Data processing
Privacy policy
Version dated 12 August 2026
This policy explains what personal data Samotsvet receives through the site, why it is needed, who may receive it and how a data subject can exercise their rights. We aim to collect only the information required to respond to an enquiry.
1. Data controller
Individual entrepreneur Nikita Andreevich Samotsvetov (Samotsvet), OGRNIP 323670000016524, INN 672200624836, registered in the Russian Federation.
Address: 4 Sovremennikov Street, Apt 193, Domodedovo, Moscow Region, Russian Federation.
Email: karfagen38@gmail.com. Telegram: @samotsvetvisa.
You may send a data request to karfagen38@gmail.com. Full details appear on the Contact and company details page.
2. Scope and applicable law
This policy applies to the Samotsvet website and enquiries submitted through its forms. Processing takes account of Russian Federal Law No. 152-FZ on Personal Data, the EU General Data Protection Regulation where it applies, and any other mandatory law of the relevant jurisdiction.
3. Data we collect
- Identity and contact data: name, email address, messenger username or another contact method.
- Enquiry data: destination, route of interest, goal, timing, professional or business profile, and information voluntarily entered in the form.
- Attribution data: landing page, referring page and UTM source, medium and campaign values, when included in the link.
- Technical data: request details and security logs which the site infrastructure may process for delivery, abuse prevention and fault diagnosis.
The initial form does not ask for passport details, health data, political or religious views, biometric data, bank details or other sensitive or excessive information. Please do not submit such information through the form.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to an enquiry and conducting an initial review | Name, contact details and form content | Steps taken at the data subject's request before entering into a contract; consent where required |
| Preparing a proposal and negotiating terms | Contact details, goal, route, profile and timing | Pre-contractual steps and subsequent performance of a contract |
| Understanding enquiry sources and improving the site | UTM values, landing page and referring page | Legitimate interest in measuring Samotsvet's own channels with limited data |
| Security, spam prevention and protection of rights | Technical request data and logs | Legitimate interest and compliance with legal duties |
| Accounting and legal records after a contract is signed | Contract and payment data | Performance of a contract and compliance with law |
We do not use form data for bulk marketing messages without separate, unambiguous consent.
5. Source of data and required fields
Data normally comes directly from the person submitting the enquiry. Required fields are marked in the form. Without a name, contact method, destination, description and consent confirmation, the form cannot be submitted because Samotsvet would not have enough information to provide a meaningful response. Other fields are optional.
6. Retention
- An enquiry which does not lead to contracted work is kept for no more than 24 months after the last substantive communication.
- If a contract is signed, data is kept throughout the work and afterwards for as long as needed for accounting, mandatory legal requirements and the establishment or defence of legal claims.
- Technical logs are kept for the limited period set by the infrastructure provider and required for security and diagnosis.
After the applicable period, data is deleted or anonymised unless continued retention is required by law.
7. Recipients and processors
Access is limited to what is necessary for a specific purpose and may be given to:
- providers of the site platform, hosting, cloud storage and infrastructure protection, including OpenAI Sites and Cloudflare;
- Samotsvet personnel and contractors who need the data to respond or carry out agreed work and are bound by confidentiality;
- an independent lawyer, regulated immigration adviser, translator or other professional where this is needed for the requested service, covered by the agreement or separately approved by the client;
- public authorities or other parties where disclosure is required by law or needed to protect lawful rights.
Samotsvet does not sell personal data or disclose it to advertising networks.
8. International processing
Technical infrastructure and some independent professionals may be located outside the data subject's country. Such processing takes place only where a lawful basis and the required contractual, organisational or other safeguards are in place. If a transfer requires a separate notice or consent, it will be arranged before the transfer.
9. Browser storage and analytics
At the date of this version, Samotsvet does not use advertising cookies or third-party advertising trackers. UTM values, the landing page and referring page are stored only with a form submission to identify the source of that enquiry. The site platform may use strictly necessary technical storage for security, content delivery and administrative authentication.
10. Security
Measures include access controls, a protected administrative area, validation of submitted data, automated spam protection, encrypted connections and other reasonable organisational and technical safeguards. No method of internet transmission or storage can remove all risk.
11. Data subject rights
Depending on the applicable law, a data subject may:
- obtain confirmation of processing and a copy of their data;
- request correction of inaccurate or completion of incomplete data;
- request deletion or restriction where there is no longer a lawful basis for processing;
- withdraw consent without affecting processing carried out before withdrawal;
- object to processing based on legitimate interests;
- receive data in a portable format where that right applies;
- complain to the competent supervisory authority, including Roskomnadzor or the authority in the relevant EU Member State.
We may ask for reasonable proof of identity before fulfilling a request so that data is not disclosed to another person.
12. Automated decisions
The form does not make an automated decision about a visa, status or whether Samotsvet can take on the work. It does not produce legal effects without human involvement.
13. Children's data
The site is not intended for independent use by anyone under 18. Information about a child in a family enquiry should be provided by a parent or legal guardian, and only to the extent needed at the relevant stage.
14. Requests and complaints
A request may be sent to the controller's address or through the electronic channels on the contact page. Please include your name, the contact method used, the nature of the request and enough information to locate the relevant record. Samotsvet will respond within the period required by applicable law.
15. Changes to this policy
The current version is always published on this page. If the purposes of processing or categories of recipients materially change, the revision date will be updated and new consent will be requested where required by law.