Personal Data Processing Policy

Version of 09.10.2026 · stsys.ru

This is a courtesy translation. The authoritative text is the Russian version at stsys.ru/privacy/; in case of any discrepancy, the Russian version prevails.

1. General provisions

1.1. This Policy defines how the personal data of users of the website stsys.ru (the “Website”) is processed and protected, and has been prepared in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.

1.2. The personal data operator is the limited liability company “Sistemy Khraneniya” (the “Operator”):

1.3. By using the Website and submitting a request through the contact form, the user confirms that they have read this Policy and consent to the processing of their personal data on the terms set out below.

2. What data we process

2.1. Data that the user enters in the request form: name, telephone number, e-mail address (optional), and the text of the task or comment.

2.2. Technical data transmitted automatically when a request is sent: IP address, the address of the Website page from which the form was sent, and the date and time of sending.

2.3. Website usage data collected by the web analytics service Yandex.Metrica (cookies, information about pages visited, device and browser type). This data is used in aggregated form to assess how the Website performs. The user can disable cookies in their browser settings.

2.4. The Operator does not process special categories of personal data or biometric personal data and does not ask users to provide them.

3. Purposes of processing

• receiving and reviewing requests, contacting the user to clarify the task;
• preparing and sending price calculations, commercial proposals and replies to enquiries;
• concluding and performing contracts, if the request leads to cooperation;
• ensuring the operation and security of the Website, protection against automated mailings;
• analysing Website traffic and improving its performance.

4. Legal grounds

Processing is carried out on the basis of the user’s consent (clause 1, part 1, article 6 of 152-FZ), which is expressed by submitting the form on the Website; for the conclusion and performance of a contract to which the user is a party (clause 5, part 1, article 6 of 152-FZ); and for the performance of obligations imposed on the Operator by law.

5. Procedure and conditions of processing

5.1. The Operator performs the following actions with personal data: collection, recording, systematisation, accumulation, storage, clarification, use, transfer in the cases provided for in section 6, depersonalisation, blocking, deletion and destruction. Processing is carried out both with and without the use of automation tools.

5.2. A request sent through the form is delivered to the Operator’s corporate e-mail info@stsys.ru and recorded in the service request log on the hosting provider’s server. Access is limited to the Operator’s employees who need it to perform their duties.

5.3. Databases containing personal data of citizens of the Russian Federation are stored and processed in the territory of the Russian Federation. Cross-border transfer of personal data is not carried out.

5.4. The Operator takes legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying and distribution, including: limiting the circle of persons with access to the data, a secure connection (HTTPS) when data is transmitted from the Website, and the use of passwords and a secure SMTP connection when requests are sent to e-mail.

6. Transfer of data to third parties

6.1. The Operator does not sell personal data or transfer it to third parties for marketing purposes.

6.2. Data may be processed on behalf of the Operator by organisations that ensure the operation of the Website and e-mail (the hosting provider, the e-mail service, the web analytics service) under contracts and only to the extent necessary to provide those services.

6.3. Data may be provided to government authorities in the cases and in the manner established by the legislation of the Russian Federation.

7. Retention periods

7.1. Personal data is stored no longer than the purposes of processing require. If cooperation has not begun on the basis of a request, the data is stored for 3 years from the date of the enquiry and then deleted or depersonalised.

7.2. If the user withdraws consent, the Operator stops processing and deletes the data within no more than 30 days from the date the withdrawal is received, unless the law requires otherwise.

8. User rights

8.1. The user has the right to obtain information about the processing of their personal data, to demand that it be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate or not necessary for the stated purpose, and to withdraw consent to processing.

8.2. To exercise these rights, it is sufficient to send a request to info@stsys.ru or to the Operator’s address, stating the name and contact details given in the request. The Operator will reply within the period set by article 20 of 152-FZ (up to 10 working days).

8.3. If the user believes that their rights have been violated, they have the right to apply to Roskomnadzor (the authorised body for the protection of the rights of personal data subjects) or to a court.

9. Final provisions

9.1. The Operator may amend this Policy. The new version takes effect from the moment it is published on the Website, unless the new version provides otherwise.

9.2. The current version of the Policy is always available on the page stsys.ru/privacy/ (Russian) and stsys.ru/en/privacy/ (English courtesy translation).