Personal data processing

Data we process

When you submit the public form, we may process the enquiry type, name, telephone number, email, property type, roof area and covering, region, message, values passed from the calculators and page UTM parameters. A name, enquiry type, one contact method and consent are required to submit the form.

When you register and use an account, we process sign-in data, profile details, preferred language, account type, organisations and members, addresses, properties and roofs, favourites, enquiries, order requests, staff-confirmed amounts and payments, shipment details, acknowledgements, operational history and security events.

Purposes and basis

Public-form data is used to handle the enquiry, provide a consultation or calculation, prepare a proposal, check a roof covering or arrange a sample. It is processed on the consent given before the form is submitted.

Account data is used to register and protect access, manage organisations, enquiries and orders, show confirmed payment and shipment information, communicate with the user and carry out their requests.

Sessions and security

A necessary secure session cookie is used for sign-in. Analytics cookies are allowed only through your separate choice described below. The session token is not stored in browser storage; only its cryptographic digest is stored in the database.

Sign-in, password changes, session revocation and privileged actions are recorded to protect accounts and investigate incidents.

Processing period

Data is processed until the stated purposes are met or consent is withdrawn, unless further retention is needed under Russian law or for lawful business obligations. Each request is assessed against the data involved and the related transaction history.

Access, correction, export, closure and withdrawal

To ask about processing, request access, correction or deletion, or withdraw consent, email info@mastikaokm.ru. Include your name, the contact method used and the request so the operator can locate the record and respond.

An account user can request an export of their own data or account closure. Some transaction information may be retained to the extent needed for lawful business obligations; the decision and response are recorded in the request history.

Email and access by staff

The service sends messages for email verification, access recovery, invitations, enquiries, orders, recorded payments, shipments and security. Subjects and logs contain minimal personal data. Staff access is limited by work role.

Calculators

Material-quantity and object-risk calculations run in the browser using the values you enter. They reach the operator only if you proceed to the form and submit an enquiry yourself.

Optional analytics

When a counter is enabled and you separately allow analytics, Yandex Metrica receives public-page visits, technical browser information and enquiry events. We do not send enquiry fields, passwords or account content as events. Session Replay, click maps and automatic link tracking are disabled. Use Analytics settings at the bottom of a public page to change your choice. Our okm_analytics_v1 cookie stores only that choice for 90 days. Sending an enquiry does not require analytics consent.