Processing of personal data

Question

Law in IT

How to stop the processing of personal data in an arbitrary company?
I signed an agreement with consent to data processing, I broke the agreement, but the data remained, now they are getting calls.
Are they required by law to stop processing upon application, or how is it generally done?

Answer 1

On the face of a violation of the principles of processing PD, part 2 of Art. 6 of the Law - one purpose is declared, and the data is also used for another (they call it, apparently they are advertising something). In a contractual relationship, one of the parties to which is the PD subject, PD processing is permitted only for the performance of the contract. Upon termination of the contract - PD and the contract itself must be stored for 3-5 years. this is the primary document for reporting and there is still a statute of limitations. At the same time, except for lying dead weight, PD cannot be used in any other way.
Part 1 Art. 14 establishes the right of the subject of PD to terminate the processing of PD if the purposes of processing are violated. The actions of the operator are regulated by Art. 21 of the Law i.e. he is obliged to stop calling you and delete the personal data in the database for calling, but he is not obliged to destroy the contract itself and any other data related to this.
It turns out that you can personally process it, or send a request (part 3 of article 14) to the operator with a request to stop illegal processing of personal data. Either file a complaint about the violation of rights with the local Roskomnadzor, or immediately go to court (Article 17 of the Law). Similarly, it is worth doing if your rights are violated when processing PD or the operator does not want to stop processing.
The link is given to the inactive version of the law "On Personal Data".

Answer 2

Roskomnadzor.
www.pd.rsoc.ru/faq/faq2.htm

Answer 3

Another story happened to me: I
refilled cartridges in company A (great company, just super) for many years.
Recently, one hell of a call and starts advertising here: they say we come from company A, we created a new company B, it’s all so young, enterprising, with even lower prices and better service (honestly, better than in A, so there’s nowhere) .
I ask: where is the phone from and what is my name - he - they say I worked with clients in company A. It is clear that company A violated the law, and the data “leaked” from company A “to the side”.
BUT! the question is (didn't read the law) - is it easy to squeeze company B? Do I just contact her in writing with a request to delete the data, since an agreement was not concluded with them for the processing of my data?
and if they don’t want to, then go to court/Roskomnazdor?