Processing of personal data - any operation or set of operations which is performed upon personal data whether or not by automatic means such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction
Principles of Data Processing
- Personal data shall be processed fairly and lawfully without violating the dignity of data subjects.
- Personal data must be adequate, relevant and not excessive in relation to the purposes for which they are collected and /or further processed.
- Personal data are collected only for specified, explicit and legitimate purposes, and may not be further processed in a way incompatible with these purposes, unless otherwise provided by law.
- Personal data must be accurate and kept up to date. Prior to collecting personal data the data controller verifies the accuracy of personal data by examining an identity document or any other suitable public document of the data subject.
- Personal data may only be stored for as long as necessary to achieve the purpose for which they were collected or further processed. On completion of the purpose of processing, personal data shall be erased, deleted, destroyed, blocked or anonymised, unless otherwise provided by the Law on Archive Material and Archives or any other relevant law.