Privacy Policy

   

Belarusian Chamber of Commerce and Industry

 

APPROVED

Order of the BelCCI

November 15, 2021 No. 70

POLICY

regarding the processing of personal data

 

CHAPTER 1

GENERAL PROVISIONS

This Policy on the Processing of Personal Data (hereinafter referred to as the Policy) has been prepared in compliance with the requirements of the Law of the Republic of Belarus dated May 7, 2021 No. 99-Z "On the Protection of Personal Data" (hereinafter referred to as the Law) and defines the measures taken by the BelCCI to ensure the protection and security of personal data.

This Policy applies to all personal data processing processes that the BelCCI receives regarding the personal data subject and the structural divisions that process such data. The purpose of this Policy is to ensure the appropriate protection of personal data from unauthorized access and disclosure, and to uphold the rights and freedoms of individuals when processing their personal data, including the protection of privacy, personal, and family secrets. By submitting personal data to the BelCCI, including through the BelCCI's online resources, the data subject confirms their consent to the processing of the relevant information under the terms set forth in this Policy. The current version of this Policy is publicly available on the Internet at www.cci.by. The following key terms and definitions are used in this Policy: Blocking personal data – terminating access to personal data without deleting it; Internet resource – a website, website page, web portal, blog, chat, mobile application, and other resources connected to the Internet; Anonymization of personal data – actions that make it impossible to determine the attribution of personal data to a specific data subject without the use of additional information; Personal data processing – any action or set of actions performed with personal data, including collection, systematization, storage, modification, use, anonymization, blocking, distribution, provision, and deletion of personal data; Personal data – any information related to an identified individual or an identifiable individual; Provision of personal data – actions aimed at familiarizing a specific individual or group of individuals with personal data; Dissemination of personal data – actions aimed at familiarizing an indefinite group of individuals with personal data; Services – any services, products, programs, events, or services of the BelCCI; Special personal data – personal data relating to racial or ethnic origin, political views, trade union membership, religious or other beliefs, health or sexual life, administrative or criminal liability, as well as biometric and genetic personal data; Personal data subject – the individual in relation to whom personal data is processed; Personal data deletion – actions that make it impossible to restore personal data in information resources (systems) containing personal data and/or that result in the destruction of tangible media containing personal data; Identifiable individual – an individual who can be directly or indirectly identified, in particular by their last name, first name, patronymic, date of birth, identification number, or one or more characteristics specific to their physical, psychological, mental, economic, cultural, or social identity. Other terms and definitions used in the Policy have the meanings defined by law.

 

CHAPTER 2

BASIC PRINCIPLES OF PERSONAL DATA PROCESSING

Personal data processing is carried out based on the following principles: It is carried out with the consent of the personal data subject, except in cases established by law. The personal data subject consents to the processing of personal data for an indefinite period, unless otherwise provided by law; It is limited to the achievement of specific, pre-defined legitimate purposes. Processing of personal data that is incompatible with the originally stated purposes of processing is prohibited; The content and volume of processed personal data must correspond to the stated purposes of processing. The processed personal data must not be excessive in relation to the stated purposes of processing; When processing personal data, its accuracy, sufficiency, and, where necessary, relevance in relation to the stated purposes of processing are ensured; It must be transparent. For these purposes, the personal data subject, in cases stipulated by law, is provided with relevant information regarding the processing of their personal data. Personal data; Personal data is stored in a form that allows identification of the personal data subject for no longer than required by the stated purposes of processing the personal data, unless the storage period for personal data is established by law or an agreement to which the personal data subject is a party. Personal data is subject to destruction or anonymization upon achieving the processing purposes or when these purposes are no longer necessary, unless otherwise provided by law.

 

CHAPTER 3

PURPOSES OF PERSONAL DATA PROCESSING

The purposes of personal data processing by the BelCCI are: concluding any type of agreement with personal data subjects and their subsequent execution; using personal data for advertising and marketing purposes, including sending the personal data subject notifications, commercial offers, and informational and advertising mailings related to the BelCCI services; processing messages and requests received from the personal data subject; analyzing the performance of the BelCCI online resources and services, including through surveys and other research; Provision of BelCCI services to the subject of personal data; HR management and employee records management for the BelCCI, including recruitment and selection of candidates for employment with the BelCCI; Maintaining individual (personalized) records of insured persons; Maintaining military records; Maintaining accounting and tax records; Accrual and transfer of wages, assignment and payment of benefits; Completing and submitting required reporting forms to government agencies and other authorized organizations; Processing personal data for pension purposes; Conducting business activities; Processing other requests and inquiries received from personal data subjects; Fulfilling other duties (powers) stipulated by legislation.

