Privacy & Personal Data Processing Policy

Website: https://federation-studio.ru

Version: 3 October 2026.

1. General Provisions

This Policy defines the objectives, composition and processing of personal data of visitors to the FEDERATION site, applicants and persons seeking cooperation. Processing is carried out in accordance with Federal Act No. 152-FZ of 27 July 2006 on personal data and other applicable legislation of the Russian Federation.

Individuals involved in organising the project: Diana Anatolyevna Melnichenko and Anton Leonidovich Khodko.

Anton Leonidovich Khodko receives enquiries and handles correspondence with applicants.

Postal address: 123112, Moscow, 12 Presnenskaya Embankment, 1102.

Personal data enquiries: hello@federation-studio.ru.

"FEDERATION" is the name of the project. The name of the project does not in itself replace that of the operator.

The policy applies to the processing of data by the operator. Substitution to external sites, social media and media outlets is also regulated by the rules of the respective services.

2. Data We Process

When you contact us through the website form, we may process:

• your name or project name;
• the phone number, email address or Telegram username you provide;
• your applicant category, service of interest, budget and preferred deadline;
• your message and information you voluntarily provide about the project;
• consent records, where processing relies on consent.

When visiting the site, technical tools can process IP address, date and time of request, browser and device information, page address, transition source, cookie and session identifiers. The composition of the information depends on the settings of the server and the connected services.

You should not send passport data, payment requisitions, health information or other sensitive data through a common form. The collection of such data is not the purpose of this form.

3. Purposes, Legal Grounds & Retention Periods

3.1. Responding to Enquiries & Discussing Partnerships

Information from form and subsequent correspondence is processed. The aim is to respond, clarify the task and prepare a proposal. The basis is a separate consent or legal ground, such as the conclusion of a contract on the initiative of the applicant, where the application is directed towards its conclusion.

Communications shall be kept as long as necessary for their consideration and subsequent interaction, unless a longer period is required by law or contract. When the target is achieved, the data shall be removed or destroyed unless there is another legal basis for storage.

3.2. Entering into & Performing Contracts

The necessary information about the party and its representative shall be processed when moving to contractual relations. The grounds are the conclusion and execution of the contract, as well as the performance of the duties prescribed by law. contract, tax and accounting documents shall be kept within the time limits prescribed by applicable law for the relevant type of instrument.

3.3. Website Operation & Security

Technical information is used to process queries, work the form and check for automated dispatch, diagnosis of malfunctions and prevention of abuse. The basis is chosen taking into account the need to process, the legitimate interests of the operator and the rights of visitors; Consent is sought where required.

The server logs are kept for a period of time required to ensure website operations and security, diagnostics of malfunctions and incident investigations, taking into account the hosting provider ' s settings and legal requirements.

3.4. Website Analytics

Visits and interactions are used to assess the site ' s convenience and improve its content. If such information is personal data and is processed by consent, it shall begin with the individual ' s consent.

The timing of the storage of analytical data and identifiers is determined by the settings of the connected services and the applicable legal requirements. Data shall not be stored longer than is necessary for the stated processing purposes.

Advertisements are not part of the purpose of consideration of the application. They require a separate legal basis and the necessary consent of the addressee.

4. Cookies & Third-Party Services

The site uses technical cookie and local browser storage to operate interfaces, sessions and settings. Analytical cookie and other non-binding tracing tools should be included, taking into account the choice of the visitor and the applicable legal requirements.

The website's tested version includes Yandex Metrick and Google Tag Manager, a GTM-M9SJG8XD container. Google Tag Manager controls tag connection and does not automatically mean Google Analytics. The exact composition of tags is determined by the settings of the container and requires a separate check.

The connection of external scripts may provide suppliers with technical information, including IP addresses and browser details. Before the relevant services are included, the operator shall verify the recipients, the data composition, the processing locations and the legal basis for the transfer, including requirements for cross-border transfers.

The visitor can limit the cookie in browser settings. This may affect the individual functions of the site. Disabled cookie in the browser does not per se stop all modes of transmission of technical data.

No telephone, e-mail or full application should be provided in the form, nor should an URL page and analyst be provided without separate justification and necessary security measures.

5. Processing Procedures & Recipients

Processing may include collection, recording, systematization, stockpiling, storage, clarification, recovery, use, transfer in the cases envisaged, blocking, disposal and destruction of data. Automated and manual treatments are used.

The current application form is sent to anton@federation-studio.ru. Access to them should be limited to persons who need it for consideration of the application.

A hosting service provider, an e-mail service provider and other contractors may be used to operate the site and process queries. Transfers to them are only made in the necessary amount, provided that there is a legitimate basis and that the relationship is properly structured.

The operator doesn't sell personal data. The provision of data to public authorities is carried out in the cases and procedures established by law. Publication of the application or transmission of contact to an artist, partner or advertiser is not automatically intended and requires self-justification.

6. Data Localisation & Cross-Border Transfers

When collecting personal data from citizens of the Russian Federation, including via the Internet, the operator complies with the applicable requirements for the use of databases in the territory of the Russian Federation. The actual storage sites for requisitions, mail, magazines and backup copies should be checked before processing.

Cross-border transfer is permitted only after the conditions prescribed by law have been fulfilled, including notification to the authorized authority when required. This Policy is not a substitute for these actions and is not an independent authorization for such transfers.

7. Data Security & Deletion

The operator provides the necessary organisational and technical measures: access separation, account security, secure site connection, software upgrades, and control of mail and backup access. Specific measures are determined by the conditions of processing and the applicable requirements.

The data shall be kept for no longer than is necessary for the purpose in question, unless otherwise provided by law or contract. Once the purpose, reason for processing has been terminated or the legitimate destruction requirement has been met, the data shall be removed or destroyed within the legally prescribed time limits. The procedure should cover business systems, mail and backup.

When a violation is detected, the operator shall take measures to stop improper handling, protect the rights of the subjects and comply with mandatory notifications.

8. Your Rights

The subject of personal data has the right to receive information on the processing of his or her data, to demand that they be specified, blocked or destroyed on the grounds provided for by law, to withdraw consent, to object to the processing in the prescribed cases and to appeal against the operator ' s actions to Roskomnadzor or the court.

The address is sent to the operator ' s contacts from section 1. The substance of the requirement and the information to determine the treatment should be indicated. Additional identity information is requested only in the required amount.

The withdrawal of consent does not preclude processing if the operator retains another legal ground. Responses and actions on requests shall be carried out within the time limits prescribed by law.

9. Minors & Publications

If the data processing or conclusion of a contract requires the participation of the minor ' s legal representative, the operator shall receive the necessary information and consent in due course.

The placement of photographs, biographies and other data of artists or project participants requires a separate legal basis. Consent to processing an application is not consent to the dissemination of personal data or the use of an image.

10. Policy Updates

An up-to-date version is published on the website with the date of change. The change of the Policy does not in itself substitute for a new consent when the objectives or conditions of treatment for which it is necessary change.