Personal data processing policy

1. Operator

The personal data operator is O SPORT LLC (37 Belovezhskaya St., apt. 153, Moscow, OGRN 1247700191705, INN 9731131284, KPP 773101001), operating under the doIT Agency brand at do-it.agency. Requests from data subjects: info@do-it.agency

This policy is published under part 2 of article 18.1 of Federal Law No. 152-FZ “On personal data” and applies to all personal data the operator receives through the website do-it.agency

2. Purposes of processing

(a) Replying to a request sent through the website form and arranging the free process review

(b) Concluding and performing a contract with a client

(c) Web analytics (Yandex Metrica) — only after the visitor allows it in the cookie banner

3. Categories of data subjects and data

Visitors who submit the form: name, company, phone / Telegram / email, the text of the request, the date and time of the request, the IP address and the version of the consent text (kept as proof of consent)

Website visitors (analytics, only after consent): cookie identifiers, IP address, browser and device data, pages viewed

4. Legal grounds

For purpose (a) and (c): the data subject’s consent (article 6, part 1, item 1 of 152-FZ). For purpose (b): performance of a contract to which the data subject is a party (article 6, part 1, item 5 of 152-FZ)

5. Actions and method

Collection, recording, systematisation, accumulation, storage, clarification (updating), use, transfer (provision to the person answering the request), depersonalisation, blocking, deletion and destruction. Processing is automated, without cross-border transfer of the primary database

6. Retention periods

Requests: 3 years from the date of the last contact; after that the data is destroyed. Data under a contract: for the term of the contract and the retention period required by law. Analytics data: for the cookie lifetimes set by Yandex Metrica

7. Where the data is stored

The primary database of requests is stored on a server located in the Russian Federation. A notification about a new request (name, company, contact, text) is sent to the operator’s employee via Telegram; this is a notification about the request, not the place where the data is stored

8. Cookies

Technical cookies: the language choice, the region choice (Russia and the CIS or the UAE) and the cookie-consent choice; stored for 12 months; they do not identify the visitor. Analytical cookies: Yandex Metrica, set only after the visitor clicks “Accept” in the banner; purposes — counting visits and pages read; lifetimes — as set by the Metrica service. “Decline” prevents analytics from loading; the choice can be changed by clearing the site’s cookies

9. Rights of the data subject

The data subject may request information about the processing of their data, demand clarification, blocking or destruction of the data, and withdraw consent at any time by writing to info@do-it.agency. The operator replies within 10 working days of receiving the request (article 14 and article 20 of 152-FZ). After consent is withdrawn, processing stops and the data is destroyed within 30 days unless a legal ground for further storage exists

10. Security and incidents

Access to the request database is limited to the persons answering requests; access is by roles; backups are made daily. The operator has an internal procedure for personal data incidents (notification of Roskomnadzor within 24 hours and a report within 72 hours). The person responsible for organising the processing of personal data is appointed by order of the General Director; contact: info@do-it.agency

11. Changes

The operator may update this policy; the current version is always published at do-it.agency/privacy/. The date of the current version is given at the top of this page