This notice explains how personal data is handled on rinvek.com, including the Russian-language pages. It is written to the standards people expect internationally — the categories below follow the structure of the EU General Data Protection Regulation — while the operator is established in Russia and subject to Russian law.
1. Who is responsible
The data controller is Быков Даниил Михайлович, TIN 773374624589, a self-employed sole trader registered in Russia, operating from Москва.
For anything concerning your data — access, correction, deletion, withdrawing consent, complaints — write to hello@rinvek.com.
The controller works alone. No employees, no agencies, no subcontracted processing of your data.
Please note: the controller has no establishment and no representative in the European Union or the United Kingdom. Data is stored in Russia, a country for which the European Commission has not issued an adequacy decision. If that matters to you, please take it into account before sending anything.
2. What is collected
If you send the form. Only what you type into it:
- your name or how to address you — optional;
- one way to reach you: a Telegram username, an email address, a phone number or another messenger handle, your choice;
- a free-text description of your task;
- answers to the short questionnaire: whether you have a live product, a budget range, a timing range, the nature of the work;
- the page the form was sent from, the date and time, and the fact and version of the consent you gave.
If you write to us. The sender address or handle, subject, message body, attachments, technical mail headers and the date.
Special categories of data — health, ethnicity, political or religious views, biometrics — are never requested and are not processed. Please keep them out of your message.
3. Server logs
The web server records an IP address, a timestamp, the requested page and browser details. These entries exist to keep the site up and to stop automated abuse. They are kept for 30 days and then overwritten.
Your IP address is also used to rate-limit the form. It stays in the server's memory for at most 10 minutes, is never written to the enquiries database and is never linked to the content of your message.
4. Why, and on what legal basis
| Purpose | Basis |
|---|---|
| Answering your enquiry, discussing the task, preparing an estimate | Your consent |
| Entering into and performing a contract, invoicing | Performance of a contract |
| Correspondence by email or messenger | Your consent |
| Keeping the site available and free of automated abuse | Legitimate interests |
| Keeping records of income and receipts | Legal obligation under Russian tax law |
Your data is not used for marketing, is not profiled, is not subject to automated decision-making, and is never sold or shared for anyone else's purposes.
5. Who else sees it
Hosting. The enquiries database and the mail server run on a dedicated server rented by the controller, located in Russia. The hosting provider supplies the machine and has no access to the contents.
Telegram notification. So that enquiries get answered the same working day, a notification is delivered to the controller through Telegram; it contains the name, the contact and the text of your enquiry. Telegram's servers are outside Russia. If you would rather your message did not pass through Telegram, email hello@rinvek.com instead of using the form.
Messengers. If you choose a messenger as the way to reach you, the conversation also takes place on that provider's infrastructure under its own terms, which the controller does not govern. Email is always an alternative.
Yandex Metrica. The visit counter passes anonymised information about the visit to Yandex LLC — what exactly is listed in section 10. Metrica's servers are in the Russian Federation. Enquiry data and correspondence are never sent to Metrica.
Public authorities — only where the law requires it and only to the extent required.
No one else.
6. Where it is stored
On a dedicated server located in the Russian Federation. Russian law requires that databases holding personal data of Russian citizens be located in Russia, and the same server holds all enquiries regardless of where the sender is.
7. How long it is kept
- Enquiry data — as long as needed for the purposes above, and no longer than three years from your last contact.
- Correspondence — no longer than three years from the last message.
- Contract and accounting records — for the periods Russian tax and accounting law requires.
- Server logs — 30 days.
Withdraw your consent and the data is erased within 30 days, except anything the law obliges the controller to keep.
8. Your rights
You can ask to:
- confirm whether your data is being processed and get a copy of it;
- correct it if it is wrong or out of date;
- erase it;
- restrict or object to processing;
- receive it in a portable, machine-readable form;
- withdraw consent at any time, without giving a reason — this does not affect processing already carried out;
- complain to a supervisory authority. In Russia this is Roskomnadzor; if you are in the EU or the UK you may also approach your national authority, though its jurisdiction over a controller with no EU establishment is limited.
Write to hello@rinvek.com. You will get an answer within 10 working days; if more time is genuinely needed you will be told why, and the extension will not exceed a further 5 working days. Requests are answered free of charge.
So that your data is not handed to someone else, send the request from the same address or handle you originally used, or be ready to confirm your identity some other reasonable way.
9. Security
- The site is served over HTTPS only; mail connections are encrypted.
- Only the controller can reach the server and the admin panel; sign-in is password-protected with a limit on attempts, and the session lives in a hardened cookie.
- The form is rate-limited against automated submission.
- No third-party analytics, advertising or tracking scripts are used. Fonts and scripts are served from our own server, not from an external network.
If a breach occurs, the controller will notify Roskomnadzor within 24 hours of becoming aware of it and report the investigation within 72 hours, as Russian law requires, and will tell affected people.
10. Cookies and analytics
Yandex Metrica. Visits are counted with Yandex Metrica, a service of Yandex LLC. It collects anonymised information about the visit: the page address, where you arrived from, device and browser type, screen size, approximate location from the IP address down to city level, the time and length of the visit, clicks on internal links and where on the page you clicked. To do this it writes cookies to your browser with a lifetime of up to one year.
It also records the browsing session (the "Webvisor" feature): cursor movement, scrolling and clicks. Metrica masks the contents of fields where personal details can be typed. The controller uses this only to see where visitors get stuck.
Metrica data is processed by Yandex LLC under its own terms on servers in the Russian Federation. The controller sees aggregate statistics, not information about an identified person, and does not link it to enquiries.
Please note that this means your visit is measured by a Russian service and the data sits in Russia. If that is not acceptable to you, block cookies for this site — everything on it keeps working without them.
Which cookies are set. Only those Metrica needs to count visits. There are no ad networks, no social pixels and no other trackers. Fonts and scripts are served from our own server, not from an external delivery network.
How to opt out. Block cookies in your browser settings, or install Yandex's own opt-out add-on. The notice shown at the bottom of the site informs you; it does not ask for permission.
The admin panel. One more cookie exists in the private panel at /admin, which only the controller can access. It holds a session identifier, is strictly necessary for signing in, is not readable by page scripts, and is not used for analytics or advertising.
11. Children
The site and the services are meant for adults. Data about people under 18 is not knowingly collected. If you believe such data has been sent, write to hello@rinvek.com and it will be deleted.
12. Changes
This notice may be updated. The current version is always published here with its date at the top. Material changes to the scope or purposes of processing will not be applied to data already collected without asking you again.
13. Related documents
- Consent to the processing of personal data — the text you accept when you send the form.
- Terms of work — how a contract is formed and performed.