Privacy Policy

1. General provisions

This privacy policy (the "Policy") describes how the Operator processes personal data submitted through this website. The Operator is registered in Russia and processes personal data under Russian Federal Law No. 152-FZ "On Personal Data" of July 27, 2006, and is entered in the Russian data-protection regulator's (Roskomnadzor) register of personal data operators.

Operator: Dmitriy Pronin, sole proprietor registered in Russia, Tax ID (INN) 381910388562, OGRNIP 320385000006414 (the "Operator").

Website: visdigi.org. Contact for personal data questions: admin@visdigi.org.

2. What data is processed

Personal data is provided to the Operator voluntarily by the visitor — by phone, email, the on-site chat, or a messenger. Depending on how you get in touch, this may include:

• name (if provided);
• phone number;
• email address;
• the content of your message — task description, questions, results of the "10 IT infrastructure vulnerabilities" checklist, and any other information you share voluntarily in the conversation.

Web-server technical logs (IP address, request date and time, browser type) are processed in anonymized form, solely to keep the site running and secure. Separately, the site uses cookies, similar technologies (localStorage), and a web analytics service — described in detail in section 9.

3. How chat and messenger contact works

The on-site chat is part of an automated inquiry-handling workflow. The conversation, along with any name and phone number you share, is stored in the Operator's inquiry-tracking system (CRM) and used to prepare a technical brief and follow-up.

If you choose to write via Telegram instead of the on-site chat, that conversation happens directly in the messenger, and is additionally subject to that service's own data-processing rules.

4. Purposes of processing

• responding to your inquiry and consulting on services;
• preparing a technical brief, commercial proposal, and contract;
• performing an agreed contract and communicating during the work;
• improving the site based on anonymized visit statistics.

5. Legal basis

Processing of inquiry data is based on the data subject's consent (Art. 6 of Federal Law No. 152-FZ), expressed by the act of submitting an inquiry to the Operator (including sending a message via the on-site chat), and for the purpose of concluding and performing a contract to which the data subject is a party. Processing of cookies and analytics data is based on separate consent, described in section 9.

6. Who receives the data and where it is stored

The Operator does not sell personal data and does not share it with third parties for their own purposes. The following are involved in technical processing:

• the hosting provider — keeps the servers running that host the site, the chat bot, and the CRM;
• Yandex LLC — operator of the Yandex.Metrica analytics service, which processes anonymized visit statistics (section 9);
• Telegram — only if you choose that channel yourself (section 3).

The servers on which inquiry data is processed are located in the Russian Federation.

The Operator takes reasonable legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, alteration, blocking, copying, or distribution.

7. Retention period

Inquiry data is processed until the processing purpose is achieved, or until the data subject withdraws consent. Data related to a performed contract is retained for the periods required by Russian accounting and tax legislation. Analytics data is retained according to the Yandex.Metrica service's own rules.

8. Your rights as a data subject

You may request information about the processing of your data, ask for it to be corrected, blocked, or deleted, and withdraw your consent to processing at any time — including your cookie consent (section 9). To do so, email admin@visdigi.org. A response will be provided within 10 business days. You are also entitled to contact Roskomnadzor, the Russian authority overseeing personal data protection.

This Policy is written under Russian law. If you are located outside Russia and your local law grants you additional rights (for example, under the EU/UK GDPR or similar frameworks), please email us and we will do our reasonable best to address your request — though we cannot represent formal compliance with a foreign legal regime we have not separately assessed.

9. Registration in the register of personal data operators

The Operator is registered in the register of personal data operators maintained by Roskomnadzor (Art. 22 of Federal Law No. 152-FZ), registration number 38-25-014268. Data processing does not involve cross-border transfer and is carried out on servers located in the Russian Federation.

10. Cookies and similar technologies

The site uses the Yandex.Metrica web analytics service (Yandex LLC), which uses cookies and session-recording technology (Webvisor) to collect visit statistics: pages viewed, referral source, device characteristics, cursor movement, and clicks. By default, Metrica masks the contents of text form fields during session recording. This data is used in anonymized form to improve the site.

Separately, the site uses the browser's localStorage (not a cookie, but a similar technology) to remember your chat conversation ID and your cookie-banner choice. This data is not shared with third-party services and is stored only in your browser.

Consent to cookies and Webvisor is requested via a banner on your first visit. You may decline — the site remains fully usable; your choice is stored in your browser and can be changed at any time by clearing the site's data, or in your browser's own cookie settings.

11. Final provisions

The Operator may amend this Policy. The current version is always available on this page. Continued use of the site after changes are published constitutes acceptance of those changes.