Personal Data Processing Policy

This Policy has been prepared in accordance with Federal Law No. 152-FZ of July 27, 2006, On Personal Data, and applies to the DEVEND website at https://devend.tech, the enquiry form, correspondence related to submitted enquiries and the associated technical processes.

Visiting the website does not in itself constitute consent to data processing where consent is required. Such consent is provided through a separate affirmative action: selecting the checkbox in the form or choosing a cookie category.

The personal data controller is Individual Entrepreneur Daniil Olegovich Antipov, operating under the DEVEND name and determining the purposes and methods of data processing on this website.

For personal data enquiries and withdrawal of consent, contact support@devend.tech.

The data is limited to the information necessary to operate the website, handle enquiries and provide analytics selected by the visitor.

• Enquiry form data: first name, surname if provided, telephone number, email address and a description of the project or task.
• Technical data: analytics cookie consent status, a random technical session_id and, after analytics consent is given, the event date and time, page address, event type and interaction element. We do not intentionally collect IP addresses, browser fingerprints or device information.
• Consent data: selected cookie categories, the version and time at which preferences were saved, the consent action and the page on which it was performed.
• After analytics consent is given, website interaction data may be processed, including the page path, event type, interaction element and technical event parameters.
• The website does not use browser fingerprinting, collect marketing cookies or seek to collect special categories of personal data or biometric personal data.

• Receiving and processing enquiries, contacting the applicant, clarifying the task, preparing a proposal and conducting negotiations.
• Maintaining website availability and security, protecting the form from spam and abuse, and diagnosing technical errors.
• Saving and applying the visitor's selected cookie preferences.
• Assessing website usage and improving its content and interface, only where consent to analytics cookies has been given.

• Enquiry and contact data is processed on the basis of the data subject's consent, expressed by selecting a separate checkbox before submitting the form.
• Analytics is processed on the basis of separate consent to analytics cookies, which may be withheld or withdrawn later.
• Necessary technical processes and website protection are carried out in pursuit of the Controller's rights and legitimate interests, provided that the rights and freedoms of the personal data subject are not infringed.
• If an enquiry results in a contract, processing may also be necessary to enter into and perform that contract at the data subject's initiative and to comply with obligations established by law.

Processing is primarily automated and may include collection, recording, organisation, accumulation, storage, updating, retrieval, use, disclosure to authorised persons, restriction, deletion and destruction of data.

DEVEND does not sell personal data, publish it openly, use it for advertising mailings or make solely automated decisions based on it that have legal consequences for visitors.

The website uses a necessary cookie to save preferences and analytics mechanisms that are enabled only with the visitor's consent.

Preferences can be changed or withdrawn at any time using the cookie settings button at the bottom of the website. Rejecting analytics does not restrict access to the website's core content.

• The necessary dio_cookie_consent cookie stores the visitor's choice for one year and cannot be disabled because it is required to save preferences.
• The server receives the accept_cookie consent status and creates a random technical session_id to associate permitted analytics events within one session. The identifier contains no form data and is not generated from an IP address, browser fingerprint or device information.
• Analytics events are sent only after analytics consent is given. Without such consent, the relevant events are not transmitted.

Data is accessible only to persons who require it for the stated purposes. The Controller applies organisational and technical measures to protect data against unauthorised access, alteration, disclosure and destruction.

The initial recording and storage of personal data belonging to citizens of the Russian Federation must use databases located within the Russian Federation. Cross-border transfers are permitted only after the applicable legal requirements have been met.

• Data may be processed by hosting, infrastructure and communications providers on the Controller's behalf, subject to contractual confidentiality and data protection requirements.
• Data may be disclosed to government authorities and other persons in the cases and according to the procedures established by the laws of the Russian Federation.

When the purpose of processing has been achieved, consent is withdrawn and no other legal basis applies, or the data is no longer needed, processing ceases and the data is destroyed within the periods prescribed by law.

• Data from an enquiry that does not result in a contract is stored for no longer than one year after the last interaction with the applicant.
• Technical security and error logs are stored for no longer than 30 days, unless longer storage is required to investigate an identified incident.
• Analytics events are stored for no longer than 12 months or deleted earlier once the purpose of processing has been achieved.
• Records confirming consent or its withdrawal may be stored for the duration of the consent and for the period necessary to demonstrate the lawfulness of processing.

Personal data subjects have the right to:

• obtain information about the processing of their personal data;
• request the correction, restriction or deletion of incomplete, outdated, inaccurate or unlawfully processed data;
• withdraw consent to processing and separately change consent to analytics cookies;
• challenge the Controller's actions or inaction before Roskomnadzor or a court and use other remedies provided by law.

Requests, withdrawals of consent or demands to delete data can be sent to support@devend.tech. The message should include information that allows the relevant enquiry or record to be located and should clearly state the request.

To prevent disclosure to an unauthorised person, the Controller may request reasonable evidence that the enquiry was submitted by the personal data subject or their representative.

This Policy may be updated when legislation or website processes change. The current version is published on this page and takes effect from the date stated in it.