Personal Data Policy

Who is responsible for processing

MKA is a brand name. The controller will be the entity identified below, which determines the purposes and methods of processing. This draft has not yet been approved by the controller.

Controller

[Full legal entity name / individual entrepreneur’s full name]

Tax ID / state registration number

[Complete registration details]

Address

[Registered and postal address]

Website

[Specify the primary domain]

Data enquiries

[Approve a contact address for requests and withdrawal of consent]

Why the information is needed

The employer form is used to clarify staffing needs, respond to enquiries and prepare a proposal. The job application form is for an initial candidate enquiry and discussion of experience, preferences and suitable vacancies. This consent does not cover advertising mailings.

This policy concerns enquiries through the website. Candidate onboarding, employment relationships and migration documents require separate legal grounds and documentation; the contact form is not intended for these purposes.

Data that may be collected

• The sender’s name and telephone number.
• For employers: region and selected service; the detailed brief also includes organisation details, names and positions of the organisation head and contact person, email address, job description, employment conditions and candidate requirements. For jobseekers: current country and city, occupation and a brief description of experience.
• Once submission is enabled: the enquiry date, a record of separate consent and the version of the consent text, to demonstrate the basis for processing.

Do not include passport details, employee documents, health information or third-party information in the form or the prepared email. If documents are needed, a specialist will agree a separate secure transfer method and legal basis.

Legal basis and processing methods

Responding to an enquiry is intended to rely on the sender’s separate, voluntary consent under Russian Federal Law No. 152-FZ on Personal Data. Viewing the site or reading the policy does not by itself constitute consent. The checkbox is not preselected.

Processing may include collection, recording, organisation, storage, correction, retrieval, use to respond to the request, restriction, deletion and destruction, using automated and non-automated methods. No automated decisions producing legal effects for visitors are planned.

Access, storage and protection

Access is intended to be limited to authorised employees handling enquiries. Publication of enquiries and sale of data are not planned. Disclosure to public authorities may occur where there is a lawful basis.

Before launch: specify the Russian location of the database, hosting, email service, CRM and any processors. Where a contractor receives access, define its duties and restrictions in the contract. Enquiry processing infrastructure is not yet connected. The preview uses a technical address; the platform’s processing location and any cross-border transfers require separate confirmation.

Before launch: confirm the implemented safeguards, including secure connections, access controls, activity logging, backups, deletion procedures and appointment of a responsible person. This list is a plan, not a claim that these measures have already been implemented.

Retention and termination of processing

The proposed retention period is until the response and requested proposal are completed, but no longer than 90 calendar days after the enquiry is sent. If consent is withdrawn earlier, processing ends subject to statutory grounds and deadlines. This period and the retention procedures must be approved before submission is enabled.

Once the purpose is fulfilled or consent is withdrawn, data must be deleted within the statutory period – generally no later than 30 days unless another lawful retention basis applies. Subsequent contractual relationships are documented separately. This consent does not permit indefinite retention of enquiries.

Before launch: separately determine the content and retention periods for consent records, server logs and backups, and ensure deletion by appointed processors.

Your rights

You may request information about processing, seek correction of inaccurate data, request restriction or destruction where grounds exist, withdraw consent and request cessation of processing. Use the controller’s contact details above. Information may be required to verify your identity and locate the enquiry.

Withdrawal does not affect the lawfulness of earlier processing. If an independent statutory basis applies, the controller must explain which data it continues to retain and why. Complaints may be made to Roskomnadzor or a court.

Technical data and cookies

The current version has no analytics counters or advertising pixels. Website scripts do not set cookies or save completed form fields in browser storage. Fonts and images are served with the website. See the cookie information.

The hosting platform’s server logs, purposes, content, location and retention periods must be confirmed and described. Before additional services are connected, the policy and, where required, the consent mechanism must be updated.

Document version

Changes are published on this page with a revision date. Updating the text does not replace obtaining new consent where processing purposes or other material conditions change.

Legal basis: Russian Federal Law No. 152-FZ, including Articles 5, 9, 18, 18.1 and 21.