Back to Site

Privacy Policy

Privacy Policy for mhuber.ru

[date]

This Privacy Policy (hereinafter referred to as the "Policy") defines the procedures for processing and protecting the personal data of users of the website mhuber.ru (hereinafter referred to as the "Website"), owned by Matthias Huber, an individual residing in Munich, Germany (hereinafter referred to as the "Operator").

This Policy has been prepared in accordance with Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" (hereinafter "FZ-152"), Federal Law No. 149-FZ of July 27, 2006 "On Information, Information Technologies and the Protection of Information," and Regulation (EU) 2016/679 (GDPR).

1. Key Definitions

1.1. Personal data means any information relating directly or indirectly to an identified or identifiable natural person (data subject).

1.2. Processing of personal data means any action or set of actions performed on personal data, including collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, depersonalization, blocking, deletion, and destruction.

1.3. Operator means Matthias Huber, a natural person who processes personal data.

2. Personal Data Collected

2.1. The Operator processes the following personal data provided voluntarily by the user through the Website's contact form:

  • Name (or alias);
  • Email address;
  • Message text;
  • IP address (recorded automatically upon form submission).

2.2. The Website does not use cookies. The browser's localStorage technology (i18next library) is used solely to save interface language preferences. LocalStorage data is stored exclusively on the user's device and is not transmitted to the server.

2.3. The Website does not use third-party analytics systems, advertising trackers, or any other means of tracking user behavior.

3. Purposes of Data Processing

3.1. Personal data is processed exclusively for the following purposes:

  • Processing incoming inquiries and responding to user messages;
  • Conducting business correspondence;
  • Providing requested information about services.

3.2. The Operator does not engage in user profiling and does not make decisions based on automated data processing.

4. Legal Basis for Processing

4.1. Personal data is processed based on the consent of the data subject (Article 6(1)(1) of FZ-152), expressed by completing and submitting the contact form with consent to this Policy.

4.2. Under GDPR, the legal basis is the consent of the data subject (Article 6(1)(a) GDPR) and/or the legitimate interest of the Operator in processing inquiries (Article 6(1)(f) GDPR).

5. Processing Procedures and Retention Period

5.1. Personal data is processed for the period necessary to achieve the purposes of processing, but no longer than 1 (one) year from the date of the user's last inquiry, after which the data is destroyed.

5.2. Data destruction is carried out by irreversible deletion of records from the database.

6. Personal Data Protection

6.1. The Operator implements the following organizational and technical measures to protect personal data:

  • Data encryption in transit using TLS protocol (Let's Encrypt certificates);
  • Data encryption at rest using the AES-256-GCM algorithm;
  • Data storage in an SQLite database on a server with restricted access;
  • Only the Operator has access to personal data;
  • Regular server software updates.

6.2. Data is stored on a VPS server located in Germany.

7. Transfer of Personal Data to Third Parties

7.1. The Operator does not transfer personal data to third parties, except in cases directly provided by the legislation of the Russian Federation (upon request of authorized government bodies).

7.2. Cross-border data transfer is not carried out. Data is processed exclusively by the Operator on a single server.

8. Rights of the Data Subject

8.1. The user has the right to:

  • Obtain information about the processing of their personal data (Article 14 of FZ-152);
  • Request correction, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purposes (Article 14 of FZ-152);
  • Withdraw consent to the processing of personal data (Article 9(2) of FZ-152);
  • File a complaint about the actions or inaction of the Operator with the authorized body (Roskomnadzor) or a court.

8.2. Under GDPR, EU users also have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing.

8.3. To exercise their rights, the user may send a request to the email address: [email].

8.4. The Operator undertakes to review the request within 10 (ten) business days (under FZ-152) or 30 (thirty) days (under GDPR).

9. Data Localization

9.1. The Operator informs users that, in accordance with Article 18(5) of FZ-152, when collecting personal data of citizens of the Russian Federation, recording, systematization, accumulation, storage, clarification, and extraction must be carried out using databases located in the territory of the Russian Federation.

9.2. The Operator is a natural person registered outside the Russian Federation. Data is stored on a server in Germany. By submitting the contact form, the user confirms awareness of the data storage location and consents to data processing outside the territory of the Russian Federation.

10. Changes to the Policy

10.1. The Operator reserves the right to amend this Policy. The current version is published on the Website with the date of the last update.

10.2. By continuing to use the Website after changes have been made, the user confirms consent to the updated Policy.

11. Operator Contact Information

Matthias Huber
Address: [address], Munich, Germany
Email: [email]