Policy regarding the processing of personal data

Revision dated July 22, 2026

1. General provisions

1.1. This Policy defines the procedure for processing and measures to protect personal data by the semafor web studio (hereinafter referred to as the Operator) when using the site https://semaforstudio.ru.

1.2. The policy is drawn up in accordance with the Constitution of the Russian Federation, Federal Law dated July 27, 2006 No. 152-FZ “On Personal Data” and regulatory legal acts adopted in accordance with it.

1.3. The Policy applies to all personal data that the Operator receives from site visitors and persons sending requests through the contact form (hereinafter referred to as Users).

1.4. The operator processes data lawfully, fairly, only for predetermined purposes, does not allow excessive processing and stores data no longer than required by the purposes of processing or the law.

2. Information about the Operator

2.1. Name: semafor web studio.

2.2. Website: https://semaforstudio.ru.

2.3. Address for requests from personal data subjects: semafor.webstudio@gmail.com.

3. Categories of subjects and composition of data

3.1. Data subjects are site visitors, potential customers and other persons who independently sent a request.

3.2. The following can be processed through the contact form: name, phone number, email address and project information that the User provides independently.

3.3. When accessing the site, the IP address, date and time of the request, the address of the requested page, browser and device information, referral source and other standard server log entries may technically be processed. The site does not use this information to make decisions that give rise to legal consequences for the User.

3.4. The operator does not intend to process special categories of personal data, biometric data and data of minors. The user should not enter such information in a free form field.

4. Purposes, data and legal grounds of processing

TargetDataBase
Response to requests, discussion of the project and preparation of proposalsName, phone, email, project informationUser consent; actions on his initiative before the conclusion of the contract
Site Security and Abuse PreventionIP address and technical request logsThe Operator’s legitimate interest in ensuring security while respecting the User’s rights
Compliance with legal requirements and protection of rightsData required in a specific caseObligation by law or exercise of rights of the Operator

4.1. The data from the form is not used for advertising mailings and is not distributed to an unknown circle of people.

5. Procedure and methods of processing

5.1. The operator can collect, record, systematize, accumulate, store, clarify, extract, use, transfer to persons involved in the technical delivery of the request, block and destroy personal data using or without automation tools.

5.2. Access is granted only to those who need it to respond to requests, support the site, ensure security, or comply with legal requirements. They are required to maintain the confidentiality of data.

5.3. A hosting provider and other parties providing technical request processing may be involved to operate the site and deliver the message. They are transferred only the amount of data necessary to host the site, technically process the request and deliver the message to the Operator. The operator does not sell personal data.

5.4. Transfer to government bodies is carried out only in cases and in the manner established by the legislation of the Russian Federation.

6. Localization and cross-border transmission

6.1. When collecting personal data of citizens of the Russian Federation, recording, systematization, accumulation, storage, clarification and retrieval must be carried out using databases located on the territory of the Russian Federation, in cases provided for in Part 5 of Article 18 of Federal Law No. 152-FZ.

6.2. Use of foreign hosting provider infrastructure may result in cross-border transfers. Such a transfer is permitted only after fulfilling the requirements of Article 12 of Federal Law No. 152-FZ, including sending a separate notification to Roskomnadzor, when mandatory, and assessing the protection of the rights of the subjects in the relevant foreign state.

7. Processing times and destruction

7.1. These requests are processed until a response and completion of the discussion of the project or until consent is withdrawn, unless there is another legal basis for continuing processing.

7.2. Once the purpose of processing has been achieved or consent has been withdrawn, the data is destroyed within no more than 30 days, unless the contract or law requires otherwise. If it is impossible to destroy within this period, the data is blocked and destroyed no later than six months, unless another period is established by law.

7.3. Technical logs are stored for a period determined by the hosting provider's settings and necessary to ensure security, after which they are deleted or anonymized.

8. Protection of personal data

8.1. The operator takes the necessary legal, organizational and technical measures: restricts access, uses a secure connection, controls access permissions, applies means of protection against unauthorized access, identifies incidents and ensures data recovery when necessary.

8.2. If unlawful processing is detected, the Operator blocks the relevant data for the period of verification, stops the violation and destroys the data within the time limits prescribed by law. Incidents are reported to Roskomnadzor in accordance with the established procedure.

9. User rights

9.1. The User has the right to obtain information about the processing of his data, demand clarification, blocking or destruction, withdraw consent, object to processing, and also appeal the Operator’s actions to Roskomnadzor or the court.

9.2. The appeal can be sent to semafor.webstudio@gmail.com. The request should indicate the name, contact for response, the essence of the request and information to confirm the fact of interaction with the Operator. The operator has the right to request identification confirmation in order not to disclose data to an unauthorized person.

9.3. The response is provided within 10 working days from the date of receipt of the request. The period can be extended by no more than five working days with reasoned notification to the User.

10. Final provisions

10.1. The policy is valid indefinitely until replaced by a new edition. The current version is always available at https://semaforstudio.ru/en/privacy/.

10.2. Significant changes in the purposes, composition of data or methods of their processing are reflected in the new version of the Policy before the start of the corresponding processing.