Legal document

Personal Data Processing Policy

Effective from 10 July 2026Updated 07 September 2026

This Policy sets out how the personal data of users of the artevrika.com website (the international version of artevrika.ru; hereinafter — the Site) is processed and protected, and has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (Russia).

1. The personal data controller

The controller (operator) who organises and carries out the processing of personal data is ИП Гусев Алексей Фёдорович, TIN (INN) 862202341335, OGRNIP 319665800256901 (date of registration 26.12.2019, registering authority: Инспекция Федеральной налоговой службы по Верх-Исетскому району г. Екатеринбурга), address for enquiries: 620014, Свердловская область, г. Екатеринбург, п. Базовый, д. 37.

On any matter relating to the processing of personal data, and in order to exercise their rights, a data subject may contact the controller at the following email address: privacy@artevrika.ru.

2. Key definitions

  • Personal data — any information relating to a directly or indirectly identified natural person (the data subject).
  • Processing of personal data — any operation performed on personal data: collection, recording, systematisation, accumulation, storage, updating, use, transfer, blocking, deletion and destruction.
  • User — any visitor to the Site.

3. What data is processed

The controller processes the following categories of data:

  • data that the user provides voluntarily through the forms on the Site: name, telephone number, email address, city and message (a description of the project);
  • technical data collected automatically when the Site is used: IP address, cookies, browser and device information, the date and time of the request, the referral source and actions taken on the Site (by means of web analytics systems).

The controller does not process special categories of personal data (concerning race, ethnicity, health, or political and religious beliefs) or biometric data.

Consent to the processing of personal data is given by the data subject through an affirmative action — by ticking the relevant box in the form before submitting it. Visiting the Site does not in itself constitute consent to the processing of personal data.

By submitting data through a form, the user confirms their agreement with this Policy and gives consent to the processing of the personal data they have provided.

5. Purposes of processing

Personal data is processed solely for the following purposes:

  • handling enquiries and requests received through the forms on the Site;
  • communicating with the user, providing consultations and agreeing the terms on which services are to be provided;
  • sending replies, commercial proposals and information at the user’s request;
  • improving the operation of the Site and analysing its traffic (in anonymised form, by means of web analytics).

6. Lawful bases for processing

  • the consent of the data subject to the processing of their personal data;
  • Federal Law No. 152-FZ “On Personal Data” and other regulatory instruments of the Russian Federation;
  • contracts concluded between the controller and the data subject.

7. Cookies and technical data

When the Site is used, cookies, the IP address and other technical data are collected automatically. They are used to keep the Site working, to remember settings and to analyse traffic. Further details are set out in the Cookie Policy published on the Site. The user may disable cookies in their browser settings.

8. Retention periods for personal data

Personal data is stored for no longer than the purposes of processing require:

  • data from enquiries and correspondence — for 3 (three) years from the user’s last contact, unless a different period is prescribed by law or by contract;
  • technical data and web analytics data — in anonymised form, for the period set by the analytics services used (as a rule, up to 24 months);
  • in all cases — until the data subject withdraws their consent to processing.

Once the purposes of processing have been achieved, or upon withdrawal of consent, personal data is destroyed or anonymised within the periods prescribed by the legislation of the Russian Federation.

9. Transfer of personal data to third parties

The controller does not sell or disclose personal data to third parties, except in the cases provided for by law. In order to achieve the purposes of processing, the controller may entrust the processing of data to parties that support the operation of the Site and communications with users (the hosting provider, the email delivery service and web analytics systems), in compliance with the requirements of Law No. 152-FZ and on terms of confidentiality.

Cross-border transfer

Where services are used whose servers are located outside the Russian Federation, personal data may be transferred across borders in compliance with the requirements of Article 12 of Federal Law No. 152-FZ. The controller ensures that data is transferred only to states that provide adequate protection of the rights of data subjects, or where the data subject has given consent.

10. Rights of the data subject

The data subject has the right to:

  • obtain information concerning the processing of their personal data;
  • require that personal data be rectified, blocked or erased where it is incomplete, out of date, inaccurate or processed in breach of the law;
  • withdraw consent to the processing of personal data;
  • lodge a complaint about the controller’s actions with the authority responsible for the protection of the rights of data subjects (Roskomnadzor, the Russian supervisory authority) or with a court.

To exercise these rights, the data subject should send a request to privacy@artevrika.ru. The controller considers the request and provides a reply within 30 (thirty) days of receiving it.

11. Security of personal data

The controller takes the legal, organisational and technical measures necessary to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying and dissemination.

12. Amendments to this Policy

The controller may amend this Policy. A new version takes effect from the moment it is published on the Site, unless the new version provides otherwise. This English text is a translation provided for convenience; in the event of any discrepancy, the Russian version of this Policy prevails.

Version of 10 July 2026.