfillment of obligations (powers) stipulated by legislative acts (paragraph 20 of Article 6 of the Law, Article 49, paragraph 5 of Article 186 of the Civil Code). Article 6 of the Law, Article 49, Article 186, paragraph 5 of the Civil Code). | 3 years after the expiration of the agreement, tax authorities audit of tax compliance. If the tax authorities have not conducted an audit of tax compliance – 10 years after the expiration of the contract. |
- Personal data may also be used by Organization for scientific or other research purposes after obligatory anonymization of such personal data, in particular:
– for the preparation and publication of annual reports on its activities.
- Organization processes only those personal data that are necessary for the fulfillment of the stated purposes and does not allow their excessive processing.
- Organization does not transfer personal data to third parties, except for cases provided for by legislative acts.
- The subject of personal data has the right:
6.1. to withdraw his/her consent, if for the processing of personal data Organization applied to the subject of personal data for consent. In this regard, the right to withdraw consent cannot be exercised in cases where processing is carried out on the basis of a contract or in accordance with legal requirements (for example, in the course of control or consideration of an appeal received);
6.2. to receive information regarding the processing of his/her personal data, containing:
– location of Organization;
– confirmation of the fact that the personal data of the applicant are processed by Organization;
– his/her personal data and the source of their acquisition;
– legal grounds and purposes of personal data processing;
– the period for which his/her consent is given (if personal data processing is carried out on the basis of consent);
– name and location of the authorized person(s);
– other information required by law;
6.3. request from Organization to amend his/her personal data in case the personal data is incomplete, outdated or inaccurate. For this purpose, the subject of personal data shall attach the relevant documents and (or) duly certified copies thereof, confirming the need to make changes to the personal data;
6.4. to obtain information from Organization on the provision of his/her personal data processed by Organization to third parties. Such right may be exercised once per calendar year;
6.5. to demand from Organization to stop processing of his/her personal data, including their deletion, free of charge, in the absence of grounds for processing of personal data provided by the Law and other legislative acts;
6.6. to appeal the actions (inaction) and decisions of Organization violating his/her rights in the processing of personal data to the court in accordance with the procedure established by the civil procedural legislation.
- In order to exercise his/her rights related to the processing of personal data by Organization, the personal data subject submits to the Organization an application in writing or in the form of an electronic document (and in case of exercising the right to withdraw consent – also in the form in which such consent was obtained) respectively to the postal address or Internet address specified in part 5 of paragraph 1 of this Policy. Such application shall contain:
– surname, proper name, patronymic (if any) of the personal data subject, address of his/her residence (place of stay);
– date of birth of the personal data subject;
– statement of the essence of the personal data subject’s requirements;
– identification number of the personal data subject, in the absence of such number – number of the personal data subject’s identity document, if this information was indicated by the personal data subject when giving his/her consent or personal data processing is performed without the consent of the personal data subject;
– personal signature (for a written application) or electronic digital signature (for an application in the form of an electronic document) of the personal data subject.
The Organization does not consider applications of personal data subjects sent by other means (e-mail, telephone, fax, etc.).
- For assistance in exercising the rights, the personal data subject may also contact the person responsible for internal control over the processing of personal data in Organization by sending a message to the e-mail address: info@qpcr.by.
