Personal data processing policy

1. Controller and scope

The Aeris website operator controls the processing of visitors’ personal data and compliance with applicable safeguards. For access, correction, restriction, deletion or withdrawal of consent, email aeris-psp@outlook.com.

2. Data we receive

The contact form collects your name, company, email address, phone number and payment-flow description. The server may also process IP address, request time, browser and device details, and security logs. The dashboard uses a technical device identifier to protect authentication and sessions. We retain the date, policy version and sender IP to record consent.

Do not enter sensitive categories of personal data, payment credentials or bank-card details in the form or message field.

3. Purposes and legal grounds

• responding to requests and preparing an integration offer;
• negotiating, entering into and performing a contract at the applicant’s request;
• protecting the site, preventing abuse and investigating incidents;
• complying with law and valid requests from public authorities.

Processing is based on consent, requested pre-contract steps, contract performance and legal obligations. This form does not request marketing consent and is not used for promotional mailings.

4. Processing and retention

We may collect, record, organize, store, correct, use, disclose to authorized processors, restrict, anonymize and delete data. Requests that do not lead to a contract are retained for up to 12 months after the last substantive contact, then deleted or anonymized unless law requires otherwise. Security logs are retained for up to 12 months; contract and accounting records for statutory periods.

5. Disclosure and storage

Access is limited to people who need it to process requests, operate the service or protect it. Hosting, email and infrastructure providers may process data on the operator’s instructions under confidentiality obligations. Data is not disclosed to an unlimited audience and is otherwise shared only where law permits or requires it.

Request databases are hosted in the Russian Federation. Before any cross-border transfer, the operator completes the required procedures and verifies a lawful basis.

6. Data protection

We use access controls, encrypted connections, service isolation, backups, security event logging, vulnerability management and restricted public network ports. Controls are reviewed against the nature of the data and current threats.

7. Your rights

You may request information about processing, correction, restriction or deletion, withdraw consent, and complain to a competent authority or court. Email aeris-psp@outlook.com with the subject “Personal data”. We may request information needed to verify your identity.

8. Policy updates

The current version is always available at aeris-psp.net/privacy. A new version takes effect when published unless it states otherwise.