Personal Data Processing Policy

1. General provisions

This Policy sets out the procedure and conditions for the processing of personal data by Individual Entrepreneur Anna Arefovna Evstratova when visitors use the website eaglis.ru, communicate by email, contact the published Telegram profile and, after a separate production launch, use the website contact form.

Personal data is processed in accordance with the legislation of the Russian Federation on personal data. The data is not used for advertising mailings without a separate legal basis, is not sold and is not published for an unrestricted group of persons.

2. Information about the Operator

• Individual Entrepreneur Anna Arefovna Evstratova
• Tax ID (INN): 616810901920
• Primary State Registration No. (OGRNIP): 325619600176478
• Website: eaglis.ru
• Email for personal data matters: contact@eaglis.ru

3. What data is processed and for what purposes

3.1. Website operation and security

The web server and technical infrastructure may process network and technical information required to deliver pages, diagnose errors, protect the website and prevent abuse. Such data is not used for advertising profiling.

3.2. Email correspondence and Telegram

If a visitor independently writes to the Operator using the published email address or the published Telegram profile @AnnaEvstratova, the information necessary for correspondence is processed: the email address or profile data available in the Telegram conversation, the visitor's name where provided, the content of messages and other information voluntarily included by the sender in the enquiry.

The purposes of processing are to reply to the enquiry, clarify the task, prepare a proposal, discuss a possible project, consultation, training or other interaction and, where necessary, to enter into and perform a contract and comply with obligations established by law.

When Telegram is chosen, the correspondence technically passes through the third-party Telegram service. The Operator uses only the information available in the relevant conversation and does not transfer it from Telegram to advertising systems. Telegram itself may process user data in accordance with its own rules and technical conditions independently of the Operator.

3.3. Contact form

As of the date of this version, the production contact form has not yet been launched. After its separate launch, the form will collect only the data expressly indicated in its interface and will operate on the basis of the user's separate explicit consent. The text of that consent is published at /en/consent.

4. Legal grounds

Depending on the situation, processing may be carried out on the basis of:

• the consent of the personal data subject;
• actions taken at the subject's request before entering into a contract;
• entering into and performing a contract;
• obligations established by the legislation of the Russian Federation;
• the Operator's rights and legitimate interests, provided that the rights and freedoms of the personal data subject are respected.

5. Storage and infrastructure

The production website is hosted on a VPS operated by Beget LLC in the Russian Federation. The domain mailbox contact@eaglis.ru is also served by Beget infrastructure. Automatic forwarding of complete messages from this mailbox to a third-party mailbox is not used.

Telegram is an external communication channel and is not part of the Beget infrastructure. If a visitor chooses this channel, messages and profile information available in the conversation are processed in the Telegram interface to the extent necessary for the correspondence chosen by the visitor.

Real enquiries and personal data are not used in GitHub, Vercel Preview or development tools as production data. After the contact form is launched, its primary storage and processing rules will be checked against the actual production configuration before the form is enabled.

6. Retention periods

• ordinary email or Telegram correspondence that does not lead to a contract or project — up to 1 year after the last substantive contact;
• correspondence and documents related to a contract, payment and accounting — for the periods required by law and as necessary to perform or protect rights under the contract;
• technical web and application logs of the production website — up to 30 days;
• authentication and security logs — up to 90 days;
• backups — within the established technical retention period, taking deletion procedures into account.

If the data is no longer required for the stated purpose and there is no other lawful basis for retaining it, it is deleted or destroyed.

7. Data disclosure and transfer

Access to personal data may be provided to technical service providers only to the extent necessary for the relevant infrastructure to operate, as well as in cases provided for by law, contract or the subject's separate consent.

If a visitor independently chooses Telegram as the communication channel, message data and available profile information are processed by that service as a technically necessary part of the selected communication channel. The Operator does not transfer enquiry data for advertising use and does not sell personal data to third parties.

8. Rights of the personal data subject

The personal data subject may request information about the processing of their data, request its correction, blocking, cessation of processing or deletion in cases provided for by law, and withdraw a previously given consent.

To make a request, it is sufficient to write to contact@eaglis.ru and provide information that makes it possible to locate the relevant record or correspondence and understand the request. There is no need to send excessive passport details or other sensitive information in advance by ordinary email.

9. Cookies and analytics

As of the date of this version, Yandex Metrica and other behavioural analytics systems are not used on the production website. Current and future use of cookies and similar browser technologies is described separately in the Cookie Policy.

10. Changes to this Policy

This Policy is reviewed when the categories of data, purposes or retention periods, the contact form, communication channels, infrastructure providers, analytics or applicable legal requirements change. A new version takes effect from the date of publication unless it states otherwise.