Personal data processing policy
Version dated .
1. Scope and data controller
This policy sets out how personal data is processed for visitors to https://www.greentrans.pro and people who submit enquiries through its forms. Data controller: GreenTrans Limited Liability Company. Address: 6/2 Churilovsky Tupik, Smolensk, 214025. Postal address for correspondence: Office 25, 19 Churilovsky Pereulok, Smolensk, 214025. Contact for personal data matters: info@greentrans.net.
This policy applies to data received through the website and does not replace the terms of carriage contracts, personnel documents or the policies of external services. The website is intended to provide information about transport services and to receive enquiries.
2. Purposes and legal grounds
When you apply for a job, we receive your name, phone number or email address, driving licence categories, experience and optional comments. We use this information to review your application and contact you under the separate consent given in the form. Authorised staff and technical service providers may access it to the extent needed. A job application is not treated as a freight enquiry.
Enquiry data is used to review the request, contact the enquirer, clarify cargo details, prepare a quote or proposal and retain a record of how the enquiry was handled. The legal ground is the enquirer's separate consent; preparing or performing a contract at the enquirer's initiative and complying with legal requirements may have independent grounds under Article 6 of Federal Law No. 152-FZ of 27 July 2006 on Personal Data.
Technical data is used to operate and protect the website, limit automated requests, identify errors and confirm privacy settings. Optional analytics is enabled in accordance with a separate cookie choice. Consent to an enquiry does not constitute a subscription to advertising.
3. What data is processed
The contact page form collects a name, email address, optional phone number, enquiry type, subject and message. The short quote forms and enquiry widget require only a phone number or email address and a description of the request; a name is optional and the subject is generated automatically. Information included by the applicant in the message is also processed. The consent version and text, acceptance time and source form are stored as evidence of the choice.
Do not use the general form to send passport details, payment details, health information or other special categories of data, or information about third parties if you have no grounds for sharing it. Data needed for a specific shipment is requested separately as required.
When you visit the website, the server may process your IP address, request time, requested page address, and browser and device information. Cookie settings use a random visitor identifier, selected categories, the version and the time of the choice; the server also records browser information and, where available, a country code from technical headers.
Only after you choose the marketing cookie category may the site store the landing page, language, UTM tags and gclid/yclid ad click identifiers and link them to a freight enquiry. Ad tags are not attached to job applications.
4. Processing and access to enquiries
The controller processes information submitted through the forms to review enquiries. Processing includes collection, recording, organisation, accumulation, storage, updating, retrieval, use, disclosure, restriction, deletion and destruction of data, with and without automated means.
Access to the data is granted to employees and technical contractors who need it to handle enquiries and maintain the website. We use access controls, server-side validation of incoming data and protection against automated requests. These measures are not a promise of absolute security for every transmission over the internet.
5. Recipients and external services
The controller uses technical service providers and communication services to host the website and handle enquiries. They may access the information needed to provide those services.
Email services may process the content of enquiries and job applications, including the contact details and message provided, when the controller reviews them and prepares a response.
If a particular enquiry requires personal data to be transferred to another contractor or outside the Russian Federation, the controller determines the data and recipient, informs the enquirer where applicable and fulfils the legal requirements. The current enquiry consent does not permit arbitrary transfers of data to other persons. The requirements of Article 12 of Federal Law No. 152-FZ apply regardless of the visitor's consent.
In email correspondence, messages are processed by the sender's and recipient's email services. The embedded Google map on the contact page may transmit technical connection and browser information to Google when it loads. When analytics is permitted, Yandex Metrica receives data about visits and interactions with the website. The respective services' own data processing rules also apply.
Making personal data publicly available is not a purpose of the enquiry form. Data is disclosed in response to a lawful request from a competent authority only to the extent necessary and on a legal basis established by law.
6. Retention periods, updating and deletion
Data is retained no longer than necessary for the stated purposes, unless a different period is required by law or contract. An enquiry that does not result in a contract is considered resolved once a response has been sent and the clarifications agreed with the enquirer have been completed. Once the purpose has been achieved or consent withdrawn, processing stops and the data must be destroyed within 30 days, unless there is an independent legal ground for continued processing.
If an enquiry leads to a contractual relationship, necessary information may be retained to perform the contract, comply with accounting and archival laws, and protect lawful claims. Consent records are retained to the extent and for the period needed to demonstrate that processing is lawful.
Freight enquiry source tags remain with the enquiry. In the browser, ad click context lasts up to 365 days after consent; withdrawing the marketing choice stops further collection. Contact the controller to ask about retention and deletion of data already collected.
Corrections and deletion must cover copies used by the controller and correspondence. Data held by an external service is also subject to its rules and legal obligations. Contact the controller to ask about the retention period for a particular enquiry.
7. Personal data rights and requests
You may request information about processing, request that inaccurate data be updated or that data be blocked or destroyed where legal grounds exist, withdraw consent, and challenge the controller's actions before Roskomnadzor or a court.
To make a request, email info@greentrans.net with the subject ‘Personal data’ or send a letter to the controller's postal address. Provide the email address used in the enquiry, the approximate enquiry date and the details of your request. Do not send a passport copy through the general form: if the law requires additional identification information, the controller will specify what is needed and how to send it.
Withdrawing consent does not make processing carried out before the withdrawal was received unlawful. Where another legal ground exists, the controller may continue processing only to the extent necessary for that ground. Requests are answered and acted upon within the time limits set by law.
9. Policy changes
The current version is published at this address with its update date. A separate choice is provided for new processing purposes or changes to terms that require consent. Updating this page does not in itself signify consent to new purposes.