Nova Pro is an engineering company engaged in the development, production and implementation of automation systems of any level of complexity, primarily for oil and gas sector facilities, as well as energy, heat and water supply.

Terms of the Privacy Policy

1. General terms
This Personal Data Processing Policy is compiled in accordance with the requirements of Federal Law of the Russian Federation No. 152-FZ "On Personal Data" dated July 27, 2006 (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and the measures to ensure the security of personal data undertaken by LLC "Nova Pro" (hereinafter referred to as the "Data Controller").
1.1. The Data Controller sets as its most important goal and condition for carrying out its activities the observance of the rights and freedoms of man and citizen when processing their personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. This Policy of the Data Controller regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Data Controller may obtain about visitors to the website https://nova-pro.su/.

2. Key Terms and Definitions
2.1. Automated processing of personal data — any operation or set of operations performed on personal data using computer technology and automated tools.
2.2. Restriction of processing (Blocking) of personal data — the temporary cessation of personal data processing, unless further processing is necessary to clarify or update the data.
2.3. Website — a collection of graphic and informational materials, as well as computer programs and databases, that ensure their availability on the internet at the web address https://nova-pro.su/.
2.4. Personal data information system — an organized IT infrastructure consisting of personal data databases, along with the information technologies and technical means used for their processing.
2.5. Depersonalization of personal data — actions that make it impossible to attribute personal data to a specific User or data subject without the use of additional information.
2.6. Processing of personal data — any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration (updating, modifying), retrieval, consultation, use, disclosure by transmission (dissemination, provision, access), depersonalization, restriction (blocking), erasure, or destruction.
2.7. Data Controller — a state body, municipal authority, legal entity, or individual that independently or jointly with others determines the purposes and means of processing personal data, the categories of personal data to be processed, and the operations performed on such data.
2.8. Personal Data — any information relating directly or indirectly to an identified or identifiable User of the website https://nova-pro.su/.
2.9. Personal Data authorized for public dissemination by the data subject — personal data to which the data subject has granted access to an unrestricted circle of persons by giving consent to the processing of personal data authorized for dissemination, in accordance with the relevant Personal Data Protection Law.
2.10. User — any visitor to the website https://nova-pro.su/.
2.11. Provision of personal data (Disclosure to specific parties) — actions aimed at disclosing personal data to a specific person or a specific, defined group of persons.
2.12. Public dissemination of personal data — any actions aimed at disclosing personal data to an unrestricted circle of persons. This includes publishing personal data in the media, placing it on information and telecommunication networks, or providing access to it in any other way.
2.13. Cross-border transfer of personal data — the transfer of personal data to the territory of a foreign state, a foreign government authority, or a foreign individual or legal entity.
2.14. Destruction (Erasure) of personal data — any actions resulting in the irreversible deletion of personal data, making it impossible to restore the content within the personal data information system, or the physical destruction of the media on which the data was stored.

3. Basic Rights and Obligations of the Data Controller
3.1. The Data Controller has the right to:

• Request and receive accurate information and/or documents containing personal data from the data subject.;
• Continue processing personal data without the data subject's consent in the event that the data subject withdraws consent or submits a request to cease processing, provided there are legal grounds to do so under applicable personal data protection laws;
• Independently determine the scope and list of measures necessary and sufficient to ensure compliance with obligations under applicable personal data protection laws and related regulations, unless otherwise provided by law.

3.2. The Data Controller is obliged to:

• Provide the data subject, upon their request, with information regarding the processing of their personal data;
• Organize the processing of personal data in accordance with the procedures established by applicable personal data protection laws;
• Respond to requests and inquiries from data subjects and their legal representatives in compliance with the requirements of applicable personal data protection laws;
• Provide the authorized data protection authority with requested information within 10 days from the date of receiving such a request;
• Publish or otherwise provide unrestricted access to this Policy regarding the processing of personal data;
• Take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, or public dissemination, as well as from other unlawful acts;
• Cease the transfer (dissemination, provision, access), stop processing, and destroy personal data in the manner and cases stipulated by applicable personal data protection laws;
• Fulfill other obligations provided for by applicable personal data protection laws.

4. Basic Rights and Obligations of Data Subjects
4.1. Data Subjects have the right to:

• Receive information regarding the processing of their personal data, except as otherwise provided by Russian federal laws. The Data Controller shall provide this information in an accessible form, ensuring it contains no personal data belonging to other individuals, unless there are lawful grounds for such disclosure. The scope of information and the procedure for obtaining it are established by applicable personal data protection laws;
• Demand rectification (updating), restriction (blocking), or erasure (destruction) of their personal data from the Data Controller if the data is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing, as well as to take legal measures to protect their rights;
• Condition the processing of their personal data for the purpose of marketing goods, works, and services upon their prior consent;
• Withdraw consent to the processing of personal data and submit a request to cease the processing of personal data;
• Appeal to the authorized data protection authority or file a lawsuit in court against any unlawful actions or omissions by the Data Controller regarding the processing of their personal data;
• Exercise other rights provided for by the legislation of the Russian Federation.

