Personal Data Processing Policy

Last updated: March 25, 2026 This Personal Data Processing Policy (the “Policy”) sets out the procedure for processing and protecting personal data that attorney Mikhail Dmitrievich Latashenko, registration number 78/7255 in the register of advocates of the St. Petersburg Bar Association, address: 197373, Saint Petersburg, P.O. Box 45 (the “Operator”) receives from users of the website advokat-latashenko.ru and from the Operator’s clients. This Policy has been developed in accordance with the legislation of the Russian Federation, including Federal Law No. 152-FZ of July 27, 2006 “On Personal Data.”

1. General Provisions

1.1. This Policy applies to all personal data that the Operator receives in connection with the practice of law and the use of the website advokat-latashenko.ru. 1.2. The purpose of this Policy is to ensure the protection of the rights and legitimate interests of personal data subjects and compliance with the legislation of the Russian Federation when processing their personal data. 1.3. The Operator processes personal data on a lawful and fair basis, limits processing to the achievement of specific, predetermined, and lawful purposes, and does not permit processing incompatible with those purposes. 1.4. Terms used in this Policy are interpreted in accordance with Federal Law No. 152-FZ of July 27, 2006 “On Personal Data.”

2. Purposes of Processing Personal Data

2.1. The Operator processes personal data for the following purposes:

  • practicing law, and entering into and performing agreements for the provision of legal assistance;
  • consulting on legal matters and communicating with clients and website users;
  • reviewing inquiries, requests, and applications submitted through the website’s forms or by other means;
  • maintaining records and fulfilling duties imposed on the Operator by the legislation of the Russian Federation;
  • ensuring the functioning and improvement of the website advokat-latashenko.ru, and analyzing site traffic and usability;
  • sending, at the user’s request, information about the Operator’s activities.

2.2. Personal data is not processed for purposes incompatible with those stated above.

3. Categories of Personal Data Processed and Categories of Subjects

3.1. The Operator may process the following categories of personal data:

  • last name, first name, patronymic;
  • contact details (phone number, email address);
  • other information provided by the personal data subject in connection with an inquiry, consultation, or agreement (including details of the circumstances of a case, subject to the requirements of attorney-client privilege);
  • data automatically transmitted when visiting the website (IP address, browser and device data, operating system, cookies, and other technical data specified in Section 7 of this Policy).

3.2. The subjects of personal data are:

  • the Operator’s clients and prospective clients;
  • users of the website advokat-latashenko.ru;
  • other persons whose personal data is received by the Operator in connection with the practice of law and/or the use of the website.

4. Legal Grounds for Processing Personal Data

4.1. The Operator processes personal data on the following grounds:

  • the consent of the personal data subject to the processing of their personal data;
  • the conclusion and performance of an agreement for the provision of legal assistance, or another agreement to which the personal data subject is a party, beneficiary, or guarantor;
  • the fulfillment of duties imposed on the Operator by the legislation of the Russian Federation;
  • the exercise of the rights and legitimate interests of the Operator or third parties, provided that the rights and freedoms of the personal data subject are not violated;
  • other cases provided for by the personal data legislation of the Russian Federation.

4.2. Processing of personal data incompatible with the purposes of its collection is not permitted.

5. Rights and Obligations of the Personal Data Subject

5.1. The personal data subject has the right to:

  • receive information relating to the processing of their personal data, in the manner established by the legislation of the Russian Federation;
  • request the clarification, blocking, or destruction of their personal data in cases provided for by law (if the data is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purposes of processing);
  • withdraw consent to the processing of personal data, if the processing is carried out on the basis of such consent;
  • appeal the actions or omissions of the Operator in processing personal data to the authorized bodies and to the courts;
  • exercise other rights provided for by the personal data legislation of the Russian Federation.

5.2. The personal data subject is obligated to:

  • provide the Operator with accurate information about themselves;
  • promptly inform the Operator of any changes to their personal data and, where necessary, provide supporting documents if required by law.

6. Rights and Obligations of the Operator

6.1. The Operator has the right to:

  • establish rules for processing personal data that do not conflict with the legislation of the Russian Federation;
  • verify the accuracy of the personal data provided and, where necessary, request additional information to the extent provided for by law;
  • process personal data to the extent and for the periods necessary to achieve the purposes of processing and to comply with legal requirements.

6.2. The Operator is obligated to:

  • process personal data only for the purposes specified in this Policy and/or established by law;
  • take the necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions;
  • retain personal data for no longer than required by the purposes of its processing, unless a longer retention period is established by law;
  • refrain from disclosing personal data to third parties without the consent of the personal data subject, except in cases provided for by the legislation of the Russian Federation;
  • ensure that personal data subjects can exercise their rights in the manner established by law.

