Back to home

Version dated June 30, 2026

Personal data processing policy

1. General Provisions

This Personal Data Processing Policy has been prepared in accordance with Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" and establishes the procedure for processing personal data, as well as the measures taken by the operator of the Tutorplan website and service to ensure the security of personal data.

Personal data operator: Aleksei Mikhailovich Ivanov, INN 263518756860, an individual applying the special tax regime "Tax on Professional Income."

2. Definitions and Operator Status

In this Policy, the operator means the person who independently organizes and carries out the processing of personal data and determines the purposes of processing, the composition of personal data, and the actions performed with personal data.

The operator processes the personal data of website users, teachers, students, parents or other legal representatives of minors, visitors to public booking pages, and other persons whose data is provided when using the service's functionality.

3. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

  • registering and maintaining a user account;
  • providing access to the Tutorplan service's functionality;
  • maintaining schedules, student records, groups, requests, payments, assignments, and action history;
  • processing user messages, applications, and requests;
  • facilitating communication between a teacher, student, and legal representative within the service;
  • analyzing website traffic, user behavior, and interface effectiveness using the Yandex Metrica web analytics service;
  • complying with the laws of the Russian Federation;
  • ensuring website security and preventing abuse.

4. Legal Grounds for Personal Data Processing

The legal grounds for processing personal data are:

  • the personal data subject's consent to the processing of their personal data;
  • the necessity of processing to enter into, perform, amend, or terminate an agreement to which the personal data subject is a party;
  • the necessity of processing to exercise the operator's rights and legitimate interests, provided that the subject's rights and freedoms are not infringed;
  • the performance of obligations imposed on the operator by the laws of the Russian Federation.

5. Categories and List of Personal Data Processed

Depending on how the service is used, the operator may process data including:

  • last name, first name, and patronymic;
  • username, email address, and telephone number;
  • time zone, account settings, and verification status information;
  • information about students, parents, legal representatives, teachers, and the relationships between them;
  • information about schedules, lessons, groups, homework, attendance, payments, and prepaid balances;
  • data contained in booking requests, invitations, and messages;
  • technical data: IP address, browser and device information, cookies, access date and time, and information about actions in the interface;
  • Yandex Metrica web analytics data: visited pages, referral sources, device and browser parameters, actions on website pages, and cookie identifiers.

6. Categories of Personal Data Subjects

The operator may process the personal data of the following categories of subjects:

  • registered users of the service;
  • students whose information is entered into the service by teachers;
  • parents, other legal representatives of minors, and other user representatives;
  • persons submitting requests through public booking pages;
  • persons sending messages, inquiries, and requests to the operator.

7. Procedure and Methods of Personal Data Processing

Personal data is processed with and without automated means through collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction of personal data.

The operator takes necessary and sufficient measures to comply with the personal data laws of the Russian Federation and to protect personal data against unauthorized access, alteration, disclosure, or destruction.

8. Use of Yandex Metrica

The website uses the Yandex Metrica web analytics service. It allows the operator to receive anonymized or technical statistics about website traffic, referral sources, user actions on pages, interface operation, and possible technical errors.

Yandex Metrica may use cookies and other similar technologies. Technical data collected while using the service may be transferred to the Yandex Metrica provider for processing to analyze and improve the website, produce reports, generate click maps, use Webvisor, and track link navigation.

9. Personal Data Processing and Storage Periods

Personal data is processed and stored no longer than required for the purposes of processing, unless a longer storage period is established by the laws of the Russian Federation, an agreement, or the personal data subject's consent.

Once the purposes of processing have been achieved, consent has been withdrawn by the personal data subject, or other legal grounds for ending processing have arisen, personal data must be deleted or depersonalized unless otherwise provided by law.

10. Transfer of Personal Data to Third Parties

The operator does not disclose or distribute personal data to third parties without the personal data subject's consent, except where such transfer is necessary to comply with the law, perform an agreement with the personal data subject, or operate the website and service in compliance with confidentiality and security requirements.

11. Processing the Personal Data of Minors

Where the service is used in the interests of a minor, the minor's personal data is provided, and the consents required to process that data are given, by a parent, adoptive parent, guardian, other legal representative, or an adult acting on lawful grounds.

12. Rights of the Personal Data Subject

A personal data subject has the right to:

  • receive information concerning the processing of their personal data;
  • request clarification, blocking, or destruction of personal data that is incomplete, outdated, inaccurate, or processed unlawfully;
  • withdraw consent to personal data processing where processing is based on consent;
  • appeal the operator's actions or inaction to the authorized body or in court;
  • exercise other rights provided by the laws of the Russian Federation.

13. Data Localization and Security

When collecting personal data through the Internet, the operator ensures that the personal data of citizens of the Russian Federation is recorded, systematized, accumulated, stored, clarified, and retrieved using databases located in the Russian Federation, unless otherwise permitted by the laws of the Russian Federation.

14. Personal Data Processing Inquiries

For matters related to personal data processing, a personal data subject may contact the operator at webjoker2005@yandex.ru or through other contact details provided on the website, in the service interface, or in an invoice, receipt, agreement, or other document used by the operator when interacting with the user.

15. Changes to This Policy

The operator may amend this Policy. A new version takes effect when it is published on the website, unless a different effective date is specified in that version of the document.

16. Operator Contact Details

Operator: Aleksei Mikhailovich Ivanov
INN: 263518756860
Email for inquiries and requests from personal data subjects: webjoker2005@yandex.ru