Policy regarding the processing of personal data

1. General Provisions

1.1. The policy regarding the processing of personal data of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia was developed in accordance with the requirements of Part 2 of Article 18.1 of the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data” and is intended to provide unlimited access to information in relation to processing personal data, as well as information on the implemented requirements for the protection of personal data in the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia.

1.2. This Policy describes the procedure for processing and protecting personal data of individuals in connection with the implementation of labor relations, the conclusion of contracts and the fulfillment of contractual obligations of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia, the implementation of the organization’s statutory activities.

1.3. Personal data belongs to the category of confidential information and is protected from unauthorized, including accidental, access to them.

2. Basic concepts in the field of personal data

1) personal data – any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data);

2) operator – a state body, municipal body, legal entity or individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) committed with personal data;

3) processing of personal data – any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

4) automated processing of personal data – processing of personal data using computer technology;

5) dissemination of personal data – actions aimed at disclosing personal data to an indefinite circle of persons;

6) provision of personal data – actions aimed at disclosing personal data to a specific person or a specific circle of persons;

7) blocking of personal data – temporary suspension of the processing of personal data (except when processing is necessary to clarify personal data);

8) destruction of personal data – actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed;

9) depersonalization of personal data – actions as a result of which it becomes impossible to determine the ownership of personal data by a specific subject of personal data without the use of additional information;

10) personal data information system – a set of personal data contained in databases and information technologies and technical means that ensure their processing;

11) cross-border transfer of personal data – transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity.

3. Principles and conditions for the processing of personal data

3.1. The processing of personal data in the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia is carried out on the basis of the following principles:

– availability of legal grounds for the processing of personal data;

– limitation of the processing of personal data to the achievement of specific, predetermined and legitimate purposes;

– preventing the merger of databases containing personal data, the processing of which is carried out for incompatible purposes;

– processing only those personal data that meet the purposes of their processing;

– compliance of the content and volume (prevention of redundancy) of the processed personal data with the stated purposes of processing;

– ensuring the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of processing personal data;

– storage of personal data is carried out in a form that allows determining the subject of personal data, no longer than required by the purposes of processing personal data, if the period for storing personal data is not established by the legislation of the Russian Federation, an agreement to which the subject of personal data is a party, beneficiary or guarantor .

3.2. The processing of personal data in the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia can be carried out in the following cases:

– the consent of the subject to the processing of his personal data has been obtained;

– processing of personal data is necessary for the implementation and fulfillment of the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;

– processing of personal data is carried out in connection with the participation of the subject of personal data in civil and arbitration proceedings;

– processing of personal data is necessary for the execution of a judicial act in accordance with the legislation of the Russian Federation on enforcement proceedings;

– processing of personal data is necessary for the performance of an agreement to which the subject of personal data is a party or beneficiary or guarantor, as well as for the conclusion of an agreement at the initiative of the subject of personal data;

– processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data, if obtaining the consent of the subject of personal data is impossible;

– processing of personal data is necessary for the implementation of the rights and legitimate interests of the operator or third parties or for the achievement of socially significant goals, provided that the rights and freedoms of the subject are not violated;

– processing of personal data is carried out for statistical or other research purposes, subject to the mandatory depersonalization of personal data;

– processing of personal data subject to publication or mandatory disclosure in accordance with the legislation of the Russian Federation is carried out.

Federation on the operator’s functions, powers and duties;

– processing of personal data is carried out in connection with the participation of the subject of personal data in civil and arbitration proceedings;

– processing of personal data is necessary for the execution of a judicial act in accordance with the legislation of the Russian Federation on enforcement proceedings;

– processing of personal data is necessary for the performance of an agreement to which the subject of personal data is a party or beneficiary or guarantor, as well as for the conclusion of an agreement at the initiative of the subject of personal data;

– processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data, if obtaining the consent of the subject of personal data is impossible;

– processing of personal data is necessary for the implementation of the rights and legitimate interests of the operator or third parties or for the achievement of socially significant goals, provided that the rights and freedoms of the subject are not violated;

– processing of personal data is carried out for statistical or other research purposes, subject to the mandatory depersonalization of personal data;

– processing of personal data subject to publication or mandatory disclosure in accordance with the legislation of the Russian Federation is carried out.

