III. Procedure of personal data processing
3.1 Meta Joker processes personal data only if at least one of the conditions below is met within the following terms:
With the consent of the personal data subject to the processing of his/her personal data - during the period for which the consent to the processing of personal data was given.
In order to achieve the purposes stipulated by an international treaty of Ukraine or a law, to implement and fulfil the functions, powers and duties assigned to the operator by the Ukrainian legislation - within the period of time established by the relevant international treaties or laws.
If it is necessary to process personal data subject to publication or mandatory disclosure in accordance with federal law - within the period established by the relevant laws.
For the execution of a judicial act, an act of another body or an official subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings - within the period necessary for the execution of the relevant act.
In connection with the person's participation in constitutional, civil, administrative, criminal or arbitration court proceedings - during the period of participation in the relevant proceedings, including the period of appeal (contestation) of judicial acts, except in cases where a longer period of personal data processing is established by applicable law.
To fulfil a contract to which the personal data subject is a party or a beneficiary or guarantor, as well as to conclude a contract at the initiative of the personal data subject or a contract under which the personal data subject will be a beneficiary or guarantor - during the term of validity of such contract, except in cases where a longer period of personal data processing is established by applicable law.
To protect the life, health or other vital interests of the personal data subject, if obtaining the consent of the personal data subject is impossible - until the moment when obtaining the consent of the personal data subject becomes possible or when the relevant grounds threatening the life, health or other vital interests cease to exist (whichever comes first).
To exercise the rights and legitimate interests of the operator or third parties, provided that in doing so the rights and freedoms of the personal data subject are not violated - for the period necessary to exercise the rights and ensure legitimate interests.
The specific term is determined by Meta Joker taking into account the provisions of this Policy, internal documents and local regulations of Meta Joker, as well as the principles of personal data processing and requirements of the current legislation of Ukraine, including the termination of personal data processing upon achievement of specific, predetermined and legitimate purposes of such processing.
3.2 The data specified in Section III shall be processed by Meta Joker:
- with the use of means of automation;
- without the use of automation means.
3.3 When processing personal data, Meta Joker applies legal, organisational and technical measures to ensure the security of personal data in accordance with the Law.
3.4 Meta Joker's personal data processing conditions:
1) processing of personal data is carried out with the consent of the personal data subject to the processing of his/her personal data;
2) processing of personal data is necessary to achieve the purposes stipulated by the international treaty of Ukraine or the law, to perform and fulfil the functions, powers and duties assigned to Meta Joker by the legislation of Ukraine;
3) processing of personal data is necessary for the execution of an agreement to which the personal data subject is a party or beneficiary, as well as for the conclusion of an agreement at the initiative of the personal data subject or an agreement under which the personal data subject will be a beneficiary or guarantor.
4) processing of personal data is necessary for the protection of life, health or other vital interests of the subject of personal data, if it is impossible to obtain the consent of the subject of personal data;
3.5 Meta Joker may entrust the processing of personal data to a third party on the basis of an agreement. The essential condition of such an agreement is the existence of the right of this person to process personal data, the obligation to comply with the principles and rules of personal data processing stipulated by the Law, to observe the confidentiality of personal data, to take the necessary measures aimed at ensuring the fulfilment of the obligations stipulated by this Law.
3.6 Unless otherwise provided for by the legislation of Ukraine, Meta Joker shall cease processing of personal data (in relation to any of the purposes stated above) and destroy them in cases of:
liquidation of Meta Joker;
reorganisation of Meta Joker resulting in termination of its activity;
dissolution of the legal basis for processing personal data and/or achievement of the purposes of personal data processing.
3.7 The specific procedure for destruction of personal data on media containing personal data, including external/removable electronic media, paper media and in personal data information systems, shall be determined by Meta Joker in its internal documents and local regulations.
3.8. Meta Joker, when carrying out the processing of personal data:
takes measures necessary and sufficient to ensure the fulfilment of the requirements of the legislation of Ukraine, internal documents and local normative acts of Meta Joker in the field of personal data;
takes legal, organisational and technical measures to protect personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other unlawful actions in relation to personal data;
appoints a person responsible for the organisation of personal data processing;
issues internal documents defining Meta Joker's policy on personal data processing, local acts on personal data processing, as well as local acts establishing procedures aimed at prevention and detection of violations of the legislation of Ukraine, elimination of consequences of such violations;
familiarise employees with documents in the field of personal data, including the requirements for personal data protection, and train these employees;
performs internal control and (or) audit of compliance of personal data processing with the requirements of the legislation of Ukraine and normative legal acts adopted in accordance with it, other requirements to personal data protection, this Policy, internal documents and local normative acts of Meta Joker in the field of personal data;
publishes or otherwise provides unrestricted access to this Policy;
stops processing of personal data and destroys them in cases stipulated by the legislation of Ukraine;
performs other actions stipulated by the legislation of Ukraine in the field of personal data.