PRIVACY POLICY

1. General Provisions

This Privacy Policy is established in accordance with applicable data protection regulations and defines the procedure for processing personal data and the security measures taken by IT-AI (hereinafter — the Operator).

1.1. The Operator's primary goal is to respect and protect the rights and freedoms of individuals when processing their personal data, including the right to privacy and personal confidentiality.

1.2. This Policy applies to all information the Operator may receive about visitors to the website it-ai.ru.

2. Key Terms Used in This Policy

2.1. Automated processing of personal data — processing of personal data using computing equipment.

2.2. Blocking of personal data — temporary suspension of processing personal data (except where processing is required to clarify data).

2.3. Website — the set of graphic and informational materials, software, and databases accessible via the internet at it-ai.ru.

2.4. Personal data information system — a set of personal data in databases together with the technologies and tools that process them.

2.5. Anonymization of personal data — actions resulting in personal data that cannot be attributed to a specific User without additional information.

2.6. Processing of personal data — any action or set of actions performed on personal data, including collection, recording, organization, accumulation, storage, clarification, retrieval, use, transfer, anonymization, blocking, deletion, or destruction.

2.7. Operator — IT-AI, which independently or jointly with others organizes and/or carries out the processing of personal data and determines its purposes and scope.

2.8. Personal data — any information directly or indirectly relating to a specific or identifiable User of the website it-ai.ru.

2.9. User — any visitor to the website it-ai.ru.

2.10. Provision of personal data — actions directed at disclosing personal data to a specific person or group of persons.

2.11. Distribution of personal data — any actions directed at disclosing personal data to an indefinite number of persons, including via media, telecommunication networks, or any other means.

2.12. Cross-border transfer of personal data — transfer of personal data to a foreign state authority, foreign individual, or foreign legal entity.

2.13. Destruction of personal data — any actions resulting in the irreversible deletion of personal data from the system or physical data carriers.

3. Rights and Obligations of the Operator

3.1. The Operator has the right to:

  • receive accurate information and/or documents containing personal data from the data subject;
  • continue processing personal data without the data subject's consent if that consent is withdrawn, where there are lawful grounds to do so;
  • independently determine the set of measures necessary to fulfill the obligations under applicable data protection law.

3.2. The Operator is obligated to:

  • provide the data subject with information about the processing of their personal data upon request;
  • organize personal data processing in accordance with applicable law;
  • respond to requests from data subjects and their legal representatives in accordance with data protection law;
  • report to the authorized data protection body upon request within 10 days of receiving such a request;
  • publish or otherwise ensure free access to this Privacy Policy;
  • take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other unlawful actions;
  • cease transfer, processing, or destruction of personal data in the manner and cases provided by law;
  • fulfill other obligations under applicable data protection law.

4. Rights and Obligations of Data Subjects

4.1. Data subjects have the right to:

  • obtain information about the processing of their personal data, except where restricted by law;
  • require the Operator to correct, block, or delete their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated processing purpose;
  • require prior consent before their personal data is used for marketing purposes;
  • withdraw consent to the processing of personal data;
  • appeal to the authorized data protection authority or through the courts against unlawful actions or inaction of the Operator;
  • exercise other rights provided under applicable law.

4.2. Data subjects are obligated to:

  • provide the Operator with accurate information about themselves;
  • notify the Operator of any updates or changes to their personal data.

4.3. Persons who provide false information or information about another data subject without their consent bear liability under applicable law.

5. Principles of Personal Data Processing

5.1. Personal data is processed on a lawful and fair basis.

5.2. Processing is limited to specific, pre-defined, and lawful purposes.

5.3. Databases containing personal data processed for incompatible purposes may not be merged.

5.4. Only personal data that is relevant to the stated processing purpose is collected and processed.

5.5. The content and scope of processed personal data correspond to the stated purposes.

5.6. The accuracy, sufficiency, and, where necessary, the relevance of personal data to the processing purpose is ensured.

