Personal Data Processing and Protection Policy

Personal Data Processing and Protection Policy

This Personal Data Processing and Protection Policy (hereinafter referred to as the Policy) applies to all information that the Website of JSC SPETSTEKHNOMASH (TIN 2411002738, OGRN 1022400665154) and its affiliates, located at the domain name grohot24.ru (hereinafter referred to as the Website), may obtain about the User while using the Website, from any device, and through any communication with JSC SPETSTEKHNOMASH and any of its affiliates, whether automated or not, as well as through participation in advertising and marketing campaigns or promotions and/or other interactions with JSC SPETSTEKHNOMASH and/or its affiliates.


By using the Website (browsing, reading text, sending, or downloading information) and providing their personal data, the Website Visitor consents to the processing of their personal data in accordance with this Policy.


Definition of Terms

The following terms are used in this Policy:


Personal data — any information relating to a directly or indirectly identified or identifiable individual (the personal data subject). Such information may include, but is not limited to: full name, year, month, date, and place of birth, addresses (geographical and electronic), identity document details, information about family, social, and property status, information about education, profession, income, health status, and other information.


Website Administration — employees authorized to manage the Website, acting on behalf of SPETSTEKHNOMASH JSC or its affiliates, who organize and/or process personal data, determine the purposes of processing and the scope of personal data, and determine the actions performed with personal data.


A personal data operator (operator) is a government agency, municipal body, legal entity, or individual that, independently or jointly with other entities, organizes and/or processes personal data, and determines the purposes of personal data processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.


Personal data processing is any action or set of actions performed with personal data (with or without the use of automated means), including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data. Personal data processing includes, but is not limited to: collection; recording; systematization; accumulation; storage; clarification (updating, modification); retrieval; use; transfer (distribution, provision, access); depersonalization; blocking; deletion; and destruction.


Personal data confidentiality is a mandatory requirement for the Website Administration or other persons who have access to personal data to prevent its dissemination without the consent of the personal data subject or other legal basis.


Automated personal data processing is the processing of personal data using computer technology.


Provision of personal data is actions aimed at disclosing personal data to a specific person or group of persons.


Blocking of personal data is the temporary cessation of the processing of personal data (except in cases where processing is necessary to clarify the personal data).


Destruction of personal data is actions that make it impossible to restore the contents of personal data in a personal data information system and/or that result in the destruction of tangible media containing personal data.


Anonymization of personal data is actions that make it impossible to determine the attribution of personal data to a specific personal data subject without the use of additional information.


Personal data information system is the set of personal data contained in databases and the means used to process them.


Cross-border transfer of personal data is the transfer of personal data to a foreign government agency, foreign individual, or foreign legal entity.


Website User (User) — a person who accesses the Website via the Internet and uses the Website.


Cookies — Small text files that do not contain confidential information, sent by a web server and stored in the browser of Website Visitors. When browsing the Website, anonymized statistical data about the Website Visitor is automatically collected (from cookies).


IP address — a unique network address of a node in a computer network built on


Purposes, list, methods and period of processing personal data

Job seekers who responded to vacancies through the Site

1. Filling vacant positions

1. Last name, first name, and patronymic;

2. Email address;

3. Phone number (cell phone);

4. Information provided by the applicant in their resume;

5. Other information provided by the User.

Automated, as well as non-automated processing of personal data, namely: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.

The period for considering a candidate for suitability for the position held, but not more than 1 (one) year, unless otherwise provided by the legislation of the Russian Federation / Application for withdrawal of consent to the processing of personal data.

2. Maintaining a personnel reserve

1. Last name, first name, and patronymic;

2. Email address;

3. Phone number (cell phone);

4. Other information provided by the applicant in their resume;

5. Other information provided by the website visitor.

Automated, as well as non-automated processing of personal data, namely: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.

3 (three) years from the date of completion of the candidate's review for suitability for the position held, unless otherwise provided by the legislation of the Russian Federation / Application for withdrawal of consent to the processing of personal data.

Representatives of partners and/or potential partners who have filled out a special form on the Website

3. Joining a legal entity to the partner program of JSC SPETSTEKHNOMASH

1. Last name, first name, and patronymic;

2. Email address;

3. Phone number (cell phone);

4. Employment information;

5. Other information provided by the User.

Automated, as well as non-automated processing of personal data, namely: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.

Until joining (or refusing to join) the partner program, unless otherwise provided by the legislation of the Russian Federation / Application for withdrawal of consent to the processing of personal data.

All categories of personal data subjects listed in clause 2.7 of this Policy

4. Providing the Website Visitor with information about JSC SPETSTEKHNOMASH and its affiliates, services/works/products of JSC SPETSTEKHNOMASH and its affiliates

1. Other data provided by the Site Visitor independently.

Automated, as well as non-automated processing of personal data, namely: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.

Until the moment of withdrawal of consent to the processing of personal data, but not more than 3 (three) months, unless otherwise provided by the legislation of the Russian Federation / Application for withdrawal of consent to the processing of personal data.

5. Subscribe to the newsletter

1. Last name, first name, and patronymic;

2. Email address;

3. Other information provided by the User of the Website.

Automated, as well as non-automated processing of personal data, namely: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.

Until the moment of withdrawal of consent to the processing of personal data, but not more than 3 (three) years, unless otherwise provided by the legislation of the Russian Federation / Application for withdrawal of consent to the processing of personal data.

6. Functioning of the website

Technical data that is automatically transmitted by the device used to access the Site, such as: technical characteristics of the device (device identifier), IP address, cookies, browser information, etc.

Automated, as well as non-automated processing of personal data, namely: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.

6 (six) months from the date of the last visit to the site, unless otherwise provided by the legislation of the Russian Federation / Application for withdrawal of consent to the processing of personal data.

The Site Visitor has the right to revoke consent to the processing of his personal data at any time by sending a written statement to the address: 660112, Krasnoyarsk, P. O. Box


3. Website Visitor Rights


Website visitors have the right to exercise their rights under Russian Federation personal data legislation, including, but not limited to:

  • to clarify and update their personal data, request its blocking or destruction;
  • to request from JSC SPETSTEKHNOMASH a list of the personal data being processed, the legal basis for processing, the sources of such data, information on processing and storage periods, and other information related to the processing of their personal data.


4. Ensuring the Security and Protection of Personal Data


4.1. JSC SPETSTEKHNOMASH and its affiliates apply legal, organizational, and technical measures to protect personal data from unauthorized or accidental access. JSC SPETSTEKHNOMASH has adopted internal regulations on the security and confidentiality of personal data. Access to the personal data of Website Visitors is granted only to authorized employees of JSC SPETSTEKHNOMASH.


5. Final Provisions


5.1. JSC SPETSTEKHNOMASH reserves the right to amend or supplement this Policy if necessary, as well as in the event of corresponding changes to the current legislation of the Russian Federation on personal data. Website Visitors can always review the latest versions of the Policy on the JSC SPETSTEKHNOMASH Website. By continuing to use the Website, Visitors confirm their consent to the amendments to the Policy.


Contacts of JSC SPETSTEKHNOMASH (OGRN 1022400665154):

E-mail: zavod@grohot24.ru
Phone: +7 (391) 237-47-34


Legal address:
Krasnoyarsk, st. Pogranichnikov St., 42I


Practical address:
Krasnoyarsk, Pogranichnikov St., 42I