CHAPTER 1
GENERAL PROVISIONS
1.1. This Policy with regard to processing of personal data (hereinafter - the Policy) defines the main issues related to processing of personal data in Transgrouplogistics Limited Liability Company (hereinafter - the Operator), registered at: office 534, Voronyansky street 7a, Minsk, 220039, Republic of Belarus. 534.
1.2. This Policy has been developed on the basis and in accordance with the requirements of the following laws and regulations:
- Constitution of the Republic of Belarus;
- Civil Code of the Republic of Belarus;
- Tax Code of the Republic of Belarus
- Labour Code of the Republic of Belarus;
- Law of the Republic of Belarus dated May 07,2021 No. 99-З "On the protection of personal data";
- other legislation of the Republic of Belarus, determining cases and specifics of processing of personal data of individuals and ensuring security and confidentiality of such information.
The legal basis for the processing of personal data shall also be the Charter and local regulations of the Operator.
1.3. The terms used in this Policy shall have the meaning defined by the Law of the Republic of Belarus of 07.05.2021 № 99-З "On Protection of Personal Data".".
This Policy also uses the term:
"Website" - the website tgl.by, taking into account all levels of domain names owned by the Operator.
1.4. The Policy applies to all personal data processed by the Operator.
1.5. The requirements of this Policy are mandatory for all employees of the Operator who have access to personal data.
1.6. This Policy comes into force from the moment of its approval.
CHAPTER 2
PURPOSE OF PROCESSING PERSONAL DATA
2.1. The operator processes personal data for the following purposes:
- ensuring compliance with the legislation of the Republic of Belarus;
- implementation of economic and other operations (transactions) in accordance with the legislation of the Republic of Belarus and the Charter of the Operator;
- concluding (if necessary, also changing and terminating)any transactions with the Personal Data Subject and their further execution;
- communication with Personal Data Subjects;
- processing of inquiries and requests received from the Personal Data Subjects of personal data;
- conducting personnel work and organizing accounting of the Operator's employees;
- attraction and selection of candidates for vacant positions of the Operator;
- formation of statistical and management reporting;
- implementation of civil law relations;
- bookkeeping;
- implementation of access control;
- holding corporate events;
- formation of reference materials for internal information support of the Operator's activities;
- exercising other powers and obligations assigned to the Operator by the legislation of the Republic of Belarus.
Anonymized data of Personal Data Subjects, collected using Internet statistics services, serve to collect information about the actions of Personal Data Subjects on the Site, improve the quality of the Site and its content, conduct statistical and other research based on the data provided.
2.2. Processing of personal data that is incompatible with the purposes of personal data collection is not allowed.
CHAPTER 3
CATEGORIES OF PERSONAL DATA SUBJECTS AND SCOPE OF PERSONAL DATA PROCESSED
3.1. The Operator processes personal data of the following Personal Data Subjects:
- participants of the Operator and affiliates of the Operator;
- employees of the Operator and their close relatives, former employees of the Operator, candidates for filling vacant positions of the Operator;
- individuals with whom the Operator has concluded (plans to conclude) civil law contracts;
- counterparties of the Company that are nature persons;
- Site visitors.
3.2. The Operator may process the listed personal data of the following categories of personal data subjects:
3.2.1. Participants of the Operator and affiliates of the Operator:
- full name;
- sex;
- citizenship;
- date and place of birth;
- image (photo);
- passport data;
- address of registration at the place of residence;
- address of actual residence;
- contact details.
3.2.2. Candidates for vacancies:
- full name;
- sex;
- date of birth;
- place of registration and residence;
- contact details;
- information about education, work experience, qualifications;
- other personal data reported by candidates in resumes, questionnaires, etc.
3.2.3. Employees and former employees of the Operator:
- full name;
- sex;
- citizenship;
- date and place of birth;
- image (photo);
- passport data;
- address of registration at the place of residence;
- address of actual residence;
- contact details;
- individual taxpayer's number;
- information on education, qualifications, professional training and advanced training;
- marital status, presence of children, family ties;
- information on labor activity, including existence of encouragements, awards and (or) disciplinary sanctions;
- data on marriage registration ;
- information on military registration;
- information on disability;
- information on maintenance payments;
- information on income from the previous jobs;
- other personal data provided by employees in accordance with the requirements of labor legislation.
3.2.4. Family members of the Operator's employees:
- full name;
- degree of kinship;
- year of birth;
- other personal data provided by employees in accordance with the requirements of labor legislation.
3.2.5. Counterparties of the Company that are individuals / individuals with whom the Operator has concluded (plans to conclude) civil law contracts:
- full name;
- date and place of birth;
- passport data;
- address of registration at the place of residence;
- contact details;
- individual taxpayer number;
- current account number;
- other personal data provided by clients and contractors (individuals) necessary for the conclusion and execution of contracts.
