Personal data processing in JSC Ural Steel

This personal data processing policy has been drawn up in accordance with the requirements of Federal Law No. 152-FZ On Personal Data dated 27.07.2006 and defines the procedure for personal data processing and measures to ensure the security of personal data in JSC Ural Steel (hereinafter referred to as the Operator).

1. General

1.1. The Operator sets the respect for human and civil rights and liberties while processing his/her personal data, including the protection of the rights to privacy, personal and family secrets, as its most important goal and condition for the implementation of its activities.

1.2. This Operator’s policy in relation to the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator can receive about Users visiting the website of JSC Ural Steel.

2. Main definitions used in the Policy

2.1. Automated personal data processing means processing of personal data using computer aids;

2.2. Blocking of personal data means a temporary interruption of personal data processing (unless the processing is required for personal data refinement);

2.3. Website of JSC Ural Steel means a set of graphic and information materials, as well as computer programs and databases ensuring their availability on the Internet at https://uralsteel.com;

2.4. Personal data information system means a set of personal data stored in databases as well as information technologies and hardware ensuring the processing thereof;

2.5. Depersonalization of personal data means actions as a result of which it is impossible to determine the personal data belonging to a specific User or other data subject without the use of additional information;

2.6. Personal data processing means any computer-aided or non-computer-aided action (operation) or a set of actions (operations) performed with personal data, including collection, recording, systematization, accumulation, storage, refinement (update, alteration), extraction, utilization, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

2.7. Operator means JSC Ural Steel which independently or in cooperation with other entities organizes and(or) carries out personal data processing as well as determines the purposes of personal data processing, the scope of personal data to be processed and the actions (operations) performed with personal data;

2.8. Personal data means any information relating directly or indirectly to an identified or identifiable User visiting JSC Ural Steel website;

2.9. User means any visitor to JSC Ural Steel website;

2.10. Provision of personal data means actions intended to disclose personal data to a certain person or a certain group of people;

2.11. Distribution of personal data means actions intended to disclose personal data to an indefinite number of people (transfer of personal data) or to acquaint an unlimited number of people with personal data, including disclosure of personal data in the mass media as well as through information and telecommunication networks or providing access to personal data through other methods;

2.12. Cross-border transfer of personal data means cross-border transfer of personal data to a foreign state agency, foreign legal entity or individual located in a foreign state;

2.13. Destruction of personal data means any actions as a result of which personal data is irretrievably destroyed when restoration of their content in personal data information system is not subsequently allowed, and (or) physical data carriers are destroyed.

3. The Operator may process the following personal data of the User

3.1. First name, last name, patronymic, phone number, e-mail address;

3.2. Also JSC Ural Steel website collects and processes anonymous data about visitors (including cookies) using Internet statistics (Yandex Metrika, Google Analytics, New Relic and others).

3.3 The above data further in the Policy text is combined under the general concept of Personal Data.

4. Purposes of personal data processing

4.1 The purpose of processing the User's personal data:

· registration/authorization of the User on the website of JSC Ural Steel;

· communication with the User, including sending SMS notifications, requests and information, as well as processing requests and applications received from the User, including possible informational and promotional mailouts;

· as well as for any other purposes, other types of activities within the framework of the law of the Russian Federation, with mandatory compliance with the requirements of the law of the Russian Federation in the field of personal data.

5. Legal grounds for processing personal data

5.1. The Operator processes the User's personal data only if they are filled in and/or sent by the User independently through special forms located on the website of JSC Ural Steel. By filling out the appropriate forms and/or sending his personal data to the Operator, the User agrees to this Policy.

5.2. The Operator processes depersonalized User data if this is allowed in the User's browser settings (saving cookies and using JavaScript technology are enabled).

