Personal Data Processing Policy

Introduction

In this document, OOO STUDIO “ONY” (also referred to in the text as “we”, “us”, “our”) describes the procedure for processing the personal data of visitors to the website https://ony.ru/ and its subdomains, as well as the websites https://themagma.ru/, https://onytype.ru/.

If you have questions about the processing of personal data, you may write a letter: to our address: 123308, Moscow, intracity territory of the municipal district Khoroshevo-Mnevniki, Novokhoroshevsky Proezd, 7, premises 6p, or to our official email address: hello@ony.ru.

We attach great importance to protecting your privacy and the security of your personal data. Please read the Personal Data Processing Policy (hereinafter — the Policy) carefully so that you understand for which purposes we process your personal data and how you can exercise your rights in respect of personal data.

A bit about personal data and your rights during its processing

Personal data — any information that relates, directly or indirectly, to you or allows you to be identified.

Personal data operator — a legal entity or natural person that processes personal data. When you visit our website, we become the operator of your personal data.

Processing of personal data — the performance of any actions with personal data.

In accordance with the Federal Law “On Personal Data”, you have the right to:

  • access personal data;
  • have personal data clarified;
  • have personal data blocked and deleted;
  • appeal against our actions or inaction;
  • appeal against decisions taken solely on the basis of automated processing of your personal data;
  • withdraw consent to the processing of personal data.

How can you exercise your rights?

  • You may submit a formal request to our address (123308, Moscow, intracity territory of the municipal district Khoroshevo-Mnevniki, Novokhoroshevsky Proezd, 7, premises 6p), stating in it: the details of the document proving your identity or the identity of your representative (type of document, series and number, by whom and when issued), your full name or the full name of your representative, information about the nature of your relationship with us that confirms the fact of processing your personal data, and your signature or the signature of your representative. Such a request may be sent to our email in the form of an electronic document signed in accordance with the provisions of the legislation of the Russian Federation on electronic signatures;
  • you may also use our email address for enquiries: hello@ony.ru.

You may appeal against our actions as a personal data operator to the territorial body of Roskomnadzor in your region.

Why do we process your personal data?

In this section we explain the purposes and periods of personal data processing, and also to whom we transfer your personal data.

Within the listed purposes, we will collect, record, systematize, accumulate, store, clarify (update, change), extract, use, transfer (provide, grant access), block, delete, and destroy your personal data.

1. Processing of personal data on the website https://ony.ru/ and its subdomains, as well as the associated web services/applications of the Operator

Sending marketing email newsletters

To subscribe to the newsletter, we will ask you to provide:

  • email address.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data pursuant to clause 1, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the data-collection form.

The data we obtain when your request is submitted is processed until the end of the marketing campaign, until the User sends a request to be removed from the mailing database, or until the Consent to the processing of personal data is withdrawn (whichever occurs first), and is destroyed after 30 days in accordance with parts 4–5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

Collection of feedback

If you wish to contact us on matters related to our activities, you can do so by filling out the feedback forms “Submit a request”, “Discuss a project”, “Contact us”, “Fill out a brief”, as well as by using the contacts published on the website. When processing such a request, the following information about you becomes available to us:

  • surname, first name, patronymic;
  • contact telephone number;
  • email address;
  • information about the company / place of work;
  • information about messenger accounts;
  • information contained in the enquiry.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data pursuant to clause 1, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the data-collection form.

The data we obtain when processing the request is processed until the completion of the interaction within the consultation or until consent is withdrawn (whichever occurs first), and is destroyed after 30 days in accordance with parts 4–5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

Processing of applications from candidates for vacant positions via the questionnaire form

If you wish to submit a resume for the purpose of considering your candidacy for a vacant position, you can do so by filling out the “Questionnaire” form (https://join.ony.ru/). When processing such a request, the following information about you becomes available to us:

  • surname, first name, patronymic;
  • contact telephone numbers;
  • place of work;
  • information about work experience;
  • information about interests;
  • information about knowledge of foreign languages (names of languages and level of proficiency);
  • information about employment history (period of work, name of organization, field of activity, position, functional duties);
  • date of birth;
  • age;
  • desired position;
  • photograph;
  • information about current and desired salary;
  • citizenship;
  • place of birth;
  • email address;
  • information about personal qualities;
  • information about education, qualifications, specialization, retraining;
  • gender.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data pursuant to clause 1, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the data-collection form.

