Privacy Policy

1. General provisions

This Privacy Policy (the “Policy”) explains how the international cybersecurity companies association Compliance Control and Rakasta (the “Association”, “we”) processes the data of visitors to this website (the “Site”). The Site is promotional and non-commercial in nature: it has no application forms, registration, or sale of goods or services. By using the Site, you agree to the terms of this Policy.

2. What data we process

Because the Site has no contact or registration forms, we do not request or store personal data that you enter manually (name, phone, e-mail, and so on). Technical data may be processed automatically: IP address, device and browser type, pages visited and time of visit, and the referring source. Such data is used in anonymized form.

3. Cookies and web analytics

The Site may use cookies and web-analytics systems to measure traffic and improve its content. You can disable cookies in your browser settings — this will not restrict access to the Site's main content. The specific analytics systems in use are named by the Association when they are enabled.

4. Purposes of processing

• keeping the Site operational and secure;
• analyzing traffic and improving the content;
• producing anonymized statistics on Site usage.

5. Legal grounds

Technical data is processed on the basis of our legitimate interest in operating and developing the Site and, where the law provides, on the basis of your consent (for example, for the use of cookies). We seek to comply with the applicable data-protection laws in the jurisdictions where the Association's members operate (Russia, Kazakhstan, the UAE, the European Union, and Uzbekistan).

6. Sharing with third parties

We do not sell visitor data or share it with third parties for marketing purposes. Processing may be carried out by web-analytics providers within the scope of their functions. The Site contains links to the resources of member companies (Compliance Control and Rakasta in various countries): by following them, you move to third-party sites with their own privacy policies, for which the Association is not responsible.

7. Retention periods

Anonymized technical and statistical data is stored no longer than necessary for the purposes set out in this Policy, or for the periods required by applicable law.

8. Your rights

In relation to your data, you have the right to request information about its processing, the restriction or cessation of processing, and the deletion of data — to the extent provided for by applicable law. To exercise these rights, send a request using the contact details below.

9. Data protection

We apply reasonable organizational and technical measures to protect the data we process against unauthorized access, alteration, and disclosure.

10. Changes to this Policy

We may update this Policy. The current version is always published on this page, with the date of the last update indicated.

11. Contacts

For questions about data processing and this Policy: info@compliance-control.ru. Contact details for member companies by region are listed in the Site footer.