Personal Data Processing Policy

Revision of 1 августа 2026 года

1. General provisions

This Policy defines how personal data is processed in the «Гончарка.Онлайн» (Goncharka.Online) information service (website goncharka.online, hereinafter the Service) and is drawn up in accordance with part 2 of article 18.1 of Russian Federal Law No. 152-FZ of 27 July 2006 «On Personal Data» (hereinafter the Law).

The Service is owned by a self-employed individual, Королёв Евгений Алексеевич, taxpayer number (INN) 301656601742 (hereinafter the Operator). Address for enquiries about personal data processing: info@goncharka.online.

The Service is built for pottery studios: keeping track of classes, customers' pieces and kiln firings, calculating the studio's finances, messaging customers on social networks and publishing posts to the studio's own accounts. The terms «personal data», «processing», «operator» and «data subject» are used as defined in article 3 of the Law.

The Policy covers all personal data the Operator receives while the Service is running and remains in force indefinitely until replaced by a new revision.

2. Who is the operator of which data

The studio is the operator of its customers' personal data. It determines the purposes and scope of processing, obtains consent and is responsible for the lawfulness of obtaining the data. The Operator of the Service processes such data on the studio's instructions under part 3 of article 6 of the Law and solely for the purposes the studio has set; it pursues no purposes of its own with respect to studio customers' data.

With respect to studio employees' data (Service accounts), the owner of the Service is the Operator.

3. Categories of data subjects and data processed

3.1. Studio employees — users of the Service.

• surname, first name (display name) and login;
• password — solely as an irreversible hash;
• email address — when the user confirms the address themselves;
• profile picture (avatar) — if the user uploaded one;
• VKontakte account identifier — if the user linked sign-in through that social network;
• access rights and studio membership.

3.2. Studio customers. The data is entered by the studio or arrives from the sources it has connected: the Dikidi booking log and those social networks that have been enabled for it one by one — VKontakte, Telegram, MAX, Instagram. No network is connected by default, VKontakte included:

• surname and first name, or any other name the customer gave;
• phone number;
• link to a social network profile, its name and picture;
• class details: date, service, number of guests, price, employee comment;
• correspondence with the studio's account: message texts and links to attachments;
• details of the customer's pieces and photographs of them, including photographs of damage;
• details of gift certificates purchased.

The Service does not process special categories of personal data (article 10 of the Law) or biometric personal data (article 11 of the Law). Photographs of pottery are not intended to identify a person and are not biometric data.

4. Purposes of processing and legal grounds

• Giving a studio employee access to the Service(account, sign-in, email confirmation, access recovery) — ground: clause 5 of part 1 of article 6 of the Law (performance of a contract to which the data subject is a party) and the subject's consent.
• Keeping track of classes, pieces and the studio's finances— ground: the studio's instructions (part 3 of article 6 of the Law), provided the studio has a lawful ground for processing.
• Telling a customer their pieces are ready, including the tracking page opened from a QR code link and a message on a social network — on the studio's instructions.
• Answering enquiriessent to the Service's addresses — ground: the subject's consent, expressed by sending the enquiry.

Personal data is not used for advertising, bulk mailings, profiling or decisions taken solely by automated processing. Data is not sold.

5. Processing operations and methods

Collection, recording, systematisation, accumulation, storage, rectification (updating, amendment), retrieval, use, transfer (provision, access) to the extent described in section 6, erasure and destruction. Processing is automated using the Service's database; data is processed and stored within the Russian Federation (a server in St Petersburg).

