О РЕАДМИССИИ. Соглашение. Правительство РФ. 21.09.09

Article 18
                        Personal data protection
     
     The  communication of personal data shall only take place if such
communication is necessary for the implementation of this Agreement by
the  competent  authorities  of the Russian Federation or of the Swiss
Confederation  as  the  case may be. When communicating, processing or
treating personal data in a particular case, the competent authorities
of  the  Russian  Federation  shall  abide  by  the legislation of the
Russian  Federation,  and  the  competent  authorities  of  the  Swiss
Confederation  shall  abide  by  the national legislation of the Swiss
Confederation. Additionally the following principles shall apply:
     a) personal data must be processed fairly and lawfully.
     b)  personal  data  must be collected for the specified, explicit
and  legitimate purpose of implementing this Agreement and not further
processed in a way incompatible with that purpose.
     c)  personal data must be adequate, relevant and not excessive in
relation  to  the  purpose for which they are collected and/or further
processed;  in particular, personal data communicated may concern only
the following:
     -  the  particulars of the person to be readmitted (e.g. surname,
given  name,  any  previous  names, other names used/by which known or
aliases,  date  and  place  of  birth,  sex,  current and any previous
nationality);
     -  identity  card  or passport (type, number, period of validity,
date of issue, issuing authority, place of issue);
     - stop-overs and itineraries;
     -   other  information  needed  to  identify  the  person  to  be
readmitted or to examine the readmission requirements pursuant to this
Agreement.
     d)  personal  data must be accurate and, where necessary, kept up
to date.
     e)   personal   data  must  be  kept  in  a  form  which  permits
identification of data subjects for no longer than it is necessary for
the  purpose  for  which the data were collected or for which they are
further processed.
     f)  Both, the competent authority communicating personal data and
the  competent  authority  receiving  personal  data, shall take every
reasonable step to ensure as appropriate the rectification, erasure or
blocking  of  personal  data where its processing does not comply with
the  provisions  of  lit.  c)  and  d)  of this Article, in particular
because  that  data  are not adequate, relevant, accurate, or they are
excessive  in relation to the purpose of processing. This includes the
notification of any rectification, erasure or blocking of such data to
the other Party.
     g)  Upon request, the competent authority receiving personal data
shall  inform  the  competent authority communicating personal data of
the  use  of  the  communicated  data  and  of  the  results  obtained
therefore.
     h)  Personal  data  may  only  be  communicated  to the competent
authorities.  Further communication to other bodies requires the prior
consent of the competent authority communicating personal data.
     i)  The  competent  authority communicating personal data and the
competent  authority  receiving personal data are under the obligation
to  make a written record of the communication and receipt of personal
data.