Personal Data Processing Policy
Version dated 28 October 2026.
1. General provisions
1.1. This Policy sets out the procedures for processing and protecting the personal data of visitors to https://server-haven.ru/ (the Website).
1.2. Personal data controller: Individual Entrepreneur Kirill Alekseevich Karpov, Taxpayer Identification Number (INN) 470320458772, State Registration Number (OGRNIP) 318470400087245; postal address: Apt. 6, Building 2, 19 Leningradskaya St., Vsevolozhsk, Leningrad Region, 188640, Russia (the Controller).
1.3. Contact for personal data matters: info@server-haven.ru.
1.4. This Policy applies to data collected through Website forms and technical logs. It does not govern data processing by third-party websites reached through external links, including Telegram.
1.5. The Controller complies with Russian Federal Law No. 152-FZ of 27 July 2006 on Personal Data and other applicable laws of the Russian Federation.
2. Data categories, purposes and legal grounds
2.1. Enquiries. The Controller may process the visitor’s name, email address, telephone number, enquiry content, submission date and time, page address and technical information needed to confirm submission and consent.
Purposes: receive and consider an enquiry; contact the visitor; clarify requirements; prepare a proposal and conduct negotiations; prepare and perform a contract at the visitor’s initiative; confirm the fact and content of consent.
Legal grounds: the visitor’s separate consent; actions taken at the visitor’s initiative before entering into a contract; conclusion and performance of a contract; compliance with legal obligations.
Enquiry data is not used for advertising mailings without separate prior consent.
2.2. Website operation and security. IP address, browser and device information, access date and time, requested page address, technical identifiers, essential cookies and error information may be processed to operate the Website, prevent abuse and diagnose problems.
2.3. Language selection. The initial language may be selected using the country associated with the IP address in a local DB-IP database. The IP address is not sent to a geolocation service. A manual language choice takes precedence. Web analytics services, including Yandex Metrica, are not enabled.
2.4. The Controller does not intend to collect special categories of personal data or biometric personal data through the Website. Visitors should not enter such information in free-text fields.
3. Processing operations and methods
The Controller may collect, record, organise, accumulate, store, update, retrieve, use, provide to a processor, block, erase and destroy data. Processing uses automated and mixed methods.
4. Disclosure and processing on behalf of the Controller
4.1. The Website runs on WordPress. Enquiries are stored in the Website database, and notifications are sent to the email address configured by the Controller.
4.2. Access to enquiries in WordPress is restricted to users authorised by the Controller. The Website uses the hosting infrastructure, database and mail transport configured by the Controller.
4.3. Data may be disclosed to public authorities only as provided by law. Disclosure to other parties requires a lawful basis and is limited to what is necessary.
5. Localisation and cross-border transfers
When collecting the personal data of Russian citizens through the Website, the Controller ensures initial recording, organisation, accumulation, storage, updating and retrieval using databases located in the Russian Federation, except where the law provides otherwise.
Data entered in the enquiry form is not intended for cross-border transfer. Before commencing such a transfer, the Controller fulfils the requirements of Article 12 of Federal Law No. 152-FZ.
6. Retention and destruction
6.1. Data relating to an enquiry that does not result in a contract is processed until the purpose is achieved, consent is withdrawn, or one year has elapsed since the last substantive interaction, whichever occurs first.
6.2. Where a contract is concluded, data is retained for the periods needed to perform it, protect the parties’ rights and comply with accounting, tax and other applicable legal requirements.
6.3. Technical logs are retained as necessary for security and diagnostics. Language preference cookies may remain for up to one year or until deleted by the user. The record that the notice was closed is stored in browser localStorage until Website data is cleared. Web analytics data is not collected.
6.4. Once the purpose is achieved, the retention period expires or consent is withdrawn, data is erased, destroyed or anonymised within statutory periods, unless another lawful basis permits continued processing.
7. Cookies
The Website uses essential WordPress cookies, language preference cookies and localStorage to remember that the notice was closed. Analytics cookies and web analytics services are not used. Users can delete cookies and Website data in their browser settings; this resets the saved language and shows the notice again.
8. Data protection
The Controller takes necessary legal, organisational and technical measures, including restricting access, using secure transmission channels, managing access rights, monitoring data operations, making backups and identifying and addressing incidents.
9. Visitors’ rights
Visitors may obtain information about processing, request correction, blocking or erasure, withdraw consent, object to processing where the law permits, and complain to Roskomnadzor or a court.
10. Requests and withdrawal of consent
Requests or withdrawal notices may be sent to info@server-haven.ru or to: Apt. 6, Building 2, 19 Leningradskaya St., Vsevolozhsk, Leningrad Region, 188640, Russia. Include information that identifies the requester and relevant data, describe the request and provide contact details for a response.
The Controller considers requests and complies with lawful demands within the periods specified by Federal Law No. 152-FZ. Withdrawal of consent does not stop processing where another legal basis applies.
11. Incidents
If unlawful or accidental disclosure of personal data infringes data subjects’ rights, the Controller notifies Roskomnadzor and takes action in the manner and within the periods prescribed by law.
12. Policy updates
The Controller may update this Policy when processing practices or legislation change. The current version is available at https://server-haven.ru/privacy-policy.
