3.1. The Operator has the right to:
— receive accurate information and/or documents containing personal data from the data subject;
— in the event of the data subject withdrawing consent for the processing of personal data, as well as submitting a request to cease the processing of personal data, the Operator has the right to continue processing personal data without the data subject's consent if there are grounds specified in the Personal Data Law;
— independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations specified in the Personal Data Law and the regulations adopted in accordance with it, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator is obliged to:
— provide the data subject with information related to the processing of their personal data upon request;
— organize the processing of personal data in accordance with the procedure established by the current legislation of the Russian Federation;
— respond to requests and inquiries from data subjects and their legal representatives in accordance with the requirements of the Personal Data Law;
— provide the authorized body for the protection of the rights of data subjects with the necessary information upon the request of this body within 10 days from the date of receipt of such a request.;
— publish or otherwise ensure unlimited access to this Personal Data Processing Policy.;
— take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as from other unlawful actions related to personal data;
— cease the transfer (dissemination, provision, access) of personal data, stop processing, and destroy personal data in the manner and cases specified in the Personal Data Law;
— fulfill other duties provided for by the Personal Data Law.