Personal Data Processing Policy

1General provisions#

This Personal Data Processing Policy defines the procedure for processing personal data and the measures taken to ensure its security. It applies to data received by the operator of the DSK studio website when a user browses the site, fills in feedback forms, submits requests, uses cookies, analytics services and other related digital tools.

Personal data operator: Dmitry Alekseevich Starochkin.

Operator address: available on request via the operator's contact email.

Contact email for personal data matters: contact@dskstudio.pro.

Operator website: dskstudio.pro and related pages of the DSK studio project.

By using the site, submitting forms, clicking consent buttons, or continuing to use the site after reviewing its notices and policies, the user confirms that they have read this Policy and understand the data processing conditions set out in it.

This Policy governs data processing specifically in the context of using the site and of initial contact with the operator. Other terms of engagement — including terms of service, project approvals, deadlines, pricing, deliverables and other commercial conditions — are defined separately in correspondence, briefs, proposals, contracts and other documents of the operator.

2Categories of data processed#

• data the user provides voluntarily: name, brand or company, email, Telegram, phone number, links, task description, deadlines, budget, comments and any other information the user enters into a form or message;
• technical and service data generated automatically during use of the site: IP address, cookies, information about the browser, device, operating system, browser language, pages viewed, time of visit, referral source, actions on the site, and other analytical or diagnostic data;
• data transmitted through the built-in contact forms, notifications and external services, including Telegram and Yandex.Metrica.

The operator assumes that the user does not submit excessive, sensitive or otherwise irrelevant data beyond what the purpose of the enquiry requires. Where the user voluntarily provides such information, the user bears responsibility for the fact of having provided it in that scope.

3Purposes of personal data processing#

• receiving, registering and handling enquiries, requests and applications from the user;
• communicating with the user, clarifying project details, preparing a commercial proposal, consultation, mini-audit, response or other business material;
• taking steps at the user's request prior to entering into a contract, and supporting business communication after the initial enquiry;
• maintaining the operability and security of the site, diagnosing errors, and preventing abuse and technical failures;
• analysing traffic, user behaviour, conversions, acquisition channels and overall site performance;
• improving the site's structure, interfaces, content, service quality and user experience;
• protecting the rights and legitimate interests of the operator in the event of disputes, abuse, bad-faith use of the site or violations.

4Legal grounds for processing#

• consent of the personal data subject;
• actions taken at the initiative of the data subject prior to a possible contract, or within the scope of a business enquiry;
• the legitimate interests of the operator in maintaining the site, analysing its effectiveness, protecting its infrastructure, conducting business correspondence and defending its rights, where such interests do not override the rights and freedoms of the data subject;
• other grounds provided for by applicable law.

5Principles and scope of processing#

The operator processes personal data to the extent it reasonably considers necessary to achieve the purposes stated above. The operator may analyse the data received, compare it with data provided by the user within the same enquiry, and use it for subsequent business communication regarding that same request, where this is directly connected to the original purpose of the enquiry.

The operator is not obliged to verify the accuracy of data reported by the user and proceeds on the basis that the user provides current, complete and correct information. The user bears the risk of consequences arising from providing inaccurate, incomplete, outdated or erroneous data.

If the user provides third-party data, the user warrants that they hold the necessary legal grounds, authority and consents for such disclosure to the operator. Otherwise, the risk of any claims connected with such disclosure rests with the user who provided the information.

6Operations with personal data#

The operator may carry out collection, recording, systematisation, accumulation, storage, updating, retrieval, use, analysis, transfer, depersonalisation, blocking, deletion and destruction of personal data, whether by automated means or otherwise.

7Transfer to third parties and external services#

The operator may engage third parties and external digital services to support the operation of the site, receive requests, analyse enquiries, store correspondence, provide technical support, analytics, notifications and business communication. Such services may include hosting providers, analytics providers, email services, CRM systems, messengers and other contractors or tools used by the operator in the course of its activities.

The site uses, in particular, Yandex.Metrica and Telegram. The user understands and accepts that, when using the site and submitting requests, the relevant information may be transmitted to such services to the extent necessary for the corresponding functionality to work.