4.2. Data Subjects are obliged to:

• Provide the Data Controller with accurate personal data;
• Notify the Data Controller of any rectifications, updates, or changes to their personal data.

4.3. Persons who provide the Data Controller with inaccurate personal data, or data regarding another personal data subject without the latter’s consent, shall be liable in accordance with the legislation of the Russian Federation.

5. Principles of Personal Data Processing
5.1. Personal data processing shall be carried out on a lawful and fair basis.
5.2. Personal data processing shall be limited to achieving specific, predetermined, and lawful purposes. Processing that is incompatible with the purposes of data collection is strictly prohibited.
5.3. Databases containing personal data processed for purposes that are mutually incompatible shall not be combined.
5.4. Only personal data that satisfies the purposes of its processing shall be subject to processing.
5.5. The content and volume of the processed personal data must match the stated purposes of processing. The processing of personal data that is redundant in relation to the stated purposes of its processing is strictly prohibited.
5.6. When processing personal data, the accuracy, sufficiency, and, where necessary, relevance of the data in relation to the purposes of processing shall be ensured. The Data Controller shall take or ensure the execution of necessary measures to erase or rectify incomplete or inaccurate data.
5.7. Personal data shall be stored in a form that permits identification of the data subject for no longer than required by the purposes of personal data processing, unless the storage period is established by Russian federal law, or by a contract to which the data subject is a party, beneficiary, or guarantor. Processed personal data shall be destroyed or depersonalized upon achieving the purposes of processing or if the necessity to achieve these purposes is lost, unless otherwise provided by federal law.

6. Purposes of Personal Data Processing
6.1. Processing incoming requests for commercial proposals, providing consultations, general information, and user feedback via email, telephone, and other communication channels.
Categories of Personal Data Collected:

• Full name;
• Email address;
• Telephone numbers;
• Job title / Position;
• Company name;
• Industry/Line of business.

Legal Bases for Processing:

• The Constitution of the Russian Federation;
• The Civil Code of the Russian Federation;
• Federal Law No. 149-FZ of July 27, 2006, "On Information, Information Technologies and Information Protection";
• Federal Law No. 152-FZ of July 27, 2006, "On Personal Data";
• Federal Law No. 14-FZ of February 8, 1998, "On Limited Liability Companies";
• Agreements and contracts concluded between the Data Controller and the data subject;
• Consent of the data subject (granted by checking the "I agree to the terms of the Privacy Policy" checkbox in the data collection form).

Types of Processing Activities:

• Collection, recording, systematization, accumulation, storage, destruction, and depersonalization of personal data.

6.2. User experience analytics (website visits) to improve, optimize, and ensure the correct operation of the website, as well as to enhance the offered products and services.
Categories of Personal Data Collected:

• Static IP address (if utilized by the data subject);
• Information about website visits provided by Yandex.Metrica statistics services (user data is collected by web analytics services in an anonymized/depersonalized form in accordance with Clause 9, Part 1, Article 6 of Russian Federal Law No. 152-FZ);
• Cookie files data (which enable the website to recognize the user's device, remember preferences, and provide a personalized experience). The Data Controller's websites utilize both strictly necessary (mandatory) and analytical cookies.

Legal Bases for Processing:

• The Constitution of the Russian Federation;
• The Civil Code of the Russian Federation;
• Federal Law No. 149-FZ of July 27, 2006, "On Information, Information Technologies and Information Protection";
• Federal Law No. 152-FZ of July 27, 2006, "On Personal Data";
• Federal Law No. 14-FZ of February 8, 1998, "On Limited Liability Companies";
• Cookie consent (granted via the cookie banner displayed on the main page of the website upon the user's first visit).

Types of Processing Activities:

• Collection, recording, systematization, accumulation, storage, destruction, and depersonalization of personal data.

7. Conditions for Personal Data Processing
7.1. The processing of personal data is carried out with the consent of the data subject to the processing of their personal data.
7.2. The processing of personal data is necessary to achieve the goals stipulated by an international treaty of the Russian Federation or by law, as well as for the performance of functions, powers, and duties imposed on the Data Controller by the legislation of the Russian Federation.
7.3. The processing of personal data is necessary for the administration of justice, the execution of a judicial act, or an act of another authority or official subject to enforcement in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. The processing of personal data is necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, as well as for the conclusion of a contract initiated by the data subject or a contract under which the data subject will be a beneficiary or guarantor.
7.5. The processing of personal data is necessary to exercise the rights and legitimate interests of the Data Controller or third parties, or to achieve socially significant goals, provided that the rights and freedoms of the data subject are not violated.
7.6. The processing is carried out on personal data to which access has been granted to an unrestricted circle of persons by the data subject or at their request (hereinafter referred to as publicly available personal data).
7.7. The processing is carried out on personal data subject to mandatory publication or compulsory disclosure in accordance with Russian federal law.

