← To the mapРусская версия

Personal Data Processing Policy

Website thescouts.ru

Version dated 19 October 2026

*This is a courtesy translation. The Russian version (https://thescouts.ru/privacy.html) is the legally binding one; in case of discrepancies the Russian text prevails.*


1. General

1.1. This Personal Data Processing Policy (the “Policy”) is prepared in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and describes which personal data the website thescouts.ru (the “Site”) processes, for what purposes, on what legal basis, for how long, and how it is protected.

1.2. Data controller (operator): Individual Entrepreneur Vyacheslav Igorevich Khamadeev, Russian TIN (ИНН) 550718820140, OGRNIP 326784700102349 (the “Operator”).

1.3. The Policy applies to all personal data the Operator receives from visitors and users of the Site, including the version of the Site opened inside the Telegram messenger.

1.4. The Policy is published at https://thescouts.ru/en/privacy.html. Consent to personal data processing is a separate document, “Consent to Personal Data Processing” (https://thescouts.ru/en/consent.html), which the User accepts when signing in.

1.5. The Site is not intended for persons under 14. If the User is under 14, their personal data may be processed only with the consent of a parent or other legal representative.


2. Which personal data is processed

2.1. Visitors (not signed in)

2.2. Registered users

2.3. Owners and representatives of places

When submitting a request to manage a place listing, the following is additionally processed:

The Operator does not request copies of identity documents and asks not to attach them to the correspondence. If such documents are nevertheless received, they are used solely to verify the request and are deleted once it is completed.

2.4. Users of the Telegram version

When the Site is opened inside Telegram, the Operator only receives the fact that the Site was opened from Telegram. Telegram profile data (name, phone number, identifier) is neither requested nor stored.

2.5. Data the Site does not process

The Operator does not process special categories of personal data (health, political views, etc.) or biometric personal data.


3. Purposes of processing

PurposeDataLegal basis
Signing in via an email link, maintaining the account and the list of favouritesemail address, session dataUser’s consent
Receiving and verifying ownership requests, correspondence about the requestemail address, TIN, place details, correspondence content and attachmentsUser’s consent
Service notifications: sign-in link, new messages in the correspondence, decisions on the requestemail addressUser’s consent
Receiving suggestions of new places and reports of inaccuraciesform content, IP addressUser’s consent
Keeping the Site working, protecting it from abuse, rate limitingIP address, session data, technical browser dataOperator’s legitimate interest
Choosing the initial map position (approximate city by IP address; resolved against an offline database on the Operator’s server, the result is not stored)IP addressOperator’s legitimate interest
Traffic analytics and Site improvement (Yandex.Metrica)anonymised technical data, cookiesUser’s consent given in the cookie notice
Compliance with the law, responses to requests from state authoritiesdata required by lawOperator’s legal obligation

The Operator does not use personal data for marketing mailings and does not make decisions with legal consequences solely on the basis of automated processing.


4. How the data is processed

4.1. Processing is carried out with the use of automation: collection, recording, systematisation, accumulation, storage, updating, retrieval, use, anonymisation, blocking, deletion and destruction.

4.2. Databases containing personal data of citizens of the Russian Federation are located in the Russian Federation:

4.3. The Operator engages the following parties that process data on its behalf or provide infrastructure:

4.4. The map on the Site is rendered with Mapbox (Mapbox Inc., USA). When the map loads, the User’s browser itself requests map data from Mapbox servers, and Mapbox receives the IP address and technical browser data. The Operator does not transfer personal data from its databases to Mapbox. Loading the map can be blocked in the browser, but the Site does not work without the map.

4.5. The Operator does not transfer personal data from its databases across borders.

4.6. Personal data is not disclosed to third parties except as described in clause 4.3, upon requests from authorised state authorities in cases provided by law, and where the User has given separate consent.


5. Retention periods

DataPeriod
Account and favouritesuntil the account is deleted at the User’s request
Sign-in sessions30 days from the last visit, then deleted
Sign-in links (one-time tokens)until used, at most 24 hours
Ownership requests, correspondence and attachmentswhile the User’s account exists; attachments to completed requests — no longer than 1 year after the decision
Place suggestions and inaccuracy reportsuntil reviewed by moderation, then in anonymised form
Server technical logsno longer than 90 days
Yandex.Metrica dataper the terms of Yandex LLC

After the retention period the data is destroyed or anonymised. At the User’s request the account and related data are deleted within 30 days, except for data the Operator must keep by law.


6. User’s rights

The User may:

Requests are sent to hello@thescouts.ru from the email address used to sign in to the Site. The Operator replies within 10 business days. Withdrawal of consent leads to deletion of the account, after which signing in, favourites and correspondence become unavailable.


7. Protection of personal data

The Operator takes the legal, organisational and technical measures provided for by Articles 18.1 and 19 of Federal Law No. 152-FZ, including:


8. Changes to the Policy

The Operator may change the Policy. The new version is published on the Site with its date. If the changes affect the purposes or the scope of processed data, the Operator asks Users for a new consent at their next sign-in.


9. Operator’s contacts