Personal Data Processing Policy

This English text is a translation provided for convenience. Only the Russian original has legal force: Политика обработки персональных данных. If the two versions differ, the Russian version prevails.

This policy explains what personal data I receive through the PR Studio website (prsites.ru), why I need it, where it is stored, who it is shared with and how you can control it. It has been prepared under Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (the “Law”). Consent to data processing is set out in a separate document: Consent to Personal Data Processing.

In short:

the data from the request form is needed to reply to you, prepare a proposal and a concept and, if we reach an agreement, to conclude and perform a contract;
a request is first saved on a server in Russia;
Yandex Metrica and its cookies are enabled only if you click “Allow” in the banner;
you can withdraw your consent at any time by emailing pavel@redesign-new.ru.

1. Who processes the data

The personal data operator is Pavel Aleksandrovich Ryzhov, sole proprietor (individual entrepreneur).

Tax ID (INN): 470410007774
Email for inquiries: pavel@redesign-new.ru

Below, the operator refers to himself as “I”. I am personally responsible for organizing the processing of personal data.

This policy applies to all personal data I receive through the PR Studio website (prsites.ru) and to correspondence about requests submitted through it.

2. Terms

Personal data: any information that directly or indirectly relates to a specific individual, such as a name, phone number or Telegram username.
Processing: any action performed with personal data: collection, recording, storage, use, transfer, deletion and others.
Cookies: small files that a website, or a service connected to it, saves in your browser to recognize the device on later visits.

Other terms are used in the meaning given to them by the Law.

3. What data I process

From the request form

your name or how you would like to be addressed;
your phone number or Telegram username;
your company name, if you provided it;
the address of your current website, if you provided it;
the text of your request and the services you selected in the form.

The following technical information is saved along with the request:

the date and time of submission, IP address and browser information, to protect the form from spam and to confirm when and from where consent was given;
the page from which the request was sent and the first page of the visit;
advertising tags (UTM tags and yclid), if you came from an ad, to understand where requests come from.

If we proceed to a contract

last name, first name, patronymic, position and contact details;
the details of the sole proprietor or company, including bank details;
an email address for documents, and project correspondence.

What the site collects automatically

Server logs. Each time the site is accessed, the server records the IP address, date and time, the page address, the address you came from and browser information. This is needed for the site to work and to protect it from attacks.
Cookies and Yandex Metrica data, including Webvisor (Yandex Metrica’s session recording tool), only after you consent in the banner. Details are in section 11.

What I do not process

I do not collect special categories of personal data (about health, political views, religious beliefs, ethnicity and the like) or biometric data. I do not make decisions that have legal consequences for you based solely on automated processing. I do not disseminate data, that is, I do not disclose it to an indefinite number of persons.

4. Purposes and legal grounds

For each purpose, I process only the data needed for it.

Replying to a request

Data: from the request form, and the technical information about the request.
Legal ground: your consent (clause 1, part 1, Article 6 of the Law).

Preparing a proposal and a homepage concept

Data: from the request form, and what you tell me about the project when we discuss it.
Legal ground: your consent.

Concluding and performing a contract

Data: from the request form, and the data needed for the contract.
Legal ground: a contract to which you are a party, or its conclusion at your initiative (clause 5, part 1, Article 6 of the Law). If the contract is concluded by a company you represent, the legal ground is your consent. I keep the contract and payment documents because tax and accounting laws require it (clause 2, part 1, Article 6 of the Law).

Website analytics

Data: cookies, Yandex Metrica and Webvisor data.
Legal ground: your consent, which you give by clicking “Allow” in the banner.

Website operation and security

Data: server logs, and the IP address the form uses to limit the number of submissions.
Legal ground: my legitimate interest: the site has to work, and the form must not be flooded with spam (clause 7, part 1, Article 6 of the Law). This does not violate your rights: the logs are not used for advertising and are kept for a short time.

5. How I process data

Actions performed with the data: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion and destruction.

Processing is mixed: both automated and non-automated, with transfer over the internet.

6. Where data is stored and how it is protected

I record, systematize, accumulate, store, clarify and retrieve the personal data of Russian citizens in databases on a server in Russia (part 5, Article 18 of the Law). A request from the website is first saved to this server and only then sent on to the services listed in section 7.

How I protect the data:

the site and the form work only over the secure HTTPS protocol;
access to the server and services is protected by passwords and access keys;
only I and the people who help me handle requests have access to the data, and only to the extent needed for that; they are required to keep the data confidential;
the form is protected from spam and limits the number of submissions from a single address.

