Backend work

Privacy Policy, Cookies, and Yandex Metrika Web Analytics

How the site processes visitor personal data, cookies, contact requests, and no-marketing AI chat messages.

  • Personal data means any information that relates directly or indirectly to an identified or identifiable site user.
  • Personal data operator means Individual entrepreneur Oleynikov Anatoliy Petrovich, who independently organizes and performs personal data processing and determines the purposes, data scope, and processing actions.
  • Personal data processing means any action or set of actions performed with personal data, including collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction.
  • Automated personal data processing means processing personal data with computing tools.
  • Provision of personal data means actions aimed at disclosing personal data to a specific person or a specific group of persons.
  • Dissemination of personal data means actions aimed at disclosing personal data to an indefinite group of persons.
  • Blocking of personal data means temporary suspension of processing, except where processing is needed to update personal data.
  • Destruction of personal data means actions that make it impossible to restore personal data in a personal data information system or that destroy physical media containing personal data.
  • Depersonalization of personal data means actions that make it impossible to identify the personal data subject without additional information.
  • Personal data information system means a set of personal data contained in databases and the information technologies and technical tools used to process it.
  • Cross-border transfer of personal data means transfer of personal data to the territory of a foreign state, a foreign individual or legal entity, or a foreign public authority.
  • User means any visitor of the Operator site.
  • Site means the Operator website where this Policy is published.
  • Cookies mean small data fragments requested by the site from the user browser. They may reflect settings, technical details, site actions, and session date and time.

1.1. This Privacy Policy, Cookies, and Yandex Metrika Web Analytics Policy is prepared under Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" to protect human and civil rights and freedoms during personal data processing.

1.2. The Policy applies to personal data processed by the Operator: Individual entrepreneur Oleynikov Anatoliy Petrovich.

1.3. The purpose of this Policy is to define how the Operator collects, records, organizes, accumulates, stores, updates, retrieves, uses, transfers, depersonalizes, blocks, deletes, destroys, and protects personal data.

1.4. The Policy is published for unrestricted access on the Site.

1.5. The Policy applies to all personal data that the Operator receives through the Site, contact form, no-marketing AI chat, email, and other contact channels used by the user.

Operator: Individual entrepreneur Oleynikov Anatoliy Petrovich.

  • OGRNIP: 325237500048912;
  • Tax ID: 232908716862;
  • business status: individual entrepreneur.
  • processing is carried out on a lawful and fair basis;
  • processing is limited to specific, predetermined, and lawful purposes;
  • personal data is not processed in a way that is incompatible with the stated purposes;
  • the scope and content of processed data match the stated purposes;
  • the Operator does not process personal data that is excessive for the stated purposes;
  • the Operator takes reasonable measures to keep personal data accurate and up to date where needed for communication;
  • personal data is stored no longer than required by the processing purposes, unless another retention period is required by law, contract, or the Operator lawful interest.
  • receiving and processing contact-form requests;
  • replying to user requests and continuing communication about a task;
  • preparing consultations, estimates, and proposals based on the user request;
  • operating the no-marketing AI chat and generating answers to user messages;
  • forwarding contact details to the Operator when the user asks to continue communication;
  • protecting the Site from spam, automated requests, and abuse;
  • ensuring technical operation, security, and stability of the Site;
  • analyzing page traffic and technical quality after consent to analytics cookies.

The Operator receives personal data directly from the user when the user submits a contact form, writes in the no-marketing AI chat, sends email, or contacts the Operator through other channels.

Primary collection is performed through the Site forms and the Operator email. The Site may include a Telegram link and an optional Telegram field for convenience, but the Operator does not require users to send personal data through foreign messengers.

If the user voluntarily sends personal data through a messenger, the Operator uses it only to the extent needed to respond to the request and continue communication about it.

As a personal data subject, the user may:

  • receive information about the processing of their personal data;
  • request that the Operator update, block, or delete personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or no longer needed for the stated processing purpose;
  • withdraw consent to personal data processing;
  • appeal the Operator actions or inaction to the competent personal data authority or to a court;
  • exercise other rights provided by Russian law.

The user must provide accurate personal data and inform the Operator about updates or changes where this is needed to continue communication.

Persons who provide inaccurate information about themselves, or information about another personal data subject without that subject consent, are responsible under Russian law.

The Operator may receive accurate information from the user, continue processing personal data without consent where the law allows it, and independently determine the measures needed to comply with personal data obligations.

The Operator must organize personal data processing as required by Russian law, respond to personal data subject requests, publish this Policy, and take legal, organizational, and technical measures to protect personal data.

