Current status: Yandex Metrica is configured on himik.moscow. The counter library loads and analytics requests are sent only after the visitor gives separate, valid consent. Analytics are disabled before consent and after rejection. Webvisor and click maps are disabled.
Version No. 3 dated 23.10.2026. Identifier: 2026-10-23-himik-analytics-2.
1. General provisions and information about the Controller
1.1. The Operator is Individual Entrepreneur Andrei Viktorovich Svirin, TIN 772872317733, OGRNIP 322774600176722. Postal address: 117647, Moscow, PO Box 15. Phone: +7 965 751-25-80. Personal data enquiries: zapros@himik.moscow.
1.2. This Policy defines purposes, grounds, data, procedures and retention periods for personal data processing when using https://himik.moscow/, considering enquiries, and concluding and performing contracts. Terms have the meanings established by Federal Law dated 27.07.2006 No. 152-FZ 'On Personal Data'.
2. Principles and grounds
2.1. Processing is limited to specific, predetermined and lawful purposes. Data must match the purpose; excessive processing and use for incompatible purposes are not permitted. The Operator relies on data subject consent, conclusion and performance of a contract, fulfilment of statutory duties or another applicable independent lawful basis.
2.2. Consent for an enquiry is separate from advertising consent and consent to data processing for mailings. Sending an enquiry or visiting the website does not itself permit advertising or optional analytics. Consent concerning the Applicant's data does not replace a lawful basis for processing other persons' data.
3. Enquiries and form operation
3.1. The name, phone or email supplied, subject, information about the object and materials supplied, enquiry text, documents, images and related subsequent correspondence are used to consider an enquiry, clarify the task and prepare an answer. Material sufficiency and necessity are assessed for the task. Remove information unrelated to the examination.
3.2. On the main website himik.moscow, the form sends the enquiry and selected attachments to a server handler, which passes them to zapros@himik.moscow through the server's email facilities. The visitor is shown the technical sending result. Handover to the email system does not confirm inbox delivery or acceptance of an order: work terms are agreed separately. In the static preview version, the form prepares an email or downloadable .eml draft instead of server submission; the visitor checks and sends it independently.
3.3. An enquiry requires a separate data processing consent tick, version 2026-10-23-himik-1. When files are selected, separate confirmation is required for the terms for submitting materials. Up to 10 files may be selected, each up to 10 MB and 15 MB in total; empty files are rejected. In the working version, checked files are received temporarily by the server to prepare the email; temporary copies are deleted after the sending attempt. The application creates no permanent public archive of these files and does not store enquiry text in the consent log.
3.4. Server submission includes in the email to the Operator the direct connection IP address, browser-supplied browser and device information (User-Agent), browser language (Accept-Language), approximate completion time for the current page reported by the browser, and time since the protected form token was issued according to the server clock. This information checks enquiry circumstances, technical failures and unlawful submissions; it does not establish the sender's identity or confirm the total website visit duration. A separate minimal enquiry record contains contact email or phone, form type, page address, server date and time, enquiry identifier, consent information and materials terms version. This record does not retain text, attachment contents or names, IP address or User-Agent. In the static preview version, the email is prepared locally without the listed server information.
3.5. Materials are used to consider the task, agree the examination and prepare an answer. Initial transfer does not permit publication, advertising use or transmission to analytics. For a first enquiry, provide a task description, documents and photographs. Physical sample transfer conditions are agreed separately before dispatch.
4. Contract, duties and protection of rights
4.1. When a contract is concluded, necessary data are processed to agree the assignment, conduct examination, settle payments, exchange documents and deliver the result. Data are limited to what each action needs. Passport and other identification information is requested only where necessary to prepare the relevant document or fulfil an established duty.
4.2. A representative's data and authority documents are processed within the scope of interaction through that representative. Third-party data in materials are examined only where there is an independent lawful basis. A contract with the Applicant does not permit processing any and all data of other persons.
4.3. Processing for accounting, payments, lawful requests, claims consideration and protection of rights is performed on the relevant independent basis and to the necessary extent. Mandatory documents are not deleted solely because consent is withdrawn where another applicable retention basis remains.
5. Subscription and unsubscribing
5.1. Subscription is separate from an examination enquiry. It requires two independent ticks that are not preselected: consent to receive advertising and consent to data processing for mailings. The email, subscription identifier and status, registration date and versions of both consents are used. In the working version, the server records the subscription and submission circumstances; in the static preview version, the form only prepares an email that must be sent independently. The address, enquiry text and attachments from the main form are not automatically used for advertising.
5.2. On the working website, a subscription is registered after successful checking of the separate form and both consents. In the static version, the request is considered after receipt of the independently sent email; preparing, copying or downloading a draft does not register a subscription. Consent is valid for no more than three years from the date given unless withdrawn earlier; viewing messages does not extend it.
5.3. Withdrawal may be requested at zapros@himik.moscow or through the unsubscribe page. It requires no advertising consents and simultaneously means declining advertising and withdrawing consent to data processing for mailings. In the working version, the server immediately marks the subscription inactive after processing the form. The static version prepares an email that must be sent, because a draft alone does not deliver the request to the Operator. Further advertising processing and message sending stop after withdrawal is received under the applicable procedure.
6. Technical mechanisms, analytics and service providers
6.1. Yandex Metrica with a separate website counter is used to analyse visits. The counter library loads only after separate visitor consent and only on himik.moscow and www.himik.moscow. It does not start on /legal/ or /rassylka/otpiska/ pages. Analytics are disabled on technical preview addresses.
