Personal data processing policy

This policy explains how the owner of ASP DEV processes and protects visitors’ personal data under Russian Federal Law No. 152‑FZ on Personal Data. The Russian text is the primary version.

1. Controller and contact details

The personal data controller is Alexey Polikarpov.

• Privacy email: oleksiypolikarpov@yandex.ru.
• Electronic contact channel: @asp_public.

2. Data processed

When you browse the site, server logs may process your IP address, request time, requested page, referrer, browser and operating-system details, device type and error information. A contact submission contains your name, email address, message, language, consent time and a hash of your IP address.

If you separately allow analytics and a Yandex Metrica tag is configured, the service also processes page views and interactions, browser and device details, approximate region, referrer, and identifiers stored in cookies or localStorage. The site does not send contact-form contents to Metrica and does not enable Session Replay.

Please do not submit sensitive or biometric data in a free-text field.

3. Purposes and legal grounds

• Delivering and securing the site: the controller’s legitimate interests, provided they do not override visitors’ rights.
• Replying to a message: the visitor’s separate consent.
• Measuring traffic and improving content: separate analytics consent.
• Meeting legal duties and responding to lawful authority requests: compliance with law.

Analytics consent is optional. Refusing it does not restrict access to the site.

4. Processing and retention

Automated operations can include collection, recording, organisation, storage, updating, retrieval, use, transfer to processors, restriction and deletion. Contact messages are kept until the conversation is complete and for no more than one further year unless the law requires otherwise. Security logs are kept only as long as needed for security and diagnostics. The analytics choice is stored in your browser for up to 12 months.

5. Recipients and location

Hosting, database, backup and email providers may receive only the data needed to provide their contracted services. Authorities receive data only in response to a lawful request. If analytics is allowed, technical data is sent to Yandex LLC for Yandex Metrica under the Yandex privacy policy.

Personal data of Russian citizens is initially recorded and stored in databases located in Russia. Before enabling a service that may involve a cross-border transfer, the controller checks the legal basis and completes any required notification procedure.

6. Security and your rights

The controller uses access controls, authentication, HTTPS, input validation, action logs and software updates; two-factor protection is available for administration. Uploaded images are re-encoded without EXIF data; contact IP addresses are stored in the database only as pseudonymised HMAC hashes.

You may ask for access, correction, restriction or deletion, withdraw consent, or complain to Roskomnadzor or a court. Include your name, reply contact, request and enough detail to locate the record. Identity verification may be required before data is disclosed.

7. Cookies and updates

See the cookie policy to review or change your analytics choice. The Yandex Metrica tag does not load before you select “Allow analytics”. The current policy is always published here; a material change to purposes, data or services results in a new date and renewed consent where required.