1. General provisions
1.1. This Policy sets out the procedures for processing and protecting the personal data of visitors to https://server-haven.ru/ (the Website).
1.2. Personal data controller: Individual Entrepreneur Kirill Alekseevich Karpov, Taxpayer Identification Number (INN) 470320458772, State Registration Number (OGRNIP) 318470400087245; postal address: Apt. 6, Building 2, 19 Leningradskaya St., Vsevolozhsk, Leningrad Region, 188640, Russia (the Controller).
1.3. Contact for personal data matters: info@server-haven.ru.
1.4. This Policy applies to data collected through Website forms and technical logs. It does not govern data processing by third-party websites reached through external links, including Telegram.
1.5. The Controller complies with Russian Federal Law No. 152-FZ of 27 July 2006 on Personal Data and other applicable laws of the Russian Federation.
2. Data categories, purposes and legal grounds
2.1. Enquiries. The Controller may process the visitor’s name, email address, telephone number, enquiry content, submission date and time, page address and technical information needed to confirm submission and consent.
Purposes: receive and consider an enquiry; contact the visitor; clarify requirements; prepare a proposal and conduct negotiations; prepare and perform a contract at the visitor’s initiative; confirm the fact and content of consent.
Legal grounds: the visitor’s separate consent; actions taken at the visitor’s initiative before entering into a contract; conclusion and performance of a contract; compliance with legal obligations.
Enquiry data is not used for advertising mailings without separate prior consent.
2.2. Website operation and security. IP address, browser and device information, access date and time, requested page address, technical identifiers, essential cookies and error information may be processed to operate the Website, prevent abuse and diagnose problems.
2.3. Language selection. The initial language may be selected using the country associated with the IP address in a local DB-IP database. The IP address is not sent to a geolocation service. A manual language choice takes precedence. Web analytics services, including Yandex Metrica, are not enabled.
2.4. The Controller does not intend to collect special categories of personal data or biometric personal data through the Website. Visitors should not enter such information in free-text fields.
3. Processing operations and methods
The Controller may collect, record, organise, accumulate, store, update, retrieve, use, provide to a processor, block, erase and destroy data. Processing uses automated and mixed methods.
4. Disclosure and processing on behalf of the Controller
4.1. The Website runs on WordPress. Enquiries are stored in the Website database, and notifications are sent to the email address configured by the Controller.
4.2. Access to enquiries in WordPress is restricted to users authorised by the Controller. The Website uses the hosting infrastructure, database and mail transport configured by the Controller.
4.3. Data may be disclosed to public authorities only as provided by law. Disclosure to other parties requires a lawful basis and is limited to what is necessary.
5. Localisation and cross-border transfers
When collecting the personal data of Russian citizens through the Website, the Controller ensures initial recording, organisation, accumulation, storage, updating and retrieval using databases located in the Russian Federation, except where the law provides otherwise.
Data entered in the enquiry form is not intended for cross-border transfer. Before commencing such a transfer, the Controller fulfils the requirements of Article 12 of Federal Law No. 152-FZ.
6. Retention and destruction
6.1. Data relating to an enquiry that does not result in a contract is processed until the purpose is achieved, consent is withdrawn, or one year has elapsed since the last substantive interaction, whichever occurs first.
6.2. Where a contract is concluded, data is retained for the periods needed to perform it, protect the parties’ rights and comply with accounting, tax and other applicable legal requirements.
6.3. Technical logs are retained as necessary for security and diagnostics. Language preference cookies may remain for up to one year or until deleted by the user. The record that the notice was closed is stored in browser localStorage until Website data is cleared. Web analytics data is not collected.
6.4. Once the purpose is achieved, the retention period expires or consent is withdrawn, data is erased, destroyed or anonymised within statutory periods, unless another lawful basis permits continued processing.
7. Cookies
The Website uses essential WordPress cookies, language preference cookies and localStorage to remember that the notice was closed. Analytics cookies and web analytics services are not used. Users can delete cookies and Website data in their browser settings; this resets the saved language and shows the notice again.
8. Data protection
The Controller takes necessary legal, organisational and technical measures, including restricting access, using secure transmission channels, managing access rights, monitoring data operations, making backups and identifying and addressing incidents.
9. Visitors’ rights
Visitors may obtain information about processing, request correction, blocking or erasure, withdraw consent, object to processing where the law permits, and complain to Roskomnadzor or a court.
10. Requests and withdrawal of consent
Requests or withdrawal notices may be sent to info@server-haven.ru or to: Apt. 6, Building 2, 19 Leningradskaya St., Vsevolozhsk, Leningrad Region, 188640, Russia. Include information that identifies the requester and relevant data, describe the request and provide contact details for a response.
The Controller considers requests and complies with lawful demands within the periods specified by Federal Law No. 152-FZ. Withdrawal of consent does not stop processing where another legal basis applies.
11. Incidents
If unlawful or accidental disclosure of personal data infringes data subjects’ rights, the Controller notifies Roskomnadzor and takes action in the manner and within the periods prescribed by law.
12. Policy updates
The Controller may update this Policy when processing practices or legislation change. The current version is available at https://server-haven.ru/privacy-policy.