Privacy Policy Regarding the Processing of Personal Data
Version of April 30, 2026. Effective from April 30, 2026.
This Privacy Policy regarding the processing of personal data has been developed in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter — the “Personal Data Law”) and other applicable data protection laws of the Russian Federation, and defines the procedure for processing personal data and the measures taken to ensure the security of personal data by Limited Liability Company “TANTAL” (hereinafter — the “Operator”).
1.1. The Operator considers compliance with the rights and freedoms of individuals when processing personal data — including the protection of the right to privacy and personal and family confidentiality — as a fundamental principle of its activities.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter — the “Policy”) applies to all information that the Operator may obtain about visitors to the website https://tantal.ai/.
1.3. Operator details:
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary suspension of the processing of personal data (except where processing is necessary to clarify personal data).
2.3. Website — a set of graphical and informational materials, as well as software and databases, ensuring their availability on the Internet at https://tantal.ai/.
2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means ensuring their processing.
2.5. Anonymization of personal data — actions resulting in the impossibility of determining, without additional information, the ownership of personal data by a specific User or other data subject.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, updating (modification), retrieval, use, transfer (dissemination, provision, access), anonymization, blocking, deletion, and destruction of personal data.
2.7. Operator — a legal entity or individual that independently or jointly with others organizes and/or carries out the processing of personal data and determines the purposes of processing, the scope of personal data to be processed, and the actions performed with personal data.
2.8. Personal data — any information relating directly or indirectly to an identified or identifiable User of the website https://tantal.ai/.
2.9. Personal data permitted by the data subject for dissemination — personal data to which access has been granted to an unlimited number of persons by the data subject through consent given in the manner prescribed by the Personal Data Law.
2.10. User — any visitor to the website https://tantal.ai/.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.12. Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite group of persons or making personal data publicly available, including publication in mass media or placement in information and telecommunication networks.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign authority, individual, or legal entity.
2.14. Destruction of personal data — any actions resulting in the irreversible destruction of personal data without the possibility of restoring their content in the personal data information system and/or destruction of physical media containing personal data.
2.15. Cookies — small text files saved on the User’s device when visiting the website and used to ensure the operation of the website, analytics, and improvement of the user experience.
3.1. The Operator has the right to:
— receive accurate information and/or documents containing personal data from the data subject;
— continue processing personal data without the consent of the data subject in cases provided by the Personal Data Law, even if the data subject has withdrawn consent or requested cessation of processing;
— independently determine the composition and list of measures necessary and sufficient to ensure compliance with applicable data protection laws, unless otherwise provided by federal law.
3.2. The Operator is obligated to:
— provide the data subject, upon request, with information regarding the processing of their personal data;
— organize personal data processing in accordance with applicable laws of the Russian Federation;
— respond to requests and inquiries from data subjects and their legal representatives in accordance with the Personal Data Law;
— provide the supervisory authority for the protection of data subjects’ rights with the necessary information within 10 days of receiving such a request;
— publish or otherwise ensure unrestricted access to this Policy;
— implement legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, or dissemination, as well as from other unlawful actions;
— cease the transfer (dissemination, provision, access), processing, and destroy personal data in cases provided by the Personal Data Law;
— fulfill other obligations established by the Personal Data Law.
4.1. Personal data subjects have the right to:
— receive information regarding the processing of their personal data, except in cases provided by federal law. The information shall be provided in an accessible form and shall not contain personal data of other subjects, except in cases when there are legal grounds for disclosing such data;
— request clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated processing purpose, and to take measures provided by law to protect their rights;
— set as a condition prior consent for the processing of personal data for the purposes of promotion of goods, works, and services in the market;
— withdraw consent to personal data processing and to send a request to terminate the processing of personal data;
— appeal unlawful actions or omissions of the Operator regarding the processing of their personal data to the supervisory authority for the protection of data subjects’ rights or in court;
— exercise other rights provided by the laws of the Russian Federation.
