Personal Data Processing Policy
Updated: August 1, 2026
This Policy describes which personal data ИП Фамилия И.О., ИНН 000000000000 (ИНН is the Russian taxpayer identification number; hereinafter—the Operator) processes on the website https://itsoftdigital.com, for what purposes, how long the data is kept and how the data subject can manage it.
01The Operator and contacts
Personal-data operator (the term used by 152-FZ, Russia’s Federal Law on Personal Data): ИП Фамилия И.О., ИНН 000000000000.
Address for enquiries about data processing: [email protected].
The person responsible for organising the processing of personal data is appointed by an order of the Operator. Enquiries are considered within the period established by law.
02What data is processed
The Operator processes only the data the subject provides themselves by filling in forms on the website:
- the name or other form of address the subject has given;
- an email address;
- a phone number—if the subject has given it;
- a Telegram handle—if the subject has given it;
- company name, field of activity, size, website address;
- the content of the enquiry: description of the task, budget and time frame, attached files;
- technical connection data: IP address, time of the enquiry, browser type.
The Operator does not process special categories of personal data or biometric personal data. Data of minors is not deliberately collected.
03Purposes of processing
- replying to an enquiry and preparing a commercial proposal;
- concluding and performing a contract for the provision of services;
- considering an application for a vacancy;
- sending informational materials—only where separate consent has been given;
- performing the obligations imposed on the Operator by law.
The data is not used to take legally significant decisions solely on the basis of automated processing.
04Legal grounds
Processing is carried out on the basis of the consent of the personal-data subject, of a contract to which the subject is a party, and of the requirements of the legislation of the Russian Federation, including Federal Law No. 152-FZ “On Personal Data”.
05Retention periods
- enquiries that did not lead to a contract—1 year from the date of the last contact;
- data relating to concluded contracts—for the period established by law for the corresponding documents;
- applications for vacancies—6 months, unless the subject has agreed to longer storage;
- an address used for the mailing—until consent is withdrawn.
Once the period has expired, the data is deleted or depersonalised. Withdrawal of consent entails termination of the processing, except where the law obliges the Operator to keep documents.
06Place of processing and transfer to third parties
The collection, recording, systematisation, accumulation and storage of the personal data of citizens of the Russian Federation are carried out using databases located in the territory of the Russian Federation.
The Operator may involve contractors in the processing—a hosting provider, a mailing service, a payment provider—on the basis of contracts that provide for confidentiality and data-protection requirements. The list is provided on request.
Personal data is not sold and is not transferred to third parties for marketing purposes.
07Rights of the subject
- to obtain confirmation that processing is taking place and information about it;
- to obtain a copy of the data being processed;
- to demand that inaccurate or unlawfully obtained data be corrected, blocked or destroyed;
- to withdraw consent to the processing;
- to appeal against the Operator’s actions to Роскомнадзор (Roskomnadzor, the Russian data-protection regulator) or in court.
A request is sent to [email protected] and must make it possible to identify the subject. A reply is provided within the period established by law.
08Protective measures
- transmission of data over a secure connection (HTTPS);
- access to the data restricted to the employees whose duties require it;
- logging of access to enquiries;
- backups and integrity control;
- regular updating of the software in use.
09Changes to the Policy
The Operator has the right to amend the Policy. The version in force is always available at its address on the website; the date of the last change is stated at the beginning of the document.
Questions about this document: [email protected]