Personal data policy

Accounts: email, password hash, name and selected city. Purchases: orders, amounts, payment status, vouchers, favorites and support requests. Companies: legal name, tax and registration numbers, address, hours, representative contacts and settlement details. Newsletter: email, city, verification and separate consent evidence. Security: IP or its protected identifier, timestamps, action counters and service logs. Chatbot: the current question, language and necessary secure session data. Answers are selected from portal help; order and account details are not added to the response context. Additional request processing is temporarily disabled.

Contract formation at your request and performance: Article 6(1)(5) of Russian Law 152-FZ; statutory duties: point 2; necessary service protection: point 7 subject to your rights. Optional consent based processing uses Article 6(1)(1) and Article 9. Marketing and additional chatbot request processing require separate, unchecked choices. Operations include collection, recording, organization, storage, updating, retrieval, use, lawful disclosure, restriction and deletion, automatically and by authorized personnel.

Authorized employees and the hosting provider have access as necessary. Merchants receive voucher and order data required for fulfillment; YooKassa receives payment and receipt data. The portal does not receive full card details. Operator mail infrastructure delivers emails. Chatbot requests are processed by the portal server to select help responses. Additional request processors are temporarily disabled. They may be connected after technical verification, legal review of data scope and processing terms, and document updates. The operator must arrange the necessary agreements and notices before changing processing arrangements.

Account data is processed during the relationship, then only on a lawful basis. Contractual, payment and accounting records follow statutory retention periods. Consent evidence: up to one year after the event unless law or a dispute requires longer; evidence for an active newsletter subscription is retained until withdrawal. Service logs: up to 90 days; rate counters: up to two days. Unverified subscriptions: up to 48 hours. Full chatbot conversations are not saved in the portal database or logs; messages exist only in the open page’s memory until closing, reloading or clearing. The operator must host primary data and backups in Russia. The deployment guide describes scheduled cleanup.

To request access, correction, restriction or deletion, or withdraw consent, email admin@administrator.ru. Subject: “55.ru personal data”. State your account contact and request; proportionate identity verification may be required. Data access replies are provided within 10 business days, with a reasoned extension of up to 5 business days where permitted; processing cessation and deletion follow Article 21. Withdrawal does not prevent processing required by law or contract. You may complain to Roskomnadzor or a court.