Order approving the personal data processing policy

Employer / organization​ No. Document number​ dated Document date

Pursuant to Article 18.1 of Federal Law No. 152-FZ (ФЗ) dated 27.07.2006, I hereby order: 1. Approve the personal data processing policy: Appendix: policy title, version, date and number of sheets​. Bring it into effect from Policy effective date. 2. Assign Person responsible for publication: full name and position​ to ensure, by Deadline for providing access, unrestricted access to the policy and information on the data protection requirements implemented. Publish the policy at Policy publication URL​; provide access through the network, including on the collection pages: Online data collection pages/channels​. 3. Check that the published version remains current when processing activities change. Ensure employees who process data familiarize themselves with the approved policy and internal documents applicable to them. 4. Person responsible for implementation: full name and position​ shall, by Deadline for acknowledgment by employees processing data, ensure employee acknowledgment and align the instructions, consent forms and notices in use with the approved policy. A published policy does not replace a legal basis for processing, consent where required, or notification of the authorized authority. 5. Initiate a policy review when purposes, data items, recipients, systems used or processing methods change. Retain the approved version and publication records; prevent simultaneous use of conflicting versions. The public text must not disclose passwords, keys or protection details that create a security threat. I retain oversight of implementation.

Signatory’s position​ ______________ / Head’s full name​ /