Personal data processing policy

Operator and scope

The processing of personal data of visitors to https://laboratory17.ru and of participants in the professional survey of the Laboratory 17 project is organized by sole proprietor Tatiana Aleksandrovna Nevskaya (IP Nevskaya T. A.), INN 541009945495, OGRNIP 314547610100241, address for correspondence: 24/3 Tsentralnaya St., Koltsovo, Novosibirsk Region, 630559, Russia.

For questions about data processing: 3367788@bk.ru, with the subject line “Laboratory 17 — personal data”.

What data is processed

Through the survey and the contact form, a participant provides their name, organization, work email, professional role, country or target market; optionally, the organization's website, city, phone or messenger. Together with these, answers about the task, material requirements, volumes, acceptable price and the chosen next step are processed.

The following service information is stored automatically: the address of the page from which the form was submitted, referral tags (UTM), date and time of submission, the form version and the version of the consent text, as well as web server log entries (IP address, request time, page address, User-Agent).

Purposes of processing

• studying the requirements of professional market participants for microalgae-based materials;
• reviewing a request and following up on the question chosen by the participant, including an invitation to an interview if the participant requested one;
• protecting the website from automated and malicious submissions.

Demand is assessed using anonymized aggregate results. Contact details and individual answers are not intended for public disclosure. Taking part in the survey does not mean subscribing to news or advertising: information messages are sent only if a separate box is ticked in the form.

Legal basis and operations

The legal basis for processing data submitted through the website forms is the participant's consent, given by ticking a box in the form; the consent text is published at https://laboratory17.ru/consent/. The operator collects, records, organizes, accumulates, stores, clarifies, retrieves, uses, anonymizes, blocks, deletes and destroys data within the stated purposes. Processing is carried out both with and without automation.

Services and technical data

The website, database and backups are hosted on a single dedicated server of a Russian provider (Selectel LLC, Moscow, Russian Federation). Service notifications about new answers are sent via the mail server of the Webnames hosting (Regtime LLC, server in Moscow, Russian Federation). Data is not transferred across borders.

As of publication of this version:

• no web analytics systems, counters, advertising pixels or session recording are connected; no cookies are set for tracking or profiling;
• no CRM, mailing or cloud services are used; answers are exported manually by an administrator in the protected administrative area of the website;
• for each new answer, a service email is sent to the operator from noreply@laboratory17.ru to info@laboratory17.ru; both mailboxes are hosted on the Webnames mail server, and emails are not forwarded to other mail services. The email contains the date, the participant's organization, name and work email, the topic of the request or brief survey answers (purchased result, components, sample volume, next step), the page and referral tags, and a link to the record in the administrative area. Emails are kept in the mailbox no longer than the answers themselves;
• database backups are made daily and stored on the same server (up to the 14 most recent copies); web server logs are size-limited and rotated, and are not used for profiling.

If the set of services changes, this version will be updated before a new service is connected.

Access to data

Access to the answers and the notification mailbox is limited to the operator and the technical specialist engaged by the operator to maintain the website. Access to the administrative area and the mailbox is protected by separate accounts; the connection to the website is protected by an HTTPS certificate.

Retention and termination of processing

Identifiable answers are stored for no more than 12 months from receipt. If the purpose of processing is achieved earlier or consent is withdrawn, processing based on consent stops, and the data is deleted or anonymized within the time limits set by law, unless there is another independent legal basis for retaining it.

Anonymized aggregate survey results that do not allow a participant to be identified may be stored and used without time limit.

Participant's rights

A participant may request information about the processing of their data, demand its correction, blocking or deletion, withdraw consent, and appeal against the processing to the authorized body for the protection of the rights of personal data subjects or to a court.

Requests should be sent to 3367788@bk.ru or in writing to the operator's address. To find a record, it is enough to give the email used in the survey and details of the submission; if necessary, the operator will request information to verify the applicant's identity. Responses and actions are carried out within the time limits established by the legislation of the Russian Federation.

Changes to the policy

The current version is published at https://laboratory17.ru/privacy/. The date and version number are updated when the purposes, the data processed or the processing procedure change.