Personal Data Processing Policy
Revision dated August 15, 2026
1. General Provisions
This Policy establishes the procedure for processing and protecting the personal data of users of buteyko.ru, including its forum (the "Website").
Personal data operator: Buteyko Society LLC (ООО «Общество Бутейко», the "Operator").
Operator's address: 7 Prospekt Revolyutsii, Voronezh, 394000, Russia.
Email address for inquiries concerning personal data processing: voronezh@buteyko.ru.
The Operator is governed by Federal Law No. 152-FZ of July 27, 2006, "On Personal Data," and other applicable laws and regulations of the Russian Federation.
This Policy applies only to data processing by means of the Website. When a user follows a link to a third-party website, data processing is governed by the documents of that website's owner.
2. Data Subjects and Categories of Personal Data
The Operator processes data relating to Website visitors, registered users, forum contributors, and persons who send inquiries by email.
Depending on the user's actions, the following data may be processed:
- name or a pseudonym selected by the user;
- email address;
- username (login), password when entered or recovered, and password hash when stored;
- account identifier and authenticated session identifiers;
- when a forum post is submitted, the network address of the user's device (IP address) and the host name determined from it;
- forum post content and subject, signature, publication date, and reply notification preference;
- profile information voluntarily provided by the user: personal webpage address and image link;
- a search query entered into the Website's internal search;
- the content of email inquiries and other information voluntarily provided by the user;
- forum display settings, read-post markers, and other information contained in cookies.
The Operator does not seek to collect special categories of personal data. Users must not publish health information or other special categories of personal data on the public forum. If such information is necessary for the consideration of an inquiry, the user may provide it to the Operator by email to the minimum extent necessary.
Consent provided during registration applies to the processing of personal data for account creation, authentication, and provision of forum functions, but does not provide for the dissemination of personal data to an unlimited number of persons. The public part of the forum is intended for posting messages under a pseudonym and is not intended for publishing information that directly or indirectly identifies the user or another individual. Users must not include their surname, first name and patronymic, contact details, address, health information, or other identifying information in public posts or profile fields. If such data is found, the Operator may restrict access to, edit, or remove the relevant material.
3. Purposes, Data, Legal Grounds, and Retention Periods
| Processing purpose |
Data processed |
Legal ground |
Processing and retention period |
| Registration, account management, profile changes, and authentication |
Name or pseudonym, username, email address, password when entered, password hash, account and session identifiers, and profile data |
User consent; processing necessary to provide the functions requested by the user and to perform an agreement with the user (Clauses 1 and 5 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
Until the account is deleted, the relevant Website section is discontinued, or processing is no longer necessary. The active session identifier is replaced upon a new login and is deleted upon logout or account deletion |
| Access recovery |
Username, email address, new password, and information associated with the account |
User consent and actions taken at the user's initiative; performance of an agreement with the user (Clauses 1 and 5 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
Account data is retained for the lifetime of the account; an email is retained according to the email correspondence retention period specified below |
| Posting, displaying, and moderating user-generated forum materials |
Pseudonym, subject, text, signature, date, account identifier, and reply notification preference. Public materials must not contain the personal data of the user or other persons |
User consent; actions taken at the user's initiative; legitimate interests of the Operator and forum users in maintaining the operation and rules of the forum, provided that the rights of the data subject are respected (Clauses 1, 5, and 7 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
Until the post is removed, the forum is discontinued, or publication and moderation are no longer necessary. No fixed publication period is established because a post is published for long-term public discussion |
| Preventing spam, identifying violations, and ensuring forum security |
The IP address and host name of the user who submitted a post |
The Operator's legitimate interests in ensuring Website security, maintaining forum operation, and protecting users' rights, provided that the rights of the data subject are respected (Clause 7 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
In the active database, together with the post until it is removed; in email notifications to a moderator, for no more than 3 years; in backups, until the applicable backup retention period expires, but no more than 3 years from the date the backup was created |
| Reviewing inquiries and responding by email |
Name, email address, content of the inquiry, and information attached or provided by the user |
User consent; processing an inquiry at the user's initiative; protection of the Operator's rights and legitimate interests (Clauses 1, 5, and 7 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
Until consideration of the inquiry is completed, and then for no more than 3 years to confirm the content of correspondence and protect rights, unless a longer period is required by law |
| Performing an internal search |
Search query |
Actions taken at the user's initiative; the Operator's legitimate interest in providing navigation through Website materials (Clauses 5 and 7 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
For the time required to generate search results; the Website does not create a separate search history database |
| Saving settings and read-post markers and maintaining authenticated sessions |
Session identifiers, name or pseudonym, post numbers, and selected display modes stored in cookies |
Provision of the requested function and performance of an agreement with the user; user consent for optional settings; the Operator's legitimate interest in ensuring security (Clauses 1, 5, and 7 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
According to the period specified for each cookie in Section 4 |
| Backing up and restoring forum operation |
Account, profile, and post data included in a forum database backup |
The Operator's legitimate interest in ensuring the integrity and availability of the Website, provided that the rights of data subjects are respected (Clause 7 of Part 1 of Article 6 of Federal Law No. 152-FZ) |
Up to 3 years from the date a backup is created, after which it is deleted or replaced with a new backup unless a different period is required by law |
4. Cookies Used
Cookies are small pieces of data that the Website stores in the user's browser. The Website does not use advertising or analytics cookies and does not use browser local storage for personal data.
