Personal Data Processing Policy

1. Operator

The personal data operator is Reporting Center (the "Operator"). Address: Ulyanovsk, Goncharova St. 34A, 1st floor, office 120.

Person responsible for personal data processing: the Operator's head. Contact: solnjschko07@rambler.ru, +7 951 096 37 95.

2. Data we process

When you submit a request on the Website: your phone number and the selected type of tax deduction.

Technical data your browser sends with the request: IP address, browser details (user agent), the page the request was sent from, date and time. They are used to protect the form from spam and abuse.

When providing the service — data you give us to prepare the 3-NDFL tax return: full name, passport details, TIN, registered address, contact details, information on income, expenses and property, and bank details for the tax refund. The set depends on the deduction type.

The Operator does not process special categories of personal data (including health data): only payment information is taken from medical documents.

Cookies — as described in the Cookie Policy.

3. Purposes

To contact you about your request and consult you.

To conclude and perform the contract for preparing the 3-NDFL return and supporting you until the desk audit is complete, including filing the return with the tax authority on your instruction.

To protect the Website from spam, automated submissions and abuse.

To fulfil obligations imposed on the Operator by Russian law.

4. Legal grounds

Your consent — for requests from the Website (Art. 6(1)(1) of Law 152-FZ). Consent is given with a separate checkbox in the form; its text is published on the "Consent to Personal Data Processing" page.

A contract to which you are a party — for providing the service (Art. 6(1)(5)).

Requirements of Russian law — for keeping accounting records (Art. 6(1)(2)).

5. How we process data

The Operator collects, records, systematises, accumulates, stores, updates, retrieves, uses, transfers (provides, grants access to), blocks, deletes and destroys personal data, with and without automation.

Personal data of Russian citizens is recorded, systematised, accumulated, stored, updated and retrieved using databases located in the Russian Federation (Art. 18(5) of Law 152-FZ).

Personal data is not transferred abroad.

6. Who receives the data

The Operator does not sell personal data or share it with third parties for advertising.

To run the Website, data is processed on the Operator's behalf by Russian services: the hosting provider (storing requests), an email service (delivering requests to the Operator's mailbox), the MAX messenger (notifying the Operator), Yandex LLC and its affiliates (Yandex SmartCaptcha for bot protection; Yandex Maps only with your cookie consent).

When providing the service, data is sent to the Federal Tax Service to the extent needed to file the return, on your instruction.

Data may be disclosed to public authorities where expressly required by law.

7. Retention

Website requests (phone, deduction type, technical data) are kept until the purpose is achieved, but no longer than 6 months from the request date, and are then deleted.

Data obtained while providing the service is kept for the term of the contract and then for the periods required by Russian law for accounting records.

If you withdraw consent, data processed on that basis is destroyed within 30 days unless the law provides otherwise.

8. Your rights

To receive information about the processing of your personal data: which data, for what purpose, on what grounds, for how long and to whom it is disclosed.

To require that data be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose.

To withdraw your consent.

To appeal against the Operator's actions to Roskomnadzor or a court.

9. How to send a request or withdraw consent

Write to solnjschko07@rambler.ru or send a letter to: Ulyanovsk, Goncharova St. 34A, 1st floor, office 120. Include the phone number you left in your request so we can find your data.

The Operator replies within 10 business days of receipt. The period may be extended by up to 5 business days with notice of the reasons.

10. Data protection

The Website works over HTTPS only. Only the Operator and persons authorised by it have access to requests. The form is protected from automated submissions, and the number of requests from one address is limited.

The Operator takes legal, organisational and technical measures under Articles 18.1 and 19 of Law 152-FZ.

11. Changes

The Operator may change this policy. A new version takes effect when published on this page; the version date is shown at the top.