Personal data processing policy
Version: 2026-10-19.3 · 19.10.2026
This document applies to https://dellerev.com, its language versions and Deller EV services. The controller is Amulet Limited Liability Company (ООО «Амулет»), INN 2335016359, KPP 233501001, OGRN 1102335000514. Registered and contact address: 353180, 138 Mira Street, Korenovsk, Krasnodar Krai, Russia. Email: dan@deller.pro.
1. General provisions
This policy describes the purposes, data categories and processing of visitors, account holders and customers under Russian Federal Law No. 152-FZ of 27 July 2006. Personal data means information relating to an identified or identifiable individual. Processing may be automated or manual. Browsing alone does not constitute consent to every processing purpose.
2. Purposes and data
Accounts: name, email, authentication and necessary connection data, including IP address. Enquiries: name, phone and message. Orders and contracts: name, phone, email, address or city supplied, order items and comments. Deller GPT: messages, attachments, conversation identifier and connection data. Reviews and comments: author name, text, rating and date. Do not include another person's information without a proper ground. Registration and enquiries do not request passports, health data, SNILS or biometric data.
3. Legal grounds
Registration, general enquiries and chat consultations use separate consent confirmed by an active choice. Existing accounts do not require fresh consent on every sign-in. Necessary order information is processed to enter into and perform a contract at the buyer's request under Article 6(1)(5) of Law No. 152-FZ. Statutory obligations have their own legal grounds. Registration or enquiry consent does not authorise advertising, analytics or public disclosure; disclosure is subject to the separate rules in Article 10.1.
4. Processing and recipients
The controller processes information supplied through accounts, forms and chat and necessary connection data. Operations include collection, recording, organisation, accumulation, storage, updating, retrieval, use, authorised access, restriction, deletion and destruction. Access is limited to the purpose and authority required. Appointing processors requires a lawful basis and appropriate processing instructions. Disclosure to public authorities is permitted where required by law. Registration data, phones, emails and delivery addresses are not intended for public disclosure.
5. External services and location
According to the controller, the site's servers are located in Russia. Collection of Russian citizens' data must comply with Article 18(5) of Law No. 152-FZ. Yandex Maps and RuTube are connected upon user action and then receive IP and other connection data under their own rules. Deller GPT uses the giga.talisman.ms service and GigaChat models to process messages and attachments for responses. Locating servers in Russia does not authorise unrestricted onward disclosure. Standalone Google Analytics and Yandex Metrica counters are not connected in the current site version.
6. Browser storage
localStorage stores the cart and sign-in token, not the complete account profile. Signing out removes the token; clearing the cart removes its contents. Chat uses sessionStorage for a conversation identifier. Clearing browser storage does not delete server records. Activated external services may use their own cookies, controlled through browser settings. Declining maps, video or chat does not prevent browsing the catalogue or ordering.
7. Retention and deletion
Data is kept only as long as needed for its purpose unless law, contract or agreement establishes another period. Account data is used while access is provided, or until consent is withdrawn where no other basis applies. Enquiries and chat data are used while the issue is handled and the consultation is provided, and for necessary contractual obligations where relevant. The controller's contractual and accounting document policy is the contract term and five years after its end unless another statutory period applies; this does not require keeping all visitor information for five years. On fulfilment of the purpose or withdrawal, processing must cease and data must be deleted within Article 21 deadlines unless another lawful basis remains. Electronic records are deleted from information systems with the required evidence of destruction.
8. Protection
The site uses HTTPS and authorisation for accounts and protected APIs. The controller must implement the legal, organisational and technical measures required by Article 19, restrict access, prevent unlawful disclosure, detect incidents and respond. Publishing a policy does not replace protecting servers, backups or processors. You may ask the controller about applicable protection requirements and the processing of your data.
9. Rights and requests
You may request information, correction, restriction, cessation or deletion where provided by law, withdraw consent and request an end to disclosure. Email dan@deller.pro or write to the controller's address, specifying the action and information needed to locate your account, order or enquiry. Identity checks must be proportionate. Statutory response deadlines apply. Withdrawal does not override separate legal retention obligations or mean automatic deletion by clicking a button. Complaints may be submitted to Roskomnadzor or a court.
10. Changes
The current Russian version is published at https://dellerev.com/ru/privacy, with translations in the site's language versions. The version and date appear on the page. An edit is not new consent and cannot retrospectively expand an earlier consent. Changes requiring consent must be confirmed separately.
Personal data enquiries: dan@deller.pro