4. Processed personal data

4.1. In order to fulfill the requirements of the legislation of the Russian Federation in the field of personnel records, including assistance to employees in employment, education and promotion, ensuring the personal safety of employees, controlling the quantity and quality of work performed and ensuring the safety of property, paying wages and other due to an employee in accordance with the legislation of the Russian Federation or an agreement on payments, the implementation of tax and social deductions provided for by the legislation of the Russian Federation, the personal data of employees of the following are processed in the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia:

1) Surname, name, patronymic, gender, age;
2) Date and place of birth;
3) Information about citizenship;
4) Information about education;
5) Profession, qualification, position;
6) Marital status, family composition;
7) Passport data;
8) Address of registration at the place of residence and address of actual residence, telephone;
9) Information about military registration;
10) Information about awards, promotions, honorary titles;
11) Health insurance data, SNILS, TIN;
12) Income, amounts of deductions;

13) Information about the length of service of previous jobs;
14) Photography.

The processing of information about the health status of employees is carried out in individual cases in accordance with the legislation of the Russian Federation on state social assistance, labor legislation, pension legislation of the Russian Federation.

The basis for the processing of personal data is the Labor Code of the Russian Federation; Tax Code of the Russian Federation; Federal Law No. 27-FZ of April 1, 1996 “On Individual (Personalized) Accounting in the Compulsory Pension Insurance System”; Federal Law No. 402-FZ of 06.12.2011 “On Accounting”; Federal Law of March 28, 1998 No. 53-FZ “On military duty and military service”; Federal Law No. 181-FZ of November 24, 1995 “On the Social Protection of the Disabled in the Russian Federation”; Agreement; Agreement.

The processing of information about the health status of employees is carried out in individual cases in accordance with the legislation of the Russian Federation on state social assistance, labor legislation, pension legislation of the Russian Federation.

The processing of personal data is carried out using automation tools or without the use of such tools.

The term for processing personal data is limited to the achievement of the stated purpose. The period of storage of personal data is 50/75 years of the EPC from the date of termination of the employment relationship. The destruction of personal data is carried out within the time limits established by law after the expiration of the period of their storage or upon the occurrence of other legal grounds.

4.2. In order to comply with the requirements of the legislation of the Russian Federation in the field of personnel records, the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia processes personal data of close relatives of employees:

1) Surname, name, patronymic;
2) Degree of relationship;
3) Year of birth.

The basis for the processing of personal data is the Labor Code of the Russian Federation.

The processing of personal data is carried out using automation tools or without the use of such tools.

The term for processing personal data is limited to the achievement of the stated purpose. The period of storage of personal data is 50/75 years of the EIC from the moment of termination of the employment relationship with the employee. The destruction of personal data is carried out within the time limits established by law after the expiration of the period of their storage or upon the occurrence of other legal grounds.

4.3. In order to carry out the selection of personnel, including the selection for filling vacant positions; maintaining a personnel reserve; employment of those who have successfully passed the selection for filling vacant positions, the personal data of applicants (applicants) for filling vacant positions are processed in the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia:

1) Surname, name, patronymic, gender;
2) Date and place of birth;
3) Information about citizenship;
4) Information about education;
5) Profession, qualification, position;
6) Information about labor activity;
7) Marital status, family composition;
8) Passport data;
9) Address, telephone;
10) Information about military registration;
11) Information about awards, promotions, honorary titles;
12) Information about the social status;
13) Data of pension, medical insurance, TIN, SNILS.

The basis for the processing of personal data is the Labor Code of the Russian Federation; subject’s consent.

The processing of personal data is carried out using automation tools or without the use of such tools.