Services that help process requests, listed below. I share only what is needed to reply to the request. If a service processes data on my instructions, this is formalized in a contract, and the service is required to keep the data confidential and protect it (part 3, Article 6 of the Law).
Yandex LLC: Yandex Metrica and Webvisor data, only if you allowed analytics in the banner.
Government authorities: only when required by law.

I do not sell personal data.

List of services

Hosting and request storage: Domain Name Registrar REG.RU LLC, Russia. The website runs on this server, and requests are saved here first.
Email for requests: Yandex 360, Yandex LLC, Russia. Requests reach me by email so I can reply to them.
New request notifications: Telegram. Only a notification about a new request is sent: what is needed and from which page, without the name, contact details or text of the request.
Yandex Metrica: Yandex LLC, Russia. Only if you allowed analytics in the banner.

If this list changes, for example if a request management system (CRM) is connected, I will update the policy before any data is transferred.

Cross-border transfer

Personal data is not currently transferred outside Russia: only a notification without any request data is sent to Telegram. If this changes, the transfer will begin only after the data has been recorded on a server in Russia, after notifying Roskomnadzor (the Russian data protection authority) and on the terms of Article 12 of the Law, and the countries will be added to the list above.

8. Retention periods and deletion

A request that did not lead to a contract: as long as it is needed to reply and discuss it, but no longer than one year from the last communication about it.
Contract data: for the entire term of the contract and, after that, for as long as tax and accounting laws require.
Server logs: no longer than 30 days.
Yandex Metrica data: in the Metrica service, under the rules of Yandex LLC; cookies in your browser remain until you delete them or until they expire.

When the purpose of processing has been achieved, the retention period has expired or you have withdrawn your consent, I destroy the data on the server and in the listed services within 30 days, unless there is another legal ground to keep it, such as a contract or a legal requirement. I confirm the destruction with a document, as required by Roskomnadzor rules.

9. Your rights

You have the right to:

find out whether I process your data, which data exactly, why, on what legal ground, where I obtained it, who I share it with and how long I keep it;
require me to clarify, block or destroy your data if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
withdraw your consent;
require me to stop processing;
appeal my actions to Roskomnadzor or in court.

I respond to inquiries within 10 business days. If more time is needed, this period may be extended by another 5 business days: I will notify you before the period expires and explain the reason.

You can send a request for information about your data as an electronic document signed with an electronic signature to pavel@redesign-new.ru. Under the Law, the request must include the details of your identity document, information confirming that I process your data (for example, the date of your request and the contact details you provided in it), and your signature.

Consent given with a request: email pavel@redesign-new.ru with the words “I withdraw my consent to the processing of personal data” and include the contact details you left in the request, so I can find your data.
Consent to analytics: click “Cookie settings” at the bottom of any page and choose “Essential only”. Metrica will be turned off, and its cookies on this site will be deleted. You can also simply clear the site data in your browser.

After you withdraw consent, I stop processing and destroy the data within 30 days, unless I have another legal ground to keep it (part 5, Article 21 of the Law).

11. Cookies and Yandex Metrica

What the site stores in your browser

Essential records: your choice in the banner, the first page of the visit and advertising tags. Your choice is kept in browser storage; the landing page and tags are kept only until the end of the session. The tags and landing page reach me only if you submit a request.
Yandex Metrica analytics cookies. These appear only if you click “Allow”. If you choose “Essential only”, Metrica does not load at all.

What Metrica collects

the cookie identifier Metrica uses to tell one device from another;
the IP address and approximate location based on it;
device type, browser, operating system and screen size;
the traffic source: search, ads or a link on another website;
pages viewed, time on site, button clicks and link clicks;
with Webvisor, a recording of actions on the page: scrolling, mouse movements and clicks. The request form fields are hidden from recording: Webvisor does not save what you type in them.

Why

To understand which pages are useful, where the site is inconvenient and where requests come from. In Metrica, I track goals: request submissions, clicks on the phone number and clicks through to Telegram.

Who processes it

Metrica data is processed by Yandex LLC under its own terms of use for the service.

How to opt out

click “Essential only” in the banner, and Metrica will not load;
if you have already clicked “Allow”, click “Cookie settings” at the bottom of any page and choose “Essential only”;
delete or block cookies in your browser settings: the site will keep working.

12. Contacts

Operator: Pavel Aleksandrovich Ryzhov, sole proprietor, Tax ID (INN) 470410007774
Email for inquiries: pavel@redesign-new.ru
Telegram: @ryzhov17

13. Changes to this policy

The current version is always published on this page. If the purposes of processing or the data involved change, I will update the policy and, if necessary, ask for new consent.

Version dated October 3, 2026.