Personal data policy

Revised on 2026-11-10

1. General provisions

This Policy is drawn up under Russian Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and describes how personal data submitted through the website https://fauru.org, and the correspondence about such requests, is processed and protected.

Operator: Nikita Andreevich Prozhoga, self-employed (professional income tax payer), Taxpayer ID (INN) 543100093878, Novosibirsk, Russia. Address for personal data requests: fauru.org@yandex.com.

The operator processes personal data lawfully and fairly, only for purposes defined in advance, and does not collect more data than those purposes need.

2. What data is processed

Through the form on the website, only what the data subject provides:

• name;
• one contact of the data subject's choice: phone number, Telegram username or email address;
• the content of the request: the topics ticked, a description of the task and, if attached, the answers to the diagnostic questions;
• tags of the referral source (UTM tags).

With the visitor's consent given in the banner on the website, Yandex Metrica collects data about the visit: cookies and a visitor ID, IP address, browser and device details, pages viewed and actions on them.

The operator does not request or process special categories of personal data or biometric data.

3. Purposes, legal basis and retention

• Handling the request, contacting the data subject, reviewing the task, preparing a proposal and keeping records of requests. Form data is processed on the basis of the data subject's consent (art. 6 part 1 cl. 1 of 152-FZ), given separately when the form is submitted: consent to personal data processing. Retention: no more than 3 years after the last contact, or until consent is withdrawn.
• Performing a contract, if the request led to one. Data is processed on the basis of the contract (art. 6 part 1 cl. 5 of 152-FZ) for its term and the document retention period required by law.
• Website traffic analysis. Yandex Metrica data is processed on the basis of the consent given in the banner, until it is withdrawn. The operator sees only aggregated statistics in Metrica.

The data is not used for decisions that have legal effects for the data subject and is not transferred to third parties for advertising.

4. Actions with data

Collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer (provision, access) to the persons in section 5, blocking, deletion and destruction. Processing is automated.

5. Who receives the data

The following persons process data on the operator's behalf and are bound by confidentiality and the requirements of 152-FZ:

• Yandex LLC, 16 Lva Tolstogo St., Moscow 119021, Russia — the mailbox that receives requests from the site; Yandex Metrica web analytics (only with the visitor's consent);
• Timeweb — website hosting, servers located in the Russian Federation.

Data is transferred to anyone else only where the legislation of the Russian Federation requires it.

6. Storage in Russia and cross-border transfer

Personal data of Russian citizens is recorded, systematised, accumulated, stored, clarified and retrieved using databases located in the Russian Federation: requests from the website go only to a Yandex mailbox, and the website is hosted on servers in Russia.

The exception is Telegram, whose servers are located outside Russia. If the data subject chose Telegram to be contacted (gave a Telegram username in the form or wrote to the operator on Telegram), the correspondence takes place in that messenger, and the username and the messages are processed by Telegram. A data subject who does not want this can give a phone number or email instead.

7. Cookies and analytics

To make the website work, the browser stores only the visitor's choice in the analytics banner. Yandex Metrica is not loaded and collects nothing until the visitor clicks "Allow". Declining does not limit access to the website. Consent can be withdrawn by clearing the website data in the browser (the banner will appear again) or by writing to fauru.org@yandex.com.

8. Security measures

The operator takes legal, organisational and technical measures to protect data against unauthorised access, destruction, alteration and other unlawful actions: data is transmitted over HTTPS, only the operator has access to the mailbox with requests, and the amount of data collected is kept to a minimum.

9. Rights of the data subject

The data subject has the right to:

• receive information about the processing of their data (art. 14 part 7 of 152-FZ);
• require the data to be corrected, blocked or destroyed if it is incomplete, out of date, inaccurate, unlawfully obtained or not needed for the stated purpose;
• withdraw consent to the processing of personal data;
• appeal against the operator's actions to Roskomnadzor or in court.

10. How to make a request

Requests and withdrawals of consent go to fauru.org@yandex.com. Give the contact you left in your request so the operator can find your data.

The operator replies within 10 business days. The period may be extended by 5 business days, and the operator will say why. After consent is withdrawn or the purposes are achieved, the data is destroyed within 30 days unless the law requires it to be kept longer.

11. Changes to this Policy

The operator may change this Policy. A new version applies from publication. The current Russian version is always available at https://fauru.org/privacy, and this translation at https://fauru.org/en/privacy.