This is an English translation for convenience. If the versions differ, the Russian version prevails.
1. General provisions
This policy sets out how Marina Borisovna Kudryashova, who provides services under the name “Mel Child Development Centre” (the “Operator”), processes and protects personal data. It has been prepared under Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (the “Law”) and is published as required by Article 18.1(2) of the Law. It covers all personal data processed by the Operator, including data received through the website meldoroga.ru.
Operator: Marina Borisovna Kudryashova, registered self-employed (professional income tax payer)
INN (taxpayer number): 421409394494
Address: 10 Yuriya Dvuzhilnogo St, Kemerovo, Russia
Phone: +7 950 270 29 67
Email: marianas07@mail.ru
2. Key terms
- Personal data — any information relating directly or indirectly to an identified or identifiable individual (the data subject).
- Processing — any action with personal data: collection, recording, storage, use, transfer, deletion, destruction, etc.
- Special categories — including health information. The Operator treats information about a child's development, reports and assessment results as such.
3. Purposes, data and legal basis
Purpose 1. Booking a consultation and contacting parents
- Whose data: parents and other legal guardians.
- What data: name, phone number, the child's name and age, the reason for contacting us.
- Legal basis: consent (Art. 6(1)(1) of the Law); steps taken at the subject's request before a contract (Art. 6(1)(5)).
- Period: until a session is booked or declined, or until consent is withdrawn.
Purpose 2. Concluding and performing a service agreement
- Whose data: legal guardians and children.
- What data: the guardian's full name and contact details, details needed for the agreement and payment; the child's full name and date of birth; information about the child's development and health, assessment and session results.
- Legal basis: the agreement (Art. 6(1)(5) of the Law). Health information — only with the guardian's written consent (Art. 10(2)(1)), given as a separate document (Art. 9(1) and 9(4)).
- Period: the term of the agreement and then for the limitation period of 3 years (Art. 196 of the Civil Code).
Purpose 3. Running and securing the website
- Whose data: website visitors.
- What data: IP address, browser and device type, date and time of the request, page address — logged automatically by the server.
- Legal basis: the Operator's legitimate interest in a stable and secure website (Art. 6(1)(7) of the Law).
- Period: logs are kept for a limited time and deleted automatically.
Purpose 4. Presenting the centre on the website
- Whose data: specialists working at the centre; children in session photos.
- What data: a specialist's full name, role and photo; a child's image.
- Legal basis: separate consent to the dissemination of personal data (Art. 10.1 of the Law) and consent to the use of one's image (Art. 152.1 of the Civil Code); for a child, consent is given by the legal guardian.
- Period: until consent is withdrawn.
The website has no forms, sign-up or user accounts. The Operator does not use data for advertising and does not sell it.
4. Processing methods
Processing is mixed — both automated and non-automated. The Operator performs the following actions: collection, recording, organisation, accumulation, storage, correction, retrieval, use, blocking, deletion and destruction.
Data of Russian citizens is recorded, organised, accumulated, stored, corrected and retrieved using databases located in the Russian Federation (Art. 18(5) of the Law). The website is hosted on a server in Russia.
5. Disclosure
The Operator does not share personal data with third parties except where the law expressly requires it. No cross-border transfer of personal data takes place.
6. Cookies and third-party services
The website itself sets no cookies and uses no analytics. Fonts are served from our own server. Your browser only stores the theme you chose (light or dark); this setting is not personal data and is never sent to the server.
The page embeds a map by Yandex LLC. When it loads, Yandex may receive technical data and set its own cookies under its privacy policy. You can block third-party cookies in your browser settings.
7. End of processing and destruction
- once the purpose is achieved, data is destroyed within 30 days (Art. 21(4) of the Law), unless a longer retention period is set by law or contract;
- after consent is withdrawn — within 30 days of receiving the withdrawal (Art. 21(5)), unless there is another lawful basis;
- if unlawful processing is found, it stops within 3 working days, and if it cannot be made lawful, the data is destroyed within 10 working days (Art. 21(3)).
Destruction is documented in the manner set by Roskomnadzor.
8. Data protection
The Operator is personally responsible for organising data processing, limits access to the specialists who need the data for their work, and takes legal, organisational and technical protection measures (Arts. 18.1 and 19 of the Law). The Operator notifies Roskomnadzor of any incident involving unlawful disclosure within 24 hours, and of the investigation results within 72 hours (Art. 21(3.1)).
9. Your rights
You may:
- find out what data about you and your child is processed, why and how (Art. 14 of the Law);
- ask for data to be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate or processed unlawfully;
- withdraw your consent;
- complain about the Operator to Roskomnadzor (the Russian data protection authority) or to a court.
A child's rights are exercised by their legal guardians.
10. How to contact us
Send a request to marianas07@mail.ru or hand it in at the centre. Include your full name, identity document details and information confirming your relationship with the centre (for example, the date of your agreement). You can call +7 950 270 29 67 first.
- reply to a request — within 10 working days, which may be extended by no more than 5 working days with reasons given (Art. 20 of the Law);
- correction of inaccurate data — within 7 working days (Art. 21(2));
- destruction after consent is withdrawn — within 30 days (Art. 21(5)).
11. Final provisions
The Operator may update this policy. The current version is always published on this page, with its date shown at the top.