Personal data processing policy

This policy sets out how personal data is processed for visitors to https://www.greentrans.pro and people who submit enquiries through its forms. Data controller: GreenTrans Limited Liability Company. Address: 6/2 Churilovsky Tupik, Smolensk, 214025. Postal address for correspondence: Office 25, 19 Churilovsky Pereulok, Smolensk, 214025. Contact for personal data matters: info@greentrans.net.

This policy applies to data received through the website and does not replace the terms of carriage contracts, personnel documents or the policies of external services. The website is intended to provide information about transport services and to receive enquiries.

Enquiry data is used to review the request, contact the enquirer, clarify cargo details, prepare a quote or proposal and retain a record of how the enquiry was handled. The legal ground is the enquirer's separate consent; preparing or performing a contract at the enquirer's initiative and complying with legal requirements may have independent grounds under Article 6 of Federal Law No. 152-FZ of 27 July 2006 on Personal Data.

Technical data is used to operate and protect the website, limit automated requests, identify errors and confirm privacy settings. Optional analytics is enabled in accordance with a separate cookie choice. Consent to an enquiry does not constitute a subscription to advertising.

The form on the contact page collects the name, email address, optional telephone number, selected enquiry type, subject and message text. The enquiry widget collects similar data, with the subject generated automatically. Information that the enquirer includes in the text is also processed. To document the choice, we retain the consent version and text, the time of acceptance and the source form.

Do not use the general form to send passport details, payment details, health information or other special categories of data, or information about third parties if you have no grounds for sharing it. Data needed for a specific shipment is requested separately as required.

When you visit the website, the server may process your IP address, request time, requested page address, and browser and device information. Cookie settings use a random visitor identifier, selected categories, the version and the time of the choice; the server also records browser information and, where available, a country code from technical headers.

The enquiry is sent to the website server over HTTPS and stored in a PostgreSQL database. Access to the enquiry list through the administration panel requires authentication. Processing includes the collection, recording, systematisation, accumulation, storage, updating, retrieval, use, provision, blocking, deletion and destruction of data, both by automated and non-automated means.

Access to the data is granted to employees and technical contractors who need it to handle enquiries and maintain the website. We use access controls, server-side validation of incoming data and protection against automated requests. These measures are not a promise of absolute security for every transmission over the internet.

Selectel infrastructure is used to host the website and its server database. Authorised employees view enquiries in a secure administration panel. Only a notification of a new enquiry with a link to the panel is sent through the Telegram Bot API: the name, email address, telephone number, subject and message text are not included in this notification.

If a particular enquiry requires personal data to be transferred to another contractor or outside the Russian Federation, the controller determines the data and recipient, informs the enquirer where applicable and fulfils the legal requirements. The current enquiry consent does not permit arbitrary transfers of data to other persons. The requirements of Article 12 of Federal Law No. 152-FZ apply regardless of the visitor's consent.

In email correspondence, messages are processed by the sender's and recipient's email services. The embedded Google map on the contact page may transmit technical connection and browser information to Google when it loads. When analytics is permitted, Yandex Metrica receives data about visits and interactions with the website. The respective services' own data processing rules also apply.

Making personal data publicly available is not a purpose of the enquiry form. Data is disclosed in response to a lawful request from a competent authority only to the extent necessary and on a legal basis established by law.

Data is retained no longer than necessary for the stated purposes, unless a different period is required by law or contract. An enquiry that does not result in a contract is considered resolved once a response has been sent and the clarifications agreed with the enquirer have been completed. Once the purpose has been achieved or consent withdrawn, processing stops and the data must be destroyed within 30 days, unless there is an independent legal ground for continued processing.

If an enquiry leads to a contractual relationship, necessary information may be retained to perform the contract, comply with accounting and archival laws, and protect lawful claims. Consent records are retained to the extent and for the period needed to demonstrate that processing is lawful.

Updating and deletion must cover the copies used by the controller, including operational notifications and correspondence. The handling of copies held by an external service also depends on its rules and legal obligations. Contact the controller to clarify the retention period for a particular enquiry.

You may request information about processing, request that inaccurate data be updated or that data be blocked or destroyed where legal grounds exist, withdraw consent, and challenge the controller's actions before Roskomnadzor or a court.

To make a request, email info@greentrans.net with the subject ‘Personal data’ or send a letter to the controller's postal address. Provide the email address used in the enquiry, the approximate enquiry date and the details of your request. Do not send a passport copy through the general form: if the law requires additional identification information, the controller will specify what is needed and how to send it.

Withdrawing consent does not make processing carried out before the withdrawal was received unlawful. Where another legal ground exists, the controller may continue processing only to the extent necessary for that ground. Requests are answered and acted upon within the time limits set by law.

Cookie settings are managed separately from consent to process an enquiry. Necessary cookies enable the selected functions; analytics and other optional categories are managed through the ‘Cookie settings’ button. When the analytics category is disabled, Yandex Metrica code is not initially loaded.

Enquiry form contents are hidden from Yandex Metrica Session Replay recording. A separate analytics goal may record a successful submission and enquiry type without the name, email address, telephone number or enquiry text. See the cookie policy page for more information about categories and changing your choice.

The current version is published at this address with its update date. A separate choice is provided for new processing purposes or changes to terms that require consent. Updating this page does not in itself signify consent to new purposes.