Kristina Consent to the processing of personal data
Legal force. Only the Russian version of this document has legal effect. This translation is provided for convenience; if the two differ in any way, the Russian original governs — read the original. The service is operated under the law of the Russian Federation, and the Russian text is the one a court, a regulator and the parties rely on.
Before the public launch: the owner of the service must fill in, in section 1, the name of the Operator (or the sole trader’s full name), its tax and registration numbers, its address and a working email address — the same details as in section 11 of the offer and on the “Contacts” page. These details are not in the repository, so they have deliberately not been filled in: a consent that does not name the Operator does not meet the requirement that consent be informed.
By ticking “I consent to the processing of my personal data” in the registration form on kristina-ai.ru, I, acting of my own free will and in my own interest, in accordance with article 9 of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, consent to the processing of my personal data on the terms set out below.
1. The Operator
Mandatory before publication: the full name of the company or the sole trader’s full name, the tax number (INN), the registration number (OGRN or OGRNIP), the registered and postal address, and a working email address for personal data enquiries.
2. Whose data this consent covers
2.1. This consent is given in respect of the personal data of the person registering a company in the service or obtaining access to the account area — that is, my own.
2.2. It does not cover the personal data of the company’s customers and visitors that reaches the service through the connected channels. For that data the company itself is the operator, and the owner of the service processes it on the company’s instructions (part 3 of article 6 of Law No. 152-FZ). It is for the company to ensure lawful grounds for transferring such data to the service, including obtaining the necessary consents; the allocation of roles between the parties is fixed by section 8 of the public offer.
3. Purposes of processing
3.1. Registering a company and creating an account; authentication and access control in the account area; confirming the email address; giving access to a plan and keeping track of its limits; taking payment and issuing the fiscal receipt; sending service messages about the operation of the service, the account and payment; dealing with enquiries, complaints and refund requests; protecting the service against unauthorised access and abuse; proving that this consent was obtained.
3.2. This consent does not extend to advertising and marketing mailings. Consent to those is requested separately, is given voluntarily, and its absence affects neither registration nor access to the service.
4. The personal data covered
- email address;
- password held as a cryptographic hash;
- role in the company and account status;
- the name of the company I act for and my link to it;
- access records: dates of sign-in, email confirmation and password change;
- plan, payments and access period;
- technical data about requests to the service, including the IP address, to the extent needed to protect against abuse;
- the date and revision of the documents I have accepted.
Special categories of personal data and biometric personal data are not part of this list and are not covered by this consent.
5. The operations covered
5.1. Collection, recording, systematisation, accumulation, storage, updating (refreshing, amending), retrieval, use, transfer (provision, access) to the persons named in the personal data processing policy, de-identification, blocking, deletion and destruction.
5.2. Processing is carried out by mixed means — with and without the use of automation.
5.3. Decisions producing legal effects in respect of me are not taken solely on the basis of automated processing of personal data.
6. Term of the consent
The consent is in force from the moment it is given until the purposes of processing are achieved, until the account is deleted, or until the consent is withdrawn — whichever comes first.
7. How to withdraw it
7.1. The consent may be withdrawn at any time: through the request form or by letter to the Operator’s address given in section 1, sent from the email address given at registration.
7.2. On receiving a withdrawal, the Operator stops processing and destroys or de-identifies the personal data within a period not exceeding thirty days (part 5 of article 21 of Law No. 152-FZ). This does not apply to data the Operator is required by law to keep, or to data whose processing is permitted without the data subject’s consent — in particular data needed to perform a contract already concluded, to settle payments under it and to defend the Operator’s rights.
7.3. After the consent is withdrawn, the account area cannot be used. Withdrawal of consent by a person acting on behalf of a company does not in itself terminate the contract with that company and does not release it from its obligations to its own customers.
8. Confirmations
By ticking the box I confirm that:
- I am 18 years old or over and have the legal capacity needed to register;
- I am authorised to act on behalf of the company I have named;
- the information I have given is accurate and relates to me;
- I have read the personal data processing policy and the terms of service;
- this consent is given freely, of my own will and in my own interest.