Personal Data Processing Policy
1. General Provisions
This Personal Data Processing Policy (the Policy) defines the procedure for processing personal data of users of the Diabnostic service located at diabnostic.online and the measures taken to protect it.
Using the service means the user agrees with this Policy.
2. Personal Data Operator
The personal data operator is Karazhas E.V., support@diabnostic.online (the Operator), who independently organizes and performs personal data processing in accordance with Federal Law No. 152-FZ.
3. Scope of Processed Personal Data
3.1. Data provided by the user
- First and last name
- Email address
3.2. Technical data automatically transmitted by the service
- IP address
- Date and time of access
- Browser and device information
- Cookies (for authentication and session persistence)
3.3. Data when interacting with a veterinarian
- Pet owner’s first and last name
- Veterinarian’s first and last name
4. Purposes of Processing
- Registration and authentication in the service
- Providing glucose monitoring and record storage features
- Enabling data exchange between the owner and the veterinarian
- Feedback and user support
- Sending notifications related to the service
- Improving service quality and ensuring security
5. Transfer of Personal Data to Third Parties
5.1. Transfer to veterinarians
Transfer occurs solely at the user’s initiative when entering a VET code or providing a PET code.
- Only the user’s first and last name are shared
- Email is not shared
- The user can revoke veterinarian access at any time in profile settings
5.2. Transfer to third parties
The Operator does not transfer personal data to third parties except as explicitly required by Russian law or initiated by the user (e.g., voluntary sharing through the service).
5.3. Involvement of infrastructure services
Hosting providers and technical infrastructure may be used to operate the site and servers. These organizations do not gain access to personal data and do not process it.
6. Legal Grounds for Processing
- Art. 6 of Federal Law No. 152-FZ
- Consent of the personal data subject
- Necessity to perform a contract (providing the service functionality)
- Legitimate interests of the Operator (ensuring security and stable service operation)
7. Personal Data Retention Periods
- Until the user deletes their account
- Or until consent is withdrawn
- Or for periods required by Russian law, if applicable
After account deletion, data is destroyed or anonymized within 30 days.
8. Withdrawal of Consent and Data Deletion
- Delete the account in profile settings
- Send a data deletion request to: support@diabnostic.online
Requests are processed within 30 calendar days.
9. Rights of the Personal Data Subject
- Obtain information about your personal data
- Request correction or updating
- Request blocking or destruction of data
- Withdraw consent to processing
- Restrict transfer of data to a veterinarian
- Challenge the Operator’s actions with Roskomnadzor or in court
10. Personal Data Protection Measures
- Use of secure connections (HTTPS/TLS)
- Access restriction and control
- Action logging
- Server protection
- Password storage using cryptographic hash functions
- Data backups
11. Cross-Border Transfer
Cross-border transfer of personal data is not performed. All server infrastructure is located in the Russian Federation.
12. Anonymization
The Operator may anonymize data for analytical purposes (e.g., building statistics). Anonymized data cannot identify a user.
13. Policy Changes
The Operator may amend this Policy. The current version is always available on the service website.
Last updated: November 16, 2025
Self-employed Karazhas Eldar Valerievich · TIN 771596469348 · support@diabnostic.ru