Privacy Policy

1. Personal Data Operator

The operator of personal data is ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ «РУНИКОМ» — hereinafter the «Operator».

ОГРН 1205500016127, ИНН 5503192756, КПП 550301001.

Registered address: 644099, Омская область, г. Омск, ул. Орджоникидзе, д. 14, кв. 1.

The service operates under the commercial designation «AVTOVIZA». The rights and obligations under this Policy are borne by the Operator, not by the owner of the designation.

Email address for enquiries regarding the processing of personal data: [email protected]. Phone: +7 913 666-94-83.

The person responsible for organising the processing of personal data: Бренд АВТОВИЗА. Enquiries regarding processing are considered within no more than 10 business days.

2. Definitions

«Personal data» — any information relating to a directly or indirectly identified natural person (the personal data subject).

«Processing» — any operation performed on personal data: collection, recording, storage, updating, use, transfer, deletion.

«User» — a natural person who has submitted their data through the service's forms or who uses the personal account.

3. Purposes of Processing

The Operator processes personal data solely for the following purposes:

• receiving and processing requests for the selection, purchase and delivery of vehicles and machinery;

• calculating the turnkey cost and informing the User about the progress of the request;

• creating and maintaining the User's personal account, including identification at login;

• providing support: receiving and processing enquiries, answering questions;

• performance of the contract to which the User is a party and of related obligations;

• fulfilment of obligations imposed on the Operator by the legislation of the Russian Federation.

Processing for other purposes, including advertising mailings of third parties, is not carried out.

4. Categories of Data Processed

The Operator processes the following categories of data:

• surname, first name, patronymic (to the extent specified by the User themselves);

• telephone number;

• email address;

• order details: the make, model, country of export, budget, city of delivery of interest and other information voluntarily provided by the User;

• technical data automatically obtained when accessing the service: network address, information about the browser and device, date and time of access, page address.

The Operator does not process special categories of personal data (concerning health, religious beliefs and the like) or biometric personal data.

The Operator does not knowingly request or process the data of minors. If such data has been received, it is deleted upon the request of a legal representative.

5. Legal Grounds

The legal grounds for processing are:

• the consent of the personal data subject expressed by action — by submitting a form or registering in the personal account (clause 1 of part 1 of article 6 of 152-FZ);

• performance of a contract to which the personal data subject is a party (clause 5 of part 1 of article 6 of 152-FZ);

• fulfilment of obligations imposed on the Operator by law (clause 2 of part 1 of article 6 of 152-FZ).

6. Procedure and Conditions of Processing

Processing is carried out with and without the use of automation tools.

Databases containing the personal data of citizens of the Russian Federation are located on the territory of the Russian Federation (part 5 of article 18 of 152-FZ).

The Operator takes legal, organisational and technical measures to protect personal data from unlawful access, destruction, alteration and dissemination: differentiation of employee access, transfer of data over a secure connection, maintenance of an enquiry log.

Access to personal data is granted only to the Operator's employees who require it to perform their job duties.

7. Biometric Personal Data

In order to issue an electronic signature and to confirm that the actions in the personal account are performed by the User themselves, the Operator processes their photograph together with an identity document (a selfie with the document) and the result of its comparison with the image in the document.

A facial image used to establish identity constitutes biometric personal data. Such processing is carried out SOLELY on the basis of separate consent, which is given in the personal account by an independent action, separately from the consent to the processing of other data.

Refusal to provide a selfie does not prevent the use of the service: at the User's choice, identity is confirmed at a personal meeting with a representative of the Operator, and documents are signed on paper.

Consent to the processing of biometric data is withdrawn separately and at any time — without terminating the contract. After withdrawal, the Operator deletes the image and switches to another method of confirming the User's actions.

The image is not transferred to the unified biometric system and is not used for purposes other than identification.

8. Cross-Border Data Transfer

Performance of the contract is impossible without transferring the User's data outside their country of residence: to the seller or auction platform in the country of purchase, the export broker, the carrier, the insurer, the warehouse and the customs representative.