The data we obtain when processing the application is processed for 3 months from the date of sending a refusal of employment in accordance with Articles 391–392 of the Labour Code of the Russian Federation No. 197-FZ dated 30 December 2001, after which it is transferred to archival storage in accordance with archival legislation.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

Publication of reviews

We publish reviews from our clients on the website. As part of such publications, we process the following data:

  • surname, first name;
  • position;
  • company name;
  • photograph;
  • age;
  • text of the review.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10, 11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data authorized by the data subject for dissemination pursuant to Article 10.1 of Federal Law No. 152-FZ.

In the event a review is published, the personal data is processed until a decision is made to delete the page of the Company’s website on which the personal data was published, or until consent is withdrawn (whichever occurs first), after which it is destroyed within 30 days in accordance with parts 4, 5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

Publication of project team members’ data

We publish information about the composition of the teams working on projects. As part of such publications, we process the following data:

  • surname, first name, patronymic;
  • position;
  • place of work;
  • photograph.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10, 11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data authorized by the data subject for dissemination pursuant to Article 10.1 of Federal Law No. 152-FZ.

In the event of publication, the personal data is processed until a decision is made to delete the page of the Company’s website on which the personal data was published, or until consent is withdrawn (whichever occurs first), after which it is destroyed within 30 days in accordance with parts 4, 5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

Processing of applications from prospective strategists and researchers via the website

If you wish to submit an application for the purpose of considering your candidacy as a researcher and/or strategist, you can do so by filling out the “Submit an application” form. When processing such a request, the following information about you becomes available to us:

  • surname, first name, patronymic;
  • information about the Telegram account;
  • specialization;
  • information about yourself;
  • information from a portfolio and/or resume.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data pursuant to clause 1, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the data-collection form.

The data we obtain when processing the application is processed until the end of the interaction regarding the application or until consent to the processing of personal data is withdrawn (whichever occurs first), after which it is destroyed within 30 days in accordance with parts 4–5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

Organization of events

To register for events and for further interaction, the following information about you becomes available to us:

  • surname, first name, patronymic;
  • contact telephone numbers;
  • email addresses;
  • age;
  • position held.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data pursuant to clause 1, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the data-collection form.

The data we obtain when processing the application is processed until the end of the event or until the Consent to the processing of personal data is withdrawn (whichever occurs first), and is destroyed after 30 days in accordance with parts 4–5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

2. Processing of personal data on the website https://themagma.ru/

Collection of feedback

If you wish to contact us on matters related to our activities, you can do so by filling out the feedback form on the website, as well as by using the contacts published on the website. When processing such a request, the following information about you becomes available to us:

  • surname, first name, patronymic;
  • contact telephone number;
  • email address;
  • information about messenger accounts;
  • information contained in the enquiry.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data pursuant to clause 1, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the data-collection form.

The data we obtain when processing the request is processed until the completion of the interaction within the consultation or until consent is withdrawn (whichever occurs first), and is destroyed after 30 days in accordance with parts 4–5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

3. Processing of personal data on the website https://onytype.ru/

Collection of feedback

If you wish to contact us on matters related to our activities, you can do so by filling out the feedback form on the website, as well as by using the contacts published on the website. When processing such a request, the following information about you becomes available to us:

  • surname, first name, patronymic;
  • contact telephone number;
  • email address;
  • information about messenger accounts;
  • information contained in the enquiry.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the Consent to the processing of personal data pursuant to clause 1, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the data-collection form.

The data we obtain when processing the request is processed until the completion of the interaction within the consultation or until consent is withdrawn (whichever occurs first), and is destroyed after 30 days in accordance with parts 4–5 of Article 21 of Federal Law No. 152-FZ.

Upon reaching the said processing periods, the personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

Placing an order

When placing an order, the following information about you becomes available to us if you make a purchase as a natural person:

  • surname, first name, patronymic;
  • email address;
  • name of the higher education institution;
  • data of the study document;
  • order details.

If you make a purchase as a legal entity or individual entrepreneur, the following information becomes available to us:

  • surname, first name, patronymic;
  • email address;
  • name of the higher education institution;
  • data of the study document;
  • name of the organization / place of work;
  • order details.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

The legal basis for processing such personal data is the performance of the Licence Agreement pursuant to clause 5, part 1, Article 6 of Federal Law No. 152-FZ, placed under the hyperlink beneath the order form.

The data we obtain is processed for 5 years after the termination of the Licence Agreement in accordance with Articles 23, 54.1 of the Tax Code of the Russian Federation and Article 29 of the Federal Law “On Accounting”, after which it is transferred to archival storage in accordance with the periods established by archival legislation.