5.7. Personal data is stored in a form that allows identification of the data subject for no longer than required by the processing purpose, unless a longer retention period is established by law or contract.

6. Purposes of Personal Data Processing

6.1. Purposes of processing the User's personal data:

  • informing the User via email and phone calls;
  • entering into, performing, and terminating civil contracts;
  • providing the User access to services, information, and/or materials on the website;
  • clarifying order details;
  • processing and receiving payments.

6.2. The Operator may also send the User notifications about new products and services, special offers, and events.

7. Legal Grounds for Processing Personal Data

7.1. The legal grounds for processing personal data by the Operator are:

  • applicable personal data protection legislation;
  • consent of the data subject to the processing of their personal data;
  • contracts concluded between the Operator and the data subject.

7.2. The Operator processes the User's personal data only when the User independently fills in and/or submits it through the forms on the website it-ai.ru.

8. Collection, Storage, Transfer, and Other Processing of Personal Data

The security of personal data processed by the Operator is ensured through legal, organizational, and technical measures required to fully comply with applicable data protection law.

8.1. The Operator ensures the security of personal data and takes all reasonable measures to prevent unauthorized access.

8.2. The User's personal data will never, under any circumstances, be transferred to third parties, except where required by law or where the data subject has given consent for such transfer to fulfill contractual obligations.

8.3. If inaccuracies in personal data are discovered, the User may update them by sending a notification to sale@it-ai.ru with the subject line "Update Personal Data".

8.4. The retention period for personal data is determined by the fulfillment of the purposes for which it was collected, unless a longer period is specified by contract or applicable law.

8.5. The User may withdraw consent to the processing of personal data at any time by sending an email to sale@it-ai.ru with the subject line "Withdraw Personal Data Consent".

8.6. All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by those parties in accordance with their own terms of service and privacy policies.

8.7. The Operator ensures the confidentiality of personal data during processing.

8.8. The Operator stores personal data in a form that identifies the data subject for no longer than required by the processing purpose.

9. Actions Performed by the Operator on Collected Personal Data

9.1. The Operator collects, records, organizes, accumulates, stores, clarifies (updates, modifies), retrieves, uses, transfers, anonymizes, blocks, deletes, and destroys personal data.

9.2. The Operator carries out automated processing of personal data with or without transmission of received information over telecommunication networks.

10. Categories of Personal Data Collected

10.1. Personal data processed by the Operator may include:

  • full name;
  • phone number;
  • email address;
  • job title and organization name;
  • order and payment information.

11. Use of Cookies and Analytics Services

11.1. The Operator uses cookies and web analytics services (Yandex.Metrica, Google Analytics) to improve website performance, analyze traffic, and understand user behavior.

11.2. Cookies do not contain confidential information and are not shared with third parties.

11.3. The User may disable cookies in their browser settings, however this may affect the functionality of the website.

12. Cross-Border Transfer of Personal Data

12.1. The Operator records, organizes, accumulates, stores, updates, and retrieves personal data using databases located within the applicable jurisdiction.

12.2. When cross-border transfer of personal data is required, the Operator must ensure that the receiving country provides adequate protection for the rights of data subjects.

13. Confidentiality of Personal Data

The Operator and any other persons who have access to personal data are obligated not to disclose or distribute it to third parties without the data subject's consent, unless otherwise provided by applicable law.

14. Final Provisions

14.1. Users may obtain any clarification regarding the processing of their personal data by contacting the Operator at sale@it-ai.ru or by phone at +7 999 131 65 96.

14.2. Any changes to the Operator's data processing policy will be reflected in this document. This Policy remains in force indefinitely until replaced by a new version.

14.3. The current version of this Policy is publicly available at it-ai.ru.

Operator Details:

IT-AI
Tax ID: 027313284966
Registration No.: 322028000126192
Address: 450103, Ufa, Vologodskaya St., 24
Phone: +7 999 131 65 96
E-mail: sale@it-ai.ru