| Name |
Purpose and information contained |
Retention period |
Legal ground |
Deletion method |
phorum_auth |
Authentication of a registered forum user; contains a random session identifier associated with the account |
1 year from installation or the latest renewal while using the forum; until logout |
Provision of the requested authentication function and performance of an agreement with the user; ensuring security |
Logout function or browser settings |
phorum_admin_session |
Authentication of an authorized administrator or moderator |
Until the browser is closed or the user logs out |
Ensuring Website administration and security |
Logout function, closing the browser, or browser settings |
phorum_name |
Remembering an entered name or pseudonym to prefill a subsequent post form |
1 year from installation |
User consent expressed by using the forum function |
Browser settings |
phorum-new-table_n |
The number of the most recently known post, used to identify new publications. The table_n part depends on the forum section |
1 year from installation or update |
Provision of the requested forum function; user consent |
Browser settings |
phorum-haveread-table_n |
Numbers of read posts. The table_n part depends on the forum section |
Until the browser is closed |
Provision of the requested forum function; user consent |
Closing the browser or browser settings |
phorum-collapse-table_n |
The selected mode for collapsing and displaying forum threads. The table_n part depends on the forum section |
1 year from installation |
User consent expressed by selecting the setting |
Browser settings |
phorum-flat-table_n |
The selected flat or threaded reading mode. The table_n part depends on the forum section |
1 year from installation |
User consent expressed by selecting the setting |
Browser settings |
Session cookies are generally deleted by the browser after the session ends, although the exact time depends on the browser settings. Users can block or delete cookies in their browser settings. Restricting technically necessary cookies may make authentication and certain forum functions unavailable.
Images from external websites, including images specified by users, may be displayed on profile pages or in posts. An external website may use its own cookies in accordance with its own rules. The Operator does not determine the names or retention periods of such third-party cookies; users can restrict their acceptance in their browser settings.
5. Public Availability of Data and Disclosure to Recipients
The forum is a public section. The display name specified by the user, post subject and text, signature, publication date, and completed public profile fields may be available to an unlimited number of visitors and indexed by search engines. Users should select a pseudonym that does not itself reveal their identity and must not include personal data in posts, signatures, or public profile fields. Email addresses are not displayed to other users.
The Operator does not request consent to disseminate personal data because the public forum is not intended for publishing such data. A user's publication of personal data contrary to this Policy does not mean that the Operator has obtained consent to disseminate it. After discovering such information or receiving an inquiry, the Operator considers restricting access to, editing, or removing the material.
Users' IP addresses and host names are not published on the Website. Access to them is provided to moderators and administrators to the extent necessary to prevent spam, identify and investigate violations, and ensure forum security. This information may be transferred to hosting and email service providers as part of Website maintenance and the delivery of notifications to moderators.
To host the Website, store its database, and deliver email, the Operator may provide necessary data to providers of hosting, administration, and email services that act on the Operator's instructions or provide the relevant services. Notifications of new forum posts and access recovery requests may be sent to a moderator's mailbox and pass through service providers' email infrastructure.
When an image is loaded from an external address, a request is sent to the owner of that external resource. Data processing by such owners is governed by their own documents.
The Operator does not sell personal data or provide it to advertising systems for their independent use. Data may be provided to government authorities and other persons in the cases and according to the procedure established by the laws of the Russian Federation.
6. Processing Procedures and Methods, Storage, and Protection
Processing includes collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer in the cases specified in this Policy, granting access, restriction, deletion, and destruction of data. Publication of user-generated forum materials is not intended to disseminate personal data. Processing is performed both by automated and non-automated means.
The primary storage locations are the forum database, server sessions, backups, and mailboxes used for inquiries and moderation. Cookies are stored on the user's device.
Access to data is provided to persons who require it to administer the Website, moderate the forum, provide technical support, and consider inquiries, as well as to service providers to the extent necessary for their work.
The Operator takes the necessary legal, organizational, and technical measures to protect personal data against unlawful or accidental access, alteration, disclosure, restriction, copying, provision, dissemination, deletion, and other unlawful actions.
7. User Rights and Data Deletion Procedure
Users have the right to obtain information about the processing of their personal data; request its correction, restriction, or deletion; withdraw consent; impose restrictions on transfer and processing as provided by law; and appeal the Operator's actions to Roskomnadzor or a court.
Users can delete cookies through their browser settings. The phorum_auth cookie is also deleted when the logout function is used. The procedure for deleting other cookies depends on the browser used.
To request deletion of an account, post, profile data, email address, correspondence, or other data, send a request to voronezh@buteyko.ru. The request should specify:
- the user's surname and first name or username (pseudonym);
- the email address associated with the data;
- a link to the account or post if the request concerns the forum;
- the data concerned and the requested action: correction, restriction, termination of processing, or deletion;
- an address to which the response should be sent.
The Operator may request information necessary to verify the identity of the requester and prevent the alteration or deletion of another person's data. A copy of an identity document should not be provided unless the Operator separately states that such verification is necessary.
After verifying the request, the Operator determines whether grounds for continued processing exist. If there are no such grounds, the Operator terminates processing, deletes or anonymizes data in the active database, closes public access to posts and the profile, and deletes correspondence related to the request within the periods established by the laws of the Russian Federation. The requester is notified of the result.
Data in backups is not used for routine operations and is deleted when the relevant backup's retention period expires. If a backup is restored before deletion, the deletion request is reapplied to the restored data. Access to such data is restricted until it is permanently deleted.
Deletion may be postponed or may not be performed with respect to data that the Operator is required by law to retain or is entitled to process to protect its rights and legitimate interests. In such a case, processing is restricted to the relevant purpose and period.
8. Amendments to the Policy
The Operator may amend this Policy if the law, categories of data processed, or Website functionality changes. A new revision takes effect upon publication on this page. Users are advised to check the Policy periodically for updates.
|
