Mikoton Privacy and Personal Data Processing Policy

This Policy explains what personal data and technical data may be processed when using the Mikoton website, why such data is processed, how it is protected, and how users may exercise their rights.

This Policy applies to https://mikoton.ru and its language versions. By using the website, submitting the contact form or otherwise providing contact details, the user confirms that they have read this Policy.

Operator / Controller means the individual who organizes and carries out personal data processing and determines the purposes, scope and actions related to such processing.

User means a website visitor or a person who sends an inquiry through the contact form.

Personal data means any information relating to an identified or identifiable individual.

Processing means any action performed with personal data, including collection, recording, systematization, storage, clarification, use, transfer, anonymization, blocking, deletion and destruction.

Cookies and similar technologies mean small data fragments and technical identifiers that may be stored in the user’s browser, localStorage or sessionStorage.

3.1. Data provided by the user

When the user submits the contact form or contacts Mikoton by email, the following data may be processed:

• name;
• company or project name, if voluntarily provided;
• contact details: email, Telegram or another contact method provided by the user;
• message text, project description or inquiry details;
• other information voluntarily included by the user in the message.

The user should not submit special categories of personal data, health data, political opinions, religious beliefs, biometric data, or third-party confidential data unless there is a lawful basis for doing so.

3.2. Technical website data

When visiting the website, the following technical data may be processed automatically:

• IP address;
• date and time of visit;
• browser, device, operating system and language information;
• visited page URLs;
• traffic source;
• technical website interaction events;
• cookie, localStorage and sessionStorage data where the user has consented to the relevant category.

1. Receiving and handling contact form inquiries.
2. Replying to the user using the provided contact method.
3. Discussing consulting, audit, development, implementation or other B2B requests.
4. Preparing a proposal or further communication based on the user’s request.
5. Maintaining website functionality and security.
6. Analyzing website traffic, traffic sources and user interaction with pages — only where analytics consent has been given.
7. Improving website structure, content and user experience.

The Operator processes personal data on the following bases:

• user consent to personal data processing when submitting the contact form;
• user consent to analytics cookies and Yandex Metrica;
• the need to respond to the user’s inquiry and discuss potential cooperation;
• the need to maintain website functionality and security;
• compliance with applicable legal obligations.

Before submitting the form, the user must tick a separate checkbox confirming consent to personal data processing.

The consent covers the data provided in the form: name, contact details, company or project, message text and other information voluntarily included by the user.

The form must not be submitted without such consent.

The website may use necessary cookies and similar technologies required for correct website operation, saving user preferences and providing basic functionality.

The website also uses Yandex Metrica, a web analytics service provided by Yandex LLC. Yandex Metrica helps analyze website traffic, traffic sources and user interaction with pages.

Yandex Metrica may use cookies, localStorage and sessionStorage and may process technical data including IP address, browser and device information, visit date and time, visited pages, traffic source and website actions.

Analytics cookies and Yandex Metrica must be enabled only after the user has given consent through the cookie banner. The user may refuse analytics cookies through the cookie banner or restrict cookies in browser settings.

If the user refuses analytics cookies, the website should remain available, but the Operator will not receive analytics data about that visit through Yandex Metrica.

The Operator does not sell users’ personal data.

Data may be transferred or made available to third parties only to the extent necessary for the processing purposes:

• hosting and website infrastructure providers;
• contact form or webhook service providers;
• email service providers;
• Yandex LLC in connection with Yandex Metrica — only where the user has consented to analytics cookies;
• other parties where such transfer is required by law.

External services may process data according to their own terms and policies.

Contact form data is stored for as long as necessary to process the inquiry and follow-up communication, but no longer than required for the processing purposes.

The indicative retention period for inquiries is up to 3 years from the last communication, unless a longer period is required to protect the Operator’s rights, perform a contract or comply with legal obligations.

Analytics data is stored within the retention periods defined by Yandex Metrica settings and the relevant service rules.

The user may request deletion of their data by contacting consulting@mikoton.ru.

The Operator takes reasonable organizational and technical measures to protect data from unauthorized access, alteration, disclosure, copying, distribution, deletion or other unlawful actions.

Such measures may include:

• restricting access to user inquiries;
• using secure communication channels where possible;
• keeping service credentials private;
• using standard security mechanisms of hosting, email and analytics services;
• deleting data once processing purposes have been achieved or upon a justified user request.

The user may:

• request information about personal data processing;
• request correction, blocking or deletion of data;
• withdraw consent to personal data processing;
• withdraw consent to analytics cookies;
• object to data processing;
• contact the Operator regarding data processing matters.

Requests may be sent to consulting@mikoton.ru.

The Operator may request information necessary to identify the inquiry and confirm the user’s relation to the relevant data.

The user may withdraw consent to personal data processing by contacting consulting@mikoton.ru.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

After receiving the withdrawal request, the Operator stops processing the data unless further processing is required by law, contract performance, protection of the Operator’s rights or other lawful grounds.

The Operator may update this Policy. The new version becomes effective upon publication on the website unless otherwise stated in the new version.

Users are encouraged to check the current version of this Policy periodically.