The term for processing personal data is limited to the achievement of the stated purpose. The period of storage of personal data of applicants included in the personnel reserve is 5 years (in case of inclusion in the personnel reserve) from the moment the relevant decision is made. The destruction of personal data is carried out within the time limits established by law after the expiration of the period of their storage, upon receipt of the withdrawal of the consent of the subject, or upon the occurrence of other legal grounds.

4.4. In order to fulfill the requirements of the legislation of the Russian Federation in the field of tax and accounting, including the implementation of settlements with subjects of personal data; registration of primary accounting documents; exercise of due diligence, the FSBI “NMIC TPM” of the Ministry of Health of Russia processes personal data of counterparties and their representatives:

1) Surname, name, patronymic;
2) Organization, position;
3) Date, place of birth;
4) Address;
5) Passport data;
6) TIN, OGRN (for individual entrepreneurs);
7) Contact details (phone, e-mail);
8) Cookies of site visitors.

The basis for the processing of personal data is the Tax Code of the Russian Federation; Federal Law No. 402-FZ of 06.12.2011 “On Accounting”; Agreement; subject’s consent.

The processing of personal data is carried out using automation tools or without the use of such tools.

The term for processing personal data is limited to the achievement of the stated purpose. The period of storage of personal data is 5 years from the date of registration of the primary accounting document. The destruction of personal data is carried out within the time limits established by law after the expiration of the period of their storage or upon the occurrence of other legal grounds.

4.5. For the purpose of providing medical and medico-social services, including the conclusion, execution and termination of civil law contracts; provision of paid and free services to personal data subjects; improving the quality of services provided; communicating with personal data subjects to send notifications, information and requests related to the activities of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia, as well as processing appeals, applications, applications and other messages from personal data subjects; providing personal data subjects with access to the use of the Internet site of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia and its functionality; conducting statistical and other studies based on anonymized personal data, the FSBI “NMIC TPM” of the Ministry of Health of Russia processes personal data of patients and their legal representatives:

1) Surname, name, patronymic;

2) Date, place of birth;

3) Address of registration (registration);

4) Passport data (including temporary registration, residence permit);

5) Contact details (phone, e-mail);

6) SNILS;

7) Data of the MHI/VHI policy;

8) Photography;

9) Data of a power of attorney for the right to receive information regarding the fact of providing medical care;

10) Details of the document confirming benefits;

11) TIN;

12) Data of power of attorney for the right to sign contracts with counterparties, financial documents on the services rendered;

13) Information about the state of health, diseases, cases of seeking medical help.

The basis for the processing of personal data is the Federal Law of November 21, 2011 No. 323-FZ “On the Basics of Protecting the Health of Citizens in the Russian Federation”; Agreement; subject’s consent.

The processing of personal data is carried out using automation tools or without the use of such tools.

The term for processing personal data is limited to the achievement of the stated purpose. The period of storage of personal data corresponds to the period of storage of primary medical documents (medical records) and is twenty-five years (for children – ten years). This consent may be withdrawn by submitting a written application. The destruction of personal data is carried out within the time limits established by law after the expiration of the period of their storage or upon the occurrence of other legal grounds vany.

4.6. In order to carry out educational activities, the FSBI “NMIC TPM” of the Ministry of Health of Russia processes the personal data of students and their representatives:

1) Surname, name, patronymic;
2) Date, place of birth;
3) Address of registration (registration);
4) Address of actual residence;
6) Passport data;
5) Contact details (phone, e-mail);
7) SNILS;
8) Series, date of issue, number of graduation diploma;
9) Cookies of site visitors.

The basis for the processing of personal data is the Federal Law of December 29, 2012 No. 273-FZ “On Education in the Russian Federation”; Agreement; subject’s consent.

The processing of personal data is carried out using automation tools or without the use of such tools.

