Privacy Policy
1. Who we are
1.1. The controller of your personal data on the website https://advoka-t.ru (the "Website") is Andrei Pavlovich Voronin, a self-employed individual registered in the Russian Federation as a payer of the professional income tax (Taxpayer Identification Number (INN) 773001706743; registered as a professional income tax payer on March 24, 2021; certificate KND 1122035 No. 109897580 dated June 2, 2026) (the "Controller", "we", "us").
1.2. Contact details of the Controller: e-mail uristi@list.ru; phone +7 (925) 518-81-30.
1.3. This Privacy Policy applies to users located in the European Union (EU) and the European Economic Area (EEA), to whom Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Directive 2002/58/EC ("ePrivacy Directive") apply. We apply the same standards to users located in Balkan states outside the EU (Serbia, Bosnia and Herzegovina, Montenegro, North Macedonia, Albania), whose national data protection laws are largely based on the GDPR.
1.4. As the Controller is located in the Russian Federation, processing is also governed by Russian Federal Law No. 152-FZ "On Personal Data". The Russian-language Personal Data Processing Policy is available on the Website.
2. Personal data we process
- Identity and contact data: first name, last name, phone number, e-mail address.
- Inquiry data: the content of your message and any documents you choose to send us describing your legal situation.
- Contract data: information you provide when concluding a legal services agreement.
- Technical and usage data (only with your consent): cookie identifiers, IP address, browser and device information, approximate location derived from the IP address, pages viewed, date and time of visits.
We do not request special categories of personal data (Art. 9 GDPR) or data relating to criminal convictions (Art. 10 GDPR). Please do not submit such data through the Website forms. The Website is not intended for persons under 18.
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) | Retention |
|---|---|---|
| Responding to your inquiry and providing a consultation you requested | Consent given by ticking an unticked box under the form (Art. 6(1)(a)); steps taken at your request prior to entering into a contract (Art. 6(1)(b)) | Until you receive the consultation (reply to your inquiry) |
| Concluding and performing a legal services agreement | Performance of a contract (Art. 6(1)(b)) | Until the service has been fully provided |
| Tax obligations of the Controller (issuing receipts) | Legal obligation (Art. 6(1)(c)) | As required by Russian tax law |
| Establishing, exercising or defending legal claims | Legitimate interests (Art. 6(1)(f)) | 3 years after the agreement has been performed (Russian limitation period) |
| Website statistics (Yandex Metrica) | Consent via the cookie banner (Art. 6(1)(a); Art. 5(3) ePrivacy Directive) | Up to 12 months or until you withdraw consent |
| Website security and technical operation | Legitimate interests (Art. 6(1)(f)) | Up to 12 months |
We do not use your data for marketing messages and do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you (Art. 22 GDPR).
4. Cookies and analytics
4.1. On your first visit, a cookie banner offers three equally prominent buttons: "Accept", "Reject" and "Settings". No analytics cookies are set and no Yandex Metrica scripts are loaded before you click "Accept". Pre-ticked boxes or pre-enabled switches are not used; scrolling or continuing to browse is not treated as consent.
4.2. You can change your choice at any time via the "Cookie settings" link at the bottom of every page. Details are set out in the Cookie Policy available on the Website.
5. Recipients
We do not sell your personal data. Your data may be accessed by the following recipients to the extent necessary:
- Megagroup website platform (Russian Federation) — hosting of the Website and its forms;
- VK / Mail.ru e-mail service (Russian Federation) — the Controller's mailbox at list.ru;
- Yandex LLC (Russian Federation) — web analytics (Yandex Metrica), only if you have consented;
- public authorities, where disclosure is required by applicable law.
6. International data transfers
6.1. The Controller is located in the Russian Federation, and your personal data is stored on servers in the Russian Federation. When you send an inquiry to us, you provide your data directly to a controller established outside the EU/EEA.
6.2. The European Commission has not adopted an adequacy decision for the Russian Federation. This means that Russian law may not offer a level of protection equivalent to the GDPR, including in respect of access by public authorities and available legal remedies. Transfers of your data to Yandex LLC for analytics take place only on the basis of your explicit consent given in the cookie banner after being informed of these risks (Art. 49(1)(a) GDPR). Transfers necessary to respond to your inquiry and to perform an agreement with you rely on Art. 49(1)(b) GDPR.
6.3. Under Russian law, the Controller has filed a notification with the Russian data protection authority (Roskomnadzor) of the intention to carry out cross-border transfers of personal data to EU Member States and CIS countries.
6.4. Safeguards we apply: HTTPS (TLS) encryption of data transmitted from the Website; access to personal data limited to the Controller; password and two-factor authentication protection of accounts; data minimisation and the retention periods set out below.
7. Retention and deletion
7.1. We keep personal data only for as long as necessary for the purpose for which it was collected; indefinite retention does not take place. Retention periods are set out in section 3. Records proving that you gave consent are kept for as long as the consent is valid and for 3 years thereafter.
7.2. When the purpose has been achieved, the retention period has expired or you have withdrawn your consent, we delete your personal data within 30 days, unless another legal basis requires us to keep it. Deletion covers the mailbox, cloud storage, platform records and backups; paper records are shredded. Deletion is documented in a deletion report.
7.3. If you request erasure, we act without undue delay and reply to you within one month of receipt of your request (Art. 12(3) and Art. 17 GDPR).
8. Your rights
Subject to the conditions set out in the GDPR, you have the right to:
- access your personal data (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure ("right to be forgotten") (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3));
- lodge a complaint with a supervisory authority, in particular in the EU/EEA Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77). A list of EU supervisory authorities is available on the EDPB website.
To exercise your rights, e-mail us at uristi@list.ru with the subject "Data protection request". We reply within one month; this period may be extended by two further months where necessary, in which case we will inform you (Art. 12(3) GDPR). We may ask you to confirm your identity.
9. Is providing data mandatory?
Providing your data is voluntary. Without your contact details we cannot respond to an inquiry sent through the Website form. You can also contact us by phone or e-mail.
10. Changes to this Policy
We may update this Privacy Policy. The current version, with its date, is always available on the Website. If we make material changes, we will display a notice on the Website and, where required, ask for your consent again.
11. Contact
- Controller: Andrei Pavlovich Voronin, self-employed (professional income tax payer), Russian Federation
- INN: 773001706743
- E-mail: uristi@list.ru
- Phone: +7 (925) 518-81-30
- Website: https://advoka-t.ru
Last updated: September 26, 2026
