Consent to Personal Data Processing
Version of:
This is a translation. The Russian version at
/legal/consentis the one in force; where the two differ, the Russian text prevails.
This consent is given when an account is created, by a separate action — ticking “I consent to the processing of personal data” on the registration screen. The tick is not combined with acceptance of the offer and not combined with consent to receive advertising messages: these are different decisions, and each is taken separately.
The Operator records the fact of consent: the account id, the date and time, the IP address and the redaction of this document in force at that moment are stored.
1. To whom consent is given
| Legal name | Limited liability company «ITERNA RESHENIYA» |
|---|---|
| OGRN (state registration number) | 1267400015409 |
| INN (taxpayer number) | 7453369705 |
| KPP | 745301001 |
| Address | 6 Ternopolskaya St., office 158, workplace 31, Chelyabinsk, Chelyabinsk Region, 454080, Russia |
| Email for questions about the service | support@iterna.ai |
| Email for personal-data requests | privacy@iterna.ai |
Hereinafter — the Operator.
2. Over what data
- email address;
- name, if given;
- Yandex ID account identifier, if sign-in goes through it;
- interface language and the state of interface hints;
- IP address, date, time and outcome of security-relevant actions in the Service;
- plan, balance of accounting units and spending history;
- payment attributes: identifier, amount, currency, date and status of a payment, the label and masked number of a saved payment method;
- address and delivery status of Service emails.
This consent does not extend to the data of people who address a User’s scenarios: for that data the User is the operator and the Operator processes it on the User’s instruction (section 3 of the Personal Data Processing Policy).
3. For what operations
Collection, recording, systematisation, accumulation, storage, amendment (updating, alteration), retrieval, use, transfer (provision, access) to the extent and to the categories of recipient set out in section 8 of the Policy, blocking, deletion and destruction — by automated means and otherwise.
4. For what purposes
Providing access to the Service and identifying the User; sending service messages (address confirmation, password recovery, workspace invitations, notices about the balance of accounting units and the state of the account); settlements for use of the Service; security and incident investigation; compliance with statutory obligations.
This consent does not authorise the sending of advertising messages. Such messages are sent only where a separate consent exists (art. 18 of Federal Law 38-FZ).
5. Term and withdrawal
Consent is effective from the day it is given until the day it is withdrawn.
Withdrawal is made by an email to the personal-data address given above, or by deleting the account in the Service’s interface; the procedure and the terms of deletion are set out in section 6 of the Policy.
Effect of withdrawal: the Operator stops processing and destroys the personal data within thirty days, except for information whose retention for a set term is required by law (in particular accounting and tax records) and information needed to defend the Operator’s rights in a dispute. After withdrawal the account cannot be used: processing the email address is a necessary condition of access.
6. Redactions
The version in force is published at /legal/consent; its date is shown at the top of the
document. When the text changes, a consent already given remains effective in the redaction in
which it was given — which is exactly why the redaction is recorded together with the fact of
consent. If a new redaction widens the scope of data or purposes, consent is requested again.