Personal Data Processing Policy
Publication date: April 21, 2026
Effective date: April 21, 2026

This document defines the policy of Limited Liability Company “Concord” INN 6165166880, OGRN 1116165001105 regarding the processing of personal data and measures to ensure the security of personal data on the Website: https://konkord-rnd.ru/ hereinafter referred to as the “Policy”.

This Policy applies to all personal data that the Operator may receive from a personal data subject.

Terms and Definitions

Operator means Limited Liability Company “Concord” INN 6165166880, OGRN 1116165001105.

User means an individual using the Website and acting as a personal data subject.

Personal Data means any information relating directly or indirectly to an identified or identifiable User.

Processing means any action, operation, or set of actions or operations performed with Personal Data, whether using automated means or without such means.

General Provisions

This Policy defines the procedure by which the Operator processes Users’ personal data and ensures the security and confidentiality of such data.

The Policy specifies:

what personal data the Operator receives and how it uses such data;

the main rights of Users as personal data subjects;

the methods and periods of processing and storage of personal data;

the procedure for destroying personal data.

The Operator processes Personal Data on the basis of consent to the processing of personal data provided by filling out feedback forms on the Website.

Processing of Personal Data

The types of Processing used by the Operator include collection, recording, systematization, accumulation, storage, clarification, updating, modification, extraction, use, transfer, provision, blocking, anonymization, deletion, and destruction.

The User agrees to this Policy when submitting their Personal Data to the Operator, including at the time of:

filling out forms on the Website;

contacting the Operator by email;

contacting the Operator by phone or through a messenger.

The Personal Data processed by the Operator is not biometric and does not belong to special categories of Personal Data.

The Operator processes the following Personal Data.

With respect to all Users:

Methods by Which the Operator Collects Personal Data

The Operator collects Personal Data in the following ways:

• through Website forms completed by the User;
• by email;
• through incoming phone calls;
• automatically using technologies, web protocols, and cookie files.

The Operator stores Personal Data:

• exclusively on properly protected electronic media;
• using databases located within the territory of the Russian Federation;
• on the Website using automated processing, except where non-automated Processing is necessary due to compliance with the requirements of the legislation of the Russian Federation;
• for all purposes from the moment consent is given until such consent is withdrawn, or for as long as required by the purposes of Processing.

Access to Personal Data

The Operator provides access to Personal Data only to its authorized employees.

The Operator does not distribute or provide Users’ Personal Data to third parties without their consent, except in the following cases:

• when transferred to separate, independently functioning applications and databases that are part of the Website;
• for the purpose of preventing or suppressing unlawful actions by the User and protecting the legitimate interests of the Operator and third parties, as well as in cases established by the legislation of the Russian Federation;
• upon a reasoned request from judicial authorities, state security authorities, the prosecutor’s office, the police, investigative authorities, and other authorities and organizations in cases established by mandatory regulatory legal acts.

Updating and Destruction of Personal Data

The Operator updates Personal Data if the fact of its inaccuracy is confirmed.

The Operator destroys Personal Data in the following cases:

• there is a security threat to the Website;
• the Personal Data storage period has expired;
• the purposes of Personal Data processing have been achieved;
• at the User’s request.

The Operator deletes all information received from the User if the User withdraws their consent to Processing. From that moment, the right to use the Website is terminated.

User Guarantees and Rights

The User guarantees that:

• the Personal Data provided is accurate, up to date, and does not violate the legislation of the Russian Federation;
• if the Personal Data provided relates to a third party, the User has obtained the third party’s consent to transfer the Personal Data to the Operator for Processing.

The User has the following rights:

right of access — the User has the right to request a copy of the personal data held by the Operator;

right to rectification — the User has the right to request that the Operator correct inaccurate or incomplete personal data;

right to withdrawal — the User has the right to withdraw their consent to data processing;

right to deletion — the User has the right to request the deletion of data held by the Operator concerning the User, except in cases where the Operator is required to store such data by law;

other rights provided for by the Federal Law “On Personal Data”.

Obligations of the Operator

The Operator is obliged to:

provide the User, upon request, with information about Processing or a reasoned refusal;

take measures necessary and sufficient to fulfill the obligations provided for by the legislation of the Russian Federation;

at the User’s request, clarify the Personal Data being processed, block or delete it if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of Processing;

ensure the legality of Processing. If it is impossible to ensure the legality of Processing, the Operator must, within a period not exceeding 10 business days from the date unlawful Processing is identified, destroy or ensure the destruction of the Personal Data;

within a period not exceeding 30 days from the date of receipt of the User’s withdrawal of consent, stop Processing and destroy the Personal Data if its retention is no longer required for the purposes of Processing. An exception applies where Processing may be continued in accordance with the legislation of the Russian Federation.

To protect Personal Data, the Operator uses the necessary legal, organizational, and technical measures in accordance with the requirements of the Federal Law “On Personal Data”.

Requests from the Personal Data Subject

The User or their representative has the right to send a request to the Operator, including to withdraw Consent to Processing in the form of an electronic document, by email: okonkord7777@mail.ru

A request to withdraw Consent must contain:

information confirming the User’s participation in relations with the Operator: the email address specified when completing forms or sending requests on the Website;

the representative’s details and confirmation of their authority, if the request is submitted by a representative;

the signature of the User or representative.

Final Provisions

This Policy applies exclusively to the Website and does not apply to other internet resources.

This Policy applies to all Personal Data that the Operator receives from Users.

The Operator is not responsible for the actions of third parties who have gained access to the User’s Personal Data through the User’s fault.

The Operator does not verify:

the User’s legal capacity;

the accuracy of the Personal Data provided by the User.

The Operator has the right to amend this Policy. The new version of the Policy comes into force from the moment of its publication.

If the User continues to use the Website after the new version of the Policy comes into force, this will mean that the User has agreed to the terms of the new version.

Operator Details

Limited Liability Company “Concord” INN 6165166880, OGRN 1116165001105

Registered address of the organization: Office 202, Building 114, Semashko Lane, Rostov-on-Don, Rostov Region, 344003, Russian Federation.