The operator independently determines which services are used, unless otherwise required by law or by the substance of a specific obligation towards the user.

The operator may transfer data to affiliates, contractors, performers, consultants and other parties involved in handling the enquiry, preparing a proposal, providing technical support for the site, protecting its infrastructure, conducting business communication and safeguarding its legitimate interests, where such transfer is reasonably necessary for those purposes.

8Cookies, analytics and technical identifiers#

The site uses cookies, browser local storage, analytics counters and other technical means necessary for the site to function correctly, to save user settings, analyse user behaviour, improve page structure and assess site performance.

Detailed information on this is set out in a separate Cookie Policy.

9Data retention periods#

Personal data is stored for as long as the operator considers necessary to achieve the purposes of processing, conduct business correspondence, prepare and follow up on a proposal, and protect its rights and legitimate interests, unless otherwise required by law.

Once the purposes of processing have been achieved, or when processing is no longer necessary, the data is subject to deletion, depersonalisation or destruction, unless otherwise required by law or by accounting, tax, contractual or other mandatory record-keeping requirements.

The operator may retain records of the fact of an enquiry, business correspondence, communication history, request parameters and related technical records to the extent necessary for internal record-keeping, confirming the circumstances of the interaction, preventing repeated abuse, resolving disputes and protecting its rights.

10Rights of the data subject#

• to obtain information about the processing of their personal data;
• to request that data be updated, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
• to withdraw consent to the processing of personal data;
• to lodge a complaint with the competent authority or with a court.

Withdrawal of consent does not affect the lawfulness of processing carried out before the operator received such withdrawal, and does not prevent processing in cases where it is permitted on other lawful grounds.

The exercise of these rights must not infringe the rights and legitimate interests of the operator, its contractors, counterparties or other persons, and must not obstruct processing that is necessary to comply with legal obligations, maintain records, confirm the facts of an interaction, protect against abuse, handle claims and resolve disputes.

11Withdrawal of consent and handling of requests#

To withdraw consent, update data or submit a request, the data subject may contact the operator at: contact@dskstudio.pro. The operator may ask the applicant for reasonable information necessary to identify the request and confirm its connection to a previously submitted enquiry.

The operator is not liable for being unable to fulfil a request where the enquiry does not allow the data subject to be identified, contains insufficient information, or is submitted in breach of reasonable requirements for verifying the applicant's identity.

The operator may decline repeated, manifestly unfounded, excessive, contradictory, anonymous or abusive requests, to the extent permitted by law and provided this does not prevent compliance with mandatory legal requirements.

12Data protection measures#

The operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, disclosure, distribution and other unlawful acts.

At the same time, the user understands that the functioning of the Internet, software, external services and communication channels cannot in itself guarantee absolute security or error-free data exchange.

The operator does not guarantee uninterrupted and error-free operation of the site, external integrations, communication channels, counters, payment, email, cloud, analytics and communication services where disruptions are caused by circumstances beyond the operator's reasonable control.

13Limitation of liability#

The operator is not responsible for data processing by third-party websites, services and platforms that the user visits via external links from the site. The user is responsible for reviewing the policies and terms of such third parties independently.

The operator is likewise not responsible for consequences arising from the user providing inaccurate, excessive or third-party personal data without the corresponding authority and legal grounds.

The presence on the site of forms, contact buttons, service descriptions, case studies, materials, or information about timelines, processes or formats of engagement does not mean that the operator unconditionally accepts every enquiry, undertakes to enter into a contract, to perform work on particular terms, or to provide services to every person who makes contact.

The operator may, at its discretion, decline further engagement where the content of an enquiry is unlawful, offensive, made in bad faith, technically harmful, knowingly false or abusive, or where handling the enquiry objectively requires additional identification, confirmation of authority or clarification of data.

14Changes to this Policy#

The operator may amend this Policy at any time where this is required to reflect the actual operation of the site, changes to services, business processes, legal requirements or ways of interacting with users. The current version is published on this page and takes effect from the moment of publication, unless the version itself specifies a different date.