8. Procedure for Collection, Storage, Transfer, and Other Types of Personal Data Processing
The security of personal data processed by the Data Controller is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of current data protection legislation.
8.1. The Data Controller ensures the safety and confidentiality of personal data and takes all possible measures to preclude access to personal data by unauthorized persons.
8.2. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with applicable law or if the data subject has granted consent to the Data Controller to transfer data to a third party for the performance of obligations under a civil law contract.
8.3. In the event that inaccuracies are identified in their personal data, the User may update it independently by sending a notification to the Data Controller’s email address info@nova-pro.su with the subject line "Personal Data Update".
8.4. The period for processing personal data is determined by the achievement of the purposes for which the personal data was collected, unless a different period is provided for by a contract or applicable legislation.
The User may at any time withdraw their consent to the processing of personal data by sending a notification via email to the Data Controller's email address info@nova-pro.su with the subject line "Withdrawal of Consent to Personal Data Processing".
8.5. All information collected by third-party services, including payment systems, communication providers, and other service providers, is stored and processed by such entities (Data Controllers) in accordance with their respective User Agreements and Privacy Policies. The personal data subject must independently review these documents. The Data Controller shall not be held liable for the actions of third parties, including the service providers mentioned in this clause.
8.6. Any prohibitions established by the personal data subject regarding the transfer (except for granting access), as well as the processing or conditions of processing (except for obtaining access) of personal data authorized for public dissemination, shall not apply in cases where personal data is processed for state, public, or other common interests as defined by the legislation of the Russian Federation.
8.7. The Data Controller shall ensure the strict confidentiality of personal data during its processing.
8.8. The Data Controller shall store personal data in a form that permits identification of the data subject for no longer than required by the purposes of personal data processing, unless the storage period is established by Russian federal law, or by a contract to which the data subject is a party, beneficiary, or guarantor.
8.9. The conditions for terminating personal data processing may include the achievement of the personal data processing purposes, the expiration of the data subject's consent, the withdrawal of consent by the data subject, a formal request to cease personal data processing, or the identification of unlawful personal data processing.

9. List of Processing Actions Performed by the Data Controller
9.1. The Data Controller carries out the collection, recording, systematization, accumulation, storage, rectification (updating, changing), retrieval, use, transfer (dissemination, provision, access), depersonalization, restriction (blocking), erasure, and destruction of personal data.
9.2. The Data Controller performs automated processing of personal data, which may include the receipt and/or transmission of the collected information via information and telecommunication networks, or without it.

10. Cross-Border Transfer of Personal Data
10.1. Prior to initiating any cross-border transfer of personal data, the Data Controller is obliged to notify the authorized data protection authority of its intention to carry out the cross-border transfer of personal data. Such notification must be submitted separately from the general notification of the intention to process personal data.
10.2. Before submitting the aforementioned notification, the Data Controller is obliged to obtain the relevant required information from the foreign government authorities, foreign individuals, or foreign legal entities to whom the cross-border transfer of personal data is planned.

11. Confidentiality of Personal Data
The Data Controller and any other persons who have gained access to personal data are obliged not to disclose personal data to third parties or publicly disseminate it without the consent of the data subject, unless otherwise provided by federal law.

12. Final terms
12.1. The User may obtain any clarifications on issues of interest regarding the processing of their personal data by contacting the Data Controller via email at info@nova-pro.su.
12.2. Any changes made to the personal data processing policy by the Data Controller will be reflected in this document. This Policy remains effective indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely accessible on the Internet at the web address https://nova-pro.su/en#policy.

Cookie Notice

This "Cookie Notice" defines the terms and procedures for the processing of cookies collected and processed by LLC "Nova Pro" when Users visit and use the website https://nova-pro.su/. These Internet resources use cookies and similar technologies to ensure maximum convenience for users by providing personalized information.
Cookies enable us to provide you with enhanced capabilities and analyze website navigation paths. This technology allows us to count the number of users who have visited a specific service by clicking a link from a particular banner outside of this website, or through text links or images included in newsletters. Furthermore, it serves as a tool to gather aggregated statistics about website usage for analytical research purposes, helping us optimize the website.
By using the website https://nova-pro.su/ you confirm your consent to the use of cookies in accordance with this notice regarding this file type. If you do not agree to our use of this type of file, you must adjust your browser settings accordingly or refrain from using our website.

1. What are Cookies and Similar Technologies?
A cookie is a small file, usually consisting of letters and numbers. This file is saved on your computer, tablet, phone, or other device that you use to visit the website. Cookies are widely used by website owners to ensure website operation, improve performance efficiency, and obtain analytical information.

