Consent to the processing of personal data

1. Who gives consent and to whom

1.1. I, a user of the Layero service (hereinafter referred to as the “Service”), by registering in the Service, freely, of my own free will and in my own interest, consent to the processing of my personal data by the operator - individual entrepreneur Murzak Mikhail Mikhailovich (TIN 772029626711, OGRNIP 315774600406786, address: 111621, Moscow, Orenburgskaya st., 8, building 1, apt. 3; hereinafter referred to as “Operator”) on the terms and conditions stated below.

1.2. This consent is a separate document and is not part of the User Agreement, Public offer or other documents. The processing procedure is described in detail in Privacy Policy.

1.3. Consent to receive news and promotional emails is given a separate document. Consent to analytical cookies is given in the banner on the website - see. Cookie Policy.

2. Purposes of processing

• registering and maintaining an account, logging into the Service, confirming your email address;
• provision of Service services under the User Agreement and Public Offer: build and publication of sites and applications, databases, domains, project analytics, team work;
• technical support and responses to requests;
• sending service notifications: about builds and publications, about payment and subscription, about account security, about changes in conditions;
• payment for services, issuing receipts, accounting and tax accounting;
• ensuring the security of the Service, preventing abuse and fraud, investigating incidents;
• compliance with the requirements of the legislation of the Russian Federation.

3. What data

• email address;
• username and personal organization name;
• when logging in via Yandex ID - identifier, login, display name and link to the avatar in Yandex ID;
• when connecting Git services (GitHub, GitVerse, GitLab, GitFlic, SourceCraft) - login and identifier in the connected service, access token and information about the repositories to which I have provided access;
• IP address, browser and device information for registration, login and control panel actions;
• answers to questions when you first log in (occupation, purpose of use, how you learned about the Service) - if I indicated them;
• contents of support tickets and attached files, including screenshots;
• information about subscription and payments, type and last four digits of the bank card, its expiration date. The operator does not receive or store the full card number and CVC code - they are processed by the YooKassa payment service.

4. What actions

Collection, recording, systematization, accumulation, storage, clarification (updating, changing), retrieving, using, transferring (providing, accessing), blocking, deleting, destroying - with or without the use of automation tools.

5. To whom the data is transferred

The operator transfers data or entrusts their processing only to the extent necessary for the purposes of section 2:

• Yandex.Cloud LLC (Russia) - hosting the Service infrastructure, storing data and backups, sending letters (Yandex Cloud Postbox), protection against automatic registrations (SmartCaptcha);
• Yandex LLC (Russia) - login via Yandex ID;
• LLC NPO "YooMoney" (UKassa service, Russia) - accepting payments, storing cards for automatic payments, issuing receipts;
• Timeweb LLC (Russia) - placement of dedicated databases, if I order them;
• Telegram (Telegram FZ-LLC, UAE) - operational notifications for the Service team and support workplace: email address, user name, login method, answers to first login questions, text of requests and attachments, payment information (amount, type and last digits of the card), information about builds, including fragments of the build log;
• GitHub, Inc. and GitLab Inc. (USA) - access to repositories for build only if I myself connect the repositories hosted in these services;
• Internet Security Research Group (Let's Encrypt, USA) - issue HTTPS certificates for domains that I connect;
• authorized state bodies - on the grounds provided by law.

6. Transfer outside Russia

6.1. I agree to the cross-border transfer of personal data to recipients indicated in section 5 as located outside the Russian Federation (UAE, USA), to the extent and for the purposes specified there. I am aware that these countries may not provide protection of the rights of personal data subjects at a level equal to the Russian one.

6.2. Recording, systematization, accumulation, storage, clarification and retrieval of personal data of citizens of the Russian Federation is carried out using databases located on the territory of the Russian Federation.

7. Validity and revocation

7.1. The consent is valid from the date of registration until the account is deleted or until the consent is revoked.

7.2. I have the right to withdraw consent by writing to support@layero.ru from the address associated with the account. Withdrawal of consent means termination of processing and deletion of the account: it is impossible to use the Service without processing the listed data.

7.3. After withdrawal of consent, the Operator has the right to continue processing without consent, if this is permitted by law. For example, he has the right to store information about payments within the time limits established by the legislation on accounting and tax accounting (clauses 2–11 of part 1 of Article 6, part 2 of Article 10 and part 2 of Article 11 of the 152-FZ).

7.4. The storage periods for data and the procedure for their destruction are described in Privacy Policy.

8. How consent is given

Consent is given by placing a separate mark “I agree to the processing of personal data” when registering in the Service. The operator records the edition of this document, date and time, IP address from which consent was given, and browser information.