Privacy Policy

1. General

This privacy policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ of 27.07.2006 «On Personal Data» and defines the procedure for processing personal data submitted via the contact form on whostolemysleep.ru.

2. Data Controller

The controller is an individual — the owner of whostolemysleep.ru. Contact address: whostolemysleep@gmail.com. As an individual, the controller is exempt from notifying Roskomnadzor (the Russian data protection authority), as data is processed solely for personal purposes related to responding to inquiries (Art. 22, Part 2, Clause 2 of Federal Law No. 152-FZ).

3. Data Collected

The following data is processed: name, email address, and message text entered by the user via the contact form.

4. Purpose of Processing

Data is used solely to respond to user inquiries. Data is not shared with third parties and is not used for newsletters or advertising.

5. Storage & Security

Data is not stored in a database. Upon form submission, the name, email, and message are transmitted to the controller via a secured channel (Gmail) and reside only in the controller's mailbox. The controller applies reasonable security measures, including a strong password and two-factor authentication for mailbox access. The controller undertakes not to share this data with third parties and to delete the email from their mailbox within 7 days of receiving a deletion request. The controller is not responsible for the retention period of data in the mail service's backup systems.

6. Your Rights

You have the right to:

• obtain information about which of your personal data is being processed, as well as the purposes, retention periods, and legal bases of such processing
• request correction, blocking, or deletion of your data if it is incomplete, inaccurate, or processed in violation of the law
• withdraw your consent to personal data processing at any time

To exercise your rights, send a request to whostolemysleep@gmail.com. Requests will be processed within 10 business days. Upon withdrawal of consent, the controller will delete the data from their mailbox within 7 days.

7. Consent

The form can only be submitted after the user checks the box «I have read the privacy policy and consent to the processing of my personal data, including its transfer to Google servers (Gmail)». Without this confirmation the form cannot be submitted.

8. Cross-border Transfer

Use of the Gmail service implies transfer of personal data to Google servers, which may be located outside the Russian Federation (including in the United States). The transfer is carried out solely to the extent necessary for the controller to receive and respond to the inquiry. By submitting the form, you confirm your consent to such cross-border transfer.