Privacy Policy

1. General provisions and contacts

1.1. This policy applies to the website meisterstech.by, to inquiries about website development and support, and to the correspondence about those inquiries. It has been prepared in accordance with Law of the Republic of Belarus No. 99-Z of 7 May 2021 “On Personal Data Protection” (the “Law”).

1.2. The personal data operator is the owner of the website, who provides services under the name MEISTERSTECH (the “Operator”). Contact for data processing questions: hello@meisterstech.by. Phone: +375 29 867 9699.

1.3. Browsing the website and reading this policy do not in themselves mean consent to the processing of personal data. Where processing requires consent, it is requested separately.

2. Information we receive

2.1. When you contact us, you provide your name, a contact for our reply and information about your project. Depending on the channel you choose, the Operator also receives your email address, phone number or messenger username and the content of the correspondence.

2.2. The form on the website sends the name, contact and comment you entered over an encrypted connection to the website's server, which immediately forwards them to the Operator as a message in the Telegram messenger (clause 5.6). The server does not keep the form contents or write them to its technical logs. If automatic delivery is unavailable, the form offers to send the same text by email from your email app or to copy it; in that case the Operator receives the inquiry only after you send the email or message yourself. The website does not save the completed fields in the browser's persistent storage. Together with the inquiry, the form sends the website you came from (for example, Google or Yandex search), the tags of an advertising link (UTM) and the address of the first page you opened on our website: this shows us which channels bring clients. The page keeps this information only until the browser tab is closed (sessionStorage) and sends it only together with an inquiry.

2.3. A consultation does not require passport details, health information, payment card details or other data unrelated to the project. Please do not include them in your message. If you represent a company, share only the work contacts and materials you are entitled to disclose.

2.4. When pages are loaded, the website's server records in its technical log the IP address, the date and time of the request, the requested address, the response code, the address of the referring page and browser details (User-Agent). The logs are used to operate and protect the website and to calculate aggregate visit statistics; they are kept for no more than 15 days and are then deleted automatically. In the statistics reports, IP addresses are anonymized: the last part of the address is not stored.

2.5. If you allow web analytics, information about your visit (a browser identifier stored in a cookie, the IP address, device and browser details, the pages you view and your actions on them) is processed by the Yandex Metrica service as described in section 6. Without your permission, this information is not collected.

3. Purposes and legal grounds

3.1. Data is used within the purpose of the specific inquiry. The legal ground for processing depends on the content of the message and the relationship with the person contacting us:

Discussing and preparing a contract

If you contact us to agree on the development or support of a website, the necessary information is used to discuss the brief, estimate the cost and prepare a contract with you. The ground provided by Article 6 of the Law for actions under a contract being concluded applies; it does not extend to unrelated purposes.

Performing a contract

Contact and contract details are used to carry out the agreed work, communicate with the client and prepare documents. The grounds are Article 6 of the Law and the legal requirements that apply to the relevant documents.

Exercising rights regarding data

Information from an application is processed to verify and fulfill the request, prepare a reply and perform the Operator's obligations under Articles 10–14 of the Law.

Other inquiries and separate purposes

If there is no independent ground for processing provided by law, the Operator obtains consent in advance. Before obtaining it, the Operator separately informs you of the purpose, the data involved, the actions with it, the processing period, the authorized persons and how to exercise your rights.

3.2. Contacts from inquiries are not used for advertising mailings. A new processing purpose that requires consent is agreed separately. Refusing such consent does not prevent you from using the website.

4. Actions with data and retention periods

4.1. Depending on the purpose, the Operator collects, organizes, stores, updates and uses data, replies to the person concerned and deletes the data when processing ends. Data is disclosed to other persons only where there is a legal ground. Data may be processed with or without automated means.

4.2. Correspondence about a project that did not result in a contract is kept until the discussion is completed and the inquiry is answered, but no longer than six months from the date of the last message. If the purpose is achieved earlier and there is no other lawful ground, the data is deleted before this period ends.

4.3. Documents relating to a concluded contract and to applications for exercising rights are kept for the periods established by law for the relevant category of documents. The mandatory retention of certain documents does not give a right to use the contacts in them for advertising or other unrelated purposes.

4.4. When processing is based on consent, the period is stated before consent is obtained. When that period ends, the purpose is achieved or consent is withdrawn, processing stops unless the law provides another ground for continuing it.

5. Service providers and data transfers

5.1. Technical service providers may be engaged to operate the website and email. If a provider processes data on behalf of or in the interests of the Operator, the relationship with it is formalized as required by law, defining the purposes, permitted actions and data protection requirements.

5.2. Data is provided to government authorities and other recipients where there is a ground provided by law and only to the extent necessary.

5.3. Personal data may be transferred outside the Republic of Belarus in compliance with Article 9 of the Law. If a specific transfer requires consent, the Operator informs you of the recipient, the country, the purpose and other necessary information, including the risks provided for by the Law, before the transfer begins and obtains separate consent.

5.4. When you follow a link to a messenger or another external service, you also use the service of the chosen provider. That provider's own data processing is governed by its documents. This does not remove the Operator's obligations regarding the correspondence it receives.

5.5. The website is hosted on a rented server in the Federal Republic of Germany, a country that ensures an adequate level of protection of the rights of personal data subjects. This server processes the technical logs (clause 2.4) and relays inquiries from the form.

5.6. Inquiries from the form are delivered to the Operator through the Telegram messenger (Telegram FZ-LLC, United Arab Emirates), which stores messages on servers in different countries, including countries that do not ensure an adequate level of protection of the rights of personal data subjects. Such a transfer involves risks: the recipient's country may have no personal data protection legislation or independent data protection authority, and the ability to protect your rights there may be limited. The inquiry is therefore sent only with your consent, which you give by ticking the corresponding box in the form. Messages with inquiries are kept for the periods stated in clause 4.2, after which the Operator deletes them. Consent can be withdrawn as described in section 8. If you do not wish to give consent, contact us by phone or email.

