Personal Data Processing Policy

1. Data controller and contact details

The personal data controller is Rizgo LLC (ООО «Ризго»), referred to below as the Controller. Taxpayer Identification Number (INN): 9704244169. Primary State Registration Number (OGRN): 1247700422640. Address: 21 Zarayskaya Street, Ryazansky Municipal District, Moscow, 109428, Russia.

For questions about personal data processing, email info@rizz-go.com or send a written request to the Controller’s postal address. Contact phone number: +7 (915) 179-04-56.

This Policy applies to website visitors, people who submit enquiries and representatives of potential clients. Data processing in the course of providing services is also governed by the relevant contract and applicable law.

2. Processing purposes, data and legal grounds

Handling enquiries and discussing cooperation

When you contact the Controller by email or phone, the Controller receives the information you provide: your name, email address and phone number, as well as your organisation’s name, your position and the content of your enquiry, if you include them. This data is needed to respond to your request, clarify your requirements and prepare a proposal.

If your enquiry relates to entering into a contract at your initiative or performing a contract, the legal ground for processing is paragraph 5 of part 1 of Article 6 of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”. For business communications with representatives of organisations, the legal ground is the legitimate interest in considering the enquiry and arranging cooperation, provided that the enquirer’s rights and freedoms are respected (paragraph 7 of part 1 of Article 6). Where consent is required, it is requested separately.

Enquiry data is processed until the enquiry and any related negotiations are concluded. If a contract is entered into, further processing is limited to performing that contract and complying with statutory document retention periods.

Operating and protecting the website

When you open a page, the server receives technical information: your IP address, the date and time of the request, the address of the requested page and the browser information transmitted with the request. This information is used to deliver pages, diagnose errors and protect against unauthorised access. The legal ground is the Controller’s legitimate interest in ensuring the operation and security of the website while respecting visitors’ rights (paragraph 7 of part 1 of Article 6 of the above law).

Technical data processing is limited to these purposes. The terms under which technical service providers retain this data depend on the service used and the applicable contractual terms. Information about specific processing may be requested from the Controller.

Handling personal data requests

To fulfil its legal obligations, the Controller processes the information needed to verify that the data relates to the requester, the content of the request and the response. The legal ground is paragraph 2 of part 1 of Article 6 of the above law. The data is retained while the request is being considered and for the retention period established by law for the relevant documents.

3. Processing and storage procedures

Data may be processed using automated and non-automated means. Within the stated purposes, processing includes receipt, recording, organisation, storage, updating, use, disclosure where there is a lawful basis, blocking, deletion and destruction of data.

The amount of data provided should be appropriate to the purpose of the enquiry. An initial enquiry does not require passport details, health information or other special categories of personal data. Please do not include such information in your message unless necessary.

Data must not be retained longer than required by the processing purposes, the contract or the law. Once the purpose has been achieved or consent withdrawn, processing must cease and the data must be destroyed within the time limits set by Article 21 of Federal Law No. 152-FZ, unless another lawful basis for processing exists. Destruction must make the data irrecoverable.

4. The website and third-party services

The website has no enquiry submission form or user registration. The “Get in touch” button opens your email application: your message is transmitted to the Controller only after you send it. No separate web analytics tools or advertising pixels are embedded in the website.

The website is hosted on Vercel. When pages load, technical data is transmitted to this provider’s infrastructure. Information about its data processing is published in the Vercel Privacy Notice.

The “Contact” section includes an “Open in Yandex Maps” link. There is no embedded map widget on the website. Following the link opens a third-party service whose data processing is governed by the Yandex Privacy Policy.

When you follow links to social networks, the educational platform or other external websites, the rules of the respective services apply. This Policy does not replace their data processing documents.

Data may be transferred to third parties only where there is a lawful basis and to the extent necessary for the stated purpose. Using foreign providers may involve processing technical data outside the Russian Federation. Such processing is subject to legal requirements governing personal data localisation and cross-border transfers; this Policy does not constitute consent to such transfers.

5. Personal data protection

The Controller is required to take legal, organisational and technical measures to protect data against unauthorised access, alteration, disclosure and loss. These measures must include restricting access to authorised persons, maintaining confidentiality, protecting the information systems used and monitoring compliance with processing requirements. The connection to the published website is protected by HTTPS.

6. Your rights and requests

You have the right to:

• receive information about the processing of your data and access it;
• request the correction, blocking or destruction of data that is incomplete, inaccurate, unlawfully obtained or unnecessary for the stated purpose;
• withdraw consent where processing is based on it and request that processing cease in the cases provided for by law;
• challenge the Controller’s actions or inaction before Roskomnadzor or a court.

Send your request to info@rizz-go.com with the subject “Personal data”, or to the Controller’s postal address. Specify the data and enquiry concerned and how you would like to receive a response. If necessary, the Controller will ask for further information to identify the requester and ensure the request meets the requirements of Article 14 of Federal Law No. 152-FZ.

Information about processing is provided within 10 working days of receiving a duly completed request. This period may be extended by no more than 5 working days, with a notice explaining the reasons for the extension. Other requests are subject to the time limits established by law. Withdrawal of consent does not end processing for which another lawful basis remains in place.

7. Changes to this Policy

The current version is published on this page. The Policy must be updated when processing purposes or the services used change. Reading this Policy or merely visiting the website does not constitute consent to personal data processing.