Privacy Policy | Meta Content Agency

1. General Provisions

1.1. This Privacy Policy (the “Policy”) explains how personal data of visitors to the website https://www.mca.systems (the “Site”) is processed and protected.

1.2. The controller (operator) of personal data is Meta Content Agency (“MCA”, “we”, “us”, the “Controller”), the owner of the Site. For any question about the processing of personal data, contact us at [email protected].

1.3. This Policy is drawn up in accordance with Russian Federal Law No. 152-FZ “On Personal Data” of 27 July 2006 and is designed to be consistent with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other data protection laws applicable to visitors from other jurisdictions.

1.4. This Policy covers all personal data we receive through the Site and through correspondence with visitors by email and Telegram. It does not apply to third-party websites and services linked from the Site.

1.5. This Policy is publicly available on the Site at all times. By using the Site and submitting your data, you confirm that you have read this Policy.

2. Definitions

Personal data — any information relating directly or indirectly to an identified or identifiable natural person (data subject).
Processing — any operation or set of operations performed on personal data, whether or not by automated means.
Visitor — a natural person who browses the Site or uses its features.
Cookies — small pieces of data stored in the visitor’s browser by the Site or third-party services; similar technologies include browser local storage and pixels (tags).
International (cross-border) transfer — transfer of personal data to a foreign state authority, foreign individual or foreign legal entity.

3. Personal Data We Process

3.1. Contact form data

When you submit the “Get Free Consultation” form, we receive:

your name;
your email address or Telegram username, depending on the contact method you choose;
your phone number, if you choose to provide it;
the service you are interested in, if selected;
the text of your message and any information you include in it.

Please do not include health data, political opinions, religious beliefs or other special categories of personal data in your message, nor personal data of other people without their consent. We do not intend to process such information and will delete it if received.

3.2. Technical data

When you visit the Site, the following is processed automatically: IP address, browser, operating system and device type, pages visited, referring page (referrer), and the date and time of requests. This data is recorded in server logs and processed by Cloudflare, which delivers the Site to visitors and protects it against attacks.

3.3. Cookie and analytics data

Only if you consent via the cookie banner, we process cookie identifiers, information about your interaction with the Site (page views, clicks, scrolling, cursor movements, visit duration), traffic source and ad campaign, approximate location derived from your IP address, and device characteristics. See Section 5 for details.

3.4. Correspondence

If you contact us directly by email or Telegram, we process your name or username, contact details and the content of the correspondence.

The Site has no user accounts, no payments and no newsletters. We do not make decisions producing legal effects concerning you based solely on automated processing, including profiling.

4. Purposes and Legal Bases

Responding to your request, providing a consultation, preparing a commercial proposal and discussing possible cooperation. Data: contact form and correspondence data (3.1, 3.4). Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 6(1)(1) of Law 152-FZ) and, where you ask us to take steps before entering into a contract, the performance of pre-contractual steps at your request (Art. 6(1)(b) GDPR; Art. 6(1)(5) of Law 152-FZ).
Operating the Site, ensuring its security and protecting it against attacks, spam and abuse. Data: technical data (3.2). Legal basis: our legitimate interest in keeping the Site available and secure, provided your rights and freedoms do not override it (Art. 6(1)(f) GDPR; Art. 6(1)(7) of Law 152-FZ).
Traffic statistics, usability analysis, measuring advertising effectiveness and showing ads to Site visitors (retargeting). Data: cookie and analytics data (3.3). Legal basis: your consent given in the cookie banner (Art. 6(1)(a) GDPR; Art. 6(1)(1) of Law 152-FZ).
Compliance with legal obligations, including responding to requests from competent authorities. Legal basis: Art. 6(1)(c) GDPR; Art. 6(1)(2) of Law 152-FZ.

We do not process personal data for purposes incompatible with those listed above, and we process only the data that is necessary for these purposes.

5. Cookies and Analytics Services

5.1. Strictly necessary cookies and similar technologies are used without consent, because the Site cannot function properly without them. They store your theme and language preferences and your cookie consent choice. Cloudflare may set technical cookies required to protect the Site against automated attacks.

5.2. Analytics and advertising services are loaded only after you click the consent button in the cookie banner; until then their code does not run on the Site. We use:

Yandex Metrica, including Webvisor (session recording and replay of visitor actions on pages) — YANDEX LLC, Russia. Purposes: traffic statistics, behaviour analysis, measuring advertising effectiveness. Privacy policy: https://yandex.com/legal/confidential/
Google Analytics and Google Ads — Google LLC, USA. Purposes: traffic statistics, conversion measurement, advertising effectiveness and retargeting. Privacy policy: https://policies.google.com/privacy
Meta Pixel — Meta Platforms, Inc., USA, and Meta Platforms Ireland Ltd., Ireland. Purposes: measuring advertising effectiveness and retargeting on Facebook and Instagram. Privacy policy: https://www.facebook.com/privacy/policy/

5.3. These providers process the data in accordance with their own privacy policies and within the retention periods configured in their settings. We mainly receive aggregated statistical reports from them.

5.4. You can withdraw your consent to analytics and advertising cookies at any time via the “Cookie settings” link in the footer of every page. After withdrawal, these services will no longer load on subsequent visits. You can also delete stored cookies and restrict them in your browser settings, and use opt-out tools offered by the providers (for example, the Google Analytics opt-out browser add-on). Declining analytics and advertising cookies does not restrict your access to the Site.

