1. General Provisions

1.1. This Policy on the Protection and Processing of Personal Data (hereinafter referred to as the “Policy”) has been developed in accordance with the requirements of Federal Law No. 152‑FZ of July 27, 2006 “On Personal Data” (hereinafter referred to as the “Personal Data Law”) and sets out the procedure and conditions for the processing of personal data of visitors to the website Rapidbio.ru (hereinafter referred to as the “Site”).

2. Data on the Personal Data Operator

Operator: Limited Liability Company “Rapid Bio”, INN 326 576 671
Location address: 670 000, Republic of Buryatia, Ulan‑Ude, Sverdlova St., 13A, Office 4.
Postal address: 121 205, Moscow, Bolshoy Boulevard, 42, building 1.
Registration number in the register of personal data operators: 3‑25‑9625, based on Order No. 75 of June 6, 2025.

3. Personal data of Site visitors processed by the Operator and the purposes of processing

3.1. The Operator processes data provided by Site visitors when filling out the feedback form:

• last name, first name;
• email address;
• phone number;
• information collected via metric programs; Site visitor inquiries; IP address; cookies; user identifier assigned by the Site; pages visited; number of page visits; information about movement across Site pages (including mouse movement tracking, clicks on links and Site elements); duration of user session; entry points (third‑party sites from which the user navigates to the Site via a link); exit points (links on the Site through which the user navigates to third‑party sites); user’s country; user’s region; time zone set on the user’s device; user’s internet service provider; user’s browser; canvas fingerprint; available browser fonts; installed browser plugins; browser WebGL parameters; type of available media devices in the browser; presence of ActiveX; list of supported languages on the user’s device; device processor architecture; user’s operating system; screen settings (resolution, colour depth, page placement parameters on the screen); information about the use of automation tools when accessing the Site; date and time of Site visit; referral source (UTM tag); UTM tag values from source to content; unique identifier assigned by an external internet service providing statistical data processing.

3.3. Purposes of processing personal data of Site visitors:

• to establish feedback with Site visitors;
• to process Site visitors’ requests;
• to inform Site visitors about the Operator’s products;
• to conduct marketing activities;
• to optimise the Site and perform data analytics.

4. Source of personal data acquisition
4.1. The Operator obtains personal data directly from Site visitors when the visitor fills out forms on the Site.
4.2. In some cases, the Operator automatically obtains personal data of Site visitors through metric programs. We use cookies to work with such data. Cookies allow websites (applications) to recognise user devices, determine user preferences, and collect statistics on how users interact with websites (applications) to improve the user experience or to fix various errors or bugs. We do not use cookies to identify you as a specific user of our services.
5. Methods of processing personal data of Site visitors
5.1. When processing personal data, the Operator performs the following actions: collection, recording, systematisation, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), blocking, deletion, and destruction.
5.2. Personal data are processed both on tangible (paper) media and in electronic form (in personal data information systems, on machine‑readable media) with transmission over the internal network of the legal entity.
5.3. The processing of personal data may be entrusted to a third party with the consent of the personal data subject or on grounds provided for by the legislation of the Russian Federation. The person processing personal data on behalf of the Operator is not required to obtain the consent of the subject for the processing of their personal data.
5.4. If the fact of inaccuracy of personal data is confirmed, such personal data shall be updated.
5.5. If the fact of unlawful processing of personal data is revealed, such personal data shall be destroyed within three days.
6. Protection of personal data
The Operator has taken the following measures to protect personal data:

• a person responsible for organising the processing of personal data and their protection has been appointed;
• to ensure the security of personal data in the Operator’s information systems, a personal data protection system has been implemented in accordance with the requirements of the current legislation of the Russian Federation;
• all media containing personal data, both paper and electronic, are subject to accounting, and we comply with strict requirements for their storage and destruction;
• access control is in place on the Operator’s premises;
• access to personal data is granted only to the Operator’s employees who need it for the performance of their official duties;
• through the internal control system, the Operator increases the level of security of personal data and, when inconsistencies are detected, eliminates their causes in the shortest possible time.

7. Transfer of personal data

7.1. Transfer of personal data to a third party is carried out only with the consent of the personal data subject or in cases expressly provided for by the legislation of the Russian Federation.
7.2. Transfer of personal data to a state authority, local self‑government body, security and law enforcement body, state institution and fund, as well as to another authorised body, is permitted on grounds provided for by the legislation of the Russian Federation.
7.3. The Operator does not carry out cross‑border transfer of personal data.
7.4. To improve the operation of our Site, the Operator uses statistical services. They receive from the Operator access to information about visits to the Site and the actions of visitors on it, and therefore the Operator may entrust the processing of personal data of visitors to the following counterparties: YANDEX LLC (INN 7736207543, address: 119021, Moscow, Leo Tolstoy St., 16, Russia), Koltach Solutions LLC (127015, Moscow, Skladochnaya St., 1с9).

8. Storage of personal data

8.1. Personal data shall be stored in a form that permits identification of the personal data subject for no longer than required by the purposes of processing personal data, unless the storage period is established by the legislation of the Russian Federation or by a contract to which the personal data subject is a party.
8.2. Storage of personal data is carried out with due regard for ensuring their confidentiality.

9. Rights of the personal data subject (Site visitor)

In accordance with Federal Law No. 152‑FZ “On Personal Data”, the personal data subject has the following rights:

• the right of access by the subject to their personal data. The subject may request them from the Operator at any time (Article 14 of the Personal Data Law);
• the right to know how and what personal data of the subject the Operator uses (Article 18 of the Personal Data Law);
• the right to object to the processing of data or to request a restriction of processing (Article 21 of the Personal Data Law);
• the right to withdraw consent to the processing of personal data, if we process data on the basis of your consent (Article 9 of the Personal Data Law);
• the right to have data updated, deleted, to restrict processing, or to object to processing.

To withdraw consent to the processing of personal data, and for other inquiries under the Law, please send us a written request to the following address:
121 205, Moscow, Bolshoy Boulevard, 42, building 1.