Personal Data Processing Policy

1. General provisions

This Policy explains how personal data of visitors to basis-platform.ru and individuals submitting requests through its forms is processed under Russian Federal Law No. 152-FZ of 27 July 2006 on Personal Data. The controller and contact details are listed above.

It covers the public website and subsequent communication about a request.

2. Request data

When completing the form, you must provide your first and last name, email address, phone number, country, product of interest, organization name and job title. You may optionally add a patronymic, solution of interest, preferred contact method and message. The request records its purpose: requesting a demonstration, requesting pricing or discussing your requirements.

The request is stored together with its ID, date and time of receipt, record of consent, language of the consent text and notification-delivery records.

Do not provide health information, other special categories of personal data, biometric data or third-party data without a lawful basis.

3. Technical data

To operate and secure the website, we process IP addresses, technical information about requests and connections, and identifiers used to protect forms against duplicate and automated submissions. Information about website operation and errors may be stored in technical logs.

4. Purposes and legal bases

Request data is processed on the basis of your separate consent to review your enquiry, clarify your requirements, arrange a demonstration, provide pricing information and prepare a response or proposal.

Technical data is processed to the extent necessary to operate and protect the website, based on the controller’s legitimate interests and subject to your rights and freedoms.

Submitting a request does not constitute consent to advertising emails. These require separate consent.

5. Processing and disclosure

Data is processed with and without automated tools through collection, recording, organization, accumulation, storage, correction, retrieval, use, granting access, blocking of personal data, deletion and destruction.

Access is limited to authorized staff and, where necessary, hosting and email providers under agreements requiring confidentiality and data protection. Data may be disclosed to public authorities where there is a lawful basis. It is not made available to the general public.

6. Cookies and analytics

Your preferences are stored in your browser until its storage is cleared or the site preferences are updated. This record is not sent to the controller.

First-party analytics helps us understand usage and improve the website. It starts after you save your choice with “Analytics” enabled. You can withdraw permission in cookie settings independently of consent for your request.

Analytics processes page views, clicks and form events, page category, product, solution, language, request purpose, error type and approximate country derived from IP. Only aggregate counters are stored, for up to 90 days. Analytics does not store IP addresses, form contents or individual browsing histories. Data relating to a specific visitor cannot be isolated from the counters. Third-party analytics services and advertising trackers are not used.

7. Retention and destruction

Request data, correspondence and related technical identifiers are retained until the enquiry is resolved, for no longer than 12 months (365 days) after submission, or until consent is withdrawn, unless another lawful basis applies. Technical logs are retained no longer than necessary to operate and protect the website.

When the purpose is fulfilled or consent is withdrawn, data is destroyed within 30 days unless the law provides otherwise. Inaccurate or unlawfully processed data is corrected, blocked or destroyed within the periods specified in Article 21 of Law No. 152-FZ. These requirements also apply to copies in email correspondence and backups, and to data held by processors.

8. Data protection and location

The controller takes organizational and technical measures to protect data, including access restrictions, secure connections and protection against unauthorized access.

When collecting data of Russian citizens, the controller must comply with the database localization requirements of Article 18(5) of Law No. 152-FZ. Cross-border transfers are permitted only if the requirements of Article 12 are met.

9. Your rights

You may obtain information about the processing of your data, request its correction, blocking or destruction where there are grounds to do so, withdraw consent and lodge a complaint with Roskomnadzor or bring a claim before a court.

Send your enquiry to the controller’s email or postal address shown above. Include the contact details from your request and its ID, if known. Identity verification may be needed to protect your data. Responses are provided within the periods established by Law No. 152-FZ.

10. Updates

The current policy is published on this page. If changes require new consent from the user, the controller requests it separately.