Personal data processing policy

1. General

1.1. This Policy describes how [not filled in] (INN [not filled in], address: [not filled in], e-mail: [not filled in]) (the Operator) processes personal data of users of the website l2oko.ru (the Site).

1.2. The Policy follows Russian Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".

1.3. Consent to personal data processing is a separate document - Consent to personal data processing. A user gives it by ticking the box in a form.

2. What data is processed

account data: login, password hash (the password itself is not stored), e-mail and contact if the user has given them;
what the user adds: server listings, advertising requests (contact, server name and address, comment), reviews, reports, votes (game nickname, if given);
technical data: a hash of the IP address (the IP address itself is not stored in the Site database), date and time of actions, cookies;
visit data collected by Yandex Metrica - only if the user allowed analytics in the cookie banner.

3. Purposes

registration and the user account;
publishing and moderating server listings;
handling advertising requests and contacting the requester;
publishing reviews, handling reports, counting votes;
protecting the Site from abuse: rate limits, checks against automated submissions;
notifications in the account and, if an e-mail is given, by e-mail;
visit statistics - only with the user consent.

4. Legal grounds

Consent of the data subject and performance of agreements the user is a party to: the Terms of use and the Advertising offer.

5. Processing and storage

5.1. Processing is automated: collection, recording, organisation, storage, correction, use, blocking, deletion.

5.2. Passwords are stored as a cryptographic hash only. IP addresses for statistics and abuse protection are stored as a hash only.

5.3. Account data is kept until the account is deleted. Requests, reviews, reports and consent records are kept as long as needed for the purposes or as required by law.

5.4. Database location: [state the hosting and the country].

5.5. The Operator does not pass personal data to third parties except where the law requires it. Yandex Metrica is enabled only after the user consents.

6. Cookies

Necessary cookies (the Site does not work without them):

l2oko_user - account login;
l2oko_admin - admin login (staff only);
l2oko_lang - the chosen language;
l2oko_cookies - your choice in the cookie banner, kept for 1 year.

Yandex Metrica analytics cookies are set only after you press "Allow analytics". You can change the choice with the "Cookies" link at the bottom of any page.

7. User rights

A user may ask what data is processed, ask to correct, block or delete it, withdraw consent, and appeal to Roskomnadzor or a court. Requests go to [not filled in].

8. Data protection

The Operator takes organisational and technical measures: restricted access to the server and the admin, passwords stored as hashes, encrypted connections (HTTPS).

9. Changes

The Operator may change this Policy. A new version applies from its publication on this page. The version number and date are shown at the top of the page.

10. Operator contacts

[not filled in], INN [not filled in], [not filled in], e-mail: [not filled in].

If the Russian and English versions differ, the Russian version applies.