Processing of personal data
- The subject of personal data takes a decision on the provision of his personal data and gives consent to their processing freely, by his will and in his interest. Consent to the processing of personal data must be specific, informed and conscious. Consent to the processing of personal data may be given by the subject of personal data or his representative in any form allowing confirming the fact of its receipt, unless otherwise provided by federal law. In case of obtaining consent to the processing of personal data from a representative of the personal data subject, the authority of this representative to give consent on behalf of the personal data subject is checked by the operator.
- Consent to the processing of personal data may be revoked by the subject of personal data. In case of withdrawal of personal data subject's consent to the processing of personal data, the operator has the right to continue processing personal data without the consent of the subject of personal data if there are grounds specified in clauses 2–11 of part 1 of article 6, part 2 of article 10 and part 2 of article 11 of this Federal Law.
- The obligation to provide evidence of the consent of the personal data subject to the processing of his personal data or the proof of the existence of the grounds specified in clauses 2–11 of part 1 of article 6, part 2 of article 10 and part 2 of article 11 of this Federal Law is assigned to the operator.
- In cases stipulated by federal law, the processing of personal data is carried out only with the consent in writing of the subject of personal data. Personal data subject's consent in writing on paper containing handwritten signature is equivalent to the agreement in the form of an electronic document signed in accordance with federal law with an electronic signature. The written consent of the personal data subject to the processing of his personal data should include, in particular:
- The procedure for obtaining in the form of an electronic document the consent of the subject of personal data to the processing of his personal data in order to provide state and municipal services, as well as services that are necessary and mandatory for the provision of state and municipal services, is established by the Government of the Russian Federation.
- In case of incapacity of the personal data subject, consent to the processing of his personal data is given by the legal representative of the personal data subject.
- In case of death of the subject of personal data, consent to the processing of his personal data is given by the heirs of the subject of personal data, if such consent was not given by the subject of personal data during his lifetime.
- Personal data can be obtained by the operator from a person who is not the subject of personal data, provided that the operator is confirmed that there are grounds specified in clauses 2–11 of part 1 of article 6, part 2 of article 10 and part 2 of article 11 of this Federal Law.
- surname, name, patronymic, address of the subject of personal data, number of the main document proving his identity, information on the date of issue of the said document and the authority that issued it;
- surname, name, patronymic, address of the representative of the subject of personal data, number of the main document proving his identity, information on the date of issue of the said document and the authority that issued it, details of the power of attorney or other document confirming the authority of this representative (upon receipt of consent from the representative of the subject of personal data);
- name or surname, name, patronymic and address of the operator receiving the consent of the subject of personal data;
- the purpose of the processing of personal data;
- a list of personal data for the processing of which the consent of the subject of personal data is given;
- name or surname, name, patronymic and address of the person who processes personal data on behalf of the operator, if the processing is entrusted to that person;
- a list of actions with personal data for which consent is given, a general description of the methods used by the operator for processing personal data;
- the period during which the consent of the subject of personal data is valid, as well as the method of its revocation, unless otherwise provided by federal law;
- signature of the subject of personal data.