AEGIS REPUTATION LAB

Privacy Policy

1. General Provisions

This Privacy Policy governing the processing of personal data has been prepared in accordance with Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006 (the "Personal Data Law") and sets out the procedures for processing personal data, as well as the security measures taken by Aegis Reputation Lab (the "Operator") to protect it.

1.1. The Operator regards respect for the rights and freedoms of individuals in the processing of their personal data — including the right to privacy and to personal and family confidentiality — as the most important goal and condition of its activities.

1.2. This Policy applies to all information the Operator may obtain about visitors to the website https://aegisreputationlab.com.

2. Key Terms Used in This Policy

2.1. Automated processing of personal data — the processing of personal data using computing equipment.

2.2. Blocking of personal data — the temporary suspension of processing, except where processing is necessary to verify the personal data.

2.3. Website — the set of graphic and informational materials, together with the software and databases that make them accessible on the Internet at https://aegisreputationlab.com.

2.4. Personal data information system — the totality of personal data contained in databases and the information technologies and technical resources that ensure their processing.

2.5. De-identification of personal data — actions that make it impossible, without additional information, to determine that specific personal data belongs to a particular User or other data subject.

2.6. Processing of personal data — any action (operation) or set of actions (operations) performed on personal data, whether or not using automated means, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (disclosure, access), de-identification, blocking, deletion, and destruction of personal data.

2.7. Operator — a legal entity, sole proprietor, or individual that, alone or jointly with others, organizes and/or carries out the processing of personal data, and determines the purposes of processing, the scope of personal data, and the actions performed with it.

2.8. Personal data — any information relating directly or indirectly to an identified or identifiable User of the website https://aegisreputationlab.com.

2.9. Personal data made available by the data subject for disclosure — personal data to which the data subject has granted access to an unlimited number of persons by giving consent in the manner prescribed by the laws of the Russian Federation.

2.10. User — any visitor to the website https://aegisreputationlab.com.

2.11. Disclosure of personal data — actions aimed at revealing personal data to a specific person or a specific group of persons.

2.12. Distribution of personal data — any actions aimed at revealing personal data to an indefinite group of persons, including publishing it on the Internet or otherwise providing access to it.

2.13. Cross-border transfer of personal data — the transfer of personal data to the territory of a foreign state, to a foreign government authority, or to a foreign individual or legal entity.

2.14. Destruction of personal data — any actions that result in personal data being irretrievably destroyed, such that its content can no longer be restored.

3. Key Rights and Obligations of the Operator

3.1. The Operator has the right to:

  • receive from the data subject accurate information and/or documents containing personal data;
  • where a data subject withdraws consent to the processing of personal data or requests that processing be discontinued, continue processing the personal data without consent where grounds for doing so exist under the laws of the Russian Federation;
  • independently determine the scope and list of measures necessary and sufficient to fulfill its obligations under Russian personal-data legislation.

3.2. The Operator is obligated to:

  • provide the data subject, upon request, with information regarding the processing of their personal data;
  • organize the processing of personal data in the manner established by applicable Russian law;
  • respond to inquiries and requests from data subjects and their representatives;
  • publish, or otherwise ensure unrestricted access to, this Policy;
  • take the legal, organizational, and technical measures necessary to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, disclosure, distribution, or other unlawful actions;
  • cease processing and destroy personal data in the cases and in the manner provided for by Russian law;
  • fulfill other obligations provided for by Russian law.

4. Key Rights and Obligations of Data Subjects

4.1. Data subjects have the right to:

  • receive information regarding the processing of their personal data in the manner and to the extent established by Russian law;
  • require the Operator to correct, block, or destroy personal data that is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose of processing;
  • withdraw consent to the processing of their personal data;
  • demand that processing of their personal data be discontinued;
  • appeal the Operator's actions or omissions to the authorized body for the protection of data subjects' rights, or through the courts;
  • exercise other rights provided for by Russian law.

4.2. Data subjects are obligated to:

  • provide the Operator with accurate information about themselves;
  • promptly notify the Operator of any changes to their personal data, where this is necessary for the relevant purpose of processing.

4.3. Any person who provides the Operator with inaccurate information about themselves, or information about another data subject without that subject's consent, is liable in accordance with Russian law.

5. Principles of Personal Data Processing

5.1. The processing of personal data is carried out on a lawful and fair basis.

5.2. Processing is limited to achieving specific, predetermined, and lawful purposes.

5.3. Processing of personal data for purposes incompatible with the purposes of its original collection is not permitted.

5.4. Only personal data that meets its stated processing purposes is subject to processing.

5.5. The content and scope of personal data processed correspond to the stated purposes of processing. Excessive processing of personal data is not permitted.

5.6. When processing personal data, the Operator ensures its accuracy and sufficiency and, where necessary, its currency relative to the purposes of processing.

5.7. Personal data is retained for no longer than required by the purposes of processing, unless a different retention period is established by federal law or by agreement.

6. Purposes of Personal Data Processing

The Operator may process a User's personal data for the following purposes:

6.1. Handling inquiries, requests, and applications submitted through the website

Personal data:

  • last name, first name, patronymic (if applicable);
  • email address;
  • phone number;
  • other information the User provides in contact forms or messages.

Legal grounds:

  • Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006;
  • consent of the data subject;
  • the necessity of processing to conclude and perform an agreement or to provide services requested by the User.

