Personal Data Processing Consent

1. Who gives consent

Consent is given by the site user, acting as the data subject, when they actively tick the consent checkbox in the contact form and then submit the form.

Operator information

Cartelta JSIR — Cartelta JSIR is a client-side security service for script inventory, integrity control and payment page change detection in the PCI DSS 4.0.1 context.

Email for personal data requests: support@cartelta.ru. Support email: support@cartelta.ru.

Person responsible for personal data processing: responsible Cartelta representative for request handling and communication. Primary data collection database location: infrastructure location and applicable providers are specified in contractual, technical, or compliance documents for the relevant service.

3. Sites

• https://cartelta.com
• https://cartelta.com/ru

4. Processing purposes

• processing a request submitted through the contact form;
• contacting the user in response to the request;
• preparing a proposal, consultation, or service demonstration;
• site analytics only under separate consent to analytics cookies;
• other purposes only after separate review and approval of the relevant legal basis.

5. Data categories

• name or full name;
• email address;
• phone number if provided voluntarily;
• company, company website, and message content if provided;
• technical data submitted with the form: IP address, user agent, submission date and time, domain, and page;
• consent version, consent date and time, and the consent page.

6. Processing operations

The user consents to collection, recording, organization, accumulation, storage, update, retrieval, use, transfer where a legal basis exists, restriction, deletion, and destruction of personal data.

7. Consent term

Consent is valid until the processing purposes are achieved or until consent is withdrawn, unless applicable law requires otherwise. Transmitted information is retained only as long as needed to process the request, organize a demonstration, prepare a proposal, and comply with applicable contractual or legal requirements.

8. Withdrawal procedure

Consent may be withdrawn by sending a request to the personal data contact email or to the postal address listed in the operator information.

After withdrawal, processing stops unless the operator has another lawful basis to continue processing.

9. User confirmation

By ticking the checkbox in the contact form, the user confirms that they act freely, of their own will and in their own interest, and that they have reviewed this consent and the Privacy Policy.

10. Version and date

Version: 2026-05-09.1. Revision date: 2026-05-09.