Personal Data Processing Policy
Version dated 14.03.2026
1. General Provisions
This personal data processing policy defines the procedure for processing and protecting personal data in the Academy of Business and Law LLC.
Operator:
- full name: Academy of Business and Law LLC;
- abbreviated name: ABL LLC;
- TIN: 9717147490;
- OGRN: 1237700776323;
- address: 129085, Moscow, internal territory of the Ostankinsky municipal district, Godovikova street, 9, building 3;
- email for questions about personal data: info@welawyou.ru;
- website: https://welawyou.ru.
This policy applies to the personal data of website users, clients, representatives of clients and contractors, individuals who submit requests by phone, email, VKontakte, Max, and other communication channels, as well as individuals who provide feedback and materials for cases.
2. Purpose of processing personal data
The Operator processes personal data for the following purposes:
- processing of requests, applications, and inquiries received via the website, by phone, email, VKontakte, and Max;
- preparation, conclusion, and execution of contracts for the provision of legal services;
- maintaining correspondence with clients and representatives of contractors;
- preparation of legal opinions, documents, and other results of the provision of services;
- maintenance of accounting, tax, and contractual records;
- ensuring the operation and security of the website;
- analysis of website traffic and operation using Yandex Metrica, if there is a valid basis;
- publication of reviews, cases, name, position, photo, profile link, and other information only with separate consent to the dissemination of personal data;
- consideration of requests from subjects of personal data.
3. Categories of subjects of personal data
The operator may process personal data of the following categories of subjects:
- website users;
- clients and potential clients;
- representatives of clients;
- representatives of contractors;
- individuals who have sent requests via email, VKontakte, and Max;
- individuals who have provided feedback, comments, and materials for cases.
4. List of Personal Data
Depending on the purpose of the request and the nature of the service, the operator may process the following personal data:
- last name, first name, and patronymic;
- phone number;
- email address;
- username, identifier, or link to a profile in a messenger or social network;
- information contained in an application, request, letter, message, case documents, and attached files;
- information about a contract, payment, and fulfillment of obligations;
- IP address, cookies, information about the browser, device, and technical events on the website;
- information authorized by the subject for distribution if a separate consent is granted.
The operator does not ask for personal data that is not relevant to the purpose of the request. If the nature of the legal service requires the subject to provide additional information in the case materials, the operator processes this information only to the extent necessary to provide the service and comply with legal requirements.
5. Legal grounds for processing
The operator processes personal data on the following grounds:
- consent of the personal data subject;
- necessity of processing for the conclusion and execution of a contract in which the personal data subject or the beneficiary is a party;
- request of the personal data subject to the operator;
- performance of duties assigned to the operator by the legislation of the Russian Federation;
- separate consent to the processing of personal data authorized by the subject for distribution.
6. The order and methods of processing
The operator processes personal data using automation tools and without using such tools.
Actions with personal data include collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer in cases provided for by law or contract of assignment of personal data processing, blocking, deletion and destruction.
7. Obtaining personal data
The operator obtains personal data:
- directly from the subject of personal data through the website forms;
- from telephone inquiries;
- from email inquiries;
- from correspondence in VKontakte and Max;
- from documents and information provided by the client as part of the provision of legal services;
- automatically when using the website and cookies;
- from persons acting on behalf of the operator under the terms of the contract.
8. Assignment of processing to third parties
The operator may assign the processing of personal data to third parties on the basis of a contract.
As of the date of approval of this policy, the operator uses the following categories of persons acting on behalf of:
- Tilda Publishing LLC or another person who actually provides the Tilda infrastructure to host the website and operate the Tilda CRM to the extent necessary for the website to function and process applications;
- freelance lawyers, attorneys, executors, and other hired specialists, to whom the operator entrusts the processing of clients' personal data and case materials exclusively for the preparation of legal documents, analysis of circumstances, project management, and fulfillment of the operator's obligations to the client.
Each such person processes personal data only on the basis of the operator's documented instructions, is obliged to maintain confidentiality, and apply the necessary protection measures.
9. Cross-border transfer
The operator does not carry out cross-border transfer of personal data without legal grounds and compliance with the mandatory requirements of the legislation of the Russian Federation.
10. Personal Data Retention Periods
The Operator stores personal data for no longer than is required by the purposes of processing, the terms of the agreement, and the mandatory retention periods under the legislation of the Russian Federation.
The basic retention periods are listed in the internal annex to the policy on the processing and protection of personal data.
11. Personal Data Protection Measures
The Operator takes necessary legal, organizational, and technical measures to protect personal data, including:
- appointing a person responsible for organizing the processing of personal data;
- restricts access to personal data;
- uses accounts, passwords, and access rights;
- maintains internal documents, logs, and acts;
- enters into confidentiality obligations and contracts for the processing of personal data;
- takes measures to identify, record, and respond to incidents.
12. Rights of the personal data subject
The personal data subject has the right to:
- receive information about the processing of their personal data;
- to request clarification, blocking, or destruction of personal data if it is incomplete, outdated, inaccurate, illegally obtained, or excessive;
- to withdraw consent to the processing of personal data;
- to withdraw consent to the dissemination of personal data;
- to appeal the operator's actions to Roskomnadzor or to a court.
13. Procedure for Submitting Requests
Requests related to the processing of personal data are submitted:
- by email: info@welawyou.ru;
- by mail: 129085, Moscow, Vn. ter. g. municipal district Ostankinsky, st. Godovikova, d. 9, p. 3.
In the request, it is recommended to specify the full name, contact details for the response, a description of the appeal and information that allows to identify the subject in the operator's information systems.
14. Cookie and analytics
The website uses cookies and other similar technologies.
Strictly necessary cookies are used to ensure the proper functioning of the website. Analytical cookies, including those related to the use of Yandex Metrica, are used in the amount and manner specified by the website settings and the cookie banner.
The operator must ensure that the website is configured in such a way that form fields, names, phone numbers, emails, contact texts, and other data that directly identifies the user are not transmitted to analytics systems.
15. Final Provisions
This policy is valid indefinitely until it is replaced by a new version.
The current version of the policy can be found at https://welawyou.ru/politika.