This Privacy Policy defines how personal data of users and representatives of organizations is processed and protected when using the B2B wholesale procurement platform (the Platform). The Policy is prepared in accordance with Federal Law No. 152-FZ dated 27 July 2006 On Personal Data.
1. General provisions
The personal data operator (the Operator) ensures the rights of personal data subjects and is responsible for processing their data. By using the Platform, the user confirms agreement with this Policy.
2. Categories of processed data
The Operator processes: full name; contact phone number and email address; position and the name of the represented organization; legal entity details (TIN/INN, KPP, OGRN, legal and postal address, bank details); account data and order history; technical data (IP address, cookies, browser and device information). Special categories of personal data are not processed.
3. Purposes of processing
Data is processed in order to: register and identify the user; verify the organization by its TIN; conclude and perform contracts, place and deliver orders; issue invoices and maintain accounting and tax records; notify about order status and service events; comply with the requirements of the legislation of the Russian Federation.
4. Legal grounds
Processing is carried out on the basis of Federal Law No. 152-FZ, the consent of the personal data subject, and contracts to which the subject is a party or beneficiary. For advertising and marketing communications, processing is performed only with separate consent, which may be withdrawn at any time.
5. Processing conditions and transfer to third parties
The Operator may entrust data processing to counterparties acting on its behalf: delivery services, payment services and banks, electronic document management services, telecom operators and hosting providers. Transfer to state authorities is carried out in the cases and manner provided by law. When transferring data, the Operator requires third parties to maintain confidentiality.
6. Retention periods
Personal data is stored for the duration of the account and contractual relationship, as well as for the periods established by tax and accounting legislation (as a rule, at least 5 years). After the periods expire, data is deleted or anonymized.
7. Storage within the Russian Federation
Databases containing personal data of citizens of the Russian Federation are located and processed on servers within the territory of the Russian Federation, in accordance with part 5 of article 18 of Federal Law No. 152-FZ.
8. Protection measures
The Operator takes legal, organizational and technical measures to protect personal data from unauthorized access, destruction, alteration and other unlawful actions: encryption of transmission channels, access control, backups and access logging.
9. Cookies
The Platform uses cookies for authentication, saving preferences and analytics. The user may restrict the use of cookies in the browser settings; some Platform features may then become unavailable.
10. Rights of the personal data subject
The subject has the right to: obtain information about the processing of their data; demand clarification, blocking or deletion of inaccurate data; withdraw consent to processing; appeal to the authorized body for the protection of the rights of personal data subjects (Roskomnadzor). To exercise these rights, send a request to the Operator contact address.
11. Changes to the Policy
The Operator may amend this Policy. The current version is published on this page. Continued use of the Platform after changes means acceptance of the new version.
For questions related to the processing of personal data, please use the contacts listed in the Contacts section.