Arms of the Sovereign Military Order of the Temple of Jerusalem — OSMTH OSMTH Regional Magistracy

Official translation from Russian. Show original

Privacy Policy

Edition of 31 October 2026

This Privacy Policy sets out how personal data and cookies are processed on the website osmth.ru (the “Site”).

1. Controller

Personal-data controller: Grand General Priory of Russia of the Sovereign Military Order of the Temple of Jerusalem (GGPR OSMTH), Moscow (the “Controller”; the Site also uses the designation “Regional Magistracy”).

For questions about personal-data processing, use the contact form on the Site.

2. What data is processed

  • Contact-form data: name, email address, telephone (if provided), subject and message text, enquiry type (“general question” or “petition to join”), and any attached file (petition, CV, essay — PDF or Word).
  • Technical data for Site operation: session identifier and CSRF token (necessary cookies); IP address — in a short-lived cache to rate-limit form submissions (anti-spam), without a long-term visitor profile.
  • Analytics with consent: Yandex.Metrica data (including counter cookies, click map and Webvisor) — only if you accepted analytics cookies in the consent banner.
  • Without analytics consent: anonymised page-view counts on the Site side (page path and date, without cookies, Webvisor or a visitor identifier).

3. Purposes of processing

  • responding to enquiries and considering petitions to join the Order;
  • ensuring Site operation, security and protection of the form against abuse;
  • Site traffic statistics (to the extent matching your choice in the cookie banner).

4. Legal bases

Processing is based on the data subject’s consent (including when submitting the form and when accepting analytics cookies), and on the Controller’s legitimate interests — ensuring Site operation and service security.

5. Retention periods

  • form submissions and attachments — until the enquiry is handled and for a reasonable archival period needed for correspondence and petition records;
  • session data — for the lifetime of the Django session;
  • anti-spam IP records — usually no longer than one hour;
  • Yandex.Metrica data — under Yandex’s service rules when consent is given;
  • aggregated anonymised view counters — to the extent needed for traffic statistics.

6. Transfers to third parties

Data may be processed on the Site’s hosting infrastructure to the extent required for operation. With consent to analytics cookies, visit data is sent to Yandex (Yandex.Metrica). The Controller does not sell personal data and does not transfer it to third parties for advertising mailings.

7. Cookies and similar technologies

  • Strictly necessary — session and CSRF: required to submit the form and protect the Site; used regardless of the banner choice.
  • Analytics (Yandex.Metrica, including Webvisor and click map) — only after clicking “Accept” in the banner on the first visit.
  • If you choose “Anonymised counting only”, analytics cookies and Webvisor are not enabled; only anonymised page views are counted.
  • Your choice is stored in the browser’s local storage (localStorage). You can change it via the “Cookie settings” link in the Site footer.

8. Data-subject rights

You may request rectification, blocking or deletion of your personal data, withdraw consent to processing (including analytics), and obtain information about processing. To do so, send a request via the contact form, stating the nature of the request and details sufficient to identify the enquiry.

9. Changes to this Policy

The current edition is published on this page with a date. Continued use of the Site after publication of changes means you have noted the updated text insofar as it applies to your use of the Site.

See also the Terms of Use.