The term for processing personal data is limited to the achievement of the stated purpose. The period of storage of personal data is 75 years of EPC from the end of the Training Program. The destruction of personal data is carried out within the time limits established by law after the expiration of the period of their storage or upon the occurrence of other legal grounds.

5. Collection of personal data

5.1. The collection of personal data is carried out directly from the subject of personal data. If the provision of personal data and (or) obtaining by the operator of consent to the processing of personal data is mandatory in accordance with the legislation of the Russian Federation, the legal consequences of the refusal to provide such data and (or) consent to their processing are explained to the subject of personal data.

5.2. Obtaining personal data from other persons is possible only if there are legal grounds. When receiving personal data from other persons, with the exception of cases when personal data was obtained as part of an instruction for the processing of personal data or when consent was obtained by the transferring party, it is necessary to notify the subject.

5.3. When collecting personal data, including through the information and telecommunication network “Internet”, recording, systematization, accumulation, storage, clarification (updating, changing), retrieval of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation is ensured.

6. Processing of personal data

6.1. When processing personal data in the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia, the following actions are carried out: collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), blocking, deletion, destruction.

6.2. The processing of personal data may be entrusted to a third party with the consent of the subject of personal data or on the grounds provided for by the legislation of the Russian Federation. A person who processes personal data on behalf of is not required to obtain the consent of the subject to the processing of his personal data.

6.3. In case of confirmation of the fact of inaccuracy of personal data, such personal data shall be updated within seven working days.

6.4. If the fact of illegal processing of personal data is revealed, such personal data shall be destroyed within three days.

7. Storage of personal data

7.1. The storage of personal data is carried out in a form that allows you to determine the subject of personal data, no longer than required by the purposes of processing personal data, if the period of storage of personal data is not established by the legislation of the Russian Federation or by an agreement to which the subject of personal data is a party.

7.2. The storage of personal data is carried out taking into account the provision of their confidentiality.

7.3. Personal data is transferred for archival storage in accordance with the legislation of the Russian Federation on archiving, destroyed or depersonalized upon reaching the goals of processing or in case of loss of the need to achieve these goals, unless otherwise provided by the legislation of the Russian Federation or an agreement to which the subject of personal data is a party.

8. Transfer of personal data

8.1. The transfer of personal data to a third party is carried out only with the consent of the subject of personal data or in cases expressly provided for by the legislation of the Russian Federation.

8.2. The transfer of personal data to a state authority, a local government authority, a security and law enforcement authority, a state institution and a fund, as well as another authorized body is allowed on the grounds provided for by the legislation of the Russian Federation.

8.3. Disclosure of personal data to a third party without the consent of the respective subject is not allowed, except when it is necessary to protect the life, health or other vital interests of the subject of personal data.

8.4. Disclosure of personal data to a third party for commercial purposes without the consent of the respective subject is prohibited. Processing of personal data for the purpose of promoting goods, works, services on the market, as well as for the purposes of political agitation, is carried out only with the prior consent of the subject.

8.5. There is no cross-border transfer of personal data on the territory of foreign states.

9. Dissemination of personal data

9.1. The processing of personal data authorized by the subject of personal data for distribution is carried out taking into account the fulfillment of the requirements provided for by the legislation of the Russian Federation on personal data.

9.2. The subject gives consent to the processing of personal data permitted for distribution, separately from other consents of the subject of personal data to the processing of his personal data.

9.3. If the subject himself discloses his personal data to an indefinite circle of persons using the functionality of the Internet site or the service of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia without providing the appropriate consent, further dissemination of personal data by other operators is possible only on the basis of the consent of the relevant subject to the processing of personal data, allowed for distribution.

9.4. In consent to the processing of personal data authorized by the subject of personal data for distribution, the subject of personal data has the right to establish prohibitions on the transfer (except for granting access) of these personal data by the operator to an unlimited number of persons, as well as prohibitions on the processing or processing conditions (except for obtaining access) of these personal data. data to an unlimited number of persons.

