Personal Data Processing Policy

1. Controller and scope

The personal data controller is Мысяков Кирилл Дмитриевич (Kirill Dmitrievich Mysyakov), a self-employed individual applying the Russian professional income tax regime. The controller determines the purposes and procedures for processing enquiries.

This policy applies to https://kirillmysyakov.ru and its technical version on Tilda. The website presents the controller’s consulting services. It is not an online shop: the form does not arrange purchases, delivery or payments for goods.

Questions about processing, correction, deletion and withdrawal of consent can be sent to mysyakovkirill@gmail.com.

Submitting an enquiry through an available form requires a separate consent selection. Publishing this policy, visiting the website or filling fields without submitting does not itself mean that consent has been obtained.

2. Purpose and legal grounds

Enquiry details are used to respond, clarify the visitor’s challenge and discuss a possible consultation. They are not used for advertising, marketing mailings or disclosure to advertisers.

Processing through the form is based on the visitor’s separate consent. Processing necessary to enter into a contract at the visitor’s initiative, perform a contract or meet Russian legal requirements takes place only where the relevant independent legal ground exists.

Processing is subject to Russian Federal Law No. 152-FZ of 27 July 2006 on Personal Data. Referring to that law does not itself replace a required legal ground.

3. Information processed

The form is intended for visitors and representatives of organisations interested in a consultation. It contains first and last name, phone number, company name, company website and an optional comment describing the enquiry. Company information and comments are considered together with the enquiry and may contain personal data.

The form does not request a residential address, passport information, bank details or payment information. Special-category or biometric data is not required. Please do not put such information or excessive information about other people in the free-text comment.

Tilda may also process technical website information under its terms, such as network address, browser and device details, time of access and service cookies. These are not fields in the consultation enquiry. No separate Yandex Metrika or Google Analytics counters are configured in this project.

4. Processing and services

Enquiry processing may include collection, recording, organisation, storage, correction, retrieval, use to respond, access for the relevant technical processor, deletion and destruction. Public disclosure or publication of enquiry contents is not intended.

The website is hosted on Tilda. Form enquiries are processed through Tilda and Tilda CRM on the controller’s instructions under the platform’s terms. On the controller’s side, only Kirill Dmitrievich Mysyakov accesses enquiry contents. Technical processing by the platform does not mean access is given to other consultants or advertisers.

Replies and data-protection requests use the controller’s email address. Correspondence is also processed by its email provider. The terms of Tilda and Google’s email service apply to those services and do not remove the controller’s obligations.

The form is connected to Telegram notifications. First and last name, phone number, company name and website, comment, and service information including document versions are sent to the controller’s personal Telegram to receive and process enquiries. This sends enquiry contents, rather than only the fact of receipt. Telegram is not used for marketing mailings.

5. Retention and ending processing

The controller has set a maximum retention period of 10 years from receipt of an enquiry. This maximum does not justify retaining data longer than necessary for its stated purpose.

When the purpose is achieved, the information is no longer needed, or consent is withdrawn and no other lawful ground remains, information must be deleted or anonymised within applicable statutory time limits. Correction and deletion cover the processing systems and copies as required by applicable law.

If an enquiry leads to a contract, information and documents required for performance or legal obligations may be processed on independent grounds for the corresponding periods. This does not authorise advertising use of the original enquiry.

6. Security, location and transfers

The controller limits access and applies necessary organisational and technical safeguards against unlawful access, alteration, disclosure, loss and destruction. Platform and service settings must reflect the actual processing arrangements.

Before enabling submission, database location under Russian law, processing terms and recipients are to be checked. Foreign email or other services require a separate assessment of cross-border transfer rules. This policy does not assert that cross-border transfers are absent or have already been approved.

Disclosure to public authorities is permitted where required or authorised by law. Sale of visitor information and disclosure for third-party advertising are not intended.

7. Rights and requests

A visitor may obtain information about processing, seek correction, blocking or deletion where grounds exist, withdraw consent and challenge the controller’s actions before Roskomnadzor or a court as provided by law.

Send requests or withdrawals to mysyakovkirill@gmail.com, identifying the phone number used for the enquiry and the request. The subject line may be “Withdrawal of consent to personal data processing”. The controller may request information necessary to verify identity and locate the enquiry, without requesting excessive information.

Requests, correction, blocking and deletion are handled under applicable legal procedures and time limits. Withdrawal does not prevent processing on another independent lawful ground where one actually exists.

8. Consent and updates

The consent to personal data processing is a separate document. Reading this policy or visiting the website is not consent to submit and process an enquiry. When the form is enabled, consent requires a separate user action; a preselected checkbox is not used.

The current policy is intended to be available at https://kirillmysyakov.ru/privacy/en/. Changes to purposes, information collected or services require review of this policy and relevant consents before those changes are applied. Edition dated 1 November 2026, version 2026-11-01.