Personal Data Processing Policy
Version:
1. Operator and scope
Alexander Yurchenko is the operator of personal data processed through alexanderyurchenko.ru.
For questions about personal data processing, contact i@alexanderyurchenko.ru.
This Policy describes personal data processing when alexanderyurchenko.ru, the contact form, and the technical mechanisms required to operate, protect, and diagnose the site and form are used. The Policy is an informational document and does not itself constitute the user's consent to personal data processing.
2. Purposes of processing
Contact-form data
- receiving and processing the message;
- replying to the user.
Technical processing and security
- operation of the site and form;
- information security;
- prevention and detection of abuse and automated attacks;
- technical error diagnostics.
3. Data processed
Data deliberately submitted by the user through the form
- name;
- email address;
- message subject;
- message content.
Consent evidence recorded by the server
- information about the consent being given;
- consent-text version;
- server-recorded timestamp of consent acceptance.
Technical data when the site and form are used
- IP address;
- technical HTTP request data;
- technical session cookie, PHP session identifier and state, and technical CSRF state;
- technical state of the local CAPTCHA;
- data necessary for request-rate limiting and concurrent-submission locking;
- web-server access-log data described below.
Technical processing may occur before the form is submitted and before the consent checkbox is selected. Not all technical data is stored: retention depends on the purposes of processing and legal requirements.
The form is not intended for special categories of personal data or biometric personal data. Do not submit such information through the form.
4. Bases for processing
Contact-form data — separate consent
The name, email address, message subject, and message content deliberately submitted by the user through the form are processed on the basis of the user's separate consent (Article 6, Part 1, Item 1 of Federal Law No. 152-FZ “On Personal Data”). The form can be submitted only after this consent is given. The text is published on the separate “Personal Data Processing Consent” page.
Technical processing — the operator's rights and legitimate interests
Necessary technical data, including the IP address, HTTP request data, session, CSRF, local CAPTCHA, request-rate limiting, concurrent-submission locking, and web-server access logs, is processed to keep the site and form operational, secure, and diagnosable. This processing may begin when the user accesses the site, before the contact form is submitted.
Processing is limited to what is necessary to operate and protect the site and form and is based on the need to exercise the operator's rights and legitimate interests, provided the user's rights and freedoms are not violated (Article 6, Part 1, Item 7 of Federal Law No. 152-FZ). Consent given when the form is submitted applies to the personal data the user submits through the form and is not the legal basis for this technical processing.
Proof of consent — the operator's legal obligation
The fact of consent, its text version, and the server-recorded timestamp are recorded and processed to fulfil the operator's legal obligation to provide proof that consent was obtained (Article 9, Part 3 of Federal Law No. 152-FZ). The basis for this processing is performance of an obligation imposed by law (Article 6, Part 1, Item 2 of Federal Law No. 152-FZ).
5. Processing, storage, and deletion
Processing is performed using automated means to the extent necessary for the purposes stated in this Policy. Contact-form data is used to receive and process the message and reply to the user.
For this Policy, the purpose of processing a contact-form message is considered achieved after the message has been handled and the necessary related correspondence has ended.
Personal data is kept no longer than necessary for the purposes of processing or as required by applicable law. When the purposes of processing are achieved or consent is withdrawn, and there is no other lawful basis for continued processing, processing is stopped and the data is deleted or destroyed in the manner and within the periods required by law.
6. Technical data, cookies, sessionStorage, and localStorage
The site uses a technical session cookie required for CSRF protection and the local CAPTCHA. This cookie is not used for advertising or analytics.
The IP address is used by technical form-protection mechanisms, including request-rate limiting and concurrent-submission locking.
sessionStorage is used within the current tab to temporarily store technical state for the local CAPTCHA, including the challenge identifier, its expiration time, and language. The personal-data consent state and contact-form field contents are not stored in sessionStorage.
localStorage is used only to remember the user's selected site theme.
The current site does not use advertising or analytics trackers or third-party CAPTCHA providers.
Technical data, cookies, sessionStorage, and localStorage are used only to operate, protect, and diagnose the site and form and to keep user site preferences; they are not used for advertising, marketing, analytics tracking, or profiling.
Web-server access logs
Ordinary web-server access logs are maintained for site operation, technical error diagnostics, information security, and abuse detection. They may contain:
- IP address;
- request date and time;
- HTTP request and requested resource;
- response status;
- response body size;
- Referrer, if supplied by the client;
- User-Agent, if supplied by the client.
This data is not used for advertising, marketing, analytical profiling, or behavioral profiling.
Technical logs are retained no longer than necessary for operation, diagnostics, and security purposes or as required by law.
7. User rights and withdrawal of consent
The user may contact the operator at i@alexanderyurchenko.ru regarding personal data processing and may request correction, blocking, or deletion of data where there are applicable grounds.
Consent to personal data processing may be withdrawn by contacting i@alexanderyurchenko.ru. After receiving a withdrawal, the operator stops processing and destroys the data in the cases and within the periods required by applicable law, unless there is a lawful basis to continue processing without consent.
8. Data protection
At the site level, technical measures used to protect the form include CSRF protection, a local CAPTCHA, request-rate limiting, and concurrent-submission locking. The amount of processed data is limited to what is necessary to operate, protect, and diagnose the site and form, respond to the message, and confirm receipt of consent.
9. Policy updates
The current version of this Policy is published at https://alexanderyurchenko.ru/en/privacy/.
Version of this Policy: .