Personal data processing policy
Updated 26 September 2026. This policy covers visitors to xorit.ru and enquiries submitted through its forms. Operator: KSOR AITI LLC (ООО «КСОР АЙТИ»). Contact address: office 3, floor 2, building 1, 15 Bolshoy Sukharevsky Lane, Moscow, 127051, Russia. Email: info@xorit.ru. The Russian version governs; this translation is for convenience.
1. Data and purposes
Enquiries include the supplied name, telephone number, time, page and consent indicator, used to review the request and contact the applicant on the basis of separate consent. A subsequent contract may provide another lawful basis.
Site operation and security involve technical request data, including IP, time, resource, browser information, logs and anti-spam results. SmartCaptcha is loaded after the separate checkbox in the form. Optional Yandex Metrica analytics starts only after “Allow analytics”; see the cookie policy and analytics consent.
Forms do not request passports, health information, biometrics or other special-category data. Please do not submit unnecessary information. Enquiry consent does not authorise advertising. IP addresses and browser identifiers are not automatically anonymous.
2. Processing and recipients
Processing includes collection, recording, organisation, storage, correction, retrieval, use, access by authorised staff, blocking, deletion and destruction, both automated and manual. Enquiries are sent to info@xorit.ru through mail.xorit.ru. The current site has no separate WordPress plugin storing form submissions.
With analytics consent, visit data is transmitted to Yandex Metrica (YANDEX LLC). SmartCaptcha technical data is processed by Yandex.Cloud LLC under terms covering service operation and improvement. See the Yandex policy and SmartCaptcha notice. The site does not intentionally send names or phone numbers to analytics, and Session Replay is disabled.
Staff access is restricted to work needs. Enquiry data is not intended for public disclosure, sale or transmission to generative AI services. Disclosures to authorities require a lawful request; processing by service providers requires an appropriate legal basis and terms.
3. Retention and termination
Enquiry data is processed until the request is resolved or consent is withdrawn, unless another lawful basis applies. It must then be deleted within the applicable statutory period, generally 30 days subject to legal exceptions. Contract records follow their applicable retention requirements.
Cookie choices and receipts last 180 days. Browser-storage lifetimes and SmartCaptcha information are described in the cookie policy. Security logs must not be retained longer than needed for their purpose and statutory obligations.
4. Rights and contact
You may request information, correction, blocking or deletion where applicable, withdraw consent and complain to Roskomnadzor or a court. Contact info@xorit.ru or the address above with information allowing us to locate your enquiry. Identity verification is requested only when necessary and proportionate.
Requests for processing information are handled within 10 working days, with a reasoned extension of up to five working days where allowed. Analytics can be withdrawn via “Cookie settings”. Processing without consent requires another lawful basis.
5. Security and operator duties
The site uses HTTPS, restricted administrative access, configured two-factor authentication for administration and anti-spam protection. The operator must maintain organisational and technical safeguards, access controls and procedures for rights requests and incidents. Russian localisation, data-transfer and regulatory-notification requirements apply; publishing this policy does not itself fulfil those duties.
6. Separate choices
Browsing does not constitute optional analytics consent. Forms use a separate enquiry consent. Updated versions of this policy are published here with the revision date.