Privacy and Personal Data Policy

1. Controller

Requests for access, correction, restriction, deletion or withdrawal of consent may be sent to the email address above.

2. Scope and users

This policy applies to website visitors, people who submit enquiries, prospective business clients and their representatives. The website is primarily intended for companies, entrepreneurs and professionals. It is operated from the Russian Federation and is not specifically directed at children.

3. Data, purposes and legal bases

Enquiries and pre-contract communication

• data: name, email and/or phone number, message content;
• purposes: responding to an enquiry, discussing a project, preparing a consultation or individual proposal;
• bases: the user's separate consent and steps requested by the user before a possible contract.

Security and availability

• data: IP address, date and time, requested page, user-agent and technical request result;
• purposes: spam and attack prevention, error diagnosis and website security;
• bases: compliance with security duties and the controller's legitimate interest in operating a secure website.

4. Processing activities

Processing may include collection, recording, organisation, storage, updating, retrieval, use, limited disclosure to hosting and email providers, restriction, deletion and destruction. It is performed by automated means and, when an enquiry is reviewed, manually.

5. Recipients and service providers

The website, contact form and mailbox are hosted by Timeweb in the Russian Federation. Access is limited to the controller and people who need it for technical support or responding to the enquiry. Data may be disclosed to public authorities only where required by law.

Habrix does not sell personal data, use it for automated decision-making or subscribe users to advertising through the contact form. Marketing would require separate consent.

6. Location and international data

Form data is received and initially stored in the Russian Federation. A visitor outside Russia who submits the form asks Habrix to receive the data in Russia for the purpose of responding and taking pre-contract steps. Russia may not be recognised as providing an equivalent level of protection in the visitor's jurisdiction. The website does not load analytics, advertising pixels, fonts or interface libraries from foreign third parties.

Where the GDPR applies, processing relies as applicable on consent, Article 6(1)(b) pre-contract steps requested by the user and Article 6(1)(f) website security. Receipt in Russia is limited to the user's enquiry and the measures necessary to respond to it.

7. Retention

• enquiries and consent evidence: up to 3 years after the last substantive communication, or earlier upon valid withdrawal where no other basis applies;
• contract-related records: for periods required by the contract, accounting and tax law;
• security logs: generally up to 12 months.

Data is deleted or anonymised when the purpose is achieved, subject to legal retention duties and the time needed to establish or defend legal claims.

8. Rights

Depending on applicable law, a user may request access, correction, restriction, deletion, withdrawal of consent, object to processing and lodge a complaint with a competent supervisory authority. The controller may request information necessary to verify identity and match the request to the relevant data.

9. Security and updates

Habrix uses HTTPS, access restrictions, anti-spam controls, consent records, software maintenance, backups and other proportionate organisational and technical measures. Material changes to this policy are published on this page; the version accepted in the form is recorded with the enquiry.