Personal Data Policy

1. Who processes the data

The data controller is sole proprietor Dmitry Aleksandrovich Demchenko (OGRNIP 314774611801152, INN 772403264050). Personal data requests: hello@demda.pro, or Telegram @demda. A postal address is provided on request by email.

This policy covers demda.pro and its subdomains, the enquiry form and the team's mobile app. The Telegram assistant bot has its own policy: demda.pro/en/privacy/bot.

2. What data we collect and why

Whose data: website visitors, people who send an enquiry, and team members.

• An enquiry from the website: your name, the contact you provide (phone, email or Telegram), a description of your task and a mockup link if you attach one. Purpose: to get back to you and prepare a proposal.
• Visit statistics. Our own analytics uses no cookies and does not store IP addresses: an anonymous identifier is computed from the IP, the browser and a daily key, and the key is deleted after two days, after which a record cannot be linked to a person. We keep pages, referrer, campaign tags, device type, browser, language, and the country and city derived from the IP. Purpose: to understand how the site is used and improve it. Yandex Metrica and Google Analytics also run on the site; unlike our own analytics, they use cookies and work under their owners' terms. You can disable cookies in your browser settings.
• The team's mobile app: staff work accounts, tasks and mail. Purpose: the team's work.

We make no automated decisions about people and do not use the data for marketing mailings.

3. Legal basis

Your consent, given by separately ticking the consent checkbox in the enquiry form before sending it. For staff, employment and service contracts.

4. How and where we store data

What we do with the data: collect, record, organise, store, use, transfer (including abroad, see section 5), block, delete and destroy it.

Data is stored on our server in the Russian Federation (Timeweb Cloud, Novosibirsk). Only the people who handle enquiries have access. Transfers are encrypted (HTTPS); passwords and keys are stored encrypted.

5. Who we share data with

• A notification about a new enquiry goes to our mailbox hello@demda.pro and to Dmitry Demchenko on Telegram. Telegram's servers are outside Russia, so this is a cross-border transfer of the name, contact and enquiry text.
• Google Analytics (Google LLC, USA) receives anonymous visit statistics, which is also a cross-border transfer. Yandex Metrica processes statistics in Russia.

We do not share or sell data to anyone else, except where required by law.

6. How long we keep data and how we delete it

• Enquiries: 3 years from our last contact with you, then deleted automatically. If a contract is signed, the data is kept as long as accounting law requires.
• Our own visit statistics: 180 days, then deleted automatically.
• Staff data: while the relationship lasts and for the periods set by law.

Data is deleted from the database, and from backups as they are rotated.

7. Your rights

You can find out what data we hold about you, ask us to correct or delete it, and withdraw your consent. Write to hello@demda.pro or Telegram @demda. We reply within 10 business days. If you withdraw consent, we stop processing and delete the data, except what we must keep by law.

8. Changes

When the policy changes, we publish the new version on this page with its date.