Consent to the processing of personal data

General provisions

1.1. This Consent to the processing of personal data (hereinafter the Consent) is given by a natural person — the data subject (hereinafter the User) — when submitting a request through a feedback form on the monstr.pro website (hereinafter the Website): the form on the “Contacts” page, the “Request a demo” form and the pricing calculator form.

1.2. The Consent is given in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (hereinafter the PDPL) and is presented as a separate document, distinct from the Privacy policy, the Website terms of use and any offers published on the Website.

1.3. The User gives the Consent by ticking the consent box below the request form and pressing the button that submits the form. A request cannot be submitted without ticking the box. The Operator records the fact, date and time of the Consent together with the request.

1.4. By giving the Consent, the User confirms that they have read it and that the Consent is given freely and is specific, clear and unambiguous, and that they have been informed of their right to withdraw it at any time.

Controller

2.1. The personal data is processed by CDS Tech LLC (ООО «ЦДС Тех»), a company registered in the Russian Federation, TIN (ИНН) 7813661916, tax registration code (КПП) 781301001, primary state registration number (ОГРН) 1227800040203 (hereinafter the Operator), acting as the controller.

2.2. The Operator’s registered address: office 306, premises 1-N, building 8 lit. A, Dobrolyubova Avenue, St Petersburg, 197198, Russia.

2.3. Email for data protection enquiries and for withdrawing the Consent: info@monstr.pro.

Purposes of processing

3.1. The personal data is processed for the following purposes:

3.1.1. reviewing the User’s request and responding to it using the contact details provided;

3.1.2. advising the User on the MonStr software and the Operator’s related services;

3.1.3. giving a demonstration of the MonStr software and helping to choose a plan;

3.1.4. preparing and sending a commercial proposal;

3.1.5. taking steps towards and entering into a contract with the User or the organisation the User represents.

3.2. The personal data is not processed for advertising or newsletter mailings or for direct marketing, and is not used for decisions based solely on automated processing that produce legal effects concerning the User.

Personal data covered

4.1. The Consent covers the following personal data that the User enters in the request form:

4.1.1. name (required field);

4.1.2. telephone number;

4.1.3. email address;

4.1.4. the name of the company the User represents;

4.1.5. the message text, to the extent it contains information about the User.

4.2. The following related information is stored automatically with the request: the language of the page, the address (URL) of the page from which the request was sent, the type of form (contacts, demo, calculator), the date and time of submission, and a record that the Consent was given.

4.3. The Operator does not request or process sensitive personal data or biometric data. The User should not include such information in the message text.

Operations and means of processing

5.1. The Consent covers the following operations on personal data: collection, recording, organisation, storage, updating, retrieval, use (including access by the Operator’s staff responsible for handling requests), transfer, including the cross-border transfers described in section 6 of this Consent, restriction, erasure and destruction.

5.2. The processing is carried out by automated means. Request data is written to a database on the Operator’s server located in the Russian Federation.

5.3. So that the request can be handled promptly, a notification containing the data listed in clause 4.1 is sent:

5.3.1. to the corporate email of the Operator’s authorised staff;

5.3.2. to a closed working group of the Operator’s sales department in the Telegram messenger, by means of the Operator’s bot.

5.4. The personal data is not made public. Apart from the case described in clause 5.3.2, the personal data is not disclosed to third parties, except where required by the laws of the United Arab Emirates or other applicable law.

5.5. The Operator applies appropriate technical and organisational measures to ensure the confidentiality and security of the personal data and to protect it against unauthorised or accidental access, destruction, alteration, copying, disclosure and other unlawful acts, as required by the PDPL.

Cross-border transfers

6.1. The User’s personal data is transferred outside the United Arab Emirates:

6.1.1. to the Russian Federation, where the Operator’s server is located (clause 5.2);

6.1.2. to the Telegram messenger, provided by Telegram Messenger Inc., whose servers are located outside the United Arab Emirates (clause 5.3.2).

6.2. These transfers are cross-border transfers within the meaning of Articles 22 and 23 of the PDPL. The countries where the data is stored may not have personal data protection legislation that the UAE recognises as adequate.

6.3. By giving the Consent, the User explicitly consents to the cross-border transfers described in clause 6.1, solely for the purposes set out in clause 3.1, having been informed of the possible risks of such transfers. The Operator applies contractual and technical safeguards to protect the transferred data; information about them is available on request at info@monstr.pro.

6.4. Withdrawal of the Consent (section 7) also ends the transfers; the Operator deletes messages containing the User’s personal data from the Telegram working group within the period stated in clause 7.3.

7.1. The Consent is valid from the date it is given until the purposes of processing have been achieved or until it is withdrawn, but for no longer than 3 (three) years from the date of the User’s last contact with the Operator. When this period ends, the personal data is destroyed unless the law requires it to be kept.

7.2. The User may withdraw the Consent at any time by sending a notice to info@monstr.pro or a letter to the Operator’s address given in clause 2.2. Withdrawing the Consent is as easy as giving it. The User is advised to include the name and the contact details (telephone or email) given in the request, so that the Operator can identify the data concerned.

7.3. On withdrawal of the Consent, the Operator stops the processing and erases the personal data within the period prescribed by the PDPL and its executive regulations, unless UAE law requires the processing to continue.

7.4. Withdrawal of the Consent does not affect the lawfulness of processing carried out before the withdrawal. After withdrawal, the Operator will not be able to continue working on the User’s request.

The User’s rights

8.1. Under Articles 13 to 18 of the PDPL, the User has the right to obtain information about the personal data processed and the purposes of processing, to access the data and receive a copy in a structured, machine-readable format, to request rectification of inaccurate data, to request erasure or restriction of processing, to object to processing, and to withdraw the Consent at any time.

8.2. Requests are sent to info@monstr.pro and are answered within the period set by the PDPL and its executive regulations. The User may also lodge a complaint with the UAE Data Office in accordance with Article 24 of the PDPL.

Final provisions

9.1. Matters not covered by this Consent are governed by the Privacy policy published at https://monstr.pro/ae-en/legal/privacy/. For requests submitted through the Website, this Consent prevails in the event of any inconsistency with the Privacy policy.

9.2. Information on cookies and web analytics is set out in the Cookie policy at https://monstr.pro/ae-en/legal/cookies/.

9.3. The current version of the Consent is published at https://monstr.pro/ae-en/legal/consent/. Version of 22 October 2026. A new version applies to consents given after it is published on the Website.