Personal data processing policy
Updated 16 October 2026. This policy covers the MCPK website, callback form enquiries and telephone enquiries.
Data controller
The controller is International Centre for Professional Personnel LLC (MCPK; registered Russian name: ООО «Международный центр профессиональных кадров»). INN 7805824317, KPP 784001001, OGRN 1257800063388. Registered address: premises 230-N, 23 Novgorodskaya Street, Smolninskoye Municipal District, Saint Petersburg, 191124, Russia.
For questions, correction or deletion requests, or withdrawal of consent: mtspk.adm@mail.ru. Telephone: 8 800 551 79 40.
Data and purposes
The callback form collects your name and phone number so MCPK can contact you and respond to your enquiry. Data are sent to the controller’s business mailbox through Mail.ru. The enquiry includes its date and time, page language, enquiry reference, the separate consent checkbox confirmation, and the version and text of the consent. There is no registration, CV upload or payment function. The preview form is disabled; submission starts after the production site has been configured.
When a page is requested, the web infrastructure receives technical information such as IP address, requested URL, date and time, browser information and the technical outcome of the request. Infrastructure logs may record it for page delivery, security and troubleshooting. Processing is limited to what these purposes require. Contact the controller for details of the actual infrastructure logs and retention periods.
If you telephone us, we process the contact details and information you provide to answer your enquiry and discuss cooperation. Do not provide passport information, medical records or other data unnecessary for an initial enquiry.
One technical cookie remembers dismissal of the cookie notice. No advertising or analytics counters are included in the website code. See the Cookies page for details.
Legal grounds
Your separate consent is the basis for processing your name and phone number submitted through the form. Submission requires you to select the consent checkbox yourself. This consent does not cover advertising or public disclosure.
Processing is governed by Russian Federal Law No. 152-FZ of 27 July 2006 on Personal Data. Depending on the enquiry, the legal basis is taking steps to conclude or perform a contract at the data subject’s initiative, meeting a statutory obligation, or separate consent where required. Technical processing for operation and security takes account of legitimate interests without infringing visitors’ rights.
Visiting the website or reading this policy does not constitute consent to arbitrary processing of personal data. Where consent is needed, it is requested separately for a specified purpose. Visiting the site or sending an ordinary enquiry does not subscribe you to advertising messages.
Processing and retention
Depending on the purpose, processing may include collection, recording, organisation, accumulation, storage, updating, use, provision to authorised processors, restriction, deletion and destruction. Only data necessary for the stated purpose are processed.
Enquiries are retained while they are being answered and cooperation is being discussed. Data are deleted within 30 days after the purpose has been achieved unless another lawful basis requires continued processing. If a contract is concluded, retention of the relevant records follows contractual obligations and applicable law.
The technical cookie lasts no longer than 30 days. You may remove it earlier in your browser or on the Cookies page. Retention of infrastructure logs, backups and other infrastructure data must be defined in the controller’s documents and hosting configuration.
The website does not retain names and phone numbers in a separate enquiry database; it sends them to the controller’s mailbox. Spam prevention uses a one-way code derived from the IP address and an attempt counter for 15 minutes, with expired records removed on subsequent requests. Submission references without names or phone numbers are retained for up to 24 hours and cleaned up on subsequent submissions. The controller must separately delete email correspondence and backups according to its retention rules.
Processors, security and transfers
Access is restricted to authorised persons who need the data for their work. Where a processor is engaged, the controller specifies the purposes, data, processing operations and confidentiality and security requirements. Disclosure to public authorities requires a lawful basis.
Links to social networks and email services lead to external resources. After you follow a link, the relevant service’s own rules govern its processing. No embedded social network widgets are used on this website.
The controller must comply with requirements for data security, localisation of collection and, where relevant, cross-border transfers. This policy alone does not establish the location of servers. Information about infrastructure and recipients can be requested by email.
Website administration uses authentication, access restrictions, session protection and backups. HTTPS protects communication with visitors. Organisational measures and hosting configuration are the responsibility of the controller and its authorised providers.
Your rights and requests
You may request information about processing, seek correction, restriction or deletion where there are legal grounds, withdraw consent where processing relies on it, and contact Roskomnadzor or a court.
Email mtspk.adm@mail.ru with the subject “Personal data”. Identify the relevant enquiry or interaction, provide a reply address and explain your request. We may request the minimum additional information necessary to verify that the request concerns your data.
Requests are handled within statutory time limits. Withdrawing consent does not prevent processing supported by another lawful basis.
Changes
The current version is available through the Privacy policy link in the footer. The policy is updated when website functions or processing arrangements change. A new purpose requiring consent is not applied to existing data without an appropriate legal basis.