Documents
Personal data processing policy
Revision of
This is an informational translation. In case of any discrepancy, the Russian version prevails.
1. General provisions
1.1. This Policy is drawn up in accordance with Federal Law No. 152-FZ of
27 July 2006 "On Personal Data" and sets out how personal data is processed and
protected when using the website dekart-digital.ru (the "Site").
1.2. Personal data operator: Rinat F. Gizatullin, TIN 561014582169, status — self-employed (professional income tax regime under Federal Law 422-FZ), registered in the Russian Federation (Orenburg).
1.3. By submitting a form on the Site and ticking the consent box, the User confirms agreement with this Policy and consents to the processing of their personal data on the terms set out below.
1.4. Consent may be withdrawn at any time by writing to the address given in section 6.
2. What data we collect
We collect only what the User provides in the contact form, plus minimal technical details of the visit.
| Category | Data | Basis and purpose |
|---|---|---|
| Contact details | Name, phone number or Telegram handle, email address if provided | Consent of the data subject. Responding to the enquiry, preparing a proposal, concluding and performing a contract |
| Enquiry content | The text of the "About the project" field, the selected service | Consent of the data subject. Understanding the task before the first conversation |
| Technical details of the submission | IP address, User-Agent, the page the form was sent from, date and time | Legitimate interest of the operator: protection against automated submissions and confirmation that an enquiry was made |
| Anonymised web analytics | Anonymised visit data collected by Yandex Metrica and Google Analytics, including via cookies | Legitimate interest of the operator: assessing site usability and the effectiveness of advertising sources |
1.5. Categories of data subjects: visitors who contact us through the site's forms; candidates responding to vacancies; representatives of counterparties at the negotiation stage.
1.6. Legal bases for processing: consent of the data subject (art. 6(1)(1) of 152-FZ); conclusion and performance of a contract to which the subject is a party (art. 6(1)(5)); the Operator's legitimate interests (art. 6(1)(7)) — in respect of protection against automated submissions and assessment of site usability.
3. What we do not collect
- We do not request passport data, health information, political or religious beliefs, or any other special category of personal data.
- We do not accept payments on the Site and do not process card data.
- We do not buy contact databases from third parties and do not message anyone who has not approached us first.
4. Retention and storage
4.1. Submissions from the Site's forms are delivered to the managers' corporate Telegram channel and to the operator's CRM, and are recorded in a service journal on the operator's server. The servers are located in the Russian Federation.
4.2. Retention periods:
- contact details and enquiry content — up to 3 years from the last interaction, or until consent is withdrawn, whichever is sooner;
- technical details of the submission (IP, User-Agent) — up to 12 months;
- data required to perform a concluded contract and for tax accounting — for the period established by law.
4.3. On expiry of the retention period, or on withdrawal of consent, the data is destroyed or anonymised.
4.4. Localisation. Recording, systematisation, accumulation, storage, correction and retrieval of the personal data of citizens of the Russian Federation is carried out using databases located in the Russian Federation (art. 18(5) of 152-FZ). The Site's servers are in Russia.
4.5. No cross-border transfer of personal data takes place.
4.6. Automated decision-making. No decisions producing legal effects for the User are taken solely on the basis of automated processing.
5. Transfer to third parties
5.1. Data may be processed by the following parties, strictly to the extent required for the stated purposes:
- Telegram Messenger LLP — delivering the new-enquiry notification to a manager;
- the CRM provider — storing and processing the enquiry record;
- Yandex LLC and Google LLC — anonymised web analytics;
- the hosting provider — hosting the Site's servers.
5.2. Data is not transferred or sold to advertising networks, marketing agencies or any other party for their own use.
5.3. Disclosure to state authorities occurs only on lawful demand, in the manner established by the legislation of the Russian Federation.
6. Rights of the data subject
Under Article 14 of Federal Law No. 152-FZ, the User has the right to:
- obtain information on the existence, composition and purposes of processing of their data;
- require their data to be corrected, blocked or destroyed;
- withdraw consent to the processing of personal data;
- appeal the operator's actions to Roskomnadzor or through the courts.
Requests should be sent to rene.dekart.gold@gmail.com, quoting the contact details used in the original enquiry. The response time is no more than 30 calendar days from receipt.
7. Cookies and web analytics
7.0. Cookie use and how analytics consent is obtained are described in a separate document — the Cookie Policy. The text of the consent given when submitting a form is published separately as the Consent to personal data processing. Site usage terms are in the Terms of use.
7.1. The Site uses cookies necessary for its operation, and cookies from web analytics systems (Yandex Metrica, Google Analytics).
7.2. Analytics cookies are set only after the User explicitly consents through the banner shown on the first visit. Until consent is given, the Yandex Metrica and Google Analytics counters are not loaded.
7.3. The User may withdraw consent at any time by clearing site data in the browser, block cookie storage entirely, or disable Yandex Metrica collection using the official opt-out tool. Declining analytics cookies does not affect access to the Site content.
8. Security measures
8.1. Data in transit between the User's browser and the Site is protected by TLS (HTTPS).
8.2. Server access is restricted to SSH keys; password authentication is disabled.
8.3. Only authorised staff who need it to perform their duties have access to submitted enquiries.
8.4. The Site's forms are protected against automated submission; technical indicators of automation are recorded and are not used to profile Users.
9. Changes to this Policy
9.1. The operator may amend this Policy. The current version is always
available at dekart-digital.ru/en/privacy.
9.2. The date of the latest revision is stated at the top of the document. Material changes affecting the rights of data subjects take effect no earlier than 10 days after publication.