6. How We Process Data

6.1. We process personal data both with and without automated means, including collection, recording, organisation, accumulation, storage, updating (alteration), retrieval, use, transfer (disclosure, access), restriction (blocking), erasure and destruction.

6.2. You give consent to the processing of contact form data by ticking the mandatory checkbox before submitting the form, and consent to analytics and advertising cookies via the cookie banner. Consent is given freely; refusing it has no negative consequences for you other than being unable to submit the form (in that case you can write to us at [email protected]).

6.3. Access to personal data is limited to authorised MCA personnel who need it to perform their tasks. We do not sell personal data and do not disclose it to third parties except as described in Section 7 or required by law.

7. Recipients and International Transfers

7.1. To achieve the purposes of processing, we use the following recipients, acting as our processors or, where applicable, as independent controllers on the basis of your consent:

Resend, Inc. (USA) — email delivery service: contact form submissions are delivered as an email to the MCA team mailbox;
Cloudflare, Inc. (USA) — content delivery network and Site protection: processes technical data about requests to the Site;
the hosting provider (data centre in Denmark, European Union) housing our dedicated server, where contact form submissions are first recorded and stored before being delivered as an email via Resend, and where server logs are kept;
YANDEX LLC (Russia), Google LLC (USA), Meta Platforms, Inc. (USA) and Meta Platforms Ireland Ltd. (Ireland) — only if you consent to analytics and advertising cookies (Section 5);
Telegram and email providers you use to correspond with us — under their own terms.

7.2. Using these services involves transferring personal data outside your country: to Denmark, an EU Member State and a party to Council of Europe Convention 108, which ensures adequate protection of personal data, and to the United States, which is not on the Russian list of countries ensuring adequate protection. Transfers to the United States are based on your consent and are carried out in accordance with Article 12 of Law 152-FZ; for visitors in the EU/EEA, transfers rely on the safeguards offered by the respective providers (such as the EU–US Data Privacy Framework where the provider is certified, or Standard Contractual Clauses) or, failing that, on your explicit consent. We transfer only the data necessary for the relevant purpose.

7.3. Personal data may be disclosed to public authorities where and as required by applicable law.

8. Retention

Contact form data and correspondence — until the purpose is achieved, but no longer than three years from our last communication with you, or until you withdraw consent, whichever is earlier, unless a longer period is required by law or by a contract to which you are a party.
Server logs — no longer than 12 months.
Analytics and advertising data — for the retention periods configured in the respective services, or until you withdraw consent.

When the retention period expires, the purpose is achieved, consent is withdrawn or unlawful processing is identified, personal data is destroyed or anonymised within the time limits set by law.

9. Your Rights

9.1. Subject to applicable law, you have the right to:

access your personal data and obtain information about its processing (purposes, legal bases, recipients, retention periods and other details);
have inaccurate or incomplete data rectified;
have your data erased, including where it is no longer necessary or was processed unlawfully;
restrict (block) the processing of your data;
object to processing based on legitimate interests;
receive the data you provided to us in a structured, commonly used, machine-readable format and have it transmitted to another controller (data portability);
withdraw your consent at any time;
lodge a complaint with a supervisory authority — in Russia, the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor, https://rkn.gov.ru); in the EU/EEA, the data protection authority of your country of residence, place of work or place of the alleged infringement — or apply to a court.

9.2. To exercise your rights, send a request to [email protected] stating your name and the contact details you used when contacting us, and information confirming your interaction with us (for example, the date you submitted the form). To protect your data, we may ask you to confirm that the request comes from you.

9.3. We respond within 10 working days of receipt. This period may be extended by up to 5 working days, in which case we will notify you with reasons. Where the GDPR applies, we will in any event respond within one month.

10. Withdrawing Consent

10.1. You can withdraw consent to the processing of contact form data by emailing [email protected]. Consent to analytics and advertising cookies can be withdrawn via the “Cookie settings” link in the Site footer.

10.2. Upon withdrawal, we stop processing and destroy the relevant personal data within 30 days, unless continued processing is permitted or required by law. Withdrawal does not affect the lawfulness of processing carried out before it.

11. Security

We take legal, organisational and technical measures to protect personal data against unauthorised or accidental access, destruction, alteration, blocking, copying, disclosure and other unlawful actions, including:

transmitting data between your browser and the Site only over HTTPS (TLS);
hosting the Site on a dedicated server in a data centre in Denmark, protected by Cloudflare;
restricting access to personal data to authorised personnel;
storing passwords, access keys and other secrets in encrypted form;
monitoring compliance with this Policy.

If a personal data breach occurs, we notify the competent supervisory authority and, where required, affected individuals, and take measures to remedy its consequences within the time limits set by applicable law.

12. Children

The Site and our services are intended for persons aged 18 and over (in the EU/EEA, not for persons under 16). We do not knowingly collect personal data of minors. If you become aware that a minor has submitted data to us, please let us know at [email protected] and we will delete it.

13. Changes to This Policy

We may update this Policy, including when the law or the way the Site works changes. The new version takes effect when published on the Site unless stated otherwise. The date of the last update is shown at the top of this page. If changes affect the purposes of processing or the data for which consent is required, we will ask for your consent again.

14. Contact

For questions about the processing of personal data, exercising your rights or withdrawing consent, write to [email protected].