10. Conditions and procedure for terminating the processing of personal data

10.1. If the purpose of personal data processing is achieved, the processing of such personal data must be terminated, and personal data must be destroyed within thirty days from the date of achievement of the purpose of personal data processing, unless otherwise provided by the agreement to which the subject of personal data is a party, beneficiary or guarantor , another agreement between the operator and the subject of personal data, or if the operator is not entitled to process personal data without the consent of the subject of personal data on the grounds provided for by the legislation of the Russian Federation.

10.2. If the subject withdraws consent to the processing of his personal data, the processing of such personal data must be terminated, and if the storage of personal data is no longer required for the purposes of processing personal data, such personal data must be destroyed within thirty days from the date of receipt of the said withdrawal, unless otherwise provided by an agreement to which the subject of personal data is a party, beneficiary or guarantor, another agreement between the operator and the subject of personal data, or if the operator is not entitled to process personal data without the consent of the subject of personal data on the grounds provided for by the legislation of the Russian Federation.

10.3. If unlawful processing of personal data is detected, the processing of such personal data must be terminated within three working days. If it is impossible to ensure the legality of the processing of personal data, personal data shall be destroyed within two hundred working days from the date of detection of illegal processing.

10.4. If it is not possible to destroy personal data within the period specified in clauses 10.1-10.3, such personal data must be blocked and destroyed within a period of no more than six months, unless another period is established by the legislation of the Russian Federation.

11. Access to personal data

11.1. The following persons have the right to access personal data processed by the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia:

– Director of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia;

– employees of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia, for whom the processing of personal data is necessary in connection with the performance of their official duties.

11.2. The admission of employees of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia to personal data is carried out by the management of a separate internal act.

12. Procedure for interaction with personal data subjects

12.1. Any subject whose personal data is processed by the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia has the right to access their personal data, including the following information:

– confirmation of the fact of personal data processing;

– legal grounds and purposes of personal data processing;

– the purposes and applied methods of processing personal data;

– the name and location of the operator, information about persons (excluding employees of the operator) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the operator or on the basis of the legislation of the Russian Federation;

– a list of processed personal data related to the relevant subject, and the source of their receipt;

– terms of person processing personal data and terms of their storage;

– the procedure for exercising by the subject of the rights provided for by the legislation of the Russian Federation;

– information about the performed or proposed cross-border data transfer;

– the name of the person carrying out the processing of personal data on behalf of the operator, if the processing is entrusted to a third party;

– information on how the operator fulfills the obligations established by Article 18.1 of Federal Law No. 152-FZ “On Personal Data”.

12.2. FSBI “NMIC TPM” of the Ministry of Health of Russia provides the information specified in clause 12.1 within ten working days from the receipt of the request of the subject or his legal representative in the form in which the corresponding request was received (unless otherwise specified in the request). The response to the request should not contain personal data relating to other subjects of personal data, unless there are legal grounds for disclosing such personal data. The term for responding to a request may be extended, but not more than five working days, if the operator sends a reasoned notice to the subject indicating the reasons for the extension of the period for providing the requested information.

12.3. The request of the subject or his representative must contain:

– number of the main document proving the identity of the subject or his representative;

– information about the date of issue of the specified document and the issuing authority;

– information confirming the participation of the subject in relations with the FSBI “NMIC TPM” of the Ministry of Health of Russia (contract number, date of conclusion of the contract or other information), or information otherwise confirming the fact of processing personal data of the FSBI “NMIC TPM” of the Ministry of Health of Russia;

– Signature of the personal data subject or his representative.

12.4. The subject has the right to re-apply to the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia with a request for the information specified in clause 12.1, not earlier than thirty days after the initial request or the initial request.

12.5. The subject has the right to demand clarification of his personal data, their blocking or destruction if the personal data processed by the FSBI “NMIC TPM” of the Ministry of Health of Russia is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of the FSBI “NMIC TPM” of the Ministry of Health of Russia processing.

