Privacy policy
Effective from
1. General provisions and the operator
This Policy sets out how the personal data of visitors to media.invalife.org is processed and protected, and is published pursuant to Article 18-1 of the Law of the Pridnestrovian Moldavian Republic No. 53-З-IV of 16 April 2010 “On Personal Data” (the Law).
Personal data operator: Public Association INODA “InvaLife”, 38 Tekstilshchikov St., Tiraspol, stat@media.invalife.org, +373 77 894 779.
For any question about the processing of personal data, write to stat@media.invalife.org.
2. What data is processed, purposes and legal grounds
- Technical request data (IP address, browser type, page address, time) in server logs - to run the site and protect it from attacks. Ground: the operator's legitimate interests (Article 6 of the Law). Kept for no longer than 52 days.
- Cookie-less article read counting: so that one read is not counted twice, the IP address is kept only in hashed form for 30 minutes and then deleted. The statistics keep only de-identified data: the article, time, language version and the domain of the referring site.
- Email address, language and time of consent - when you subscribe to the newsletter. Ground: the data subject's consent (Article 9 of the Law), given by ticking the box in the form. Kept until you unsubscribe or withdraw consent.
- Yandex.Metrica analytics cookies (including Webvisor, which records actions on the page) and Google Analytics - only after your consent in the cookie banner. Ground: consent. See the Cookie policy for details.
The operator does not process special categories of personal data or biometric data, does not sell data, does not use it for advertising and does not make decisions with legal effects on you based solely on automated processing.
3. Disclosure to third parties and transfer abroad
- The hosting provider whose server runs the site. The server is located in the Russian Federation (Moscow).
- Yandex LLC (Russian Federation) - Yandex.Metrica, only with your consent to analytics cookies.
- Google LLC (USA) - Google Analytics. The Google Analytics code loads on every page in Google Consent Mode: until you consent it sets no cookies and sends Google only de-identified technical signals about the visit (page, time, device type, IP address at the moment of the request) with no visitor identifiers; after consent, full statistics with cookies.
Hosting the server in the Russian Federation and using analytics services means cross-border transfer of personal data. It is carried out in accordance with Article 12 of the Law and, for analytics services, only with your consent given in the cookie banner after reading this Policy. Data is disclosed to others only where expressly required by PMR legislation.
4. Your rights
Under Articles 14–17 of the Law you have the right to:
- receive information about the processing of your personal data: the fact of processing, its purposes and grounds, the data concerned, retention periods and who it is disclosed to;
- require the data to be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose;
- withdraw consent at any time. Consent to analytics cookies is withdrawn via the “Cookie settings” link at the bottom of every page, newsletter consent by writing to the operator;
- object to decisions based solely on automated processing;
- appeal the operator's actions or inaction to the Ministry of Digital Development, Communications and Mass Media of the PMR as the authorised body for the protection of data subjects' rights, or to a court, including claiming damages and compensation for moral harm.
5. How to send a request
Send requests to stat@media.invalife.org or to the operator's postal address. Say how we can contact you and what you are asking for; to confirm the data is yours, give the email address you subscribed with. The operator handles requests within the time limits set by the Law.
6. Data security
The operator takes legal, organisational and technical measures to protect data from unlawful access, destruction, alteration, blocking, copying and dissemination: the site works only over HTTPS, only authorised staff can access the server and database, and IP addresses used for read counting are stored only in hashed form.
7. Changes to this Policy
The operator may amend this Policy; a new version takes effect when published on this page, and its date is shown at the top. If changes require new consent, it will be requested again. People under 16 may subscribe to the newsletter only with their legal representatives' consent.
