The company takes the measures required and sufficient to ensure the fulfillment of the obligations provided for by the international law 'On Personal Data Protection' and the regulatory legal acts adopted in accordance therewith. The company independently determines the composition and list of measures, required and sufficient to ensure such obligations fulfillment. Only authorized employees of the Company have access to personal data. All the Company employees who have access to personal data must adhere to a policy to ensure confidentiality and protection of personal data. In order to ensure the confidentiality of information and the protection of personal data, the Company maintains an appropriate IT environment and takes all measures required to prevent unauthorized access.