12.6. The subject has the right to withdraw his consent to the processing of personal data, if such was given. Withdrawal of consent is sent by the subject to the address of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia and must contain the information specified in clause 12.3. In the event that the subject withdraws consent to the processing of personal data, the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia has the right to continue processing personal data without the consent of the subject if there are grounds provided for by the legislation of the Russian Federation or an agreement to which the subject of personal data is a party, beneficiary or guarantor.

13. Fulfillment of legal obligations

13.1. In order to fulfill the obligations stipulated by the legislation of the Russian Federation on personal data, the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia takes the following measures:

– appointment of a person responsible for organizing the processing of personal data;

– publication of documents defining the policy regarding the processing of personal data, local acts on the processing of personal data, as well as local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation, eliminating the consequences of such violations;

– application of legal, organizational and technical measures to ensure the security of personal data;

– implementation of internal control over the compliance of personal data processing with the requirements of the legislation of the Russian Federation;

– assessment of the harm that may be caused to the subjects of personal data in case of violation of the legislation of the Russian Federation;

– Familiarization of employees of the FSBI “NMIC TPM” of the Ministry of Health of Russia with the provisions of the legislation of the Russian Federation and local acts of the FSBI “NMIC TPM” of the Ministry of Health of Russia.

13.2. In the event that the fact of unlawful or accidental transfer (provision, distribution, access) of personal data that resulted in a violation of the rights of subjects of personal data is revealed, the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia notifies Roskomnadzor:

– Within 24 hours from the moment of detection of the incident, the alleged causes that led to the violation of the rights of personal data subjects, and the alleged harm caused to the rights of personal data subjects, the measures taken to eliminate the consequences of the relevant incident, including information about the person authorized to interact on issues related to the identified incident;

– within 72 hours from the moment of detection of the results of the internal investigation of the incident, as well as the persons whose actions caused and incident (if any).

14. Protection of personal data

14.1. When processing personal data, the necessary legal, organizational and technical measures are taken to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data.

14.2. In order to ensure the security of personal data, the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia takes the following measures:

– identification of threats to the security of personal data during their processing in information systems;

– application of organizational and technical measures to ensure the security of personal data during their processing in information systems that ensure compliance with the requirements for the established levels of security;

– assessment of the effectiveness of measures taken to ensure the security of personal data processed in personal data information systems;

– accounting of machine carriers of personal data;

– detection of facts of unauthorized access to personal data and response to these incidents;

– recovery of personal data modified or destroyed due to unauthorized access to them;

– establishing rules for access to personal data processed in personal data information systems;

– registration and accounting of actions performed with personal data in personal data information systems;

– control over the measures taken to ensure the security of personal data in accordance with the established level of protection of personal data.

15. Responsibility

For violation of the requirements established by the legislation of the Russian Federation, the Regulations on the processing and protection of personal data and other local acts of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia, employees and other persons who have gained access to personal data bear disciplinary, administrative, civil and criminal liability in accordance with the Federal Laws of the Russian Federation.

16. Final provisions

16.1. This policy provides unrestricted access to all interested parties, including personal data subjects and authorities exercising a control and supervisory function in the field of personal data.

16.2. This Policy comes into force from the moment of its approval and is valid indefinitely. Changes to the Policy are made by separate acts of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia. The current version of the Policy is posted on the official website of the Federal State Budgetary Institution “NMIC TPM” of the Ministry of Health of Russia.

17. Requisites and contact information

Name: Federal State Budgetary Institution “National Medical Research Center for Therapy and Preventive Medicine” of the Ministry of Health of the Russian Federation.

Abbreviated name: FGBU “NMIC TPM” of the Ministry of Health of Russia.

TIN: 7709024283.

Gearbox: 770901001.

PSRN: 1027739172240.

Legal address: 101990, Moscow, Petroverigsky lane, 10, building 3.

Postal address for inquiries: 101990, Moscow, Petroverigsky lane, 10, building 3.