1. About this Privacy Notice

This Privacy Notice explains how Limited Liability Company Anarta (ООО «Анарта»), a company incorporated under the laws of the Russian Federation, Taxpayer Identification Number INN 1683023845, with its business address at 5 Universitetskaya Street, Innopolis, Republic of Tatarstan, Russian Federation (“Anarta”, “we”, “us” or “our”), collects, uses, stores, discloses and otherwise processes Personal Data.
This Privacy Notice applies when you:

• visit or use https://anarta.online or another website operated by Anarta that refers to this Privacy Notice;
• submit a contact, demonstration or service request;
• communicate with us by email, telephone, messenger or another communication channel;
• request information about our products or services;
• enter into or discuss a business relationship with us.

Anarta is the Controller responsible for the processing of Personal Data described in this Privacy Notice.
Anarta is established in the Russian Federation and may offer products or services to individuals and organisations located in the United Arab Emirates. Where applicable, we process Personal Data in accordance with the data protection laws of the United Arab Emirates, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, as well as other laws applicable to our activities.
Different data protection rules may apply where services are provided through an entity established in the Dubai International Financial Centre or Abu Dhabi Global Market.

2. Personal Data we collect
Depending on how you interact with us, we may collect the following categories of Personal Data.

2.1 Contact and business information
This may include:

• your name;
• company or organisation name;
• job title and department;
• business email address;
• telephone number;
• country or location;
• preferred communication method.

2.2 Information contained in your request
This may include:

• information submitted through website forms;
• the content of your enquiry or demonstration request;
• information about your organisation’s business requirements;
• correspondence and records of communications with us;
• meeting notes and information provided during product demonstrations or commercial discussions.

Please do not provide Sensitive Personal Data unless we specifically request it and explain why it is required.

2.3 Technical and usage information
When you use our website, we may collect:

• Internet Protocol address;
• device type and device identifiers;
• browser type, operating system and language settings;
• referring website;
• pages viewed and actions performed;
• dates, times and duration of visits;
• cookie identifiers and similar technical information;
• security and system log information.

2.4 Marketing and preference information
This may include:

• your communication preferences;
• your consent or objection to marketing;
• records of when and how consent was provided or withdrawn;
• information about your interaction with our communications.

3. How we collect Personal Data
We may collect Personal Data:

• directly from you when you complete a form or contact us;
• during meetings, demonstrations, negotiations and contractual relationships;
• automatically through cookies, server logs and similar technologies;
• from your employer or another representative of your organisation;
• from publicly available business sources;
• from our authorised partners, service providers or group companies, where permitted by law.

Where another person provides us with your Personal Data, that person must be authorised to do so and must provide you with the information required under applicable law.

4. Why we process Personal Data
We process Personal Data only for specified and lawful purposes.

4.1 Responding to enquiries and demonstration requests
We process your information to:

• contact you about your request;
• arrange and conduct a product demonstration;
• understand your organisation’s requirements;
• provide requested information, proposals or quotations;
• take steps at your request before entering into a contract.

The processing may be based on your request, your consent or the necessity to take pre-contractual measures.

4.2 Providing products and services
We may process Personal Data to:

• enter into and perform contracts;
• create and administer customer accounts;
• deliver products, services and technical support;
• communicate about service operation, maintenance and updates;
• manage billing, payments and commercial records.

The processing may be necessary to enter into or perform a contract or to comply with applicable legal requirements.

4.3 Website operation, security and improvement
We may process technical information to:

• operate and maintain the website;
• prevent fraud, misuse and security incidents;
• diagnose technical problems;
• protect our systems, users and business;
• measure and improve website performance.

Where required, non-essential analytics technologies will be used only after you have provided consent.

4.4 Marketing communications
With your consent, we may send you information about:

• Anarta products and services;
• product updates and new functionality;
• events, webinars and demonstrations;
• industry news and related materials.

Marketing consent is optional and is not a condition of receiving a response to your enquiry or entering into a contract with us.
You may withdraw your marketing consent at any time by using the unsubscribe option in the relevant communication or by contacting us.

4.5 Legal and regulatory purposes
We may process Personal Data where necessary to:

• comply with applicable laws, regulations and lawful requests;
• maintain records required by law;
• establish, exercise or defend legal claims;
• investigate suspected fraud, misconduct or security incidents;
• protect the rights, safety and property of Anarta and other persons.

We may also process Personal Data on another legal basis expressly permitted by applicable law.

5. Consent
Where we rely on consent, the request for consent will be presented in a specific, clear and unambiguous manner.
Your consent must be indicated through a clear affirmative action. Silence, inactivity or simply continuing to use the website will not be treated as consent to optional processing.
You may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the consent was withdrawn.
Where processing is required to respond to your request, perform a contract or comply with law, we may continue processing the relevant Personal Data on the applicable non-consent legal basis.

6. Cookies and similar technologies
Our website uses cookies and similar technologies.

6.1 Strictly necessary cookies
These cookies are required for the website to operate, provide requested functionality, maintain security or remember your privacy settings.

6.2 Analytics and performance cookies
Subject to your consent, we may use analytics technologies to understand how visitors use the website and improve its operation.
These technologies may be provided by third-party analytics and technology providers. The current list of providers, the purposes for which individual cookies are used and their storage periods should be displayed in our Cookie Notice or cookie preference centre.

6.3 Managing cookies
When you first visit the website, you should be able to:

• accept all cookies;
• reject non-essential cookies;
• manage individual categories of cookies.