3.2.6. Site visitors:
- IP address
- data from cookies
- information about user behavior on the site (history of requests and views on the site, time and date of access, etc.)
- full name and contact details - when using the form on the website "Request a quote for shipping ", "Request a call back";
3.3. The processing by the Operator of biometric personal data (for example, photographs) is carried out in accordance with the legislation of the Republic of Belarus.
3.4. The Operator does not process special categories of personal data relating to race, nationality, political views, religious or philosophical beliefs, health or sexual life, genetic data, except as provided by the legislation of the Republic of Belarus.
3.5. The operator ensures that the content and scope of the processed personal data correspond to the stated purposes of processing and, if necessary, takes measures to eliminate their redundancy in relation to the stated purposes of processing.
CHAPTER 4
THE OPERATOR’S AND PERSONAL DATA SUBJECT’S RIGHTS AND OBLIGATIONS
4.1. The operator may:
- process the personal data of the Personal Data Subject in accordance with the stated purpose;
- require the Personal Data Subject to provide reliable personal data necessary for the execution of the contract, identification of the Personal Data Subject, and in other cases provided for by the legislation on personal data, request from the Personal Data Subject information on the relevance of the personal data provided;
- if necessary for achievement of the purposes of processing, may transfer personal data to third parties in compliance with the requirements of the legislation of the Republic of Belarus; - entrust the processing of personal data to another person (authorized person), unless otherwise provided by law, on the basis of an agreement concluded with this person. The person who processes personal data on behalf of the Operator is obliged to comply with the principles and rules for the processing of personal data provided for by the legislation of the Republic of Belarus;
- in the event that the Subject of personal data withdraws consent to the processing of personal data, the Operator may continue processing personal data without the consent of the Subject of personal data if there are other grounds for such actions provided for by the Law of the Republic of Belarus dated 07.05.2021 No. 99-Z "On the protection of personal data" and other legislative acts;
- refuse to the Personal Data Subject to satisfy the requirements to stop processing his personal data and (or) delete them if there are grounds for the processing of personal data provided for by the Law of the Republic of Belarus dated 07.05.2021 No. 99-З "On the protection of personal data" and other legislative acts.
4.2. The operator is obliged to:
- process personal data in accordance with the legislation of the Republic of Belarus;
- protect personal data when processing them;
- provide the Personal Data Subject with information about his personal data, as well as about the provision of his personal data to third parties, with the exception of those provided for by the legislative acts of the Republic of Belarus;
- take measures to ensure the accuracy of the personal data processed by him. Make changes to personal data that is incomplete, outdated or inaccurate;
- stop processing personal data, as well as delete or block them if there are no grounds for their processing, as well as at the request of the Personal Data Subject;
- comply with the requirements of the authorized body for the protection of the rights of personal data subjects to eliminate violations of the legislation on personal data;
- perform other duties stipulated by the legislation of the Republic of Belarus.
4.3. The subject of personal data may:
- receive information regarding the processing of his personal data, except as provided by law;
- require the Operator to upldate his personal data if the personal data is incomplete, outdated, inaccurate;
- receive information about the provision of his personal data to third parties, with the exception of cases provided for by the legislation of the Republic of Belarus;
- at any time, without giving reasons, withdraw your consent to the processing of personal data;
- require the Operator to block or delete his personal data if they are illegally obtained or are not necessary for the stated purpose of processing, as well as take legal measures to protect its rights;
- appeal against the actions (inaction) and decisions of the Operator that violate his rights in the processing of personal data to the authorized body for the protection of the rights of personal data subjects in accordance with the law on appeals from citizens and legal entities.
4.4. The subject of personal data is obliged:
- provide the operator with only reliable information about himself;
- if necessary, provide the Operator with documents containing personal data to the extent necessary for the purpose of their processing;
- inform the Operator about changes in their personal data.
4.5. A person who has provided the Operator with incomplete, outdated, inaccurate information about himself, or information about another subject of personal data without the consent of the latter, is liable in accordance with the legislation of the Republic of Belarus.
CHAPTER 5
PROCEDURE AND CONDITIONS FOR PROCESSING PERSONAL DATA
5.1. The processing of personal data by the Operator includes the following actions with personal data: collection, systematization, storage, modification, use, blocking, distribution, provision, deletion, other actions or a set of actions performed with personal data
5.2. The processing of personal data is carried out with the consent of the subjects of personal data to the processing of their personal data, as well as without such consent in cases provided for by the legislation of the Republic of Belarus.
The consent of the Personal Data Subject is a free, unambiguous, informed expression of his will, through which he authorizes the processing of his personal data.
