The operator details have not yet been published. Enquiries are accepted through the SmartCaptcha-protected form and delivered to the project’s published email address.
The personal-data operator is identified and published separately.
This policy describes personal-data processing when the Zelino 1893 website is used. It does not govern third-party websites and services opened by a visitor through an external link. Russian law governs processing connected with the project; this English text is an informative translation.
1. Operator and contact
The operator details have not yet been published. Website questions may be sent to zavod@zelino.ru. Do not send special-category data, health information, payment credentials, passwords or identity documents unless they are specifically requested on a lawful basis.
2. Data and purposes
Server enquiry form
When the server form is enabled by a project decision, the site may receive an enquiry subject, name, email, optional organisation or role, message, language, consent version and consent time. These data are used to register and answer the enquiry and prevent duplicate submission. They are not used for advertising or profiling. The legal basis is the visitor’s separate consent.
Independent email
When server delivery is disabled, the website does not accept or store entered enquiries. A visitor may independently open the published email address in their email application and compose a message. Once sent, its address, technical headers and contents are processed by the sender’s and recipient’s mail providers and by the recipient solely to review and answer the enquiry.
Abuse prevention
For a server API request, the IP address is converted into a SHA-256 identifier for short-lived rate limiting. SmartCaptcha sends Yandex the IP address, browser technical data and challenge result to reject automated enquiries; its token is validated once by the server. Ordinary hosting logs may contain an IP address, request date and time, requested URL and browser information.
Local storage and cookies
Yandex Metrika counter 111326607 runs on public pages. Webvisor, click maps and automatic link tracking are disabled; navigation and aggregate LCP, INP and CLS measurements use a route template, locale and release identifier without query strings or form fields. The service may still receive an IP address, cookie identifiers, referrer and browser technical data. The enquiry form is marked to exclude entered text; start, error and success events contain only the event type and route template. Cookies can be managed in browser settings. The model catalogue also uses zelino-cart-v1 local storage without name, email or payment data.
Interactive map
Yandex Maps loads automatically on the complex and contacts pages. When either page opens, the browser sends Yandex the IP address and technical request data directly; Yandex’s own terms govern that processing.
3. Operations, retention and recipients
Depending on purpose, processing may include collection, recording, organisation, accumulation, storage, correction, retrieval, use, provision to an authorised processor, blocking, deletion and destruction, with or without automation.
- an enquiry in the site database is assigned a 90-day retention period and is due for deletion by a recurring maintenance process after expiry unless law or an existing dispute requires longer retention;
- data are destroyed after the purpose is achieved or consent is withdrawn unless another lawful basis applies;
- access is limited to assigned personnel and processors who need it to answer, operate or secure the site;
- data are not sold, published or used for marketing without a separate basis.
4. Storage and transfers
Initial recording, organisation, accumulation, storage, correction and retrieval of Russian citizens’ data through the server form may take place only in a database located in Russia. The server form is enabled only after that infrastructure has been reviewed.
A processor may receive data only under an agreement defining purposes, data, operations, confidentiality and security. No cross-border transfer through the server form takes place without a separate legal review and required notification. This policy discloses the automatic Yandex Maps connection that occurs when the complex or contacts page opens.
5. Individual rights
An individual may request information, correction, blocking or destruction of incomplete, outdated, inaccurate, unlawfully obtained or unnecessary data; withdraw consent; and complain to Roskomnadzor or a court.
Send a request to zavod@zelino.ru with the subject “Personal data”. Identity and a connection to the relevant enquiry may need to be verified to prevent disclosure of another person’s data. Responses follow the periods in Article 14 of Federal Law No. 152-FZ.
6. Security and policy changes
The server form is enabled only after access control, data minimisation, input validation, rate limiting, operational logging without enquiry text and incident procedures have been reviewed. No measure guarantees absolute security. Material changes to purposes, data or recipients do not automatically extend an earlier consent; a new separate consent is requested where required.