Privacy Policy

1. General provisions

OPTION LEGAL acts as the operator of personal data (as defined below) and complies with the requirements of the laws and regulations of the Russian Federation on information protection and personal data (in particular, Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and other applicable acts).

1.1. Key terms

Automated processing of personal data

The processing of personal data using computing equipment.

Blocking of personal data

The temporary suspension of personal-data processing (except where processing is necessary to clarify the personal data).

Confidentiality of personal data

The mandatory requirement not to disclose personal data to third parties and not to distribute it without the data subject's consent or other ground established by federal law.

Processing of personal data

Any action or set of actions performed on personal data, with or without the use of automation tools, including collection, recording, systematisation, accumulation, storage, refinement (updating, modification), retrieval, use, transfer (distribution, provision, access), de-personalisation, blocking, deletion and destruction of personal data.

Operator of personal data

A natural person, sole entrepreneur or legal entity that, alone or jointly with others, organises and/or carries out processing of personal data and determines the purposes of processing, the composition of the personal data being processed and the actions performed on it. The operator of personal data is OPTION LEGAL.

Mixed processing of personal data

The processing of personal data carried out partly using computing equipment and partly without the use of such equipment.

Personal data

Any information relating directly or indirectly to an identified or identifiable natural person (the data subject). The data subject is You, the user of the Site (the "User").

Cross-border transfer of personal data

The transfer of personal data to the territory of a foreign state, to a foreign authority, foreign natural person or foreign legal entity.

Destruction of personal data

Actions as a result of which it becomes impossible to restore the content of personal data in the personal-data information system and/or as a result of which the physical media bearing the personal data are destroyed.

1.2. Key rights and obligations

The User has the following rights in connection with OPTION LEGAL's processing of personal data:

• To withdraw consent to the processing of Your personal data.
• To access Your personal data and, in particular, to obtain the following information:
  • the purposes of processing of personal data;
  • the categories of personal data being processed;
  • the list of personal data being processed and the source of its receipt;
  • information about persons who have access to the personal data or to whom such access may be granted;
  • the periods of processing of personal data, including storage periods;
  • other information in accordance with the applicable laws of the Russian Federation.
• To require the clarification, exclusion or correction, as well as the blocking and destruction, of incomplete, inaccurate, outdated, unreliable or unlawfully obtained personal data.
• To exercise other rights in the field of personal-data protection provided for by applicable Russian law.

2. Purposes of personal-data collection

We process personal data on the Site for the following purposes:

• handling of incoming enquiries and provision of legal advice at the User's request;
• communication with the User in connection with the matter raised;
• maintenance of a database of contacts of prospective and existing clients;
• provision of subscriptions to information and marketing materials (with the User's separate consent);
• technical operation of the Site.

3. Legal grounds for processing of personal data

• consent to the processing of personal data;
• processing of personal data is necessary for the performance of a contract to which the User is a party or beneficiary;
• processing of personal data is necessary for the exercise of OPTION LEGAL's rights and legitimate interests;
• other lawful grounds provided for by Russian law.

4. Scope and categories of personal data processed

Through the Site We collect the following categories of Users' personal data:

• name (or any other identifier provided by the User);
• email address or telephone number (at the User's choice);
• the content of the User's enquiry;
• IP address and information about the User's browser and device, automatically captured when the form is submitted;
• technical cookie files necessary for the correct operation of the Site;
• de-identified information about visits to the Site collected by the "Yandex Metrica" web-analytics service, where the User has consented to analytics cookies.

5. Procedure and conditions for processing of personal data

We process personal data on the Site by mixed means — partly using automation tools and partly without the use of such tools — by the following methods: collection, recording, systematisation, accumulation, storage, refinement (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion and destruction of personal data. Decisions producing legal effects for the User or otherwise significantly affecting their rights and legitimate interests are not made on a solely automated basis.

Storage and processing of Users' personal data are carried out using databases located in the territory of the Russian Federation. Recording, systematisation, accumulation, storage, refinement (updating, modification) and retrieval of Users' personal data using databases located outside the Russian Federation are not carried out.

To ensure the operation of the Site, intake of enquiries and traffic analytics, We may engage service providers (in particular, hosting, communication services, accounting and legal services) operating in the territory of the Russian Federation that process personal data on our instructions, subject to confidentiality obligations and the requirements of Russian law.

The Site collects technical cookie files necessary for the correct operation of the Site (session support, response-time monitoring, retention of user preferences). Where the User has consented, the Site also uses the "Yandex Metrica" web-analytics service (rights holder — Yandex LLC, Russian Federation); consent may be withdrawn at any time through the cookie banner interface.

Cross-border transfer of personal data may be carried out by the Operator subject to compliance with the requirements of the legislation of the Russian Federation.

We also comply with the personal-data confidentiality requirements set out in Article 7 of Federal Law "On Personal Data".

6. Transfer of personal data to third parties

We may transfer Your Personal Data to:

• Service providers — persons that process Personal Data on our behalf and in accordance with our written instructions to support our activities (providers of hosting, communication services, accounting and legal services), operating in the territory of the Russian Federation. We enter into agreements with such persons that ensure that Personal Data is processed solely on our instructions and that the security and confidentiality of Personal Data is maintained.
• State authorities — in cases and in the manner established by Russian law, including in response to reasoned requests from inquiry, investigation, judicial and other authorised bodies.
• Other persons — in cases expressly provided for by Russian law or with the User's consent.

7. Data security

We apply technical and organisational security measures to protect Your Personal Data against unlawful or accidental access, destruction, modification, blocking, copying, provision and distribution. Such measures include, in particular, restricting access to Personal Data to a circle of authorised persons, using secure communication channels for data transmission, monitoring the measures taken and assessing their effectiveness.

Given the nature of the Internet as an open global communications system, We cannot guarantee that any information, while being transmitted or stored in our systems, will be absolutely protected from adverse impact. Email is not an absolutely secure means of transmitting information and is not recommended for sending confidential information.

8. Information storage

We retain Your Personal Data only for as long as necessary for the purposes of processing such information as set out in this Privacy Policy, or for a longer period in accordance with applicable legal, regulatory, accounting or reporting requirements.

The conditions for terminating the processing of Personal Data are achievement of the purposes of processing and withdrawal by the data subject of consent to the processing of his/her Personal Data.

9. Exercising rights and contacts

To withdraw consent to the processing of Personal Data, to exercise any rights and on any other matters connected with the processing of Personal Data, please send the relevant request to the email address: info@option.legal. The address for postal correspondence is provided by the Operator on request.

10. Notifications of changes

OPTION LEGAL reserves the right to change and update this Privacy Policy as our practices for processing Personal Data evolve or in response to applicable legal or regulatory requirements. The date of the latest version is shown at the end of this document, and We recommend that You review this Privacy Policy from time to time. Where any changes require new consent, the User will be notified.