Privacy policy
Version dated 2 November 2026. Effective upon publication on evaed.ru.
Scope
The operator processes data of evaed.ru visitors, EVA participants and company or university representatives. This policy describes processing and does not replace a separate consent where required.
Data and purposes
Enquiries use the name, contacts and participation, project or partnership information you provide. Agreed orders use customer, order and accounting details. Do not submit sensitive data or other people’s personal information. Security logs contain IP addresses, request times, requested URLs and browser details.
Current site behaviour
Admissions, company and university forms send completed fields over HTTPS to EVA’s server. The enquiry is first stored on a server in Russia and then sent to the team’s private group through @evaedfeedbackbot on Telegram. Telegram is a separate service; its policy also applies to transmission and message storage. If you prefer not to use this channel, contact the operator by email. Accounts and online payments are not connected. Learning and simulator progress stays in browser localStorage; no external analytics counters are connected.
Grounds and recipients
Processing relies on contract, law or separate consent, depending on purpose. Operations may include collection, recording, storage, correction, use to answer enquiries or fulfil orders, transfer through the selected channel, restriction and deletion. Access to server records and the Telegram group is limited to the operator’s team. Infrastructure includes the existing Russian server and Telegram for team notifications; legal contact email uses Yandex. Rate limiting stores a cryptographic IP fingerprint rather than the original address in the application database. Form contents and bot credentials are not written to web-server logs.
Retention
The server copy of completed fields is kept for up to 30 days to check delivery, then automatically removed from the record. Consent and delivery records retain request ID and type, language, time, consent version and text checksum, a cryptographic content fingerprint and delivery status for up to three years. Telegram copies and business correspondence are retained only as needed, for no more than three years unless another lawful ground requires otherwise. The operator handles valid deletion or withdrawal requests within applicable legal deadlines. Nginx logs rotate daily with up to 14 archives. Local progress remains until you clear browser storage.
Rights and protection
You may request information, correction, restriction or deletion, withdraw consent, or contact Roskomnadzor or a court. Send requests to the operator’s email; proportionate identity verification may be required. Protection includes HTTPS, access restrictions and technical logging. New processors or international transfers require a prior assessment of legal grounds.
Cookies and localStorage
This version uses no advertising cookies or external analytics counters. You can disable or clear browser storage in site settings; this removes saved progress. Dismissing a notice is not advertising consent.
Operator and contact details
Individual Entrepreneur Aleksey Alekseevich Shabarshin
Russian tax ID: 231709358508 · Entrepreneur registration: 318774600613463
Apt. 35, 11 Vysotnaya St., Domodedovo village, Domodedovo, Moscow Region, Russia