Alexander Yurchenko

Personal Data Processing Policy

1. Operator and scope

Alexander Yurchenko is the operator of personal data processed through alexanderyurchenko.ru.

For questions about personal data processing, contact i@alexanderyurchenko.ru.

This Policy describes personal data processing when alexanderyurchenko.ru, the contact form, and the technical mechanisms required to operate, protect, and diagnose the site and form are used. The Policy is an informational document and does not itself constitute the user's consent to personal data processing.

2. Purposes of processing

Contact-form data

Technical processing and security

3. Data processed

Data deliberately submitted by the user through the form

Consent evidence recorded by the server

Technical data when the site and form are used

Technical processing may occur before the form is submitted and before the consent checkbox is selected. Not all technical data is stored: retention depends on the purposes of processing and legal requirements.

The form is not intended for special categories of personal data or biometric personal data. Do not submit such information through the form.

4. Bases for processing

Contact-form data — separate consent

The name, email address, message subject, and message content deliberately submitted by the user through the form are processed on the basis of the user's separate consent (Article 6, Part 1, Item 1 of Federal Law No. 152-FZ “On Personal Data”). The form can be submitted only after this consent is given. The text is published on the separate “Personal Data Processing Consent” page.

Technical processing — the operator's rights and legitimate interests

Necessary technical data, including the IP address, HTTP request data, session, CSRF, local CAPTCHA, request-rate limiting, concurrent-submission locking, and web-server access logs, is processed to keep the site and form operational, secure, and diagnosable. This processing may begin when the user accesses the site, before the contact form is submitted.

Processing is limited to what is necessary to operate and protect the site and form and is based on the need to exercise the operator's rights and legitimate interests, provided the user's rights and freedoms are not violated (Article 6, Part 1, Item 7 of Federal Law No. 152-FZ). Consent given when the form is submitted applies to the personal data the user submits through the form and is not the legal basis for this technical processing.

Proof of consent — the operator's legal obligation

The fact of consent, its text version, and the server-recorded timestamp are recorded and processed to fulfil the operator's legal obligation to provide proof that consent was obtained (Article 9, Part 3 of Federal Law No. 152-FZ). The basis for this processing is performance of an obligation imposed by law (Article 6, Part 1, Item 2 of Federal Law No. 152-FZ).

5. Processing, storage, and deletion

Processing is performed using automated means to the extent necessary for the purposes stated in this Policy. Contact-form data is used to receive and process the message and reply to the user.

For this Policy, the purpose of processing a contact-form message is considered achieved after the message has been handled and the necessary related correspondence has ended.

Personal data is kept no longer than necessary for the purposes of processing or as required by applicable law. When the purposes of processing are achieved or consent is withdrawn, and there is no other lawful basis for continued processing, processing is stopped and the data is deleted or destroyed in the manner and within the periods required by law.

6. Technical data, cookies, sessionStorage, and localStorage

The site uses a technical session cookie required for CSRF protection and the local CAPTCHA. This cookie is not used for advertising or analytics.

The IP address is used by technical form-protection mechanisms, including request-rate limiting and concurrent-submission locking.

sessionStorage is used within the current tab to temporarily store technical state for the local CAPTCHA, including the challenge identifier, its expiration time, and language. The personal-data consent state and contact-form field contents are not stored in sessionStorage.

localStorage is used only to remember the user's selected site theme.

The current site does not use advertising or analytics trackers or third-party CAPTCHA providers.

Technical data, cookies, sessionStorage, and localStorage are used only to operate, protect, and diagnose the site and form and to keep user site preferences; they are not used for advertising, marketing, analytics tracking, or profiling.

Web-server access logs

Ordinary web-server access logs are maintained for site operation, technical error diagnostics, information security, and abuse detection. They may contain:

This data is not used for advertising, marketing, analytical profiling, or behavioral profiling.

Technical logs are retained no longer than necessary for operation, diagnostics, and security purposes or as required by law.

7. User rights and withdrawal of consent

The user may contact the operator at i@alexanderyurchenko.ru regarding personal data processing and may request correction, blocking, or deletion of data where there are applicable grounds.

Consent to personal data processing may be withdrawn by contacting i@alexanderyurchenko.ru. After receiving a withdrawal, the operator stops processing and destroys the data in the cases and within the periods required by applicable law, unless there is a lawful basis to continue processing without consent.

8. Data protection

At the site level, technical measures used to protect the form include CSRF protection, a local CAPTCHA, request-rate limiting, and concurrent-submission locking. The amount of processed data is limited to what is necessary to operate, protect, and diagnose the site and form, respond to the message, and confirm receipt of consent.

9. Policy updates

The current version of this Policy is published at https://alexanderyurchenko.ru/en/privacy/.

Version of this Policy: .