1. General provisions
This Policy sets out the procedure and conditions for processing the personal data of users of the estesis.tech website (the Website) and the measures taken to protect it by Estesis Limited Liability Company (Estesis LLC, ООО «Эстесис», TIN 2221244802, PSRN 1192225025266, address: 36 Gogolya St., Barnaul, Altai Krai, 656056, Russia) — the Operator.
The Policy applies to all personal data the Operator receives through the Website: request and subscription forms, correspondence by email and in Telegram, and technical data collected automatically when the Website is visited.
The Policy is publicly available at estesis.tech/personal-data. By submitting a form on the Website, the user confirms that they have read the Policy and consent to the processing of their personal data on the terms set out in it.
2. Key terms
- Personal data — any information relating directly or indirectly to an identified or identifiable individual (the personal data subject).
- Personal data processing — any action with personal data: collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, anonymization, blocking, deletion and destruction.
- User — any person who visits the Website or uses its forms.
- Cookie — small files that a browser stores on the user's device and sends to the Website on subsequent visits.
3. What data is processed and why
A request to discuss a task (the "Tell us about the project" window and the "Discuss your project" buttons). Data: name, company and position, work email, phone or Telegram username, project description and selected parameters (what is needed, stage, where the system will run, timeline), attached file. Purpose: to respond to the request, arrange a call, prepare a proposal and an estimate, conclude and perform a contract.
Subscription to blog reviews. Data: email address. Purpose: to send blog materials. You can unsubscribe at any time.
Correspondence via sales@estesis.tech and support@estesis.tech and the @estesis_sale_bot Telegram bot. Data: name, contacts and information the user provides. Purpose: to respond to the request.
Technical visit data. Data: IP address, browser and device details, cookies, addresses of pages viewed, referral source, time and actions on pages. Collected by the Yandex Metrica web analytics service. Purpose: traffic statistics, improving the operation and content of the Website. This data is used in aggregated form and is not linked by the Operator to data from the forms.
The Operator does not process special categories of personal data (racial or ethnic origin, political views, religious or philosophical beliefs, health, intimate life) or biometric personal data of Website users. Please do not include such information in forms or attached files.
4. Legal grounds for processing
- the user's consent to the processing of personal data (clause 1, part 1, article 6 of Law No. 152-FZ), given by submitting a form on the Website or by continuing to use the Website with cookies enabled;
- the conclusion and performance of a contract to which the user or the company they represent is a party (clause 5, part 1, article 6 of Law No. 152-FZ);
- the Civil Code of the Russian Federation, Federal Law No. 152-FZ "On Personal Data" and Federal Law No. 149-FZ "On Information, Information Technologies and Information Protection".
5. Conditions and methods of processing
The Operator processes personal data with and without automation tools. Processing is limited to the predefined purposes listed in section 3; data excessive for these purposes is not collected.
Recording, systematization, accumulation, storage, clarification and retrieval of personal data of citizens of the Russian Federation are carried out using databases located in the Russian Federation.
To send requests and emails, the Operator uses the email service of Yandex LLC; for web analytics, the Yandex Metrica service (Yandex LLC). Data processed by Yandex Metrica is handled in accordance with its terms of use and the privacy policy of Yandex LLC.
The Operator does not sell personal data and does not transfer it to third parties, except in the cases specified in the Policy and where transfer is required by the legislation of the Russian Federation. No cross-border transfer of personal data takes place.
6. Processing and retention periods
Personal data is processed until the purposes of processing are achieved or until the user withdraws consent, unless otherwise provided by a contract or the legislation of the Russian Federation. Data needed to perform a contract is kept for the term of the contract and for the periods established by law for keeping documents.
Once the purposes of processing are achieved or consent is withdrawn, personal data is destroyed or anonymized within 30 days, unless a different period is established by law.
7. Cookies and web analytics
The Website uses cookies required for its operation and Yandex Metrica cookies: they help us understand which pages are useful to visitors and make the Website more convenient. Metrica collects anonymized statistics, including with its Webvisor technology, which records actions on pages (scrolling, clicks, cursor movements).
The user can disable or delete cookies in browser settings and block data collection by Metrica with the official opt-out tool: yandex.ru/support/metrica/general/opt-out.html. Some Website features may then not work correctly.
8. User rights
The user has the right to:
- receive information about the processing of their personal data: purposes, methods, periods, the data involved and the persons to whom it may be transferred;
- demand that their personal data be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose;
- withdraw consent to the processing of personal data;
- unsubscribe from mailings;
- appeal against the actions or inaction of the Operator to the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor) or in court.
9. How to send a request or withdraw consent
A request or withdrawal of consent should be sent to sales@estesis.tech with the subject "Personal data", or by post to: Estesis LLC, 36 Gogolya St., Barnaul, Altai Krai, 656056, Russia. Please state how to contact you and details by which your data can be found (for example, the email address given in the request).
The Operator responds to a request within 10 working days of receiving it. This period may be extended by no more than 5 working days, with the user notified of the reasons.
10. Protection of personal data
The Operator takes legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, disclosure and other unlawful actions:
- appoints a person responsible for organizing personal data processing;
- limits access to personal data to employees who need it to perform their duties;
- transmits Website form data over the secure HTTPS protocol;
- uses information security tools and monitors the measures taken.
11. Final provisions
The Operator may amend the Policy. A new version takes effect from the moment it is published on the Website, unless it states otherwise. The current version is always available on this page.
Questions about the Policy can be sent to sales@estesis.tech. The use of information on the Website is also described in the Privacy Policy.