Skip to main content

Consent to Personal Data Processing

Effective date: 31.07.2026

This Consent is executed as a separate document under Article 9(1) of Russian Federal Law No. 152-FZ of 27.07.2006 "On Personal Data". Accepting the Terms of Use does not grant this Consent, and vice versa.

Translation

The Russian version is the legally binding one. This translation is provided for convenience.

1. Data operator​

OperatorIndividual entrepreneur Aigiz Iskuzhin
INN024803896842
OGRNIP326028000044859
OKVED62.01 "Computer software development"
Roskomnadzor operator registryNo. 2-26-056967
ServicePir2Pir — Telegram bot @pir2pirbot and related services
Contactlegal@pir2pir.ru

Pir2Pir is an independent data operator. The Operator is not affiliated with ANO «Школа 21» (School 21) and does not act on its behalf.

2. Data subject​

The subject is a natural person who has connected their School 21 account to Pir2Pir and confirmed ownership of it with a code sent to their student email at {login}@student.21-school.ru.

Confirming that mailbox is how the subject is identified for the purposes of this Consent.

3. Personal data processed​

The Operator processes the data listed below and requests no other categories.

3.1. Identification data​

  • School 21 account login;
  • student email address at {login}@student.21-school.ru;
  • first and last name as present in the Telegram profile;
  • Telegram numeric user id (telegram_user_id);
  • Telegram username (@username), if set.

3.2. Study profile, retrieved from the School 21 public API​

  • campus, wave and education form;
  • level, experience, internal points and review points;
  • list of projects and their statuses.

3.3. Image​

  • Telegram profile photo, unless the subject declines its use as an avatar.

3.4. Chat content​

  • the text of messages participants exchange in a chat after both agree to a review;
  • files attached to those messages (images, documents, archives);
  • a short excerpt of a message (up to 200 characters) included in a notification delivered to the web application; no such excerpt leaves the Operator's infrastructure.

Chat content is kept for a limited time: once a conversation ends, message text and attachments are deleted and only the fact that a review took place is retained. The retention period is stated in the Privacy Policy.

3.5. Technical data​

  • internal Pir2Pir account identifiers;
  • service request logs required for diagnostics and security.

The Operator does not process special categories of personal data (Article 10) or biometric personal data (Article 11).

4. Purposes of processing​

Consent is granted solely for the following purposes:

  1. confirming ownership of a School 21 account and creating a Pir2Pir account;
  2. finding and matching participants for mutual project reviews;
  3. sending a request to talk to a specific participant identified by their exact School 21 login;
  4. enabling correspondence between participants who have agreed to a review or to talk;
  5. delivering service notifications to connected channels (web application, Telegram bot);
  6. sending a single invitation to a School 21 student who is not registered with the service, at a participant's request — within the scope and on the terms of section 6.2;
  7. handling support requests;
  8. complying with the legislation of the Russian Federation.

Processing for any other purpose — in particular advertising, promotion, or transfer to recruiting or other commercial services — is not covered by this Consent and requires separate consent.

5. Processing actions​

Collection, recording, systematisation, accumulation, storage, updating, retrieval, use, transfer (provision, access) within the scope of section 6, anonymisation, blocking, deletion, destruction.

Processing is both automated and non-automated. The Operator makes no decisions producing legal effects for the subject solely on the basis of automated processing.

6. Disclosure to other participants​

The service keeps no directory of participants and offers no search for people. Reaching a specific participant requires knowing their exact School 21 login in advance; the service offers no suggestions and no matching on part of a login.

Identity is disclosed only at the moment of agreement. While a search for a reviewer is running, a candidate is told the project and the campus, not who is asking. Once both have agreed, participants see login, name, level and experience, wave, and the profile photo where set.

The Operator does not disclose one participant's messenger accounts, email address or other contact details to another participant. If participants choose to continue elsewhere, they exchange such details themselves, inside the chat, and it is not the Operator who disclosed them.

6.1. Chat content​

Messages in a chat are available only to its two participants. The Operator does not make them available to other users of the service.

Chat content does not leave the Operator's infrastructure. A new-message notification is delivered only to the web application. A messenger is told only that a reviewer was found or that a request to talk was received; no excerpt, no full text and no attachments are sent to a messenger.

6.2. Contacting a student who is not registered with the service​

Where a login given by a participant belongs to a School 21 student who is not registered with the service, the participant may send them one short invitation. The Operator delivers it in its own name, to the email address derived from the login under School 21's convention and/or to School 21's internal chat.

The invitation contains: the sender's login, the text they wrote, a brief description of the service and an opt-out link. No other information about the sender or the recipient is transmitted, and the sender is not given the recipient's address — they are shown only a masked hint of the form g*****@….

Processing is limited as follows:

  • no more than one invitation to one recipient from one sender in any 30 days;
  • no more than three invitations to one recipient from all senders in any 30 days;
  • no more than ten invitations per day from one sender.

Opting out. Every invitation carries a link that takes effect immediately, permanently and across all channels; it requires no account and no reason. After an opt-out the Operator sends nothing further to that login. The opt-out is retained even if the recipient later registers with the service.

The recipient of an invitation is not a participant and has not given this Consent. The basis for processing their login and the address derived from it is the sending of a single message at a participant's initiative; the message itself serves as notice to the recipient of what is processed about them, where it came from and how to stop it. No account is created for such a recipient.

7. Validity and withdrawal​

This Consent is valid from the moment it is granted until the purposes are achieved or it is withdrawn.

Withdrawal is performed by:

After withdrawal the Operator stops processing and destroys the personal data within 30 days, except data whose retention is required by law. Withdrawal makes the service unusable, since processing the listed data is necessary for it to function.

8. Rights of the data subject​

The subject may obtain information about the processing of their data, require its correction, blocking or destruction, withdraw this Consent, and appeal the Operator's actions to Roskomnadzor or in court.

The procedure is described in the Privacy Policy.

9. Confirmation​

By granting this Consent the subject confirms that they:

  • act freely, of their own will and in their own interest;
  • have read the purposes, data list and processing actions above;
  • have been informed of the withdrawal procedure and its consequences;
  • are entitled to provide the data listed.

Consent is granted in a form allowing the fact of its receipt to be confirmed: by pressing the confirmation button in the Telegram bot. The Operator records the date and time.