Personal Data Processing Policy

Effective 1 October 2026

1. General

1.1. This Policy describes how Individual Entrepreneur Andrei Aleksandrovich Borodachev (Taxpayer ID (INN) 732814297169, registration number (OGRNIP) 321732500041865, Ulyanovsk, Ulyanovsk Region, Russia; the "Operator") processes the personal data of visitors to forgevis.com and forgevis.ru (the "Site").

1.2. The Policy follows Russian Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (the "Law") and is published openly as required by Article 18.1(2) of the Law.

1.3. How the Site uses cookies is set out in the Cookie Policy. The consent a visitor gives when sending the contact form is set out in the Consent to the Processing of Personal Data.

2. What data is processed

2.1. Visit data — only if the visitor has accepted cookies:

• cookie identifiers;
• IP address;
• browser, device and operating system details;
• pages viewed, referring source, date and time of the visit;
• actions on the Site: link clicks, clicks, scrolling.

This data is collected by the Yandex Metrica service. Session recording (Webvisor) is not used.

2.2. Enquiry data — when the visitor sends the contact form: name, email address and whatever the visitor chose to write in the message.

2.3. Technical request data: IP address, date and time of the request, the address requested, browser details. The web server records it on every request to the Site.

2.4. The Operator does not process special categories of personal data or biometric personal data.

3. Purposes

Data	Purpose
Visit data (2.1)	Analysing traffic and improving the Site
Enquiry data (2.2)	Considering the enquiry and answering it
Technical request data (2.3)	Keeping the Site running and secure

4. Legal grounds

4.1. Visit data — the visitor's consent (Article 6(1)(1) of the Law), given with the "Accept" button in the cookie notice.

4.2. Enquiry data — the visitor's consent (Article 6(1)(1) of the Law), given by ticking the box in the contact form; its text is the Consent to the Processing of Personal Data.

4.3. Technical request data — the Operator's rights and legitimate interests in keeping the Site running and secure (Article 6(1)(7) of the Law).

5. How data is processed

5.1. Processing is automated and includes collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer (provision, access), depersonalisation, blocking, deletion and destruction.

5.2. The personal data of citizens of the Russian Federation is recorded, systematised, accumulated, stored, clarified and retrieved in databases located in the Russian Federation.

5.3. Personal data is not transferred across borders.

6. Disclosure to third parties

6.1. Visit data is passed to Yandex LLC (OGRN 1027700229193, 16 Lva Tolstogo St., Moscow, 119021, Russia) for processing in the Yandex Metrica service under that service's terms.

6.2. Enquiry data is not passed to third parties: the message arrives at the Operator's own mail server.

6.3. Technical request data and enquiry data are stored on the servers of the hosting provider that hosts the Site and the Operator's mail server.

6.4. Data is disclosed to anyone else only where the law of the Russian Federation requires it.

7. Retention

7.1. Visit data is processed until consent is withdrawn or the purpose is achieved.

7.2. Enquiry data is kept for 1 year from the last message of the enquiry, or until consent is withdrawn if that comes sooner.

7.3. Technical request data is kept no longer than needed to keep the Site running and secure, and no longer than 1 year.

7.4. When the period ends, consent is withdrawn, or a visitor lawfully asks, the data is destroyed or depersonalised within the periods set by Article 21 of the Law.

8. Your rights

You may:

• obtain information about the processing of your personal data (Article 14 of the Law);
• require your data to be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose;
• withdraw your consent: with Cookie settings or by a request to the address in section 9;
• appeal against the Operator's actions to Roskomnadzor (the Russian data protection authority) or in court.

9. Requests

Send requests about personal data to info@forgevis.ru. The Operator replies within 10 working days of receiving a request. This may be extended by up to 5 working days, in which case the Operator gives the reason.

10. Security

The Operator takes the legal, organisational and technical measures set out in Article 19 of the Law to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, disclosure and other unlawful acts.

11. Changes

The Operator may change this Policy. A new version takes effect when it is published on this page; its date is shown at the top.