Documents and data protection

Current documents

This page is a navigation hub and does not replace the published document versions. Each electronic version is placed at an immutable address with its version number, publication date and checksum.

Member account registration

Standard registration has three clear steps:

1. The user enters a name and email address, creates and repeats a password, accepts the Terms of Use, confirms having read the Policy, and separately consents to personal data processing.
2. The service sends an address-confirmation link to the specified email.
3. After confirmation, the user signs in to an initially empty member account.

Registering an account is not an application for admission to the cooperative, does not create membership, does not start the review period for such an application and creates no obligation to pay contributions.

Standard registration does not request KYC data, passport details, admission documents, payment details or information about foreign applicants. A separate protected stage inside the account, with its own notice, will be provided for these data.

Personal data

Controller

NPK NPO SPECZASHCHITA (НПК «НПО «СПЕЦЗАЩИТА»)

TIN / PSRN

9709066128 / 1207700383087

Address

Room 11, Building 2, 22 Stanislavskogo Street, Moscow 109004, Russia

Personal data requests

office@speczashchita.com

Data used for registration

• name displayed in the account;
• email address for account identification, address confirmation and access recovery;
• password transmitted over a secure connection; the server stores only a strong derived value, not the original password;
• IP address, user agent, event time and outcome, server-session and request-protection identifiers — for security and incident investigation.

The data is used to create and protect the account, perform the User Agreement, send service messages and fulfil the controller's obligations. Marketing consent is not included in registration.

Processing infrastructure

• Timeweb Cloud — application server, database, backups and private S3 storage located in the Russian Federation.
• RuSender — service emails only: address confirmation, access recovery and account-event notifications.
• Yandex 360 — the controller's corporate email and internal document workflow.

The declared production environment for the website and account does not provide for cross-border transfers of personal data. Passport files and KYC materials are not collected through public registration and are not requested by ordinary email.

Retention periods and user rights

Account data is processed while the account is in use or while necessary to perform the agreement and comply with law. Once processing ends, the data is deleted or destroyed within the period set by the Policy, unless mandatory retention or the protection of the parties' rights requires otherwise.

Ordinary technical security events are retained for up to 12 months. Records evidencing legally significant actions follow the retention period of the related process; for an incident or dispute, retention continues until it is resolved and the applicable period for protecting rights has expired. Backups are retired under the established rotation cycle.

The user may request information about processing, correction, restriction or deletion of data, withdraw a previously given consent where processing is based on consent, and challenge the controller's actions. Requests should be sent to office@speczashchita.com.

Strictly necessary cookies

The account uses only two technical cookies. They are required for sign-in and request protection and are not used for advertising, profiling or cross-site tracking.

__Host-sz_session

An opaque server-session identifier. The cookie is protected by the attributes Secure, HttpOnly and SameSite=Lax. The session ends after 30 minutes of inactivity and in all cases no later than 12 hours.

__Host-sz_csrf

Protects forms and APIs against forged requests. The cookie lasts for the browser session and also has the attributes Secure, HttpOnly and SameSite=Lax.

No separate advertising-cookie banner is shown because analytics and marketing cookies are not enabled and the technical cookies are necessary for the function requested by the user.

Website requests

The request form is intended for an initial message and opens the user's email application. Do not include passport details, health information, payment details or another person's confidential information in the first email.

Information from a request is used to register the message, respond and select a safe next route. Consent withdrawals and deletion requests should be sent to office@speczashchita.com.

Service and marketing messages

Email confirmation, access recovery and request-related messages are service communications. News, invitations and marketing offers may be sent only after separate prior consent.

Data Controller Contact Details

NPK NPO SPECZASHCHITA, Room 11, Building 2, 22 Stanislavskogo Street, Moscow 109004, Russia.

For personal data matters: office@speczashchita.com.