Privacy Policy

Effective: 24 August 2025

This Privacy Policy explains how VYSM Research (“VYSM”, “we”, “us”) processes personal data when you visit our websites, contact us, or engage in collaboration. We follow data‑minimization and lawfulness principles and design systems to avoid unnecessary personal data processing.

Data Controller

For the Russian Branch, the data controller is VYSM Research — Russian Branch. For cross‑border activities, a joint‑controller arrangement may apply with other VYSM entities.

What we collect

• Website data: technical logs (IP, user agent) for security and abuse prevention.
• Contact data: name, email, organization, and message content when you contact us.
• Recruitment data: CV/resume details you choose to provide.

Why we collect

• Provide and secure our services (legitimate interests; security necessity).
• Respond to your inquiries (contractual necessity or consent).
• Comply with legal obligations and export‑control requirements.

Retention

We retain data only as long as necessary for the stated purpose or as required by law. Security logs are typically retained for up to 12 months unless extended for investigations.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to processing, or portability. To exercise rights, contact privacy@vysm.ru. We may need to verify your identity.

International transfers

Where cross‑border transfers are necessary, we use appropriate safeguards (e.g., contractual protections) and assess local laws as part of transfer impact assessments.

Children

Our sites and research programs are not directed to children.

Changes

We may update this Policy. Material changes will be indicated on this page with a new effective date.