Upon reaching the said processing periods, the personal data is destroyed from the information systems using the built-in tools of the information system.

4. Analytics of website visits

What are cookie files? Cookies are small files, usually consisting of letters and numbers, that are downloaded to a device when you access certain websites. Cookies allow websites to recognize your device.

We want you to be comfortable using all the features of our websites, so for their correct operation we process cookie files: they allow us to recognize you when you visit our websites or use our services, to remember your preferences, and to provide you with a personalized experience.

By purpose, cookie files are divided into:

  • Necessary cookies, which help make the website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies;
  • Statistical cookies, which help website owners understand how visitors interact with websites by collecting and reporting information anonymously;
  • Marketing cookies, which are used to track visitors across different websites. They are intended to display advertising that is relevant and engaging for the individual user and thereby more valuable for website owners and third-party advertisers.

All three types of cookie files are used on our websites.

You can refuse the processing of cookie files using the corresponding settings of your browser.

In addition to cookie files, we use tracking technologies on the websites, such as tags and scripts, to collect and store information about you. When you use our services, the following information about you becomes available to us: your IP address, location (country or city), type and version of your device’s operating system, type and version of the browser on your device, device type and its display resolution, the source of your traffic, the language of the operating system and browser, as well as data about your actions on the internet.

These technologies are used to track your behaviour on the website and to collect statistical information about our client base as a whole in order to improve the services we provide.

Just like most other information resources of organizations, our web servers and security systems store certain temporary technical data in their log files.

Our websites use cookie files and retargeting pixels of analytics services. Cookie files of such third-party services are used by us for statistical, analytical, and marketing purposes. For more details on which services we use, see the section “Transfer to third parties”.

Personal data collected by web analytics services is processed subject to the prior receipt of consent to the processing of personal data, provided by the website User by means of the cookie banner placed on the website’s home page.

The personal data processed for the above purpose does not fall under special categories or biometric personal data pursuant to Articles 10–11 of Federal Law No. 152-FZ and is processed by automated means.

Personal data is processed until the expiry of the lifetimes of the cookie files specified above.

Upon reaching the said processing periods, the User’s personal data is destroyed by deletion from the information systems using the built-in tools of the information system.

You can refuse the processing of cookie files using the corresponding settings of your browser.

5. Transfer of data to third parties

In order to provide services and improve their quality, we transfer information about you to the following third parties:

Processing purposeWeb analytics and cookies
Third partyOOO “Yandex” (Russia), Privacy Policy
Purpose of transferProvider of web analytics services (Yandex Metrica)
Address119021, Moscow, Lva Tolstogo St., 16
Processing purposeWebsite hosting
Third partyOOO “Yandex.Cloud” (Russia), Privacy Policy
Purpose of transferProvider of hosting services
Address119021, Moscow, Lva Tolstogo St., 16
Processing purposeProcessing of applications
Third partyIndividual Entrepreneur Monakhova Olga Igorevna
Purpose of transferProcessing of applications received through feedback-collection forms
AddressRussia
Processing purposePlacing an order
Third partyOOO NKO “YooMoney”, Privacy Policy
Purpose of transferAcceptance and processing of payments
AddressMoscow, Sadovnicheskaya St., 82, building 2
Processing purposePlacing an order
Third partyOOO “AVANPOST”
Purpose of transferAcceptance and processing of payments
Address127015, Moscow, Novodmitrovskaya St., 2, block 1, premises 1/4, premises XXXV

6. Information on the conditions of processing and on the presence of prohibitions and conditions for the processing by an unlimited number of persons of personal data authorized by the data subject for dissemination

With respect to personal data published on the Operator’s website, the following rules and restrictions apply:

  • the transfer of personal data to an unlimited number of persons is not prohibited;
  • the processing of personal data by an unlimited number of persons is not prohibited;
  • the personal data obtained by the Operator may be transferred using information and telecommunication networks.

7. Collection of personal data of minors

Our website is not intended for the processing of personal data of minors. If you have grounds to believe that a child has provided us with their personal data, we ask you to notify us by writing to hello@ony.ru.

8. Data security

The personal data that we collect and store is considered confidential information. It is protected from loss, alteration, or unauthorized access in accordance with the legislation of the Russian Federation in the field of personal data. For this purpose, we apply technical means and organizational measures. We continuously improve our data protection systems.

9. Changes to the Policy

We reserve the right to make changes to our Policy at any time. We ask you to regularly review all updates to our Policy. We will send notifications of changes to the Policy in the event that such changes are material, by the means available to us.