5.3. Consent to the use of cookies:

5.3.1. Hereby, by continue working on the website of JSC Ural Steel, I give my consent to JSC Ural Steel (hereinafter referred to as the Operator), legal address: 462353, Orenburg region, Novotroitsk, Zavodskaya str., 1, OGRN 1055607061498 TIN (Taxpayer Identification Number) 5607019523, for automated processing, as well as without the use of automation tools of my personal data (cookies, information about user actions on the website of JSC Ural Steel, information about the User's equipment, date and time of the session, including using metric programs Yandex.Metrica, Google Analytics, New Relic, etc.) with the performance of actions: collection, recording, systematization, accumulation, storage, refinement (update, alteration), extraction, utilization, depersonalization, blocking, deletion, destruction, transfer (provision, access) to the Operator's partners providing the service according to the specified metric programs. The processing of personal data is carried out in order to inform the User by sending an SMS notification or a direct call of the manager, improve the operation of the website of JSC Ural Steel, improve the Operator's products and services, determine the User's preferences, provide targeted information on the products and services of the Operator and the Operator's partners.

5.3.2. This consent is valid from the moment it is provided and during the entire period of use of the JSC Ural Steel website.

5.3.3. In case of refusal to process personal data by metric programs, I am informed of the need to stop using the website of JSC Ural Steel or disable cookies in the browser settings.

5.4.  Consent to the processing of personal data:

Hereby, continuing to work on the website of JSC Ural Steel, I, acting on my own free will and in my own interest, give my consent to JSC Ural Steel (hereinafter referred to as the Operator), legal address: 1, Zavodskaya street, Novotroitsk, Orenburg region, 462353,
OGRN 1055607061498, INN (Taxpayer Reg. No.) 5607019523, to process my personal data, including with the involvement of third parties entitled to process personal data, for the purposes of:

● logging in/authorization of the User on the website of JSC Ural Steel;

● Communication with the User, including sending notifications, requests and information, as well as processing requests and applications from the Customer, including possible mailings of a newsletter and promotional mail;

● as well as for any other purposes, other activities under the Russian Federation law, with mandatory compliance with the requirements of the Russian Federation law regarding personal data.

The personal data for which I consent to the processing includes:

● surname name, first name, patronymic;

● contact phone numbers;

● e-mail address.

My consent to the processing of personal data applies to all methods of processing, including collection, systematization, accumulation, storage, refinement (updating, alteration), utilization, depersonalization, blocking, destruction, both with and without the using of means of automation.

I confirm that the personal data provided by me belong to me personally. I acknowledge and confirm that I have carefully and fully read the Processing Policy and the terms of my personal data processing contained therein, specified in the form on the website of JSC Ural Steel, all the provisions of this Processing Policy and the terms of my personal data processing are clear.

I agree to the personal data processing terms without any qualifications or limitations.

This consent is valid from the moment I provide my personal data and is valid for an unlimited period of time, until I withdraw my consent under the appropriate procedure.

I agree that this consent may be withdrawn at any time by sending a free form application to the Operator.

6. Procedure for collection, storage, transfer and other types of personal data processing

6.1 The security of personal data processed by the Operator shall be ensured by implementing legal, organizational and technical measures necessary for full compliance with the requirements of the applicable law on personal data protection.

6.2 The Operator shall ensure safety of personal data and take all possible measures to exclude access to personal data by unauthorized persons.

6.3 The User's personal data will never be disclosed to third parties under any circumstances, except in cases related to the execution of the applicable law.

6.4 In case of revealing inaccuracies in personal data, the User may update them independently by sending a notice to the Operator to the Operator's e-mail address info@uralsteel.com marked “Personal Data Updating”.

6.5 The period of personal data processing is unlimited. The User may withdraw his/her consent to the personal data processing at any time by sending a notice to the Operator by e-mail to the Operator's e-mail address info@uralsteel.com marked “Withdrawal of consent to personal data processing”.

7. Cross-border personal data transfer

7.1 Before commencing the cross-border personal data transfer, the Operator shall ensure that the foreign state, to the territory of which the personal data are to be transferred, provides reliable protection of the rights of personal data subjects.

7.2 Cross-border personal data transfer to the territories of foreign countries that do not meet the above requirements may be carried out only if there is a written consent of the personal data subject to the cross-border transfer of his/her personal data and/or fulfillment of the contract to which the personal data subject is a party.

8. Final provisions

8.1. This document will include any changes to the Operator's personal data processing policy. The Policy is valid indefinitely until it is replaced by a new version.

8.2 The current version of the Policy is freely available on the Internet at https://uralsteel.com/policy/.