The Operator processes personal data of Site users: public page visitors, people who submit the contact form, no-marketing AI chat users, and people who enter pre-contractual or contractual communication with the Operator.

  • contact form: name or nickname, email address, voluntarily provided phone number, voluntarily provided Telegram username, request text, task details, links, selected page language, request date and time;
  • no-marketing AI chat: user message text, assistant replies, technical session identifier, message date and time, and contact-submission flag;
  • site protection data: hashed IP address for request rate limiting and technical request details;
  • cookies and local storage: Symfony technical cookies, analytics consent settings, and localStorage used to keep the no-marketing chat history in the user browser;
  • Yandex Metrika after analytics consent: page visit data, browser, device, referrer, access time, and other web analytics data generated by the service without sending form or message content.
  • passport or other identity document data;
  • payment details and bank card data;
  • user account logins, passwords, or credentials;
  • special categories of personal data concerning race or ethnicity, political opinions, religious or philosophical beliefs, health, or private life;
  • biometric personal data.

11.1. The Operator processes personal data in accordance with Russian law.

11.2. Personal data is processed with consent of personal data subjects and, where Russian law allows, without such consent.

11.3. Personal data is processed with and without automation, including transfer through the Operator internal systems and over the Internet, while observing Russian legal requirements.

11.4. The Operator performs the following actions with personal data: collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction.

11.5. Personal data is not disclosed to third parties or disseminated without the personal data subject consent unless federal law provides otherwise.

11.6. Consent to process personal data permitted by the personal data subject for dissemination is obtained separately from other consents. The Site is not intended to publish user personal data publicly.

Personal data may be transferred to hosting, email delivery, analytics, technical infrastructure, and AI service providers only to the extent needed to operate the Site, respond to a request, ensure security, and generate a no-marketing AI chat answer.

No-marketing AI chat messages may be transferred to an AI provider compatible with the OpenAI Responses API to generate the assistant answer. Users should not include information in the chat that is not needed to assess the task or respond to the request.

If a specific provider is located outside the Russian Federation, the Operator assesses the necessity and legal basis for cross-border transfer before transferring data and follows Russian legal requirements.

The Operator stores personal data in a form that allows identification of the personal data subject no longer than required by the processing purposes, unless another retention period is required by federal law, contract, or the Operator lawful interest.

Recommended retention periods for the Site: contact-form requests up to 12 months after the last communication; no-marketing AI chat messages up to 90 days if the request has not become business correspondence; technical logs and rate-limit data up to 90 days; analytics data according to Yandex Metrika settings and cookie retention periods.

The Operator updates or corrects personal data when its inaccuracy is confirmed or when the personal data subject sends an update request.

Personal data must be destroyed when the processing purposes are achieved, the need to achieve those purposes is lost, unlawful processing is detected, consent is withdrawn, or retention periods expire, unless the law provides otherwise.

Electronic personal data is destroyed by deleting records from information systems and backup circuits within technically applicable periods. Paper media, if they appear in contractual work, is destroyed in a way that prevents further reading of the data.

The user may send a request related to personal data processing to the Operator email: anatoliy.oleinikov@mail.ru.

The request must include information sufficient to confirm that the Operator processes the personal data and to identify the request: the email used to submit the form, request date, request content, or other details sufficient to find the data.

If a request is sent by a representative of the personal data subject, the request must include information confirming the representative authority.

If the request lacks the required information or the Operator has no lawful basis to provide the requested information, the Operator sends a reasoned refusal.

16.1. The Site uses technical cookies required for security, CSRF protection, and correct form submission.

16.2. The no-marketing AI chat uses the user browser localStorage to store a technical session identifier and chat history on the user device.

16.3. On the first visit, the Site shows a cookies and analytics notice. Yandex Metrika loads only after the user clicks the consent button for analytics cookies.

16.4. The user may decline analytics cookies. If declined, Yandex Metrika does not load, but technical cookies required for security and form operation may still be used.

16.5. Yandex Metrika is used to assess traffic and technical page quality. Webvisor is disabled. The Operator does not send contact-form content, no-marketing AI chat messages, email, phone, or Telegram details to Yandex Metrika.

16.6. Yandex processes web analytics data under its own documents: Cookie Policy, Yandex Metrika Terms of Use, and Yandex Privacy Policy.

The Operator may update this Policy when the data scope, processing purposes, services used, or legal requirements change. A new version of the Policy applies from publication on the Site unless it states otherwise.