Privacy and Personal Data Processing Policy
This is an English translation provided for convenience. In case of any discrepancies, the Russian version prevails.
1. General provisions
This Privacy Policy (the "Policy") defines how personal data of users of the website https://mvpbistro.ru/ (the "Website") is processed and protected.
The Policy is drawn up in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (as amended by Federal Law No. 266-FZ of 14 July 2022).
Personal data operator:
Sole proprietor Maxim Kazankin
Taxpayer ID (INN): 690901526667
Registration number (OGRNIP): 326480000000310
E-mail: max@mvpbistro.ru
By using the Website or submitting your data through it, you agree to the terms of this Policy. If you do not agree with the Policy, please refrain from using the Website and from providing your data.
2. Categories of data subjects and personal data processed
The Operator processes personal data of the following categories of subjects: prospective and current clients, Website visitors, business partners and contractors.
Depending on how you interact with the Website, the following data may be processed:
- surname, first name, patronymic (if provided voluntarily);
- phone number and e-mail address provided when contacting the Operator;
- the content of enquiries and correspondence with the Operator;
- technical information about the visit: IP address, browser type and version, operating system, date and time of the visit, referrer, pages viewed;
- cookie data and similar tracking technologies.
The Operator does not process special categories of personal data (race or ethnicity, political opinions, religious beliefs, health data, etc.) or biometric data. Personal data of minors is not processed.
3. Purposes and legal grounds of processing
Personal data is processed for the following purposes:
- Handling enquiries and communication – responding to requests, consultations, correspondence initiated by the user. Legal ground: the data subject's consent (Art. 6(1)(1) of Law 152-FZ).
- Contract performance – preparing, concluding and performing service agreements. Legal ground: necessity for contract performance (Art. 6(1)(5) of Law 152-FZ).
- Providing information about services – informing about terms of work, prices and results. Legal ground: the data subject's consent (Art. 6(1)(1) of Law 152-FZ).
- Website usage analysis – improving content, navigation and user experience. Legal ground: the Operator's legitimate interests (Art. 6(1)(7) of Law 152-FZ).
- Legal compliance – fulfilling obligations imposed by the laws of the Russian Federation. Legal ground: fulfilment of the operator's obligations (Art. 6(1)(2) of Law 152-FZ).
4. Personal data operations
The Operator performs the following operations with personal data: collection, recording, systematization, accumulation, storage, refinement (updating, modification), retrieval, use, transfer (in the cases provided for by this Policy), depersonalization, blocking, deletion, destruction.
Processing is carried out both with and without automation tools. Access to personal data is limited to the Operator's authorized persons, to the extent necessary to perform their functions.
5. Processing and storage periods
Personal data is stored for as long as necessary to achieve the purposes of processing, unless the law provides otherwise:
- data from enquiries and correspondence – 3 years from the last interaction;
- data related to contract performance – 5 years from the termination of the contractual relationship (as required by tax and accounting legislation);
- technical data (logs, cookies) – no longer than 1 year;
- data processed on the basis of consent – until the consent is withdrawn, plus 30 days to cease processing.
Upon expiry of these periods, personal data is destroyed or depersonalized.
6. Transfer of data to third parties
The Operator does not sell or transfer personal data to third parties for commercial purposes. Transfer is possible only in the following cases:
- Web analytics services – Yandex Metrica, Google Analytics, Microsoft Bing Webmaster Tools. These services receive technical data about Website visits (IP address, on-site actions, browser parameters) solely for statistical analysis. Each service's own privacy policy governs its data processing.
- Hosting and infrastructure – technical data may be processed on the servers of providers that keep the Website running.
- As required by law – in cases expressly provided for by the laws of the Russian Federation, at the request of authorized state bodies.
All third parties receiving data are required to maintain confidentiality and process the data solely for the stated purposes.
7. Cookies and analytics
The Website uses cookies – small text files stored by the browser on the user's device. Cookies are used to keep the Website working correctly, analyze traffic and improve the user experience.
The Website uses the following categories of cookies:
- Technical (necessary) – enable the Website's core functions, including remembering your choice regarding the cookie banner. No consent required.
- Analytics – allow analyzing traffic and user behavior on the Website. Set by Yandex Metrica, Google Analytics and Microsoft Bing. Applied with your consent.
You can manage cookies in your browser settings: block all cookies, delete stored ones or get notified before a cookie is saved. Note that disabling analytics cookies does not affect the Website, while technically disabling necessary cookies may break its functionality.
8. Cross-border transfer of personal data
The Operator does not maintain its own personal data databases on servers outside the Russian Federation. However, when the web analytics services listed above are used, some technical data (in particular, IP address and browser parameters) may be processed on those services' servers. The terms and geography of such processing are governed by the privacy policies of the respective services.
The Operator does not deliberately transfer personal data submitted by users in enquiries and contact forms across borders.
9. Security measures
The Operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized access, modification, disclosure or destruction (Art. 19 of Law 152-FZ). In particular:
- data is transferred over the secure HTTPS protocol;
- access to data is limited to those who need it to perform their functions;
- authorized persons are familiar with the requirements of personal data legislation;
- if a security incident is detected, the Operator notifies Roskomnadzor within the timeframes established by law.
10. Rights of the data subject
Under Arts. 14–17 and 21 of Law 152-FZ you have the right to:
- Receive information about the processing of your personal data – the list of data, purposes, periods, sources;
- Demand that your personal data be corrected if it is incomplete, outdated or inaccurate;
- Demand that processing be blocked if there are grounds to believe the data is processed unlawfully;
- Demand that your personal data be deleted if it was obtained unlawfully, the purpose of processing has been achieved, or the data is no longer needed for it;
- Withdraw your consent to the processing of personal data. Withdrawal is made by sending a written notice to the Operator. The Operator ceases processing within 30 days of receiving the notice. Withdrawal does not affect the lawfulness of processing carried out before it;
- Appeal against the Operator's actions or omissions to the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor): rkn.gov.ru.
To exercise your rights, send a request to max@mvpbistro.ru. The Operator reviews requests and responds within 30 days.
11. Policy updates
The Operator may amend this Policy without prior notice to users. The current version is always available at https://mvpbistro.ru/en/privacy/.
Continued use of the Website after changes take effect constitutes acceptance of the new version of the Policy.
Last updated: 4 July 2026