Consent to processing of personal data

1. Personal data operator

The personal data operator is the company developing the Struktura service (the «Operator»). Legal entity details will be published here after state registration; meanwhile they can be requested at sales@strura.ru.

2. Purposes of processing

The Operator processes personal data for the following purposes:

• registration and identification of the user in Struktura;
• providing access to product features per the chosen plan;
• billing, invoicing, reporting under 54-FZ;
• sending service notifications (plan changes, incidents, updates);
• informational mailings (subject to separate consent).

3. Data processed

• last name, first name, patronymic (if provided);
• email address;
• phone number (if provided);
• login credentials (login, password hash);
• IP address, User-Agent, session metadata;
• content of databases, tables, and documents created by the user;
• legal entity details (for corporate customers);
• payment information (via a payment aggregator, without storing card data).

4. Means of processing

Processing is carried out both with and without automated tools. It includes collection, recording, systematization, accumulation, storage, refinement, use, transfer (provision, access), depersonalization, blocking, deletion, and destruction.

5. Term of processing

Consent is valid from the moment it is given until it is withdrawn by the subject and until the account is deleted. After processing ends, data is retained for the periods required by Russian law (for example, 5 years for primary accounting documents).

6. Transfer to third parties

The Operator may engage third parties to process data on its behalf:

• hosting provider (storage and processing of data on servers);
• email service provider for notifications;
• payment aggregator for accepting payments;
• government authorities — under obligations imposed by Russian law.

All processors are bound by appropriate contracts and data protection obligations.

7. Cross-border transfers

The Operator does not carry out cross-border transfers of personal data. Servers and backups are hosted in the Russian Federation.

8. Subject's rights

The user has the right to:

• receive information about the processing of their personal data;
• demand correction, blocking, or deletion of data;
• withdraw this consent at any time;
• appeal to Roskomnadzor or the courts to defend their rights.

Requests and consent withdrawals are sent to privacy@strura.ru. Request handling takes up to 30 days from receipt.

9. Protection measures

The Operator applies legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, modification, blocking, copying, or distribution. Details — on the security page.