Политика обработки персональных данныхPersonal data processing policy个人数据处理政策

1. Who processes your data

The data controller is Alexander Romanov (AARO studio). For any question about your data, write to work@aaro.ink.

This policy applies to aaro.ink and all its pages.

2. What data we receive

• What you enter in the brief yourself: name, a contact (Telegram, WhatsApp, email or phone), company name, links, a description of the task, timing and budget.
• Emails and messenger messages you send us yourself.
• Technical data: IP address and request time. They end up in the server log and are needed to protect against spam.

The site uses no cookies, analytics or advertising. Fonts and libraries load from our own server. Your browser stores the chosen language on your device, and a draft of the brief until you send it, but no longer than 30 days. This data never reaches us.

3. Why we need it

• To answer your request, discuss the project and prepare a proposal.
• To conclude and perform a contract if you decide to work with us.

We send no newsletters or ads.

4. Legal grounds

Your consent (Art. 6(1)(1) of Russian Federal Law No. 152-FZ “On Personal Data”) and preparing a contract at your initiative (Art. 6(1)(5) of the same law). The consent text is on the Consent to Personal Data Processing page.

5. How we process data and who receives it

Processing is mixed: both automated and manual. Actions performed on the data: collection, recording, organisation, storage, correction, use, transfer, deletion and destruction.

• The site runs on a hosting provider's server in Kazakhstan. The brief passes through this server and is not stored there once sent. The server log with IP addresses is kept for up to 14 days.
• The brief reaches the controller as a Telegram message. Emails to work@aaro.ink are forwarded to the controller's Gmail mailbox.
• The server in Kazakhstan, Telegram and Gmail are outside Russia, so this is a cross-border transfer. By giving consent you agree to it.

We do not sell your data or pass it to anyone for their own purposes.

6. How long we keep it

As long as needed to talk about your project, but no longer than 3 years after the last contact if you did not become a client. Client data is kept as long as the contract and the law require.

7. Your rights

You can ask what data we hold about you, ask us to correct or delete it, and withdraw your consent. Write to work@aaro.ink. We reply within 10 working days. After you withdraw consent we delete your data within 30 days unless the law requires us to keep it longer.

If you believe we are violating your rights, you can complain to Roskomnadzor (the Russian data protection authority) or go to court.

8. Security

The site works over HTTPS only. Only the controller can read briefs. Telegram access keys are stored on the server outside the website folder.

9. Changes

A new version of this policy is published on this page and applies from the moment of publication.

This is a translation. If it differs from the Russian version, the Russian version applies.