Personal Data Processing Policy

Version of 06.10.2026

This is an English translation provided for convenience. The legally binding text is theRussian version.

1. General provisions

This policy sets out how personal data of visitors to aristocrat3d.ru (the “Website”) is processed and protected. It has been drawn up in accordance with Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (the “Law”).

Personal data operator: Aristocrat FB LLC (OOO "Aristokrat FB"), INN 7720486700, KPP 772101001, OGRN 1197746659450, address: Apt. 743, 7A Okskaya St, Ryazansky Municipal District, Moscow, 109457, Russia (the “Operator”). Contacts for personal data enquiries: aristocratfb.work@gmail.com, +7 (931) 305-73-35.

The policy is publicly available at https://aristocrat3d.ru/privacy/.

2. Whose data is processed and what data

The Operator processes personal data of Website visitors who submit a request through the contact form:

• name;
• phone number;
• e-mail address;
• any information the visitor provides in the message.

Together with the request, the IP address, browser details and the address of the page from which the request was sent are saved automatically to protect the Website from spam and abuse.

Information about how the visitor found the Website is also saved with the request: traffic sources (utm tags, the address of the referring website), visit dates, pages viewed and the visitor ID in Yandex Metrica — seesection 10.

In addition, when the Website is visited, the Yandex Metrica service collects anonymized visit data — seesection 10.

The Operator does not process special categories of personal data or biometric personal data.

3. Purposes of processing

• reviewing the request and contacting the visitor at their request;
• consulting, estimating costs and preparing a commercial proposal;
• concluding and performing a contract, should the visitor decide to conclude one;
• protecting the Website from spam and abuse;
• assessing the effectiveness of advertising and of the channels through which requests arrive;
• analyzing traffic and improving the Website (Yandex Metrica).

4. Legal grounds

The data subject's consent to the processing of their personal data (clause 1, part 1, Article 6 of the Law), which the visitor gives separately by ticking the corresponding box in the form (consent text), and the conclusion and performance of a contract to which the data subject is a party (clause 5, part 1, Article 6 of the Law).

5. Procedure and conditions of processing

Processing is carried out using automated means and includes collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer (provision, access), blocking, deletion and destruction of personal data.

Recording, systematization, accumulation, storage, clarification and retrieval of personal data of citizens of the Russian Federation are carried out using databases located in the Russian Federation (the Website server is hosted by a Russian hosting provider).

6. Transfer of personal data

The Operator does not sell personal data or transfer it to third parties, except as described below.

• To respond to requests quickly, the Operator receives a notification of each request, containing the data provided in it, via the Telegram messenger and to its Gmail e-mail. If the visitor provided an e-mail address, a confirmation of receipt is sent to it through the same Gmail service. The servers of these services are located outside the Russian Federation (Telegram — United Arab Emirates, Google LLC — USA), so such notifications and e-mails constitute a cross-border transfer of personal data. It is carried out on the basis of the data subject's consent and after notifying Roskomnadzor in accordance with Article 12 of the Law.
• Transfer at the request of authorized government bodies in cases provided for by law.

7. Processing and retention periods

Personal data is processed until the purposes of processing are achieved, but no longer than 3 (three) years from the date of the visitor's last request, or until consent is withdrawn, unless there are other legal grounds. After that, the data is destroyed within 30 days. If a contract has been concluded, the data is kept for the period established by law for keeping contract documents.

8. Rights of the data subject

The visitor has the right to:

• obtain information about the processing of their personal data;
• request that the data be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate or processed unlawfully;
• withdraw consent to the processing of personal data;
• appeal against the Operator's actions to Roskomnadzor or in court.

Requests and withdrawals of consent should be sent to aristocratfb.work@gmail.com or to the Operator's address. The Operator responds within 10 business days of receiving the request; this period may be extended by no more than 5 business days with notice of the reasons.

9. Protection of personal data

The Operator takes legal, organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure and destruction: data from the Website is transmitted over the secure HTTPS protocol, and only authorized persons of the Operator have password-protected access to requests.

10. Cookies, Yandex Metrica and traffic sources

The Website uses the Yandex Metrica web analytics service (Yandex LLC, Russia) to understand how visitors use the Website and to improve it. Metrica stores cookies in the browser and collects visit data: IP address, device and browser type, traffic source, pages viewed, time on the Website and actions on pages, including session recording (Webvisor). Text that a visitor types into the request form fields is not included in session recordings.

This data is processed by Yandex LLC on servers in the Russian Federation in accordance with itsprivacy policy. The Operator sees it only as aggregated statistics and session recordings without contact details.

On the first visit, the Website shows a cookie notice. By continuing to use the Website, the visitor agrees to such processing. The visitor can opt out by disabling cookies in the browser settings or by installing theMetrica opt-out add-on; the Website will continue to work.

In addition, the Website itself stores in the visitor's browser (in localStorage) the sources of their visits, visit dates and pages viewed over the last 180 days, as well as a random visitor code. This information does not include a name or contact details and is not sent to the Operator until the visitor submits a request (it is then saved with the request) or clicks a Telegram or WhatsApp link. In the latter case, the code is inserted into the message text, and the code and visit information are sent to the Website server to link the messenger enquiry with how the visitor found the Website. If no enquiry follows, this information is deleted from the server after 90 days. It can be cleared from the browser by deleting the Website's data in the browser settings.

11. Final provisions

The Operator may amend this policy. A new version takes effect when it is published on the Website. The current version is always available at https://aristocrat3d.ru/privacy/.