Privacy Policy
Last updated: March 13, 2026
1. General Provisions
This Privacy Policy (hereinafter -- the Policy) defines the procedure for processing and protecting the personal data of users of the KommoExpert website (hereinafter -- the Website).
The data controller is KommoExpert (hereinafter -- the Company). The Company processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national legislation.
By using the Website, you confirm your consent to the terms of this Policy. If you do not agree with the terms, please stop using the Website.
2. What Data We Collect
We collect the following categories of personal data:
- Name provided in the contact form
- Phone number for communication
- Email address (if provided)
- UTM tags and referral source
- Cookie data and session identifiers
- IP address and approximate geolocation
- Device and browser information (User-Agent)
- Website interaction data (pages viewed, visit duration)
We do not collect special categories of personal data (racial origin, political opinions, health data, etc.).
3. Purposes of Data Processing
Personal data is processed for the following purposes:
- Processing consultation and CRM implementation requests
- Contacting users regarding submitted requests
- Lead management in the Kommo CRM system
- Marketing campaign effectiveness analysis
- Improving website quality and user experience
- Generating statistical and analytical reports
- Fulfilling obligations to clients
- Compliance with applicable legislation
4. Legal Basis for Processing
Personal data is processed on the following legal bases in accordance with GDPR Article 6:
- Consent of the data subject (GDPR Art. 6(1)(a)) -- by submitting the contact form, the user gives explicit consent to processing
- Performance of a contract to which the data subject is party (GDPR Art. 6(1)(b))
- Legitimate interests of the controller (analytics, service improvement) provided this does not override the rights of the data subject (GDPR Art. 6(1)(f))
Consent to data processing can be withdrawn at any time by sending a request to the email address specified in the "Contact Information" section.
5. Data Storage
Personal data is stored on servers located within the European Economic Area or in countries that provide an adequate level of data protection as determined by the European Commission.
Data retention periods:
- Contact form data: 3 years from last interaction
- Analytics data (cookies, IP): 14 months
- Client contractual data: 5 years after contract completion (as required by accounting regulations)
Upon expiration of retention periods, data is deleted or anonymized.
6. Third-Party Data Sharing
We may share personal data with the following third parties solely to fulfill the purposes specified in Section 3:
- Kommo CRM (amoCRM) -- CRM system for managing leads and client communications. Data shared: name, phone, email, lead source.
- Cloudflare, Inc. -- CDN and website protection. Data shared: IP address, technical request data.
- Google Analytics (Google LLC) -- web analytics. Data shared: cookies, website behavior data (loaded only with user consent).
- Cal.com -- consultation booking service. Data shared: name, email (when using the booking widget).
We do not sell or share personal data with third parties for advertising purposes. International data transfers comply with GDPR Chapter V requirements.
7. Data Subject Rights
Under the GDPR, you have the following rights:
- Right of access to your personal data (Art. 15)
- Right to rectification of inaccurate data (Art. 16)
- Right to erasure / right to be forgotten (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object to processing (Art. 21)
- Right to withdraw consent at any time (Art. 7(3))
- Right to lodge a complaint with a supervisory authority (Art. 77)
To exercise your rights, send a request to the email address specified in the "Contact Information" section. We will process your request within 30 days.
9. Contact Information
For questions regarding personal data processing, please contact:
Company: KommoExpert
Email: privacy@kommoexpert.ru
Website: https://kommoexpert.ru
The data protection officer will review your request and respond within the legally required timeframe.
This document is a template and may require adaptation for your jurisdiction. Consult a lawyer before use.