Consent to the Processing of Personal Data
Last updated 2026-08-05
This is the full text of the consent you give when you submit the contact form on this site. It lists who receives your data, exactly what data that is, why we need it, how long we keep it and how you can withdraw the consent.
There is no separate checkbox in the form: the consent is given by pressing the submit button, and the links to this page and to the privacy policy are printed right next to it. If you do not agree with these terms, do not submit the form — write to us by email or call instead.
Who receives your consent
The consent is given to the personal data operator — the following company of the InnovaTech group:
Innovatech RUS Limited Liability Company (Innovatech RUS LLC, official name: ООО «ИННОВАТЕК РУС»), registered in the Russian Federation. INN (taxpayer number) 6732238725, OGRN (state registration number) 1226700021020, KPP (tax registration code) 673201001. Registered address: office 600-1, 3 Dokhturova Street, Smolensk 214000, Smolensk Region, Russia.
Person responsible for organising personal data processing: Director of Innovatech RUS LLC Aleksey Nikolaevich Pavlov (innovatech-rus@mail.ru, +7 910 110 73 77).
Processing is carried out under Article 9 of Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection” and the Law of the Republic of Belarus No. 99-Z of 7 May 2021 “On Personal Data Protection”.
What data you submit
The form asks for a single contact of your choice — either a phone number or an email address. It has no fields for a name, a company or a message.
Together with that contact, technical details of the visit are attached to the request automatically:
- the address of the page the form was sent from and the section it was opened from;
- the interface language;
- the referrer — the address you came to the site from;
- the UTM tags of an advertising campaign, if you arrived through an ad link;
- the browser and device type (user agent);
- the date and time the request was received;
- the IP address.
The IP address is used only to protect the form from automated submissions: it is not written to the request log, the email or the manager's notification.
We do not collect special categories of personal data (health, beliefs, criminal record) or biometric data, and we ask you not to include them in your message.
Why we process this data
There is one purpose: to answer your request. That means contacting you through the details you left, clarifying the task, preparing and sending a commercial proposal or a calculation, and corresponding about the project afterwards.
Your contact is not used for marketing mailings, is not passed to third parties for their own purposes and is never sold.
What we do with the data
The consent covers collection, recording, systematisation, accumulation, storage, adjustment (updating, modification), retrieval, use, transfer (provision, access), depersonalisation, blocking, deletion and destruction of personal data.
Processing is mixed: some operations are automated (delivering the request to the mailbox, the spreadsheet and the messenger), the rest is done manually by the sales team. We do not take decisions producing legal effects on a purely automated basis.
Who the data is shared with
The request reaches the sales team through services that act on our instructions and may not use the data for their own purposes:
- Telegram Messenger (Telegram FZ-LLC) — notification to the manager;
- Google LLC — the request log in Google Sheets via Google Apps Script;
- the email provider that duplicates the request to a work address: Resend, Inc. or the company's own mail server.
Some of these services are located outside Russia, Belarus and Kazakhstan, so the processing involves a cross-border transfer of data — by submitting the form you consent to that transfer as well.
Beyond the list above, data may only be disclosed in cases directly provided for by law, for example upon a reasoned request from a competent state authority.
How long the consent lasts
The consent is valid until the purpose of processing is achieved, but no longer than 3 years from your last enquiry — a period that covers the negotiation cycle and the warranty obligations for a project. If the negotiations do not go ahead, the data is deleted within 1 year.
Before that, the consent ends when you withdraw it.
How to withdraw the consent
Send an email to innovatech-rus@mail.ru with the subject “Withdrawal of consent” and state the contact you left in the form — that is how we find the request. No special form or paper application is needed.
We delete the data within 30 days and confirm the deletion by email. After a withdrawal we can no longer continue the correspondence about your request: there is nothing left to reach you with.
A withdrawal does not affect the lawfulness of processing carried out before it. In certain cases the law allows an operator to keep the data even after a withdrawal — for example, until the retention periods for transaction documents expire.
What you confirm when you submit the form
By submitting the form you confirm that you act voluntarily and in your own interest, and that the data you provide is accurate and belongs to you or that you are authorised to provide it on behalf of an organisation.
If you leave someone else's contact details — a colleague's or a manager's — you confirm that you have obtained their consent to pass those details to us.
How the consent is recorded
The consent is given by an affirmative action — pressing the submit button under the text that links to this document and to the privacy policy.
The date and time of submission, the page address and the interface language are stored together with the request, so it is clear which wording you saw. The date of the current version is shown at the top of this page.
Where to write
For any question about the processing of your data, including withdrawal of consent, access to the data and its deletion, write to innovatech-rus@mail.ru. We reply within 30 days.
The full list of your rights and how to exercise them is set out in the privacy policy.