4.2. Personal data subjects are obligated to:
— provide the Operator with accurate data about themselves;
— inform the Operator of updates or changes to their personal data.
4.3. Individuals who provide the Operator with inaccurate information about themselves, or with information about another data subject without that subject’s consent, bear responsibility in accordance with the laws of the Russian Federation.
5.1. Personal data shall be processed lawfully and fairly.
5.2. Processing shall be limited to achieving specific, predetermined, and legitimate purposes. Processing of personal data incompatible with the purposes of collection is not permitted.
5.3. Databases containing personal data processed for incompatible purposes shall not be combined.
5.4. Only personal data that meets the purposes of processing shall be processed.
5.5. The content and scope of processed personal data shall correspond to the stated purposes and shall not be excessive.
5.6. The Operator ensures the accuracy, sufficiency, and, where necessary, relevance of personal data and takes necessary measures to delete or clarify incomplete or inaccurate data.
5.7. Personal data shall be stored in a form allowing identification of the data subject no longer than necessary for processing purposes, unless otherwise required by federal law or by a contract to which the data subject is a party, beneficiary, or guarantor. Processed personal data shall be destroyed or anonymized once the purposes of processing have been achieved or when the need for them has ceased, unless otherwise provided by federal law.
| Purpose of processing | Categories of subjects | Categories of personal data | Legal grounds | Processing and storage period |
|---|---|---|---|---|
| Processing of inquiries submitted via contact forms on the website, including the “Book a Demo” and “Promo Code” forms: contacting the User, providing consultation, selection and coordination of the Operator’s services (AI business automation, computer vision, IT solutions development, AI marketing, and related services). | Prospective clients, website visitors | Surname, name, patronymic; e-mail address; telephone number; message submitted by the User; promo code (if any) | Consent of the data subject; Article 6, paragraph 1, clause 5 of Federal Law No. 152-FZ (conclusion and performance of a contract initiated by the data subject); Federal Law No. 149-FZ of July 27, 2006 | Until consent is withdrawn, but no longer than 3 (three) years from the date of the last interaction with the User |
| Conclusion and performance of service agreements, maintenance of client documentation, issuance of invoices and acts | Clients of the Operator, representatives of counterparties | Full name, position, contact details, details of documents confirming authority (if necessary) | Article 6, paragraph 1, clause 5 of Federal Law No. 152-FZ; Civil Code of the Russian Federation | For the term of the contract and 5 (five) years after its termination; accounting documents — 5 years in accordance with the Tax Code of the Russian Federation and Federal Law “On Accounting” |
| Sending informational and marketing communications regarding the Operator’s products and services (only with separate consent) | Subscribers, prospective clients | Full name, e-mail address, telephone number | Consent of the data subject; Article 18 of Federal Law No. 38-FZ of March 13, 2006 “On Advertising” | Until consent is withdrawn by the User |
| Website traffic analytics and improvement of website performance (cookies, device identifiers, IP address, technical browser data) | Website visitors | Cookie identifiers, IP address, device type, browser version and language, referral source, behavioral data on the website | Consent expressed by an active action of the User (use of the cookie banner) | Up to 12 (twelve) months from the date of the last visit to the website, after which the data is anonymized or destroyed |
6.1. Types of personal data processing: collection, recording, systematization, accumulation, storage, updating (modification), retrieval, use, transfer (provision, access), anonymization, blocking, deletion, and destruction of personal data.
6.2. Personal data is processed both with and without the use of automation tools. Personal data of citizens of the Russian Federation is stored on servers located within the territory of the Russian Federation, in accordance with Part 5, Article 18 of the Personal Data Law.
7.1. Personal data is processed with the consent of the data subject to the processing of their personal data.
7.2. Personal data may be processed where necessary to achieve purposes provided for by an international treaty of the Russian Federation or by law, or to perform functions, powers, and obligations imposed on the Operator by the laws of the Russian Federation.
7.3. Personal data may be processed where necessary for the administration of justice or execution of a judicial act or an act of another authority or official subject to enforcement under the laws of the Russian Federation on enforcement proceedings.
