Privacy Policy
1. General provisions
This Policy sets out how personal data of visitors to mandoctor.ru (the “Site”) is processed and protected. The Policy is drawn up in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.
The Controller places the protection of human rights and freedoms in personal data processing, including the right to privacy, above its own interests. Using the Site means the user agrees to this Policy.
2. Controller and definitions
Controller — Dmitry Gennadievich Kurbatov, MD, professor, urologist-andrologist. Contact for personal data matters: professorkurbatov@gmail.com.
Personal data — any information relating to a directly or indirectly identified natural person.
Processing — any operation with personal data: collection, recording, storage, updating, use, transfer, anonymisation, blocking, deletion, destruction.
User — a visitor to the Site.
3. Rights and obligations of the Controller
The Controller may: receive accurate data from the data subject; continue processing without consent where the law so provides; independently determine the security measures applied.
The Controller must: process data in the manner established by law; respond to data subjects’ requests; keep this Policy publicly available; protect data from unauthorised access; block, correct or destroy data at the request of the data subject or an authorised body.
4. Rights and obligations of the user
The user may: obtain information about the processing of their data; demand its correction, blocking or destruction where it is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose; withdraw consent; appeal against the Controller’s actions to Roskomnadzor or a court.
The user must provide accurate data and inform the Controller of changes. Persons who submit false information, or another person’s data without their consent, are liable under the law.
5. Processing principles
Processing is lawful and fair; limited to predefined purposes; only data required for those purposes is processed; the content and volume of data are not excessive; data is kept accurate and up to date; storage lasts no longer than the purposes require.
6. Data collected
6.1. Data you provide yourself. When submitting the consultation booking form: name, email address, phone number (optional), preferred clinic and preferred contact time (optional), message text.
6.2. Data collected automatically. When the form is submitted: IP address, browser information (User-Agent), the page the request was sent from, date and time. This data protects the form from automated and fraudulent submissions.
6.3. Visit statistics. Anonymised Yandex Metrica data — only with consent given in the cookie banner (see the Cookie Policy).
Special categories of personal data, including health information, are not collected through the Site. Please do not include diagnoses, test results or other medical details in the free-text comment — these matters are discussed at an in-person consultation. Information covered by medical confidentiality is processed by medical organisations when care is provided and does not pass through the Site.
7. Purposes of processing
- receiving and handling consultation requests, contacting the user about their enquiry;
- agreeing the date, time and place of a consultation;
- answering questions sent through the form or by email;
- protecting the form from spam and automated submissions;
- analysing site usage and improving the Site — with consent to analytics cookies;
- sending informational and promotional messages — only with separate consent given by ticking the corresponding box.
8. Legal basis
Processing is based on: the data subject’s consent, expressed by ticking the corresponding box when submitting the form; the Controller’s legitimate interests, where the data subject’s rights are not infringed; obligations imposed on the Controller by law.
9. Disclosure of data
Personal data is never sold. It is disclosed only to the extent necessary for the purposes of processing:
- to the medical organisation where the consultation will take place — only the details needed for the appointment, and only after agreement with the user;
- to Yandex LLC — anonymised behavioural data via the Yandex Metrica service, with consent (see the Cookie Policy);
- to the hosting provider — as the Site and its mailbox are hosted on its equipment;
- to authorised state bodies — on the grounds and in the manner established by law.
Medical services are provided by licensed medical organisations. Personal data a patient submits directly to a clinic is processed by that clinic as an independent controller under its own policy.
10. Data location
Databases containing personal data of citizens of the Russian Federation are located on servers within the Russian Federation. The Controller does not transfer personal data across borders.
11. Retention
Data is stored no longer than the purposes of processing require, and in any case no longer than 3 years from the date of the request unless the law provides otherwise. Once the purposes are achieved, or consent is withdrawn, the data is deleted or anonymised unless the law requires otherwise.
12. Security measures
The Controller applies legal, organisational and technical measures. In particular: the Site runs over HTTPS; access to requests is limited to Site administrator accounts; the form is protected against automated submissions; the analytics counter is not loaded without the user’s consent.
13. Consent to promotional messages
A separate checkbox in the form is consent to receive informational and promotional messages: appointment invitations, information about new techniques and Site materials. Consent is voluntary; declining it does not affect how a request is handled. Messages are sent to the email address or phone number provided in the form.
Consent can be withdrawn at any time by writing to professorkurbatov@gmail.com — messages stop, while the request continues to be handled as usual.
14. Withdrawing consent and contacting the Controller
Send a request to professorkurbatov@gmail.com, including details that identify you and the substance of your request. A response is provided within the period established by law. Withdrawal of consent does not affect the lawfulness of processing carried out before it was received.
15. Final provisions
The Controller may amend this Policy. The current version is always published on this page; the date of the last change is shown at the top. Continued use of the Site after changes are published means agreement with the new version.