2. Information on the Types of Cookies
2.1. Strictly Necessary Cookies.
Always Enabled. These cookies are essential to ensure the correct operation of the website and its features. They are set in response to your actions, such as configuring privacy preferences, filling out forms, selecting country and language, maintaining login status, gaining access to secure areas, etc. This category of cookies cannot be disabled.
2.2. Analytical Cookies.
These cookies are necessary to collect information on how the User interacts with the website. These cookies allow for improving the quality and consumer properties of the website, enhancing site navigation to make it more convenient and responsive to User needs, as well as fixing technical errors as they arise and ensuring website security.
2.3. Marketing Cookies.
These cookies are used to collect information about the User's search preferences and to display advertisements and content that best match the interests of such a User. Additionally, these cookies may be used to limit the number of times an advertisement is shown, as well as to evaluate the effectiveness of advertising campaigns.
Cookies may contain technical information transmitted by the User's device. They include information about your past visits to the previously mentioned websites, the sites (queries) from which you redirected to the websites, assigned identifiers (IDs), IP address, location details, device type, date and time of the session, and details of actions taken on the website. This includes data processed via metric programs such as Yandex.Metrica, which may also place cookies on your device and use your data under the terms and conditions determined by the operators of such services.
The composition of information that may be contained in cookies depends on the type of cookie, the User's device, the software installed on the User's device, and the specific website the User interacts with.

3. Purposes of Cookie Processing

• Ensuring the full and correct functioning of the website, as well as storing User preferences;
• Ensuring website security;
• Developing products, works, and services, including their design, modernization, and improvement;
• Generating personalized and other product, work, and service offers tailored to User needs;
• Conducting analytical, statistical, and other types of research (including marketing research);
• Conducting advertising and marketing activities and campaigns.

4. Transfer and Processing of Cookies
LLC "Nova Pro" handles the protection of website User personal data with full responsibility and in strict accordance with the legislation of the Russian Federation. The processing of cookies is carried out by LLC "Nova Pro" to the extent necessary to enhance the functioning and optimize the operation of the website.
LLC "Nova Pro" informs the User, and the User hereby agrees, that to achieve the stated purposes, LLC "Nova Pro" has the right to utilize third-party analytical services (e.g., the "Yandex Metrica" web analytics service).
LLC "Nova Pro" informs the User, and the User hereby agrees, that to achieve the stated purposes, cookies may be transferred to LLC "Tilda Publishing" (the website building platform).
Regarding any matters related to User data processing by LLC "Nova Pro" that are not covered by this Notice, the User may refer to the Personal Data Processing Policy of LLC "Nova Pro", which is available at https://nova-pro.su/en#policy

5. List of Cookie Files Used
5.1. Yandex – "Yandex Metrica" Services:

• _ym_uid, i, yandexuid, yuidss: Allows distinguishing between visitors. Retention period: 1 year.
• _ym_d: Stores the date of the visitor's first visit to the website. Retention period: 1 year.
• sync_cookie_csrf: Tracks connection with the website and third-party data management platforms. This cookie also collects information about user behavior on the website, which is used for website optimization. Retention period: 10 minutes.
• yabs-sid: Visit/session identifier. Retention period: duration of the session.
• _ym_isad: Used to determine whether the visitor has ad blockers enabled. Retention period: 2 days.
• _ym_visorc: Necessary for the correct operation of the Session Replay (Webvisor) feature. Retention period: 30 minutes.
• ymex: Stores supplementary information for Yandex Metrica operations, such as the creation time of identifiers and their alternative values. Retention period: 1 year.
• bh: Collects information about visitor behavior across multiple websites. This information is used on the site to optimize ad relevance. Retention period: 1 year.
• sync_cookie_csrf_secondary: Unclassified cookie file. Retention period: 10 minutes.

5.2. Tilda - Website Building Platform

• tildauid: Used for Tilda's internal statistics. Retention period: 3 months.
• tildasid: Session identifier. Retention period: 30 minutes.
• previousUrl: Placed by Tilda to generate a specific session identifier, allowing the website to collect data on visitor behavior for statistical purposes. Retention period: 30 minutes.

6. How to Reject the Use of Cookies
Users can decline the processing of cookie files by adjusting the relevant settings in their web browser. In this case, the website will only utilize strictly necessary cookies.
Some web browsers allow visiting internet websites in "incognito" or "private browsing" mode to limit the amount of information stored on the computer and to automatically delete session cookies. Additionally, the personal data subject can delete previously saved cookie files by selecting the appropriate option in their browser history.

7. Final Terms
This Cookie Notice may be amended and/or supplemented. The current version of the notice is available on the Internet at the web address https://nova-pro.su/en#cookies.