1. Who we are
The controller of your personal data is Investment Bureau FINIST LLC (OOO «Инвестиционное Бюро «ФИНИСТ»), TIN (INN) 7721765023, OGRN 1127746597296, registered with the Roskomnadzor register of personal data operators under No. 77-22-072412, registered address: 16 Bolshaya Lubyanka St., bldg. 3, Moscow 101000, Russian Federation (“we”, “us”). Contact for privacy matters: info@finist-ib.ru.
This policy covers the website https://finist-ib.ru, including its English version (the “Website”), and enquiries sent to the contacts shown on it. We process personal data in accordance with Russian Federal Law No. 152-FZ “On Personal Data” and, where it applies to visitors in the European Economic Area (EEA), the General Data Protection Regulation (GDPR).
2. What we process and why
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Website analytics with Yandex Metrica, including Webvisor session replay (Russian-language pages only) | Cookie and localStorage identifiers, IP address, browser and device data, pages visited and referrer, date and time, approximate location from IP, on-page actions: clicks, scrolling, pointer movement | Your consent, Art. 6(1)(a) |
| Showing the Yandex map on the Contacts page (Russian-language page only) | IP address, browser and device data, page address, Yandex Maps cookies | Your consent, Art. 6(1)(a) |
| Replying to enquiries sent by e-mail or phone | Name, e-mail, phone number, company, job title, content of your message | Steps at your request before a contract, Art. 6(1)(b); our legitimate interest in answering, Art. 6(1)(f) |
| Reviewing job applications sent by e-mail | Data in your CV | Your consent, Art. 6(1)(a) |
Yandex Metrica is not loaded on the English-language pages of the Website (finist-ib.ru/en/); it runs only on the Russian-language pages and only with your consent. The Website has no data entry forms. We do not collect special categories of data through the Website. When you make a choice in the cookie banner, we keep a record of it (IP address with the last octet masked, consent type, categories chosen, date and time, policy version) to demonstrate consent, Art. 7(1) and Art. 6(1)(f) GDPR, for 3 years after the consent ends.
3. Recipients and transfers to Russia
- Yandex LLC (Moscow, Russia) provides Yandex Metrica and Yandex Maps, both used on the Russian-language pages of the Website only. The English-language pages load nothing from Yandex. These load only after you consent to the relevant cookie category. When the map loads, Yandex may set its own cookies and collect usage statistics for the map under its own privacy policy.
- Hosting provider: JSC Regional Network Information Center (RU-CENTER, nic.ru), servers in Russia.
We and Yandex are located in the Russian Federation, and the Website’s data is stored there. Russia is not covered by an EU adequacy decision, so Russian law may not offer the same level of protection as the GDPR. For visitors in the EEA, we rely on your explicit consent to this transfer, Art. 49(1)(a) GDPR, which you give when you enable the Statistics or External services category. You may refuse without losing access to the Website.
4. How long we keep data
- Analytics data: until you withdraw consent and no longer than the cookie lifetimes in our Cookie Policy. Aggregated reports are retained in Yandex Metrica under Yandex’s terms.
- Enquiries: 3 years after the last message.
- CVs: 30 days after the selection ends, unless you agree to a longer period.
5. Your rights
You have the right to:
- access your data and receive a copy;
- have it corrected or deleted;
- restrict or object to processing;
- data portability, where applicable;
- withdraw consent at any time, without affecting earlier processing;
- lodge a complaint with a supervisory authority: in the EEA, the authority in your country of residence; in Russia, Roskomnadzor.
To change your cookie choices, use “Cookie settings” at the bottom of any page. For other requests, write to info@finist-ib.ru. We reply within 10 working days, extendable once by 5 working days with notice.
6. Security
The Website uses HTTPS. Analytics and third-party services do not load before consent. Access to personal data is limited to staff who need it.
7. Changes
We may update this policy. The current version is always published on this page.
See also our Cookie Policy.