7.4. Personal data may be processed where necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, or for the conclusion of a contract initiated by the data subject.
7.5. Personal data may be processed for the legitimate interests of the Operator or third parties, or to achieve socially significant purposes, provided such processing does not violate the rights and freedoms of the data subject.
7.6. Publicly available personal data, access to which has been granted by the data subject, may be processed.
7.7. Personal data subject to mandatory publication or disclosure under federal law may be processed.
The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with applicable data protection laws.
8.1. The Operator ensures the safety of personal data and takes all possible measures to prevent access by unauthorized persons.
8.2. The User’s personal data may be transferred to third parties only in the following cases:
— with the consent of the data subject;
— where necessary for the performance of a contract to which the data subject is a party;
— upon the request of authorized state authorities within the limits established by the laws of the Russian Federation;
— to persons engaged by the Operator on the basis of a data processing agreement (including hosting providers, CRM system providers, e-mail service providers), provided such persons comply with the requirements of the Personal Data Law.
8.3. If the User identifies inaccuracies in their personal data, the User may update them by sending a notification to the Operator’s e-mail address sales@tantal.ai marked “Update of Personal Data”.
8.4. The period of personal data processing is determined by the achievement of the purposes for which the personal data was collected, unless a different period is provided by a contract or applicable law. Specific storage periods for each processing purpose are set out in Section 6 of this Policy. The User may withdraw consent at any time by sending a notification to sales@tantal.ai marked “Withdrawal of Consent to Personal Data Processing”.
8.5. Information collected by third-party services (including payment systems, communication providers, messengers, and other service providers) is stored and processed by such parties (Operators) in accordance with their own User Agreements and Privacy Policies. The Operator is not responsible for the actions of such third parties.
8.6. Restrictions on transfer (other than provision of access) and on processing or processing conditions (other than obtaining access) of personal data permitted for dissemination, established by the data subject, do not apply where processing is carried out in state, public, or other public interests defined by the laws of the Russian Federation.
8.7. The Operator ensures confidentiality of personal data when processing it.
8.8. The Operator stores personal data in a form allowing identification of the data subject no longer than necessary for the purposes of processing, unless otherwise required by federal law or by a contract.
8.9. Processing of personal data may be terminated upon achievement of the purposes of processing, expiration of the consent of the data subject, withdrawal of consent, request to terminate processing, or detection of unlawful processing.
9.1. The Operator performs collection, recording, systematization, accumulation, storage, updating (modification), retrieval, use, transfer (dissemination, provision, access), anonymization, blocking, deletion, and destruction of personal data.
9.2. The Operator carries out automated processing of personal data with or without the transmission of information via information and telecommunication networks.
10.1. The Operator’s website uses cookies and similar technologies (pixel tags, browser local storage) for the following purposes:
— ensuring proper operation of the website and saving user settings (strictly necessary cookies);
— collection of anonymized statistics on website traffic and behavioral analytics;
— improvement of the user experience and targeting of marketing communications.
10.2. Upon the first visit to the website, the User is shown an information banner that allows the User to accept, reject, or configure the use of cookies that are not strictly necessary. Until the User’s consent is obtained, analytics and marketing cookies are not activated.
10.3. The User may at any time change the cookie settings in their browser or withdraw previously given consent by clearing cookies and making a new selection in the banner upon the next visit to the website.
10.4. Analytics services used:
11.1. The Operator does not carry out cross-border transfer of personal data.
The Operator and other persons who have gained access to personal data shall not disclose to third parties or distribute personal data without the consent of the data subject, unless otherwise required by federal law.
13.1. The User may obtain any clarifications regarding the processing of their personal data by contacting the Operator at sales@tantal.ai.
13.2. Any changes to this Policy will be reflected in this document. The Policy remains valid indefinitely until replaced by a new version.
13.3. The current version of the Policy is freely available on the Internet at https://tantal.ai/privacy-policy-eng/.