Privacy Policy

1.Scope

This Policy covers the Website only. It does not cover mobile apps or other MAXOS products. The flyit app processes its own data (account, tickets, travel documents), and that processing is described in the app’s separate privacy policy, published with the app.

By using the Website and sending messages through the contact form, you confirm that you have read this Policy.

The Russian version of this document is the primary one. This English version is provided for convenience.

2.Data controller

Personal data is controlled by Limited Liability Company “MAXOS” (Taxpayer ID / INN 2635269311).

Address: 18 Selskaya St., Stavropol, Stavropol Krai, Russian Federation, 355021.

You can contact us about data processing by email to support@maxossoftware.com.

3.Data we process

The Website requires no registration and collects no personal data automatically, apart from technical request data. Personal data is processed only in these cases:

• an email to support@maxossoftware.com: your email address, your name if you give it, the text of the email and any attachments;
• a message through the contact form, once message delivery through it is connected: name, email address, category and subject, and the message text;
• technical data your browser sends with every request: IP address, date and time, the page requested and browser details (user agent). The server uses it to run the Website and prevent abuse.

While the Contact page says sending through the form is unavailable, the form neither sends nor stores what you type.

Website settings: your chosen language (a cookie), plus your colour theme, whether you switched animations off, and your cookie settings choice (browser local storage). These settings stay on your device and are not used to identify you. See the Cookie Policy for details.

The Website does not determine your location, build a visitor profile or record which pages you view beyond the technical data listed above.

We do not ask for special categories of personal data or biometric data. Please do not include such information in your messages.

Product screenshots on the Website show fictional demo data and contain no personal data of real users.

4.Why we process it

• to review and answer your enquiries;
• to keep the Website running and secure, including protecting the form from spam and automated requests;
• to meet obligations under applicable law.

5.What we do with the data

Personal data may be collected, recorded, organised, accumulated, stored, updated, retrieved, used, passed to the message delivery service, restricted, erased and destroyed.

Processing is automated. No decisions with legal effects for you are made solely on the basis of automated processing.

6.Legal basis

We process personal data on the following grounds under Part 1 of Article 6 of Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”:

• contact form data — on the basis of your consent (clause 1). You give it by ticking the checkbox before sending; without it the message is not sent;
• technical request data — to run the Website and keep it secure, that is, to exercise our rights and legitimate interests without infringing your rights and freedoms (clause 7);
• data we must keep or disclose by law — to perform our legal obligations (clause 2).

You can withdraw consent at any time by sending us a request. We then stop processing and destroy the data within 30 days, unless the law requires us to keep it. Withdrawal does not affect the lawfulness of processing carried out before it.

7.How long we keep data

• enquiries (emails and form messages) — 1 year after we reply, then deleted;
• server technical logs — no longer than 30 days;
• Website settings — in your browser until you delete them.

If the law requires data to be kept longer, it is kept for the period the law sets. Once the purposes are achieved or consent is withdrawn, data is destroyed within 30 days.

8.Sharing with third parties

We do not sell personal data or share it with third parties for advertising or for their own purposes.

Data may be disclosed to public authorities only in the cases and in the manner provided by the laws of the Russian Federation.

If an external service is connected to deliver contact form messages, it will be named in this Policy before it is used.

9.International transfers

The Website is hosted on a server located in the Russian Federation. Personal data of Russian citizens is recorded, organised, accumulated, stored, updated and retrieved using databases located in the Russian Federation.

Personal data is not transferred across borders.

10.Cookies and analytics

The Website does not use analytics, advertising or other third-party tracking tools. The storage it does use is described in the Cookie Policy.

11.Security

When the Website runs on its official domain, the contact form sends data to our server over an encrypted connection (HTTPS). The content of enquiries (name, email, message) is not written to server logs.

12.Your rights

You have the right to:

• find out how your personal data is processed;
• ask for your data to be corrected, restricted or deleted if it is incomplete, out of date, inaccurate or processed unlawfully;
• withdraw your consent;
• complain to the data protection authority (Roskomnadzor) or a court.

We reply to requests within 10 working days of receiving them. This may be extended by up to 5 working days if we tell you the reason in advance.

13.Making a request

Send requests about your personal data by email to support@maxossoftware.com. Tell us which data the request concerns and the email address you used.

14.Children

The Website is not intended to collect children’s data. If you are under 14, please contact us together with a parent or legal guardian. If you learn that a child has sent us data without one, let us know and we will delete it.

15.Changes to this Policy

New versions are published on this page with the date of the change. Material changes take effect from the date stated in the document.