Types of processing: collection, recording, systematization, accumulation, storage, clarification (updating, modification), use, deletion, destruction.

6.2. Consulting the User and providing services

Personal data:

  • last name, first name, patronymic (if applicable);
  • email address;
  • phone number;
  • other data necessary to provide services or prepare a commercial proposal.

Legal grounds: Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006; consent of the data subject; conclusion and performance of an agreement.

Types of processing: collection, recording, systematization, accumulation, storage, use, clarification, deletion, destruction.

6.3. Sending informational and marketing communications

Personal data: name; email address; phone number.

Legal grounds: consent of the data subject.

Types of processing: collection, recording, systematization, accumulation, storage, use, deletion, destruction, sending emails, messenger communications, or other informational outreach where consent has been given.

6.4. Operating the website, analytics, and improving service quality

Personal data:

  • IP address;
  • cookies;
  • browser, device, and operating system data;
  • technical data regarding site visits, User actions on the site, referral source, and time of visit.

Legal grounds: the User's consent, expressed through use of the website, cookie-banner settings, or another method provided for by law; the Operator's legitimate interest in ensuring the website functions correctly and in improving it, to the extent permitted by applicable law.

Types of processing: collection, recording, systematization, accumulation, storage, use, de-identification, deletion.

7. Conditions for Processing Personal Data

7.1. Personal data is processed with the consent of the data subject, except in cases provided for by Russian law.

7.2. Processing of personal data is necessary to achieve purposes established by law, and to exercise the rights and legitimate interests of the Operator, provided this does not violate the rights and freedoms of the data subject.

7.3. Personal data may be processed in connection with the conclusion and performance of an agreement to which the data subject is a party, or at whose initiative such an agreement is concluded.

7.4. The Operator processes only the personal data necessary to achieve the stated purposes of processing.

8. Collection, Storage, Transfer, and Other Processing of Personal Data

8.1. The security of personal data is ensured through legal, organizational, and technical measures necessary to meet the requirements of Russian law.

8.2. The Operator takes the necessary measures to prevent unauthorized access to personal data and its loss, alteration, disclosure, or destruction.

8.3. The User's personal data is not disclosed to third parties, except in the following cases:

  • where such disclosure is necessary to fulfill obligations to the User;
  • where disclosure is required by Russian law;
  • where the User has given separate consent to such disclosure;
  • where the disclosure is made to parties engaged by the Operator to support website operation, communication with the User, analytics, hosting, CRM, email distribution, and other related services, provided the requirements of personal-data law are observed.

8.4. A User may update their personal data or withdraw consent to its processing by sending a request to the Operator's email address: [email protected]. Suggested subject lines:

  • "Personal Data Update";
  • "Withdrawal of Consent to Personal Data Processing";
  • "Personal Data Inquiry".

8.5. Personal data is processed for as long as necessary to achieve the purposes of processing, unless a different period is established by Russian law, an agreement, or the data subject's consent.

8.6. Processing of personal data may be discontinued upon:

  • achievement of the purposes of processing;
  • withdrawal of consent by the data subject;
  • expiration of the consent period;
  • identification of unlawful processing of personal data;
  • cessation of the Operator's activities;
  • other grounds provided for by Russian law.

8.7. Information collected by third-party services — including, without limitation, web-analytics systems, feedback tools, email services, hosting providers, and other technical contractors — is processed by those parties in accordance with their own privacy policies. The Operator is not responsible for the actions of third parties, except as otherwise provided by Russian law.

8.8. The Operator maintains the confidentiality of personal data and does not disclose it to third parties without lawful grounds.

9. Actions Performed by the Operator with Personal Data

9.1. The Operator performs the following actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (disclosure, access) in cases provided for by law or with the data subject's consent, de-identification, blocking, deletion, and destruction.

9.2. The Operator may carry out both automated and non-automated processing of personal data.

10. Cross-Border Transfer of Personal Data

10.1. The Operator may carry out cross-border transfers of personal data only in compliance with the requirements of Russian law.

10.2. Before initiating a cross-border transfer of personal data, the Operator will ensure that the receiving foreign state provides adequate protection for the rights of data subjects, or that the transfer is otherwise permitted under grounds provided for by Russian law.

10.3. Where the website uses foreign analytics services, CRM platforms, email platforms, advertising accounts, cloud storage, or other overseas services, such transfers may be treated as cross-border. In such cases, the Operator organizes data processing in compliance with the requirements of applicable law.

11. Confidentiality of Personal Data

The Operator, and any other parties who gain access to personal data, are obligated not to disclose or distribute that personal data without the consent of the data subject, except as otherwise provided by Russian law.

12. Use of Cookies

12.1. The website may use cookies and similar technologies to ensure the website functions correctly, to analyze user activity, to improve the user experience, and to personalize content.

12.2. Cookies may contain technical information automatically transmitted by the User's device when visiting the website, including IP address, browser and device data, access times, requested page addresses, and similar information.

12.3. Users may change their cookie settings in their browser. Disabling cookies may cause certain website features to work incorrectly.

13. Final Provisions

13.1. A User may obtain any clarification regarding the processing of their personal data by sending a request to the Operator's email address: [email protected].

13.2. The Operator may amend this Policy without prior notice to Users. A revised version of the Policy takes effect upon publication on the website, unless the revised Policy states otherwise.

13.3. The current version of the Policy is freely available online at: https://aegisreputationlab.com/politika-konfidencialnosti/