Personal Data Processing Policy

This Personal Data Processing Policy (the Policy) applies to all information that Individual Entrepreneur Beketov Evgeniy Dmitrievich, OGRNIP 318385000051269, INN 385100465424, address: Usolye-Sibirskoye, Krasnykh Partizan Ave., 3-52 (the Operator) may obtain about users when they use the website and web application https://logistack.net and its subdomains (the Site/Service).

The Policy has been developed in accordance with Federal Law No. 152-FZ "On Personal Data" and other applicable laws and regulations of the Russian Federation.

1. Basic Terms

Personal data means any information relating to a directly or indirectly identified or identifiable individual.
Personal data processing means any actions involving personal data (collection, recording, storage, updating, use, transfer, deletion, etc.).
Operator means a person organizing and/or carrying out personal data processing.
Personal data subject means an individual whose personal data is being processed.

2. What Data We Process

2.1. Data provided by the user independently:

e-mail address (required for registration);
first name / surname / patronymic (if provided);
telephone number (if provided);
organization and job title details (if the user acts on behalf of a legal entity / individual entrepreneur and provides such details);
other information submitted by the user in forms, support requests, or applications.

2.2. Data automatically transmitted when using the Site/Service:

IP address, date and time of access, browser/device details, technical identifiers;
addresses of requested pages, referrer;
cookies and similar technologies (see Section 8).

2.3. Data of organization users (employees) added by the Licensee:

e-mail / name (to the extent necessary to provide access and manage permissions);
role / access rights in the Personal Account.

We do not request special categories of personal data (health, religion, political views, etc.) or biometric data. Please do not transmit such data through the Site/Service forms.

3. Purposes of Personal Data Processing

registration and identification of the user in the Service, creation and management of the Personal Account;
providing access to the Service functionality, including subscription administration and management of organization users;
processing support requests and communication regarding service matters (notifications, important messages concerning operation of the Service);
issuing invoices / accepting payments, generating documents, and fulfilling statutory requirements (where necessary);
ensuring security and preventing fraud and abuse;
analytics, statistics, and improvement of the Service quality (in aggregated / anonymized form where applicable);
sending informational and marketing materials, only where separate consent has been provided (if and when used).

4. Legal Grounds for Processing

processing is necessary for performance of the contract or offer with the user (provision of access to the Service);
consent of the personal data subject, where required by law (for example, marketing mailings or specific scenarios);
performance of obligations imposed by the laws of the Russian Federation (for example, tax / cash register accounting requirements, where applicable);
the Operator's legitimate interests (security, protection of rights, prevention of abuse), subject to the balance of the subject's rights and interests.

5. Processing and Storage Conditions

Personal data is processed using automation tools and/or without the use of such tools.
Personal data is stored no longer than necessary for the processing purposes, or until consent is withdrawn (where consent is the legal basis), unless otherwise required by law.
Access to data is granted only to those employees and contractors of the Operator who need such access to perform their tasks and are bound by confidentiality obligations.

6. Transfer of Personal Data to Third Parties

The Operator may transfer personal data to third parties only where necessary and within the stated processing purposes, including:

hosting / infrastructure providers, cloud service providers, and technical support providers;
payment partners (acquiring banks, payment aggregators), to the extent necessary to accept payments;
telecommunications operators / mail services for delivery of notifications;
state authorities, where transfer is required by law.

Transfers are carried out on the basis of contracts with counterparties and subject to confidentiality and data security obligations, where such obligations are applicable.

7. Rights of the Personal Data Subject

The user (personal data subject) has the right to:

receive information concerning the processing of their personal data;
request rectification, blocking, or destruction of data if it is incomplete, outdated, inaccurate, or processed in violation of the law;
withdraw consent to personal data processing (where processing is based on consent);
challenge the Operator's actions or omissions before the competent authority or in court.

8. Cookies and Analytics

The Site may use cookies and similar technologies for proper operation, security, remembering settings, and analytics.
The user may restrict or disable cookies in the browser settings. This may affect the functioning of certain Service features.

9. Separate Consent to Personal Data Processing

Where personal data processing requires the subject's consent, such consent shall be provided separately from other documents and information confirmed or accepted by the user (for example, by a separate checkbox).

10. Personal Data Protection Measures

The Operator takes necessary organizational and technical measures to protect personal data, including, but not limited to:

use of a secure connection (HTTPS);
segregation of access rights and access control to data;
backup procedures (where applicable) and monitoring of technical events;
measures to prevent unauthorized access.

11. Requests and Withdrawal of Consent

For matters concerning personal data processing, as well as for exercising the rights of the personal data subject, the user may contact the Operator:

E-mail: info@logistack.net
Postal address: Usolye-Sibirskoye, Krasnykh Partizan Ave., 3-52

Withdrawal of consent (where processing is based on consent) is carried out by sending a request to the specified e-mail address. Upon withdrawal of consent, the Operator shall stop processing personal data unless other lawful grounds for processing exist.

12. Links to Third-Party Websites

The Site may contain links to third-party resources. The Operator does not control and is not responsible for the policies and actions of such resources.

13. Amendments to the Policy

The Operator may amend the Policy. The new version takes effect from the moment it is posted on the Site, unless otherwise provided in the new version.
The current version of the Policy is available at: https://logistack.net/en/docs/privacy_policy/.

14. Governing Law

This Policy and any relations arising out of or in connection with its application shall be governed by the laws of the Russian Federation.