Privacy policy

The policy is drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 «On Personal Data» and defines how the Operator processes the personal data it receives from clients and visitors of the Site.

The Site has no contact forms, analytics counters or advertising pixels. Contact with the studio happens by phone or through the studio bot on Telegram and MAX — that is where the processing described below begins. The only data about a Site visitor are the web server's technical logs (section 9).

The Operator processes the data a client provides when contacting the studio bot on Telegram or MAX, or by phone:

• name and, where present, the messenger username;
• Telegram and MAX account and chat identifiers — so we can reply;
• phone number — if the client gives it or shares it with the «Share phone» button;
• car make and model;
• details of the services provided: the service, the date of the visit and the final price;
• rewards programme data: points credited, spent and expired, and who referred the client to the programme;
• the content of the correspondence, including photographs of the car that were sent.

The phone number is also used to recognise the same person writing from different messengers, so that their visit history and points are not lost.

The Operator does not process special categories of personal data or biometrics. No analytics, profiling or advertising identifiers are used for Site visitors.

Replying to enquiries, agreeing a time for the inspection and drop-off, providing the services and settling payment for them, and keeping the service history of the car so that a repeat visit does not start from scratch. A separate purpose is the rewards programme: crediting and spending points and notifying about their validity. We do not send marketing mailings: the bot writes to a client only in reply to their enquiry and about the state of their points balance.

Processing is carried out on the basis of the client's consent and to perform the services contract (cl. 5 part 1 art. 6 of 152-FZ). Consent is given in the bot by pressing «I agree, continue»: the Operator records the date of consent and the version of this policy the client agreed to. Before consent is given, the correspondence is not passed to the studio.

The client database and visit history are stored by the Operator on a server located in the Russian Federation (part 5 art. 18 of 152-FZ). Only studio staff have access to it.

Correspondence with the client runs through the Telegram and MAX messengers and is stored on their servers under their own rules, which the Operator cannot influence. Telegram's servers are located outside Russia, so corresponding via Telegram means a cross-border transfer of data (art. 12 of 152-FZ); the client chooses this channel themselves. MAX processes data in Russia. If you would rather not send data through a messenger, contact the studio by phone.

The Operator does not sell personal data and does not pass it to third parties, except where directly required by Russian law (requests from authorised bodies). Message exchange with the client is technically provided by the Telegram and MAX messengers.

The client record, visit history and points are kept while the purpose of processing lasts — that is, while the service relationship and participation in the rewards programme continue — but no longer than 3 years from the last contact. Records with no contact for longer than that are deleted automatically. Once the purpose is achieved, or if consent is withdrawn, the data is deleted. Database backups are kept for no more than 30 days and then destroyed, so deleted data disappears from them within the same period.

A client may obtain information about the processing of their data, request its correction, blocking or deletion, and withdraw consent at any time. A withdrawal of consent is acted on within 10 working days at the latest (art. 21 of 152-FZ).

The quickest way is to send the /forget command to the studio bot on Telegram or MAX: the client record, visit history and points are deleted from the database immediately. Note that the accumulated points balance is cancelled together with the data. An email to info@sixsevendetailing.ru has the same effect.

The Site sets no cookies of its own and uses no advertising pixels. Like any website, the web server keeps a technical request log: IP address, time, requested page and browser details. The log is used to protect the Site against attacks and to fix faults, is not shared with anyone and is kept for no more than 14 days.

The Site may use Yandex Metrica, which collects anonymised visit statistics and sets its own cookies. The counter is not loaded until the visitor presses «Allow» in the banner at the bottom of the screen. If «Essential only» is chosen, no requests are made to Metrica servers at all. Session recording (Webvisor) is switched off. The choice is stored in the browser; clearing the Site data in the browser settings brings the question back.

The second third-party service is the Yandex Maps widget, and it loads only after the visitor presses «Show the map». Once loaded, the widget and the counter may set their own cookies under Yandex's rules, Yandex acting as a separate data operator.

The Operator takes legal, organisational and technical measures to protect data against unlawful access, destruction, alteration and distribution: limiting who has access to the database, storing service credentials in closed form, and transmitting data over the Site exclusively via HTTPS.

The Operator may amend this policy. The current version is always published on this page.

Anatoly Alexandrovich Barbayanov, self-employed (professional income tax)
TIN: 773178422508
Address: 14/1 Kievskaya St., Moscow, Russia
Phone: +7 (977) 779-45-05
E-mail: info@sixsevendetailing.ru