5.7. If you allow web analytics, information about your visit is transferred to Yandex LLC (Russian Federation), which provides the Yandex Metrica service (section 6). The transfer is based on your consent, which you can withdraw at any time; declining does not limit your use of the website.

6. Cookies, web analytics and visit statistics

6.1. With your consent, the website uses the Yandex Metrica web analytics service provided by Yandex LLC (16 Lva Tolstogo St., Moscow 119021, Russian Federation). On your first visit, the website asks you to choose “Allow” or “Decline”. Until you choose “Allow”, the Metrica tag is not loaded and sets no cookies.

6.2. The purpose is to understand how visitors use the website (which pages and sections they view, where they come from and where they run into difficulties) and to improve the website on that basis. The Operator works with aggregated Metrica reports and session recordings and does not use them for advertising, to identify visitors or to combine them with inquiry data.

6.3. The following is processed: a browser identifier stored in Metrica cookies (_ym_uid, _ym_d and other cookies starting with _ym); the IP address and the approximate location derived from it; device, operating system, browser, language and screen details; the addresses of the pages viewed, the referring page and campaign tags in links; the date, time and duration of the visit; clicks, scrolling and pointer movements, including session recording (Session Replay). What you type into the inquiry form is not included in session recordings.

6.4. The data is collected, stored, organized and analyzed automatically by Yandex Metrica, and the Operator views the reports and session recordings. The data is processed by Yandex LLC on its servers, including in the Russian Federation, under the Yandex Metrica Terms of Use and the Yandex Privacy Policy.

6.5. Consent is valid for one year from the moment you choose “Allow”, unless you withdraw it earlier; after that the website asks again. Metrica cookies are kept in the browser for no longer than a year. How long reports and session recordings are kept in the service is determined by its terms.

6.6. You can withdraw consent at any time: the “Cookie settings” link at the bottom of every page opens the same notice, where you choose “Decline”. The tag then no longer loads, and its cookies on this website are deleted. Declining does not limit your use of the website. If your browser sends a Global Privacy Control signal, it is treated as declining and the notice is not shown. Your choice is stored only in your browser (localStorage) and is not sent to the server.

6.7. Separately from Metrica, visit statistics are calculated on the website's server from the technical logs (clause 2.4) in aggregated form, without cookies and without transferring data to third-party services. The website does not use advertising pixels or advertising cookies.

6.8. Autofill settings, browsing history and drafts saved by your browser or email app are controlled by those programs.

7. Your rights and response times

7.1. Under the Law, you may submit the following requests to the Operator:

Receive information about the processing of your data

Reply within 5 working days, unless legislative acts set another period.

Correct incomplete, outdated or inaccurate data

The data is changed, or a reasoned refusal is given, within 15 calendar days.

Find out about the disclosure of data to third parties

Free of charge once per calendar year, unless the law provides otherwise. Reply within 15 calendar days.

Withdraw consent you have given

Processing stops and you are notified within 15 calendar days, unless there is another lawful ground for continuing it.

Demand that processing stop and the data be deleted

The request is fulfilled within 15 calendar days if there are no lawful grounds for further processing; if it is refused, the reasons are given.

7.2. Where it is technically impossible to delete data in the cases established by the Law, the Operator takes measures to prevent further processing, including blocking, and notifies the applicant within the prescribed period.

7.3. You may appeal the Operator's actions, inaction and decisions to the National Personal Data Protection Center of the Republic of Belarus. The authority's decision may be appealed to a court as established by law.

8. How to submit an application or withdraw consent

8.1. For questions about data processing, write to hello@meisterstech.by. To withdraw consent given electronically, you can send a message to this address stating which consent you are withdrawing and for which inquiry. You do not need to give a reason. Consent to web analytics can also be withdrawn without contacting the Operator: the “Cookie settings” link at the bottom of any page, then “Decline” (clause 6.6). You can also use the application procedure established by Article 14 of the Law.

8.2. A formal application to exercise your rights is submitted in writing or as an electronic document under Article 14 of the Law. The application states your surname, first name and patronymic (if any), your address of residence or stay, your date of birth, the substance of the request and your handwritten or electronic digital signature.

8.3. Your identification number, or if there is none, the number of your identity document, is stated in the cases provided by Article 14 of the Law: if this information was provided when giving consent or if the data is processed without consent. To change data, attach documents or duly certified copies confirming that the correction is needed.

8.4. An electronic document signed with an electronic digital signature can be sent to hello@meisterstech.by. You can ask how to deliver a written application at the same address or by phone. An ordinary email without an electronic digital signature is not automatically treated as an electronic document.

8.5. The reply is sent in the same form as the application, unless the application states otherwise. Withdrawal of consent applies to further processing and does not make earlier lawful processing unlawful.

9. Personal data protection

9.1. The Operator must take legal, organizational and technical protection measures appropriate to the nature and scope of processing, limit access to data to the people who need it for their work, and prevent unlawful access to, alteration, disclosure and loss of data.

9.2. If you notice a disclosure of data or receive a suspicious message sent on behalf of MEISTERSTECH, please report it to hello@meisterstech.by. Do not send passwords or details that give access to payment instruments.

10. Current version

10.1. The current policy is published at meisterstech.by/en/privacy-policy/. The governing Russian version is published at meisterstech.by/politika-konfidentsialnosti/.

10.2. A change to the policy does not replace consent to a new processing purpose where the Law requires such consent. The Operator notifies you of material changes affecting data that is already being processed in the cases and in the manner provided by law.