6. Transfer of data to third parties

• VKontakte LLC — only if messaging or publishing on VKontakte is enabled for the studioand its community is connected: requests are made to the social network's API on behalf of the studio's community. The conversation identifier, the message or post text and attachments are transferred.
• Telegram Messenger Inc. — only if the studio connected a Telegram channel: posts are published to the channel on behalf of the Service's bot, and incoming customer messages are collected by polling. The chat identifier, text and attachments are transferred. Requests go through an intermediate proxy server, because Telegram is not reachable directly from the Operator's server.
• VK LLC (MAX) — only if the studio connected a MAX channel: the same arrangement as with Telegram — posts to the channel on behalf of the bot and messages collected by polling.
• Meta Platforms, Inc. (Instagram) — only if the studio connected an Instagram account. When publishing, the post text and a link to the photograph are transferred, and Instagram downloads the photograph itself; the link is signed and valid for a few minutes. When messaging, the text of the reply to the customer is transferred, and incoming messages arrive from Instagram: the correspondent's identifier, the text and links to attachments. The studio can disconnect the account at any time in the settings, and the person can do so from the Instagram side; in both cases the access keys are erased.
• The email service provider — addresses and contents of messages the Service sends: a sign-in code, an employee invitation, a reply to an enquiry.
• The hosting provider— to the extent of hosting the Service's database and files.
• The cloud storage provider— to the extent of storing backup copies of the Service's database and files. Copies are kept within the Russian Federation for no longer than seven days.

Every social network is enabled separately, and messaging and publishing within it are enabled separately too: a studio that only uses Telegram transfers no data to VKontakte or Instagram at all. Disabling a network stops the transfer immediately but does not delete the copy of the correspondence already stored in the Service — that is destroyed upon an enquiry under section 9.

Personal data is not transferred to anyone else, except in cases provided for by law (a request from an authorised body).

7. Processing periods, storage and destruction

Data is processed until the purpose of processing is achieved and, with respect to a studio, until it stops using the Service. Once the purpose is achieved, or upon withdrawal of consent, data is destroyed within thirty days at most, unless the law provides otherwise.

Data of the demo studio created on the website by the «Demo» button is destroyed automatically fifteen minutes after the last action in it.

8. Protection measures

The Operator takes legal, organisational and technical measures to protect personal data against unlawful access, destruction, alteration and dissemination (articles 18.1 and 19 of the Law): only a studio's own employees have access to its data, within the rights granted to them; passwords are stored as irreversible hashes; the Service is accessed over a secure connection; signing in to accounts with a confirmed email address is additionally confirmed by a code; a backup copy is created daily and copies are transferred and stored over a secure connection for no longer than seven days.

9. Rights of the data subject

A data subject has the right to obtain information about the processing of their personal data, to require its rectification, blocking or destruction if it is incomplete, inaccurate, unlawfully obtained or not needed for the stated purpose, and to withdraw consent to processing (articles 14 and 21 of the Law).

Enquiries are sent to info@goncharka.online. Information is provided no later than ten working days from the enquiry; where inaccuracy or unlawful processing is confirmed, the data is rectified or destroyed no later than seven working days. If the data was entered by a studio, the Operator passes the enquiry on to it: the studio decides as the operator of that data, and the Service carries the decision out in its own database.

10. Particulars of the Service worth knowing

• The link to the piece tracking page that the studio gives a customer as a QR code works indefinitely and cannot be revoked: anyone holding the link can see the contents and status of the pieces in that batch. The studio must bear this in mind when sharing the link.
• Social network correspondence is stored in the Service as a copy.Deleting a message in the social network itself does not delete it from the Service's database; deletion is carried out upon an enquiry under section 9.

10.1. Deleting Instagram data

An Instagram account is disconnected by the studio in «Настройки → Instagram» (Settings → Instagram), and by the person themselves from the Instagram side, in the list of apps with access to the account. In both cases the access keys are erased immediately and the Service stops contacting the account.

A data deletion requestsent through Instagram is handled straight away, without a queue: the access keys and all Instagram correspondence stored as a copy in the Service are deleted. The studio's posts remain — they are its own records, not the data of the person who withdrew access. In response to the request the Service returns a confirmation code and a link to this section.

You can also write directly under section 9 — the result is the same.

11. Changes to the Policy

The Operator may amend this Policy. A new revision is published on this page with its date; studios are notified of material changes by email. The current revision is always available at goncharka.online/privacy (English version: goncharka.online/privacy?lang=en).