7. Use of Cookies and Technical Data

7.1. When visiting the website advokat-latashenko.ru, certain technical data may be automatically collected, including:

  • IP address and approximate location;
  • browser type and version, device type, operating system;
  • date and time of the visit, pages visited, time spent on the site;
  • other technical data necessary for the correct operation of the site.

7.2. The website advokat-latashenko.ru uses cookies – small pieces of data stored on the user’s device that allow the Operator to:

  • ensure the correct and stable operation of the site and its individual sections;
  • remember the user’s settings and preferences (for example, interface language, display theme);
  • analyze the use of the site to improve it, including through web analytics services;
  • if necessary, display more relevant content.

7.3. The website may use the following types of cookies:

  • technical (strictly necessary) cookies – ensure the operation of the site and its core functions;
  • session cookies – store information within a single browser session and are deleted when it is closed;
  • persistent cookies – stored on the user’s device for a set period, or until deleted by the user, and allow settings and preferences to be remembered;
  • statistical and analytical cookies – used to analyze site traffic, user behavior, and to improve the quality of the site;
  • marketing and behavioral cookies – may be used to display more relevant information and advertising messages (where used, strictly within the bounds of applicable law).

7.4. To analyze traffic and improve the site, the Operator may use the Yandex.Metrica service. This service collects data on an anonymous basis and does not allow the identification of a specific individual. Detailed terms of use for Yandex.Metrica are available at: yandex.ru/legal/metrica_api/index.html. 7.5. The retention period for cookies on the user’s device depends on their type: session cookies are deleted when the browser is closed, while persistent cookies are deleted upon expiration of the set period or when deleted by the user. 7.6. The user may at any time change their browser settings to block the use of cookies, delete previously stored files, or receive notifications when they are sent. In this case, some features of the site may not function correctly. 7.7. On a first visit to the site, a notice about the use of cookies may be displayed. By continuing to use the site with browser settings that allow cookies, the user agrees to their use for the purposes described above.

8. Procedure for Processing, Storing, and Transferring Personal Data

8.1. The Operator processes personal data using both automated and non-automated methods. 8.2. Personal data is stored in a form that allows the personal data subject to be identified for no longer than required by the purposes of its processing, unless a different retention period is established by the legislation of the Russian Federation or by an agreement with the personal data subject. 8.3. Access to personal data is granted only to the Operator and, where necessary, to persons engaged by the Operator to perform certain functions (for example, technical support of the website), provided that such persons comply with confidentiality requirements and the legislation on personal data. 8.4. The transfer of personal data to third parties is permitted:

  • with the consent of the personal data subject;
  • in cases directly provided for by the legislation of the Russian Federation (including at the reasoned request of a court, law enforcement, or other authorized bodies).

8.5. The Operator does not make personal data publicly available without the separate consent of the personal data subject. 8.6. Upon achievement of the purposes of processing, expiration of the storage period, or withdrawal of consent (where processing is based on consent), personal data shall be destroyed or anonymized, unless otherwise provided by law.

9. Protection of Personal Data

9.1. The Operator takes the necessary and sufficient legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions. 9.2. Such measures include, in particular:

  • limiting the circle of persons with access to personal data;
  • using information security tools and access control regimes;
  • monitoring compliance with security requirements in the processing of personal data;
  • where necessary, assessing the effectiveness of the security measures taken.

9.3. Persons authorized to process personal data on the Operator’s behalf are required to maintain confidentiality and not to use personal data for purposes unrelated to the performance of their functions.

10. Requests from Personal Data Subjects

10.1. A personal data subject has the right to send the Operator a request regarding the processing of their personal data, its clarification, blocking, or destruction. 10.2. Requests and inquiries may be sent to the postal address: 197373, Saint Petersburg, P.O. Box 45, and/or to the email address listed on the website advokat-latashenko.ru in the contacts section. 10.3. It is recommended that the request include:

  • the last name, first name, and patronymic of the personal data subject;
  • contact details;
  • the substance of the request (which specific rights the subject wishes to exercise and in relation to which personal data).

10.4. The Operator reviews requests from personal data subjects within the timeframes and in the manner provided for by the legislation of the Russian Federation.

11. Amendments to the Policy

11.1. The Operator has the right to make amendments to this Policy. The current version of the Policy is published on the website advokat-latashenko.ru. 11.2. The Policy is subject to revision in the event of changes to the personal data legislation of the Russian Federation, as well as in the event of changes to the Operator’s procedure for processing personal data. 11.3. In matters not governed by this Policy, the Operator is guided by the applicable legislation of the Russian Federation.