 

CHAPTER 4

CATEGORIES OF PERSONAL DATA SUBJECTS AND LIST OF PERSONAL DATA PROCESSED BY THE BELCCI

The BELCCI may process the personal data of the following personal data subjects: Job applicants, BELCCI employees, including former employees, their spouses, and close relatives; Persons who are candidates for the management reserve; Individuals who are not BELCCI employees, when processing BELCCI award documents; Students and other individuals who have arrived at the BELCCI for internships or internships; Counterparties – individuals, including potential counterparties (under contracts); Representatives of potential counterparties; Visitors of internet resources and users of BELCCI services; Individuals who have provided personal data to the BELCCI in other ways. Personal data processed by the BelCCI includes: - last name, first name, patronymic; - gender; - date, month, and year of birth; - identification data; - passport data; - place of birth; - digital photograph; - information on: - citizenship; - registration at place of residence and/or place of stay; - death or declaration of death of an individual, recognition as missing, incapacitated, or of limited capacity; - information on parents, guardians, trustees, marital status, spouse, and child(ren) of an individual; - information on education, academic degree, and academic title; - information on occupation; - information on pension, monthly allowance under civil service legislation, monthly insurance payment under compulsory insurance against industrial accidents and occupational diseases; - information on tax liabilities; - On the performance of military service; - On disability; - On the existence of enforcement proceedings pending before enforcement agencies; - Social security certificate; - On taxpayer identification number; - On work, home (landline), and mobile phone numbers, and other communication methods.

The BelCCI may process the following technical information: - IP address; - Browser information; - Cookie data; - Address of the requested page; - History of searches and views on the BelCCI internet resources. The BelCCI processes special personal data only with the consent of the personal data subject, or without consent in cases stipulated by law.

 

CHAPTER 5

MAIN RIGHTS AND RESPONSIBILITIES OF THE BelCCI

The BelCCI has the right to: - Receive reliable information and/or documents containing personal data from the personal data subject; - Request information from the personal data subject regarding the relevance and accuracy of the personal data provided; - If the personal data subject revokes consent to the processing of personal data, continue processing the personal data if there are grounds specified in the Law; - if necessary to achieve the purposes of processing personal data, transfer it to third parties in compliance with legal requirements; - independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations stipulated by the Law. and the regulatory legal acts adopted in accordance with it, unless otherwise provided by the Law. The BelCCI is obligated to: - explain to the personal data subject their rights related to the processing of their personal data; - obtain consent from the personal data subject to the processing of their personal data, except in cases stipulated by the Law and other legislative acts; - ensure the protection of personal data during its processing; - provide the personal data subject with information about their personal data, as well as about the provision of their personal data to third parties, except in cases stipulated by the Law and other legislative acts; - make changes to personal data that are incomplete, outdated, or inaccurate, except in cases where a different procedure for making changes to personal data is established by legislative acts or if the purposes of processing the personal data do not require subsequent changes to such data; - Terminate the processing of personal data, as well as delete or block it (ensure that the processing of personal data is terminated, as well as its deletion or blocking by an authorized person) if there are no grounds for processing personal data stipulated by the Law and other legislative acts; - Notify the National Center for Personal Data Protection of the Republic of Belarus (hereinafter referred to as the NCPP) of any violations of personal data protection systems immediately, but no later than three business days after the operator becomes aware of such violations, except in cases provided for by the NCPP; - Amend, block, or delete inaccurate or illegally obtained personal data of the data subject at the request of the NCPP, unless another procedure for amending, blocking, or deleting personal data is established by law; - Comply with other requests of the NCPP to eliminate violations of personal data legislation; - Fulfill other obligations stipulated by the Law and other legislative acts.

 

CHAPTER 6

MAIN RIGHTS AND RESPONSIBILITIES OF PERSONAL DATA SUBJECTS

A personal data subject has the right to: - receive information regarding the processing of their personal data; - receive information from the BelCCI regarding the provision of their personal data to third parties under the conditions specified by the Law; - receive any clarifications on any questions regarding the processing of their personal data by contacting the BelCCI by email at mbox@cci.by; - revoke consent to the processing of personal data; - appeal to the National Center for Protection of Personal Data or in court any unlawful actions or inactions of the BelCCI in the processing of personal data; demand from the BelCCI: change their personal data if such personal data is incomplete, outdated, or inaccurate; free termination of the processing of their personal data, including its deletion, if there are no grounds for processing the personal data stipulated by the Law and other legislative acts; Exercise other rights provided by law. The personal data subject is obligated to: provide the BelCCI with accurate information about themselves; notify the BelCCI of any clarifications (updates, or changes) to their personal data. Persons who provide the BelCCI with inaccurate information about themselves, or information about another personal data subject, without the latter's consent, are liable in accordance with the legislation of the Republic of Belarus.

 

CHAPTER 7

FINAL PROVISIONS

The BelCCI and other persons who have gained access to personal data are obligated not to disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by law. The security of personal data processed by the BelCCI is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of legislation on personal data protection. This Policy shall enter into force on the date of its approval. The Belarusian Chamber of Commerce and Industry reserves the right to unilaterally amend this Policy without prior approval or subsequent notification to the personal data subject. Any issues related to the processing of personal data not covered by this Policy are governed by law.