Date of publication: 19 October 2026
I. General provisions
1. This Policy has been developed pursuant to clause 2 of part 1 of Article 18.1 of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (the “Personal Data Law”) and sets out the procedure for processing personal data and the measures taken to ensure its security by St. Petersburg Non-Governmental Human Rights Organization “Citizens’ Watch” (the “Operator”) in respect of users of the website courtmonitoring.org (the “Website”).
2. The terms “personal data”, “operator”, “processing of personal data”, “data subject” and other terms are used in the meaning established by the Personal Data Law.
3. The Policy applies to personal data processed both by automated means and otherwise.
4. The current version of this Policy is published on the Website at https://courtmonitoring.org/terms-of-personal-data-usage/. The Russian text is published at https://courtmonitoring.org/policy/.
5. The Operator may amend the Policy. A new version takes effect upon publication on the Website unless it provides otherwise.
II. Information about the Operator
6. Name: “Citizens’ Watch NGO” (Санкт-Петербургская общественная правозащитная организация «Гражданский контроль»). Address: Ligovsky Prospekt 87, office 300, 191036 Saint Petersburg, Russian Federation.
7. Enquiries concerning the processing of personal data are to be addressed to the person responsible for organising the processing of personal data at info@courtmonitoring.org or at the postal address given in clause 6.
III. Purposes of processing
8. The Operator processes personal data for the following purposes:
8.1. responding to questions and enquiries submitted by users through the Website;
8.2. reviewing volunteer applications submitted through the Website, including identifying potential conflicts of interest;
8.3. informing volunteers about monitoring activities and coordinating their participation;
8.4. ensuring the functioning and security of the Website.
9. Processing is limited to the attainment of specific, predetermined and lawful purposes. Processing incompatible with the purposes of collection, and the merging of databases containing personal data processed for incompatible purposes, are not permitted.
IV. Legal basis for processing
10. The legal bases for processing personal data are:
11. Consent is given separately from any other information or documents confirmed or signed by the data subject, and is expressed by ticking a separate interactive field that is not pre-selected. Consent may be withdrawn at any time in the manner set out in section VII.
V. Categories of data subjects and personal data processed
12. The Operator processes the personal data of the following categories of data subjects: users of the Website who submit an enquiry; persons applying to take part in trial monitoring as volunteers.
13. Data of persons submitting an enquiry: surname, first name and patronymic; email address; telephone number; the content of the enquiry.
14. Data of persons submitting a volunteer application:
15. The information referred to in the penultimate indent of clause 14 is processed solely in order to identify a conflict of interest before assigning an observer to a hearing.
16. Data recorded automatically when the Website is visited: IP address; information about the browser and operating system; date and time of access; addresses of pages requested.
17. The Operator does not request special categories of personal data or biometric personal data. Please do not include such information in free-text fields.
18. Volunteer applications are accepted from persons who have reached the age of 18. The Operator does not deliberately collect the personal data of minors.
VI. Procedure and conditions of processing
19. The Operator carries out the following operations with personal data: collection, recording, systematisation, accumulation, storage, updating (renewal, modification), extraction, use, blocking, deletion and destruction.
20. Data submitted through the Website forms is transmitted to the Operator’s email system. Access is granted to the Operator’s staff involved in handling enquiries and coordinating the volunteer programme.
21. Processing is carried out using the technical facilities of a hosting provider and an email service provider under agreements with them containing confidentiality and data protection terms.
22. Retention periods:
Category of dataRetention periodEnquiries submitted through the Website[1 year] from the date of the replyApplications of persons not admitted to the volunteer programme[3 months] from the date of the decisionData of active volunteersFor the duration of participation and [1 year] thereafterData recorded automatically (clause 16)[30 days]
23. Personal data is not disclosed to third parties and is not disseminated without the consent of the data subject, unless otherwise provided by federal law. Personal data is provided to state authorities only on the grounds and in the manner established by law.
24. Once the purpose of processing has been achieved, the retention period has expired, or consent has been withdrawn, the Operator ceases processing and destroys the personal data within a period not exceeding thirty days, unless otherwise provided by law.
25. The Operator takes the legal, organisational and technical measures provided for by part 2 of Article 18.1 and part 1 of Article 19 of the Personal Data Law, including restricting the circle of persons with access to personal data and encrypting data in transit between the user’s browser and the Website.
VII. Rights of data subjects and procedure for requests
26. A data subject has the right to:
26.1. obtain information concerning the processing of their personal data, to the extent provided for by part 7 of Article 14 of the Personal Data Law;
26.2. require the updating, blocking or destruction of their personal data where it is incomplete, out of date, inaccurate, unlawfully obtained or not necessary for the stated purpose of processing;
26.3. withdraw consent to the processing of their personal data;
26.4. appeal against the acts or omissions of the Operator to Roskomnadzor or before the courts;
26.5. protection of their rights and lawful interests, including compensation for losses and for non-pecuniary damage.
27. Requests are to be sent to the addresses given in clause 7 and must contain the information provided for by part 3 of Article 14 of the Personal Data Law.
28. The Operator provides the requested information within ten working days of receiving the request. This period may be extended by no more than five working days, with reasoned notice to the data subject.
29. Where the inaccuracy of personal data is confirmed, the Operator corrects it within seven working days; where unlawful processing is identified, the Operator ceases it within three working days; where consent is withdrawn, the Operator ceases processing and destroys the personal data within thirty days, unless it is entitled to continue processing on grounds provided for by the Personal Data Law. The data subject is notified once the request has been fulfilled.
This is an English translation provided for the convenience of users of the English-language version of the Website. In the event of any discrepancy, the Russian text of the Policy shall prevail.