6.2. The purpose is to assess visits, referral sources, page use and website usability. Metrica may process IP address, request date and time, technical browser, operating system and screen information, browser and visit identifiers, viewed-page information and referral source. Addresses expressly sent by the application are limited to protocol, domain and page path: query parameters and address fragments are excluded.
6.3. Form contents, name, contact details, enquiry text, file information, selected questions and search strings are not sent as analytics parameters. Webvisor, click maps and outbound-link and address-fragment tracking are disabled. The application does not send page titles to the counter or additional events for form actions; Yandex Tag Manager is disabled. Analytics are not used to establish a client's identity or select examination content.
6.4. The analytics data recipient is YANDEX LLC, provider of Yandex Metrica. Service operation is governed by the Metrica terms of use and Yandex Privacy Policy. To count visits, the service may use cookies and local storage entries; their types and lifetimes are listed in the official documentation. The validity period of a choice on our website is not the retention period of every cookie or all data within the service infrastructure.
6.5. Consent is expressed using the separate 'Allow analytics' button in the settings panel. 'Without analytics' saves rejection. Closing the panel, continued browsing, enquiries and subscription do not constitute consent. Declining does not restrict access to pages or forms. Detailed terms appear in the Analytics Consent, version 2026-10-23-himik-analytics-2.
6.6. The choice is retained for 180 days in local storage entry himik-analytics-choice-v1 and, on the working website, additionally confirmed by the server and a signed himik_analytics_choice cookie. The record contains permission or rejection, the document version and expiry time. The cookie applies the choice and has HttpOnly, SameSite=Lax and Secure attributes under HTTPS. It contains no enquiry text. A valid choice applies on subsequent visits; refreshing does not extend its period or require a new tick on every refresh. If permission is absent, expired or unverifiable, analytics remain disabled.
6.7. You can change your decision or withdraw consent using 'Analytics settings' in the footer. After rejection, new analytics requests stop. Data already sent to the service and cookies it set do not disappear automatically with one click: deletion is considered in light of applicable processing grounds and service terms. Cookies and local entries can be removed using browser tools. Deleting the choice record may trigger a settings request again on the next visit.
6.8. Working server forms use the session cookie FORMSESSID to protect against forged submissions. This necessary technical cookie has HttpOnly, SameSite=Lax and Secure attributes under HTTPS and lasts until the browser session ends. A single-use protected form token is valid for no more than 3600 seconds. Blocking necessary cookies may prevent server form submission and settings confirmation. They are not intended for advertising or behavioural analytics.
6.9. The application does not save entered form data in its own local storage. Temporary working-form attachments are used only to prepare an email and deleted after the sending attempt; email copies follow the periods in section 7. In the static version, downloaded drafts and files remain on the visitor's device. Saving form entries by the browser or email application depends on their settings.
6.10. The email services used provide message delivery and storage. If a processor is engaged, appropriate processing-instruction terms apply. The hosting environment may maintain its own technical connection logs for page delivery, operation and security; their retention depends on its settings and is not automatically equivalent to the application-log periods stated below.
7. Retention periods and deletion
7.1. Enquiry data where no contract is concluded, including email correspondence and attachments, are kept as long as necessary for consideration but no longer than 90 calendar days from the last substantive message or telephone conversation, or from the enquiry date if interaction did not continue. Data are deleted once the purpose is achieved or the period expires unless an independent lawful basis for further retention exists.
7.2. Necessary contractual, accounting and payment documents are retained for the relevant mandatory periods. Materials needed to protect rights are retained to the necessary extent on a separate basis. This does not permit retention of excessive documents or copies.
7.3. Subscription and mailing data are processed until subscription ends, withdrawal occurs or either consent expires, but no longer than three years after registration. After withdrawal, the subscription becomes inactive. Minimal advertising-consent, status and withdrawal information is retained for up to three years after subscription ends on a separate basis to honour withdrawal and confirm lawful interaction; it is not used to resume advertising.
7.4. A minimal server enquiry record without text or files is kept for no more than 90 days after registration. Technical information about server submission of subscriptions and withdrawals—IP address, User-Agent, language and timings—is retained for no more than 30 days after the relevant event and then removed from the record during scheduled maintenance. These periods do not set retention for general hosting or email infrastructure logs.
7.5. Minimal server analytics-choice records—permission or rejection, identifier, date and time, document version and address—are kept for no more than three years after the choice is registered. They exclude IP address, User-Agent, contact details and enquiry contents. Such records confirm and apply the choice rather than support behavioural analytics. Their retention does not extend permission to start the counter: permission itself lasts no longer than 180 days.
7.6. Scheduled maintenance removes expired application records and technical snapshots. The Operator deletes substantive email correspondence and attachments according to paragraph 7.1; application file maintenance does not automatically clear mailboxes. Mandatory contractual and accounting documents are retained on a separate applicable basis. Processing stops and data are destroyed upon fulfilment of purpose, withdrawal or discovery of a violation under the established procedure.
8. Data subject rights and requests
8.1. A data subject may obtain processing information, request correction, blocking or destruction on appropriate grounds, withdraw consent and appeal the Operator's actions to the competent authority or court. Withdrawal does not affect the lawfulness of earlier processing or stop processing supported by another independent basis.
8.2. Send requests to the email or postal address in section 1. To link a request to an enquiry, provide the contact details used, approximate date and substance of the request. The Operator may seek information necessary to verify the applicant; excessive identification data are not requested.
9. Data protection and Policy changes
9.1. The Operator uses necessary organisational and technical measures to restrict access, protect confidentiality, prevent unlawful use and observe retention periods. Confidential materials are transferred using a method agreed before transfer.
9.2. The current version appears on this page. A Policy change does not automatically expand consent already given or replace obtaining new consent where required for new processing.