Version 2026-08-02.1, dated 2 August 2026. Effective upon publication. The Russian version prevails in the event of a discrepancy.
1. Scope and Operator
This Policy describes personal data processing when a person visits the Russian- or English-language pages of msk-legal.ru and submits the “Ask a question or request a consultation” form. It does not govern other domains or subdomains.
The personal data operator is:
АДВОКАТСКОЕ БЮРО ГОРОДА МОСКВЫ «АЛЕКСАНДР КУРЬЯНОВ И ПАРТНЁРЫ»
OGRN 1157700020950; INN 7709481378; KPP 771701001.
Registered address: 129626, г. Москва, вн. тер. г. муниципальный округ Алексеевский, проспект Мира, д. 102, стр. 30, помещ. 11Б/1, Russian Federation.
Public contact address: info@msk-legal.ru.
This Policy is informational. A visitor does not “accept” it and does not consent through it. Consent to the processing of enquiry data is given separately through an initially unticked required checkbox.
2. Data processed
When the website is visited, the following may be processed:
- IP address and request date and time;
- visited-page address and referral source;
- browser type and version, operating system and device information;
- cookies, online identifiers and session information;
- page-view and interaction events;
- approximate location generated by analytics services;
- technical request, response and error information.
The “Ask a question or request a consultation” form processes only the name, telephone number, email address and enquiry text actually completed by the user.
When Callibri call tracking, callback or communication functionality is used, the telephone number, time and fact of communication, enquiry source and technical identifiers may be processed, depending on the function actually enabled. This Policy does not state that calls are recorded unless recording is separately confirmed and disclosed.
The form is not intended for passport or biometric data, special-category data, criminal-record information or another person’s personal data. The ordinary form checkbox is not written-form consent where the law requires written consent.
3. Purposes and lawful grounds
Data are processed to:
- operate and protect the website, prevent automated abuse and diagnose errors;
- measure traffic, assess page use and improve the website;
- attribute enquiries and communicate with the user;
- receive, register, review and clarify an enquiry and arrange a consultation;
- consider and prepare a legal-services agreement at the user’s initiative;
- comply with legal obligations and establish or defend legal claims.
The grounds are:
- separate user consent for enquiry data;
- steps at the data subject’s initiative necessary to enter into an agreement under Article 6(1)(5) of Federal Law No. 152-FZ;
- the Operator’s legitimate interests in website security, assessment and improvement under Article 6(1)(7), only to the necessary and proportionate extent and provided that data-subject rights are not infringed;
- an agreement and applicable law where relevant.
The Policy is not itself a lawful ground. The form checkbox is not consent to analytics, advertising or processing that began before the checkbox was selected.
4. Operations and methods
The Operator may collect, record, organise, accumulate, retain, rectify, retrieve and use data; provide necessary access; and restrict, erase and destroy data by automated, non-automated or mixed means.
The Operator does not sell data or use the form consent to authorise dissemination to an indefinite group.
5. Services and categories of persons involved
- Hosting and server-infrastructure provider — hosting and website operation; form and technical data.
- Google Analytics — traffic analytics; cookies and identifiers, sessions, events, device, browser and approximate location.
- Yandex Metrica — visit and interaction analytics; visit, activity, device, operating-system, cookie and other technical data.
- Google reCAPTCHA — risk assessment and form protection; IP address, cookie, device, browser and interaction data.
- Bitrix24 or another CRM service — enquiry registration and handling; completed form fields and service metadata.
- Callibri — call tracking, callback or communication functionality; telephone, communication, source and technical data.
- Email provider — delivery to authorised personnel; enquiry and delivery metadata.
- Technical-support provider — troubleshooting; restricted access where necessary.
A service name does not by itself determine the legal role of its provider. Depending on the contract and actual function, a person may act under the Operator’s instructions, as an independent operator, or as a subprocessor. Where processing is entrusted to another person, the instructions must comply with Article 6(3) of Federal Law No. 152-FZ. The exact name and address of a person actually processing data under instructions are supplied to the data subject on request to the extent required by law.
6. Analytics, cookies and reCAPTCHA
The website uses Google Analytics, Yandex Metrica and Google reCAPTCHA. Their resources may load when a page opens, before the form checkbox is selected.
Depending on enabled settings, Google Analytics may collect session, browser, device, approximate-location and client-ID information. See the Google Analytics Terms and official Google documentation.
Google reCAPTCHA is an external form-protection service. Google states that reCAPTCHA uses the necessary _GRECAPTCHA cookie for risk analysis; the official reCAPTCHA terms and documentation apply.
Yandex Metrica automatically receives website-visit and device data and transmits them to Yandex for statistical processing. The official Metrica Terms require the website owner to give visitors appropriate information and establish an applicable lawful ground.
Blocking cookies in a browser may restrict functionality but does not guarantee that all technical network requests will cease.
7. Localisation and cross-border transfers
When data of Russian citizens are collected, Article 18(5) of Federal Law No. 152-FZ requires initial recording, organisation, accumulation, retention, updating and retrieval using databases located in the Russian Federation.
Google services may involve disclosure of technical data to foreign infrastructure. This Policy does not state that cross-border transfers are absent. Any such transfer is subject to Article 12 of Federal Law No. 152-FZ, including prior identification of recipients, countries, grounds and safeguards and notification of Roskomnadzor where required. Consent to form data is not, by itself, consent to a cross-border transfer of technical data.
8. Retention
Enquiry data are processed until the purpose is achieved, consent is withdrawn or necessity ends, but for no longer than 12 months after the last substantive two-way communication. If none occurred, the period runs from form submission. Automated messages, advertising and unilateral contact attempts do not restart it.
If an agreement is concluded, necessary data may thereafter be processed under the agreement and law. Technical, cookie and analytics data are retained only as long as necessary for the relevant purpose and within the periods actually configured in the services.
When the purpose is achieved or consent is withdrawn, consent-based processing ceases and the data are destroyed within 30 days unless an independent lawful ground applies.
9. Rights and requests
A data subject may obtain information about processing, require rectification, restriction, cessation or destruction where grounds exist, withdraw consent and complain to Roskomnadzor or a court.
A request may be sent by post to the Operator or by ordinary email to info@msk-legal.ru, subject to a minimum identity check. The telephone or email used, name if entered and approximate submission date are sufficient to locate an enquiry. A passport copy is not required by default.
10. Security and versions
The Operator must apply the legal, organisational and technical measures required by law, restrict access and require confidentiality from authorised persons. This Policy neither discloses nor promises unverified internal security mechanisms.
The current version is available without registration at https://msk-legal.ru/en/personal-data-processing-policy/. A new version applies upon publication and does not retrospectively broaden prior consent.