Privacy Policy

The controller of your personal data is the owner of panel-workshop.ru, a private individual (referred to below as “we”). You can reach us at privacy@panel-workshop.ru.

Visitors from the EEA, the United Kingdom and Switzerland are served by a separate installation of the service running on servers located in the European Economic Area, with its own database. This policy sets out, in the terms of the EU General Data Protection Regulation (GDPR) and the UK GDPR, what happens to your data there and how you can exercise your rights. The service is free of charge; there is nothing to pay for and no advertising.

A separate policy, written under Russian Federal Law No. 152-FZ, applies to users in Russia and is available in Russian. Where the two differ for you as an EEA or UK user, this English version prevails.

Account data. Signing in is handled by third-party identity providers — VK ID or Yandex ID. From the provider you choose we receive your account identifier in that service, your name or display name, your email address where the provider supplies it and you have permitted that, and a link to your profile picture. We never receive, process or store your password for those services.

Content you create. The panel designs you build: the devices you place, their connections, and the names you give to projects and circuits. Projects are tied to your account and are visible only to you and — to the extent needed for technical support — to the site administrator.

Support messages. The subject, the text of your message and of the subsequent exchange, and the time each message was sent. This text is written by you and may contain whatever information you choose to include.

Technical data that your browser sends automatically and that our server writes to its logs: IP address, browser and operating system type and version, language, the page requested and the referring page, and the date and time of the request. We do not run analytics scripts, session recording or tracking cookies on the European installation — see clause 4.

We do not ask for, and do not knowingly process, special categories of personal data under Article 9 GDPR (racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health, sex life or sexual orientation), nor payment card data: the service is free and takes no payments.

• To sign you in and keep your projects available — performance of a contract with you, Article 6(1)(b) GDPR. Without an account we cannot recognise you or store your designs.
• To answer your support requests — Article 6(1)(b), and our legitimate interest in maintaining the service, Article 6(1)(f).
• To keep the service running and secure — detecting faults, preventing abuse and blocking accounts that break the rules: our legitimate interest in the security and integrity of the service, Article 6(1)(f).

We do not process your data for analytics, measurement or marketing, so we do not rely on consent under Article 6(1)(a) for anything.

We do not sell personal data, we do not run advertising on the site, and we do not carry out profiling or automated decision-making that produces legal effects for you or similarly significantly affects you within the meaning of Article 22 GDPR.

Strictly necessary cookies only. A session cookie is set after you sign in. It holds a session identifier and no password. Without it signing in is impossible; the public parts of the site — the catalogue, the reference sections and the articles — can be read without it.

The European installation loads no analytics or advertising scripts, sets no tracking or profiling cookies, and records no sessions. Because the only cookie we set is strictly necessary for a service you have requested, no cookie consent banner is required under Article 5(3) of the ePrivacy Directive — and we do not show one.

• the identity provider you choose (VK ID or Yandex ID) — when you sign in. Data is exchanged over OAuth at your initiative; those providers act as separate controllers, and what they do with your data is governed by their own privacy policies and is outside our control;
• our hosting provider — as a processor, to the extent necessary to run the service and its database;
• public authorities — where we are required to disclose data by applicable law.

We do not share personal data with anyone else and we do not sell it.

The servers and the database serving visitors from the EEA, the United Kingdom and Switzerland are located in the European Economic Area. Your account, your projects and your support correspondence are stored there and are not transferred to a third country by us.

One exception is under your control: signing in means exchanging data with the identity provider you pick, and those providers operate outside the EEA. That exchange happens at your own request and is necessary to perform the sign-in you asked for (Article 49(1)(b) GDPR). If you would rather nothing left the EEA at all, do not create an account — the catalogue, the reference sections and the articles can be read without signing in.

• account data, projects and support correspondence — for as long as your account exists. When the account is deleted, projects, support threads and sessions are deleted with it;
• server logs — for as long as needed to investigate faults and security incidents, after which they are overwritten.

Under the GDPR and the UK GDPR you have the right to:

• access the personal data we hold about you and receive a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased (“right to be forgotten”);
• restrict processing in the cases set out in Article 18;
• receive the data you provided in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible;
• object to processing based on our legitimate interests, on grounds relating to your particular situation;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• lodge a complaint with a supervisory authority — in the EEA, the data protection authority of your country of residence or workplace; in the UK, the Information Commissioner’s Office.

To exercise any of these rights, write to privacy@panel-workshop.ru from the email address linked to your account, or send the request from the “Поддержка” (Support) section inside the app. We answer within one month of receiving the request; where the request is complex, that period may be extended by up to two further months, in which case we will tell you and explain why. There is no charge.

Deleting your account also deletes your projects. This cannot be undone: the designs cannot be restored afterwards.

The service is not directed at children and we do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, write to us and we will delete the account.

Traffic between your browser and the site is encrypted with HTTPS, database access is restricted and closed to the outside, passwords for third-party services are never requested or stored, and administrative access to projects is used only for technical support. No transmission over the internet is completely secure, and we cannot guarantee absolute security of data sent to or from the site.

We may update this policy. The current version always appears on this page with the date of the last change at the top. Continuing to use the service after a change means you accept the updated policy.

Questions and data protection requests: privacy@panel-workshop.ru.