Personal data policy
How EMG processes website data and how you can exercise your rights.
01. Controller and scope
The controller is Evotech-Mirai Genomics LLC (ООО «Эвотэк-Мирай Геномикс»), Russian taxpayer number 7728364310, state registration number 1177746213512. Contact address: 422624, Russia, Republic of Tatarstan, Laishevsky District, Bolshie Kabany, Vystavochnaya Street, building 1A, room 1000. Email: mail@evotech-mg.com. This policy covers visitors and inquiry forms on evotech-mg.com, including the English version. Russian Federal Law No. 152-FZ governs the processing described here.
The policy concerns this corporate information website. It does not replace notices for employees, contractual records, medical research or LifePad software. Reading product information or downloading an application is not consent to process health or genetic data.
02. Purposes and categories
For handling an inquiry, the controller processes the name, email address and/or telephone number, message and any relevant organisation or role details that the sender voluntarily provides. A callback requires a telephone number; a written reply requires an email address. A separate, initially unchecked consent box is required. Necessary steps to enter into or perform a contract requested by the individual may also rely on the applicable independent legal basis under Article 6 of Law No. 152-FZ.
Essential technical data includes a session identifier, form security token, request time, selected optional categories, consent text revision and a random confirmation number. Choice logs contain a hash of a random visitor identifier; they do not contain names, telephone numbers, message text, full IP addresses or complete User-Agent strings. Their purpose is site security, functionality and evidence of the visitor’s choice.
With separate analytics consent, Yandex Metrica processes page views, referral source, device and browser information, network address and cookie identifiers for site statistics. Session Replay, click maps and link tracking are disabled. Form contents are not added to counter parameters. Query strings and URL fragments are excluded from view events sent by the controller.
With separate external-media consent, map and video providers receive connection information such as IP address, browser information, page address and their own cookies to display the relevant content. You can use the rest of the site and submit an inquiry without enabling either optional category.
03. Limits and recipients
Do not submit medical results, diagnoses, genetic information, identity documents or unnecessary information about other people through public forms. The site does not provide medical consultations or collect biological samples. If sensitive information is necessary, contact the company first to arrange an appropriate protected process and legal basis. Inquiry consent does not cover advertising, public disclosure or health data. No decisions producing legal effects are made solely by automated website processing.
Authorised staff handle inquiries. Hosting, data-storage and email providers may process only the information needed for their assigned services under an appropriate legal basis and confidentiality and security obligations. Statutory disclosures may be made where required by law. Yandex Metrica is supplied by YANDEX LLC. Google Maps and external video services are enabled only after media consent; their own processing follows their applicable terms. Legacy Google Analytics and Google reCAPTCHA are not used in the updated public interface.
The site is hosted by Timeweb on a server in the Russian Federation, as confirmed by the site owner. The controller must comply with Russian localisation requirements under Article 18(5) and, before any relevant cross-border transfer, the requirements of Article 12 of Law No. 152-FZ. Permission to view foreign media is not permission to move the inquiry database abroad.
04. Processing, retention and security
Processing may include collection, recording, organisation, storage, correction, retrieval, use, necessary disclosure, restriction, deletion and destruction, using automated systems and authorised staff. Access is limited to the relevant purpose. Measures include access controls, server-side consent and form-token validation, minimised logs and protection of internal files. Statutory incident-response and notification procedures apply.
Inquiry data is used until the request and necessary correspondence are completed. If no contract or other lawful retention basis exists, the data must be deleted within 30 days after the purpose is achieved or consent is withdrawn where the law requires this. Contract records follow mandatory statutory retention periods. Optional browser preferences last 180 days. Minimal consent records are kept for up to three years from each record, then deleted; they are not used for marketing. Technical security logs are retained only as needed for security and incident investigation.
Withdrawing analytics consent stops new counter connections and removes accessible Yandex cookies. External embeds are unloaded. A website cannot delete cookies on another provider’s domain; browser controls and the provider’s rights process remain available.
05. Your rights and contact
You may request information, correction, restriction or deletion of inaccurate, excessive or unlawfully obtained data, withdraw consent and complain to Roskomnadzor or a court. Contact mail@evotech-mg.com with the subject “Personal data”, or write to the controller’s address. For optional technical services, use “Privacy settings” in the footer.
Identify the relevant inquiry and a reply channel. Its submission date and contact details usually help locate it; for a technical preference record you may provide the random confirmation number. Proportionate identity or representative-authority checks may be required. Do not send document scans unnecessarily. Requests are handled within statutory time limits under Articles 20 and 21. Withdrawal does not invalidate previous lawful processing or processing on another valid legal basis.
The current policy is available without registration. Its date and revision appear below. A revised policy does not retroactively expand an existing consent; a new consent is requested where required by a change of optional purposes or scope.