Personal Data Processing Policy

Version 2.0 · effective 25 July 2026 · replaces Version 1.0 of 11 May 2026

This Policy describes how personal data (“PD”) is processed on https://pepperoni.tatar, https://api.pepperoni.tatar and related services (lead forms, catalog, API, public AI files).

The Policy is prepared in accordance with:

By using the website and/or submitting a lead form, you confirm that you have read this Policy. Form submission is possible only with an explicit consent checkbox.

Governing text. If there is any discrepancy, the Russian version at https://pepperoni.tatar/privacy prevails.

1. Personal data operator

Full legal nameKazan Delicacies Limited Liability Company (ООО «Казанские Деликатесы»)
TIN / KPP / OGRN1686021074 / 168601001 / 1221600096893
Registered address420061, Russian Federation, Republic of Tatarstan, Kazan, 2 Agrarnaya St., office 7
PD request emailinfo@kazandelikates.tatar (subject: “Personal Data Request”)
Phone+7 987 217-02-02

2. Terms

The terms “personal data”, “operator”, “processing”, “personal data subject”, “consent” and “destruction” are used as defined in Article 3 of Federal Law No. 152-FZ.

3. Data subjects and PD categories

3.1. Website visitors and form submitters

The form field “company” is an anti-spam honeypot and is not intended for human input. Email, Telegram handle or company name are processed only if you type them into the message or phone field yourself.

3.2. Technical data of visitors

3.3. Public API consumers

The API at api.pepperoni.tatar is public and does not require registration. Server access logs may store IP address, User-Agent, request URL, response code and timestamp for security and abuse prevention. No API user account is created. The product catalog does not contain customer PD.

3.4. Special categories

The Operator does not intentionally collect special categories of PD (health, ethnicity, political views, etc.) or biometric PD. Please do not submit such information via website forms.

4. Purposes

PurposeData
Handle inquiries, price lists, commercial proposals, prepare supply contractsForm data, submitter IP
Negotiate and perform contracts with counterpartiesContact details, correspondence
Website analytics and catalog improvementTechnical data, cookies, analytics events
Advertising performance measurement (Google Ads)Technical IDs, conversion events
Security, anti-spam, incident investigationIP addresses, request logs
Compliance with Russian law (e.g. accounting where a contract exists)Data required by law

5. Legal bases (Art. 6 of 152-FZ)

Consent via the form is specific, informed and conscious. Submissions without consent are blocked client-side and server-side.

6. Processing operations

The Operator may collect, record, systematize, accumulate, store, update, extract, use, transfer (provide / grant access), depersonalize, block, delete and destroy PD — using automated means and/or without them.

7. Recipients and cross-border transfer

The Operator does not sell PD and does not share it with third parties for their independent marketing.

RecipientWhat is sharedWhy
Telegram (messaging service; infrastructure outside the Russian Federation)Name, phone, message, page URLDeliver leads to managers in a work chat
YANDEX LLC (Yandex Metrica)Technical data, cookies, site eventsWeb analytics
Google LLC / Google Ireland (Google Tag Manager, Google Ads)Technical data, cookies, conversion eventsTag management and ads conversion tracking
Website hosting / VPS in the Russian FederationServer logs and form processing dataOperate the site and API
Russian public authoritiesAs legally requiredStatutory requests

Cross-border transfer. Using Telegram and Google may involve transfer of PD outside the Russian Federation. By submitting a form and/or continuing to use the site with analytics/ads cookies enabled, you consent to such transfer to the extent necessary for the purposes above (Art. 12 of 152-FZ). Those services also apply their own privacy policies.

Public catalog and AI files do not contain website-user PD. Third-party AI tools reading the catalog receive product information only.

8. Cookies, analytics and ads IDs

You may restrict or delete cookies in your browser. Disabling analytics/ads cookies does not cancel processing of data you voluntarily submit via the form.

9. Storage location

Core website/API systems are hosted on infrastructure in the Russian Federation. Part of processing (Telegram, Google) uses infrastructure outside the Russian Federation — see Section 7.

10. Retention and destruction

CategoryRetention
Website leads (contacts and message)up to 3 years from receipt, or until consent is withdrawn / deletion is requested — whichever is earlier, unless longer retention is required by contract or law
API / web server logsup to 30 days, unless needed longer for a security investigation
Analytics data (Yandex/Google)per those services’ policies and settings
Supply-contract recordsper Russian accounting and archival rules

11. Security measures

12. Your rights

Under Arts. 14–15 and 20–21 of 152-FZ you may request information about processing, correction, blocking or destruction of PD, withdraw consent, and complain to Roskomnadzor or a court.

Email info@kazandelikates.tatar with subject “Personal Data Request”, your name (or the name used in the lead), a reply contact and your request. The Operator responds within the timelines of Art. 20 of 152-FZ (as a rule, within 10 business days, extendable as permitted by law).

Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal and does not stop processing that must continue on other legal bases (contract, law).

13. Public content and AI

Site content (HTML, JSON, llms.txt, etc.) may be freely cited by AI models with attribution to pepperoni.tatar. Public files include /.well-known/ai-plugin.json, /openapi.yaml, /llms.txt, /llms-full.txt, /en/llms.txt, /en/llms-full.txt, /products.json, /api/products. These materials describe products/company and are not a personal-data database of website users.

14. Policy updates

The Operator may update this Policy. The current version is always at https://pepperoni.tatar/en/privacy (Russian governing text: /privacy).

15. Contacts

Kazan Delicacies LLC
420061, Kazan, 2 Agrarnaya St., office 7, Russia
Email: info@kazandelikates.tatar
Phone: +7 987 217-02-02

Supervisory authority for personal data in Russia: Roskomnadzor — rkn.gov.ru.