Version dated 8 October 2026. Website: mercury-cm.ru.
1. Operator and scope
The personal data operator is OOO “MERKURI KONSTRAKSHN MENEDZHMENT REGION” (short name: OOO “MSM REGION”), Russian taxpayer number (INN) 9701087140, state registration number (OGRN) 1177746937895. Registered address: Premises 18P, Building 1, 17 Snezhnaya Street, Sviblovo Municipal District, Moscow, 129323, Russian Federation. Privacy requests and withdrawal of consent: info@mercury-cm.ru.
This policy covers website visitors and people sending requests through its forms under Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”. It does not replace the company's policies for employee, supplier or other processing outside the website. The legal operator's Russian name is ООО «МЕРКУРИ КОНСТРАКШН МЕНЕДЖМЕНТ РЕГИОН».
2. Website requests
Data subjects: visitors and representatives of organisations who provide their own contact details. Purpose: considering a request, responding, providing advice or a requested commercial proposal, and related correspondence.
Data: name, email address, phone number if supplied, message contents and personal information in the files you attach. Request and consent evidence includes the date and time, request identifier, IP address, consent selection, language and consent version.
Legal basis: separate consent under Article 9 of Law No. 152-FZ. Preparing a contract at the data subject's initiative and performing a contract may also rely on Article 6(1)(5). Mandatory legal obligations rely on their applicable statutory grounds.
Operations: collection, recording, organisation, accumulation, storage, correction, retrieval, use to respond, access by authorised recipients, blocking, deletion and destruction. Processing combines automated website systems with staff handling the request.
Retention: until the request and related correspondence have been completed or consent is withdrawn, unless another lawful basis applies. Data must be destroyed within 30 days after the purpose is achieved or consent is withdrawn, subject to the exceptions in Article 21. Contract, statutory reporting or rights-protection records are kept only under their independent legal basis and applicable retention period.
3. Technical information and analytics
Website delivery and security involve IP addresses, request times, requested page addresses, browser details, session and form identifiers. Purpose: delivering pages, operating forms, preventing spam and confirming actions. Basis: the operator's legitimate interest in website functionality and security, subject to data subjects' rights, under Article 6(1)(7). Retention must be limited to the necessary purpose; the form rate-limit window is one hour.
Yandex Metrica, counter 70545949, loads only after “Allow analytics” is selected. Its purpose is visit statistics and website improvement. It processes cookie identifiers, IP addresses, browser and device information, viewed pages, referral source and visit time on the basis of separate analytics consent. Session Replay, click maps and link tracking are disabled. Our code does not send request field contents to Metrica. Declining analytics does not prevent form submission.
The Yandex map loads only after “Show Yandex map” is selected. Loading the map sends the visitor's IP address and technical browser information to Yandex. See the Cookie and Analytics Policy.
4. Recipients and processing location
Authorised company staff handle requests. Beget hosts the website. Hosting and technical support providers may access data to the extent needed for their services under appropriate contracts, confidentiality obligations and security requirements. Details of contracted processors can be requested from the operator.
Technical information is shared with OOO “YANDEX” when analytics is allowed or the map is opened. See Yandex's Privacy Policy. Data may be provided to competent authorities only on lawful grounds.
Collection of Russian citizens' personal data must comply with Article 18(5) on databases located in Russia. The website uses Russian Beget hosting. Its forms do not use Google reCAPTCHA or send requests to a foreign CAPTCHA service. Any planned cross-border processing outside this website requires the operator to satisfy Article 12 before it begins.
Request data is not published, sold or used for advertising mailings under this consent. Advertising requires separate prior consent. No decision producing legal effects for a data subject is made exclusively through automated processing.
5. Security
The website uses HTTPS, server-side consent checks, local anti-spam checks and rate limiting. New attachments are stored outside the public website directory, with Drupal access checks. New requests include a record of the consent version. The operator must also manage staff access, backups, workstation security and incident response under Articles 18.1 and 19.
Do not send passport details, health information, biometric information or other data unnecessary for a response. You must have a lawful basis for sharing another person's data. The forms do not request special categories or biometric personal data.
6. Your rights
You may request information about processing, correction, blocking or destruction where applicable, withdraw consent, or complain to Roskomnadzor or a court. Send requests to info@mercury-cm.ru or the registered address. Include enough information to identify your request; do not send unnecessary identity documents. The operator may request further information where legally necessary.
Information-access requests are answered within 10 working days; an extension of up to 5 working days requires a reasoned notice. Withdrawal does not affect prior lawful processing. Further processing requires an independent legal basis.
You can change analytics consent through “Cookie settings” at the bottom of the page. Withdrawal stops subsequent analytics loading; it does not erase statistics already received by Yandex.
7. Updates
The current policy is available here. A material expansion of processing based on consent requires new consent; publishing a revised text does not itself provide it. Russian legal provisions govern. The Russian version is available at this link.