Such transfer is cross-border and is carried out in the manner established by article 12 of Federal Law No. 152-FZ — after sending to the authorised body for the protection of the rights of personal data subjects a notification of the intention to carry out cross-border transfer.

The recipient countries are determined by the direction of the transaction: Korea, Japan, China, the USA, Canada, the UAE, the countries of the European Union — for export; Russia, Belarus, Kazakhstan, Armenia, Uzbekistan, Georgia, Azerbaijan — for import.

A list of recipients specifying the name, country and scope of the data transferred is maintained in the personal account, is available to the User at any time and is updated before data is transferred to a new recipient.

The User is notified that the level of personal data protection in certain recipient states may differ from that established by the legislation of their country of residence.

The User has the right to prohibit cross-border transfer. In this case, performance of the contract in the relevant part becomes impossible, the contract is terminated, and unspent funds are returned in full.

9. Transfer to Third Parties

The Operator does not sell or transfer personal data to third parties, except where this is necessary for the performance of the User's request or is required by law:

• to partners and contractors engaged to fulfil the request (carriers, customs representatives, testing laboratories) — to the extent minimally necessary to provide the service;

• to state authorities — upon a reasoned request in the manner established by law.

Cross-border transfer of personal data is carried out only when fulfilling a request involving purchase and delivery from a foreign state, and to the extent necessary for such a transaction.

10. Terms of Processing and Storage

Personal data is processed until the purpose of processing is achieved or until consent is withdrawn by the subject.

The data of Users who have not concluded a contract is stored for no more than 1 (one) year from the date of the last enquiry.

Data related to a performed contract is stored for the period established by the legislation on accounting and archiving — no less than 5 (five) years.

Upon achievement of the purpose or upon expiry of the term, the data is subject to destruction.

11. Rights of the Personal Data Subject

The User has the right to:

• obtain information about the processing of their personal data: confirmation of the fact of processing, the legal grounds, purposes, categories of data, terms, and information about the persons to whom the data is transferred;

• demand the updating, blocking or destruction of data if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;

• withdraw consent to the processing of personal data;

• appeal against the actions or inaction of the Operator to Roskomnadzor or in court.

An enquiry is sent to [email protected] or by post to: 644099, Омская область, г. Омск, ул. Орджоникидзе, д. 14, кв. 1. The Operator responds within 30 (thirty) days from the date of receipt of the enquiry.

12. Withdrawal of Consent

Consent is withdrawn by sending an application in free form to [email protected] or by post to the Operator's registered address.

After the withdrawal of consent, processing ceases and the data is destroyed within no more than 30 (thirty) days, except for information the storage of which the Operator is obliged to ensure by law.

Withdrawal of consent before the request is fulfilled may make its fulfilment impossible.

13. Cookies

The service uses cookies — small files saved by the browser. They are necessary for the operation of the service: saving the selected language, the login state of the personal account and session parameters.

The User has the right to prohibit the saving of cookies in the browser settings. If prohibited, some of the service's features, including login to the personal account, may become unavailable.

The service uses web analytics and advertising services. Yandex.Metrica collects depersonalised information about the visit: pages viewed, referral source, device type and region.

Google Analytics and Google Ads are loaded for every visitor, but until consent is given they operate in a restricted mode: no identifiers are stored on the device and data is transmitted depersonalised. Pressing “Accept” in the cookie notice lifts the restriction.

When a request is submitted, the information entered by the User in the form (name, telephone number, email address) may be transmitted to Google in transformed form — as an irreversible hash — in order to match the enquiry with an advertising campaign. The original values are not transmitted. Transmission takes place only where the consent referred to above has been given.

Consent is withdrawn by clearing the site data in the browser settings or by choosing again in the cookie notice. After withdrawal, the collection of analytics and advertising information ceases.

14. Data Security Breach

In the event of unlawful access to the User's personal data, the Operator notifies the User and the authorised body within the period established by law and reports which data has been affected and what measures have been taken.

The Operator keeps logs of access to personal data and stores them for no less than the storage period of the data itself.

15. Changes to the Policy

The Operator has the right to amend this Policy. The current version is published at /privacy.

Version of 27.08.2024.