Personal Data Processing Policy
Astey Legal LLC (hereinafter referred to as the Operator)
General
- 1.1
This Policy applies to all personal data (PD) that the Operator receives from website visitors, clients, contractors, and other individuals.
- 1.2
PD is processed in accordance with Russian Federal Law No. No.152-FZ "On Personal Data" dated 27 July 2006 (as amended) and General Data Protection Regulation of the EU (GDPR).
- 1.1
Purposes
- Conclusion, execution, and termination of legal services agreements;
- Consulting (oral and written) on legal matters;
- Representation in courts, government agencies, and before third parties;
- Compliance with tax and accounting laws;
- Informing about company news and services (with separate consent).
Categories of Processed PD
- Full name, passport details (series, number, issuer, and date), Taxpayer Identification Number (TIN), and Insurance Number of Individual Ledger Account (SNILS) (if necessary);
- Contact information: telephone, email, postal address;
- Power of attorney details, organization details (for counterparties);
- Other data communicated to the Operator as part of the provision of services.
Lawfulness of Processing (GDPR Art. 6)
- Performance of a contract with the data subject;
- Compliance with a legal obligation (e.g., court or law enforcement requests);
- Legitimate interests of the Controller (e.g., managing client relationships, legal representation);
- Consent obtained separately (e.g., for newsletters).
Conditions for Processing and Transfer
- 5.1
The Operator has the right to transfer personal data to third parties in the following cases:
- Directly provided for by law (court, law enforcement agencies, notary);
- Concluding an agreement with subcontractors (courier services, printing houses) with a confidentiality obligation;
- With the written consent of the subject.
- 5.2
Cross-border transfer is not permitted.
- 5.1
Storage Periods and Deletion Procedure
Personal data is stored for no longer than required for the purposes of processing, but no more than 5 years after the termination of the contract.
For documents subject to archival storage (contracts, acts) – 5 years (or longer if required by law, e.g., for employment contracts – 50/75 years).
Deletion: upon expiration of the storage period, upon revocation of consent (unless revocation is contrary to law), or at the request of the subject.
Data Subject Rights (GDPR Art. 15–21)
You have the right to:
- request access to your personal data (within 30 days);
- rectification of inaccurate or incomplete data;
- erasure ("right to be forgotten") where legally applicable;
- restriction of processing;
- object to processing based on legitimate interests;
- withdraw consent at any time (without affecting lawfulness of processing before withdrawal).
- To exercise your rights, contact us in writing using Contact information below.
Security
The Operator implements organisational and technical measures: appointment of a person responsible for personal data processing, internal controls, password protection, access restrictions, and backups.
Operator Contact Information
Astey Legal LLC Legal/Actual Address: Russia, 127006, Moscow, Dolgorukovskaya Ulitsa, 7 Email: moscow@astey.law Phone: +7 (495) 287 75 25
Acceptance of the Policy
By using the website or contacting the Operator, you confirm that you have read the Policy. A consent to personal data processing can be obtained separately (by ticking the box on the website or submitting a written statement).