3.1. The Operator has the right to:
— receive reliable information and/or documents containing personal data from the personal data subject;
— if the personal data subject withdraws consent to the processing of personal data, or submits a request to terminate the processing of personal data, the Operator shall have the right to continue processing personal data without the consent of the personal data subject if there are grounds specified by the Personal Data Law;
— independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations provided for by the Personal Data Law and the regulatory legal acts adopted pursuant thereto, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator shall be obliged to:
— provide the personal data subject, upon request, with information relating to the processing of their personal data;
— organize the processing of personal data in accordance with the procedure established by the current legislation of the Russian Federation;
— respond to requests and inquiries from personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Law;
— provide the authorized body for the protection of the rights of personal data subjects, upon its request, with the necessary information within 10 days from the date of receipt of such request;
— publish or otherwise ensure unrestricted access to this Personal Data Processing Policy;
— implement legal, organizational, and technical measures to protect personal data against unauthorized or accidental access, destruction, modification, blocking, copying, provision, dissemination, as well as other unlawful actions involving personal data;
— cease the transfer (dissemination, provision, access) of personal data, cease processing, and destroy personal data in the manner and in the cases provided for by the Personal Data Law;
— perform other obligations provided for by the Personal Data Law.