Refusal to give consent to the processing of personal data gives the Operator the right to refuse the personal data subject of to provide access to the Site / some functions of the site.
5.3. The operator carries out both automated and non-automated processing of personal data.
5.4. Storage of personal data is carried out in a form that allows to identify the subject of personal data, for a period not longer than required by the purposes of processing personal data, except when the period of storage of personal data is established by the legislation of the Republic of Belarus, an agreement concluded (concluded) with the subject of personal data, in order to perform the actions established by such agreement.
5.5. The operator transfers personal data to state and other bodies (organizations), other persons within their powers in accordance with the legislation of the Republic of Belarus.
5.6. The processing of personal data shall be terminated when the goals of such processing are achieved, as well as after the expiration of the personal data processing period provided for by the legislation of the Republic of Belarus, the contract or consent of the Personal Data Subject to the processing of his personal data, as well as in case of unlawful processing of personal data. If the Personal Data Subject withdraws consent to the processing of his personal data, the Operator may continue processing personal data without the consent of the Personal Data Subject, if such processing does not contradict the legislation of the Republic of Belarus.
5.7. The Personal Data Subject may withdraw his consent to the processing of personal data by submitting to the Operator a written application, sent by registered mail, or in the form of an electronic document containing a digital signature. The application must contain: full name; address of the place of residence (place of stay); date of birth; identification number, in the absence of such a number - the number of the identity document of the Personal Data Subject (if this information was indicated when giving consent or the processing of personal data is carried out without the consent of the Personal Data Subject); statement of the essence of the requirement; personal or digital signature. The operator, within 15 days after receiving the application, shall stop processing personal data (unless there are other grounds for processing, in accordance with the law), delete them, and if there is no technical possibility of deletion, take measures to prevent further processing of personal data, including blocking them, and notify the Personal Data Subject thereof at the same time.
5.8. The Personal Data Subject has the right to obtain information from the Operator regarding his personal data by submitting an application to the Operator in accordance with clause 5.7 hereof. The operator, within 5 working days after receiving the application, shall provide the personal data subject with relevant information or notify him of the reasons for refusing to provide such information.
5.9. The Personal Data Subject has the right to require the Operator to make changes to his personal data if they are incomplete, outdated or inaccurate, by submitting an application to the Operator in accordance with clause 5.7 hereof, with the attachment of documents (duly certified copies) demonstrating the need to make such changes. The Operator, within 15 days after receiving the application, shall make changes to personal data and notify the Personal Data Subject thereof or notify the reasons for refusal.
5.10. The Personal Data Subject has the right to receive information from the Operator about the provision of his personal data to third parties once a calendar year free of charge, by submitting an application to the Operator in accordance with clause 5.7 hereof. The Operator, within 15 days after receiving the application, shall provide the Personal Data Subject with information about what personal data of this Subject and to whom were provided during the year preceding the date of filing the application, or notify him of the reasons for refusing to provide such information.
5.11. The Personal Data Subject has the right to demand from the Operator to stop processing his personal data, including their deletion, in the absence of grounds for processing, by submitting an application to the Operator in accordance with clause 5.7 hereof. The operator, within 15 days after receiving the application, shall stop processing personal data (if there are no grounds for processing, in accordance with the law), delete them, if there is no technical possibility of deletion, take measures to prevent further processing of personal data, including their blocking, and notify the Personal Data Subject thereof within the same period.
5.12. Access to the processed personal data shall be provided only to those employees of the Operator who need it in connection with the performance of their official duties and in compliance with the principles of personal responsibility.
5.13. When processing personal data, the Operator shall take the necessary legal, organizational and technical measures to ensure the protection of personal data against unauthorized or accidental access to them, modification, blocking, copying, distribution, provision, deletion of personal data, as well as against other illegal actions in relation to personal data.
6.1. Matters relating to the processing of personal data that are not set forth in this Policy shall be governed by the laws of the Republic of Belarus.
6.2. The Operator shall have the right to amend and/or supplement the terms of this Policy at its sole discretion without prior and/or subsequent notice to the subjects of personal data. The current version of the Policy is available on the official website page on the global computer network Internet at: https://tgl.by/kompaniya/politika-konfidenczialnosti.html
6.3. FThe Operator and its employees shall bear civil, administrative and other liability in accordance with the legislation of the Republic of Belarus for violations of the requirements of this Policy, including those related to non-compliance with the principles and conditions of processing of personal data of individuals, as well as for disclosure or unlawful use of personal data.
Data Administrator and his contact details
The administrator of your personal data is Transgrouplogistics Ltd., located in Minsk, legal address: Voronyansky street 7a, Minsk, 220039, Republic of Belarus. You can contact us by e-mail info2@tgl.by or in writing to our legal address above.