Consent to the processing of personal data

General provisions

1.1. This Consent to the processing of personal data (hereinafter the Consent) is given by a natural person — the data subject (hereinafter the User) — when submitting a request through a feedback form on the monstr.pro website (hereinafter the Website): the form on the “Contacts” page, the “Request a demo” form and the pricing calculator form.

1.2. The Consent is presented as a separate document, distinct from the Privacy policy, the Website terms of use and any offers published on the Website. Where the EU General Data Protection Regulation (GDPR), the UK GDPR or other data protection law applies to the User, the Consent is intended to meet the requirements of that law for consent and for explicit consent to international data transfers.

1.3. The User gives the Consent by ticking the consent box below the request form and pressing the button that submits the form. A request cannot be submitted without ticking the box. The Operator records the fact, date and time of the Consent together with the request.

1.4. By giving the Consent, the User confirms that they have read it and give it freely, specifically, on an informed basis and unambiguously.

Controller

2.1. The personal data is processed by CDS Tech LLC (ООО «ЦДС Тех»), a company registered in the Russian Federation, TIN (ИНН) 7813661916, tax registration code (КПП) 781301001, primary state registration number (ОГРН) 1227800040203 (hereinafter the Operator), acting as the controller.

2.2. The Operator’s registered address: office 306, premises 1-N, building 8 lit. A, Dobrolyubova Avenue, St Petersburg, 197198, Russia.

2.3. Email for data protection enquiries and for withdrawing the Consent: info@monstr.pro.

Purposes of processing

3.1. The personal data is processed for the following purposes:

3.1.1. reviewing the User’s request and responding to it using the contact details provided;

3.1.2. advising the User on the MonStr software and the Operator’s related services;

3.1.3. giving a demonstration of the MonStr software and helping to choose a plan;

3.1.4. preparing and sending a commercial proposal;

3.1.5. taking steps towards and entering into a contract with the User or the organisation the User represents.

3.2. The personal data is not processed for advertising or newsletter mailings or for direct marketing, and is not used for decisions based solely on automated processing that produce legal effects concerning the User.

Personal data covered

4.1. The Consent covers the following personal data that the User enters in the request form:

4.1.1. name (required field);

4.1.2. telephone number;

4.1.3. email address;

4.1.4. the name of the company the User represents;

4.1.5. the message text, to the extent it contains information about the User.

4.2. The following related information is stored automatically with the request: the language of the page, the address (URL) of the page from which the request was sent, the type of form (contacts, demo, calculator), the date and time of submission, and a record that the Consent was given.

4.3. The Operator does not request or process special categories of personal data or biometric data. The User should not include such information in the message text.

Operations and means of processing

5.1. The Consent covers the following operations on personal data: collection, recording, organisation, storage, updating, retrieval, use (including access by the Operator’s staff responsible for handling requests), transfer, including the international transfers described in section 6 of this Consent, restriction, erasure and destruction.

5.2. The processing is carried out by automated means. Request data is written to a database on the Operator’s server located in the Russian Federation.

5.3. So that the request can be handled promptly, a notification containing the data listed in clause 4.1 is sent:

5.3.1. to the corporate email of the Operator’s authorised staff;

5.3.2. to a closed working group of the Operator’s sales department in the Telegram messenger, by means of the Operator’s bot.

5.4. The personal data is not made public. Apart from the case described in clause 5.3.2, the personal data is not disclosed to third parties, except where required by law.

5.5. The Operator applies appropriate technical and organisational measures to protect the personal data against unauthorised or accidental access, destruction, alteration, blocking, copying, disclosure and other unlawful acts.

International transfers

6.1. The User’s personal data is transferred outside the User’s country of residence:

6.1.1. to the Russian Federation, where the Operator’s server is located (clause 5.2);

6.1.2. to the Telegram messenger, provided by Telegram Messenger Inc., whose servers are located in various countries (clause 5.3.2).

6.2. These countries may not be recognised by the law of the User’s country of residence as providing an adequate level of personal data protection, and the User’s rights there may be harder to enforce. In particular, no adequacy decision under the GDPR or the UK GDPR applies to transfers to the Russian Federation.

6.3. By giving the Consent, the User explicitly consents to the transfers described in clause 6.1, solely for the purposes set out in clause 3.1, having been informed of the possible risks of such transfers. Where the GDPR applies, the transfers are based on Article 49(1)(a) GDPR.

6.4. Withdrawal of the Consent (section 7) also ends the transfers; the Operator deletes messages containing the User’s personal data from the Telegram working group within the period stated in clause 7.3.

7.1. The Consent is valid from the date it is given until the purposes of processing have been achieved or until it is withdrawn, but for no longer than 3 (three) years from the date of the User’s last contact with the Operator. When this period ends, the personal data is destroyed unless the law requires it to be kept.

7.2. The User may withdraw the Consent at any time by sending a notice to info@monstr.pro or a letter to the Operator’s address given in clause 2.2. The User is advised to include the name and the contact details (telephone or email) given in the request, so that the Operator can identify the data concerned.

7.3. On withdrawal of the Consent, the Operator stops the processing and erases the personal data without undue delay and in any event within 30 days of receiving the notice, unless the law requires the processing to continue or the data is needed for the performance of a contract to which the User is a party.

7.4. Withdrawal of the Consent does not affect the lawfulness of processing carried out before the withdrawal. After withdrawal, the Operator will not be able to continue working on the User’s request.

The User’s rights

8.1. Subject to applicable law, the User has the right to access their personal data, to have it rectified, to have it erased or its processing restricted, to receive it in a structured, machine-readable format, to object to its processing, to withdraw the Consent at any time, and to lodge a complaint with the data protection supervisory authority of the country where the User resides.

8.2. Requests are sent to info@monstr.pro and are answered within 30 days.

Final provisions

9.1. Matters not covered by this Consent are governed by the Privacy policy published at https://monstr.pro/en/legal/privacy/. For requests submitted through the Website, this Consent prevails in the event of any inconsistency with the Privacy policy.

9.2. Information on cookies and web analytics is set out in the Cookie policy at https://monstr.pro/en/legal/cookies/.

9.3. The current version of the Consent is published at https://monstr.pro/en/legal/consent/. Version of 22 October 2026. A new version applies to consents given after it is published on the Website.