Version of 25 October 2026
Translation notice. This is an English translation of the Russian-language document published at https://fabulotheca.org/privacy. It is provided for the convenience of users who do not read Russian. The Russian text is the only legally binding version; if the two texts differ in any way, the Russian text prevails. Section numbers are identical in both texts.
Operator: Anastasia Sergeevna Lyzlova, an individual applying the special tax regime "Tax on Professional Income".
1.1. This Policy determines which personal data the Operator processes in connection with the operation of the Fabulotheca service (former name "Skazkovedenie") (fabulotheca.org), for what purpose, on what legal basis, for how long, and how the data are protected. It has been prepared in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (the "Law").
1.2. The Policy is published on the Service's website and is available without restriction before any data are collected. A link to it is placed at the bottom of every page of the website and on the application page.
1.3. The Operator personally determines the purposes and methods of processing and is responsible for organising the processing of personal data. Enquiries on matters of processing may be sent to the addresses given above.
2.1. Persons submitting an application for access to the Service, and users of the Service (Token holders).
2.2. Visitors to the website: only the technical data transmitted by the browser.
| Purpose | Data | Legal basis |
|---|---|---|
| Considering an application for access and communicating with the applicant | surname, given name and patronymic; e-mail address; organisation and academic status (if stated); research topic | consent of the data subject (clause 1 of part 1 of Article 6 of the Law) |
| Concluding and performing a contract on the terms of the Service: issuing the Token and the Personal Account, counting Requests, communicating on matters of access | the same; Token identifier; service records of calls to the Service | a contract to which the data subject is a party (clause 5 of part 1 of Article 6 of the Law) |
| Recording payment and crediting a Package | information visible to the recipient of a transfer: payer's name, amount, payment code | a contract (clause 5 of part 1 of Article 6); recording of income is a requirement of law (clause 2 of part 1 of Article 6) |
| Security and operability of the Service, investigating breaches of the terms | IP address, type of browser and device, date and time of the call | the Operator's legitimate interest, provided the data subject's rights are respected (clause 7 of part 1 of Article 6) |
3.2. The Operator does not process special categories of personal data or biometric data. The Operator does not receive or store the details of users' bank cards and accounts.
3.3. The website does not use cookies or web-analytics services. The open statistics on the home page (the number of users and requests over seven days) are aggregated and contain no personal data.
4.1. Actions with data: collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, blocking, deletion, destruction.
4.2. Methods: with the use of automation tools and without them. The data are stored in a database on the Operator's server.
4.3. The data are not transferred to third parties and are not disseminated, except in cases expressly provided for by law. Processing is not entrusted to third parties. The server is provided by a hosting provider; the database is located in a data centre on the territory of the Russian Federation.
4.4. Processing takes place on the territory of the Russian Federation; the server is located in the Russian Federation.
4.5. To communicate with applicants and users the Operator uses e-mail: messages about an application and access are sent from the Operator's address, and notifications of new applications reach the Operator's mailbox.
5.1. Application data, one year from the end of the Token's validity; data on a rejected application, six months; service records of calls to the Service, six months; web-server logs with IP addresses, fourteen days; accounting and tax documents, for the periods established by law.
5.2. When the period expires, when consent is withdrawn (if there is no other ground for storage) and when the purpose of processing has been achieved, the data are destroyed.
6.1. Data exchanged between the browser and the website are protected by the HTTPS protocol.
6.2. Access to the database and the Service's directory on the server is restricted: the data are not directly accessible from the external network, and the server is administered by means of access keys.
6.3. The administrative part of the website is protected by a secret key; the Personal Account and access to search are protected by different secret keys.
6.4. Backup copies of the database are made daily and are stored on the Operator's server with restricted access.
6.5. The Operator limits the volume of data collected to the purposes of processing and the retention periods stated in this Policy.
7.1. The data subject has the right to receive information about the processing of the data subject's data; to demand that the data be clarified, blocked or destroyed if they are incomplete, out of date, inaccurate or not needed for the stated purpose; to withdraw consent; and to appeal against the Operator's actions to the authorised body for the protection of the rights of data subjects (Roskomnadzor) or to a court.
7.2. To exercise these rights it is sufficient to send a request to the Operator at the e-mail address or postal address given at the beginning of the Policy. The Operator considers requests within the periods established by the Law.
7.3. Withdrawal of consent is made in the same way, by a request to the Operator. The consequences of withdrawal are described in the Consent to the Processing of Personal Data.
8.1. The Operator may change the Policy. The current version is always published on the website at /privacy; the date of the version is stated at the beginning.
8.2. Consent to the processing of personal data is drawn up as a separate document (/consent); the Terms of Use are a separate document (/terms). This Policy replaces neither of them.