You may change your preferences at any time through the website’s cookie settings. You may also control cookies through your browser, although disabling strictly necessary cookies may affect website functionality.

7. Disclosure of Personal Data
We may disclose Personal Data only where reasonably necessary for the purposes described in this Privacy Notice.
Recipients may include:

• authorised Anarta employees and contractors;
• companies affiliated with Anarta;
• hosting and cloud infrastructure providers;
• customer relationship management and communication providers;
• website, analytics, cybersecurity and IT support providers;
• payment, accounting and professional service providers;
• auditors, insurers, legal advisers and consultants;
• business partners involved in responding to your request;
• government bodies, courts, regulators and law-enforcement authorities where disclosure is required or permitted by law;
• a buyer, investor or successor in connection with a corporate transaction, subject to appropriate confidentiality and data protection measures.

Service providers that process Personal Data on our behalf are required to act only on documented instructions and apply appropriate confidentiality and security measures.

8. International transfers
Anarta is established in the Russian Federation. Therefore, Personal Data collected from individuals located in the United Arab Emirates may be transferred to, stored in or accessed from the Russian Federation.
Personal Data may also be processed in other countries where our service providers, business partners or technical infrastructure are located.
Before making an international transfer, we will use a transfer mechanism permitted under applicable law. Depending on the circumstances, this may include:

• transferring Personal Data to a jurisdiction recognised as providing an adequate level of protection;
• entering into appropriate contractual arrangements;
• implementing appropriate technical and organisational safeguards;
• obtaining explicit consent where consent is an appropriate and lawful basis for the transfer;
• relying on another exception permitted by applicable law.

Where we request consent for an international transfer, we will provide information about the possible risks associated with transferring Personal Data to a country that may not provide a level of data protection equivalent to that available in the United Arab Emirates.
You may contact us for further information about the safeguards applicable to a particular transfer.

9. Data retention
We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected.
When determining the appropriate retention period, we consider:

• the nature and purpose of the processing;
• the duration of our relationship with you or your organisation;
• whether an enquiry, contract or support matter remains active;
• applicable legal and regulatory record-keeping requirements;
• relevant limitation periods;
• the need to establish, exercise or defend legal claims;
• security, fraud-prevention and audit requirements.

When Personal Data is no longer required, we will securely delete or anonymise it unless continued retention is required or permitted by law.
Specific storage periods for cookies should be displayed in the cookie preference centre.

10. Data security
We implement appropriate technical and organisational measures designed to protect Personal Data against:

• unauthorised or unlawful access;
• accidental loss, destruction or damage;
• alteration or unauthorised disclosure;
• misuse or unauthorised processing.

These measures may include access controls, authentication, encryption, logging, backup procedures, vulnerability management, confidentiality obligations and staff awareness measures.
Access to Personal Data is limited to persons who require it for an authorised business purpose.
No method of transmitting or storing information is completely secure. We therefore cannot guarantee absolute security, but we regularly review and improve our safeguards based on the nature of the data and the risks associated with the processing.
Where required by applicable law, we will notify the competent authority and affected individuals of a Personal Data breach.

11. Your rights
Subject to applicable law and any permitted exceptions, you may have the right to:

• obtain information about the Personal Data we process and the purposes of processing;
• request access to your Personal Data;
• obtain a copy of certain Personal Data;
• request the transfer of Personal Data in a structured and machine-readable format where applicable;
• request correction or updating of inaccurate or incomplete Personal Data;
• request deletion of Personal Data;
• request restriction or cessation of processing;
• withdraw consent where processing is based on consent;
• object to decisions based solely on automated processing, including profiling, where such decisions have legal or similarly significant effects;
• submit a complaint to the competent data protection authority.

To exercise a right, please contact us using the details in Section 15.
We may ask you to provide information necessary to confirm your identity and locate the relevant Personal Data. We may restrict or refuse a request where permitted or required by law and will explain the applicable reason where legally required.

12. Automated decision-making
We do not intend to use information submitted through the website to make decisions based solely on automated processing that produce legal or similarly significant effects.
If we introduce such processing, we will provide the information required by law and implement appropriate safeguards, including any applicable right to human intervention or to object to the decision.

13. Children’s Personal Data
Our website and business services are intended for organisations and business professionals. They are not directed at children.
We do not knowingly collect Personal Data from children through the website. If you believe that a child has provided Personal Data to us, please contact us so that we can investigate and take appropriate action.

14. Changes to this Privacy Notice
We may update this Privacy Notice to reflect changes in:

• our processing activities;
• our products, services or website;
• applicable legal or regulatory requirements;
• technologies or service providers.

The updated version will be published on the website with a revised “Last updated” date.
Where a change materially affects the way we process Personal Data, we will provide additional notice or request consent where required by law.

15. Controller and contact details
The Controller responsible for the processing described in this Privacy Notice is:
Limited Liability Company Anarta (ООО «Анарта»)
Country of incorporation: Russian Federation
Taxpayer Identification Number: INN 1683023845
Business address: 5 Universitetskaya Street, Innopolis, Republic of Tatarstan, Russian Federation
Website: https://anarta.online
Privacy email: info@anarta.pro
Telephone: 8-800-700-97-79
To exercise your data protection rights or submit a question about this Privacy Notice, please contact us by email and include “Privacy Request” in the subject line.
Where required by applicable law, you may also submit a complaint to the competent data protection authority in the United Arab Emirates or another authority responsible for the protection of your Personal Data