Personal data policy
Version dated 9 October 2026
Controller and scope
The controller is individual entrepreneur Maxim Andreevich Petrov, tax ID 532205085731, registration number 320532100001968. Office: 6/11 Bolshaya Sankt-Peterburgskaya Street, Veliky Novgorod, Russia. Questions, access requests and withdrawal of consent: site@qadi.ru; +7 (921) 024-89-49. This policy applies to adult website visitors and customers. Russian Federal Law No. 152-FZ applies; mandatory rights under other applicable law are not restricted.
Enquiries and lawful grounds
We process your name, email, optional telephone number, selected service and enquiry text to answer the enquiry and agree on services. The basis for the initial enquiry is your separate consent. We record submission time, enquiry ID, consent and its version. Contractual and accounting processing may also be based on the agreement and law. Do not provide passport, health or payment details, document scans or third-party data in this form. Documents needed for services, their legal basis and transfer method are agreed separately.
Processing and recipients
Operations include collection, recording, organisation, storage, correction, retrieval, use, limited disclosure, blocking, deletion and destruction, with and without automation. The form sends data to the website server on Timeweb and then site@qadi.ru. FormSubmit and foreign enquiry-collection services are not used. Hosting and email are provided by AO Timeweb, tax ID 7810353960, 22 Zastavskaya Street, building 2, letter A, Saint Petersburg 196006, Russia, under the relevant contracts. Initial collection and storage take place in Russia. Authorities receive data when legally required. For a contracted service, necessary data may be shared with agreed translators, notaries, delivery providers and competent authorities on an applicable lawful basis. Data is not sold or used for marketing.
Retention
Initial enquiries are processed until completed, for no more than 90 calendar days unless an agreement or other lawful basis arises. Data is deleted within 30 days after the purpose ends or consent is withdrawn unless law permits or requires further processing. Contract, tax and accounting records are retained for legally required periods. These rules cover copies under the controller’s control; deleted records recovered from backups must be deleted again.
Technical data and external sites
The server receives IP address, time, requested page and browser data; hosting logs support security and error investigation, with periods determined by hosting settings. Anti-spam stores a hashed network identifier, time and attempt count, but not enquiry content; records older than 24 hours are cleaned on later form requests. The site has no advertising or analytics cookies, session recording or form storage in localStorage. Telegram and map widgets are not embedded. Their services receive data only after you follow a link or communicate there, under their own rules. Form fields are not inserted into Telegram links.
Rights and security
You may request information, access, correction, blocking or deletion where applicable, and withdraw consent by email. Withdrawal does not invalidate prior lawful processing or remove independent contractual/legal grounds. You may complain to Roskomnadzor or another competent supervisory authority or court. Access is limited to authorised people; HTTPS, server-side validation and anti-spam protect enquiries. No automated decisions with legal effects are made. Policy changes are published here; new purposes requiring consent need new consent.