Personal Data Processing Policy
Version of 17 October 2026
This English text is an unofficial translation provided for convenience. The legally binding document is the Russian version published on this website; in case of any discrepancy the Russian text prevails.
1. General provisions
1.1. This Policy defines how Vostochny Okean LLC (the Operator) processes and protects the personal data of users of the website vostokocean.ru (the Website). The Policy has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and is published for unrestricted access.
1.2. Information about the Operator:
- Vostochny Okean Limited Liability Company;
- registered address: office 2, 17 Basargina Street, Vladivostok, Russia;
- office: premises XIX, 4th floor, 1 Golovinskoye Highway, Moscow, Russia;
- phone: +7 (495) 760-29-56;
- requests concerning personal data are accepted through the form on the “Contacts” page or by letter to the registered address.
1.3. The person responsible for organizing personal data processing is appointed by order of the Operator’s head. They can be contacted by the means listed in clause 1.2.
2. Whose data is processed
- representatives of organizations and sole proprietors who have registered on the Website;
- persons who have submitted an inquiry or a price request through the Website forms;
- visitors to the Website: technical data and cookies (analytics cookies only with their consent).
3. Purposes, data, legal grounds and retention periods
| Purpose | Data | Legal ground | Retention period |
|---|---|---|---|
| Responding to an inquiry | name, organization, phone, email, text of the inquiry, IP address | consent | 12 months |
| Quote in response to a price request | organization, INN (Russian taxpayer ID), surname and first name, phone, email, IP address | consent | 12 months |
| Organization verification and access to prices | full name, position, phone, email, organization name, INN, OGRN (state registration number) (numbers of a foreign organization), organization documents, IP address | consent; steps taken to conclude a contract | if declined, 30 days; if approved, the entire period of cooperation |
| Fulfilling orders, invoicing, delivery | full name, phone, email, billing details, delivery address, order contents | contract | 5 years after the last order (accounting legislation) |
| Recording transactions with precursors | data of the buyer and their representative to the extent required for the transaction register | law (Resolution of the Government of the Russian Federation No. 419 of 9 June 2010) | the period established for such registers |
| Visit statistics | cookies, IP address, browser and device information, pages viewed and actions on them | consent (cookie window) | 12 months |
| Operation and security of the Website | IP address, server logs, necessary cookies | the Operator’s legitimate interest, necessity for the Website to operate | up to 6 months |
Special categories of personal data and biometric personal data are not processed. Please do not upload documents containing passport details; if such information appears in uploaded files, the Operator uses it only to verify the representative’s authority.
4. Processing operations and methods
Collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion and destruction, both with and without automation tools. The decision to grant access to prices is taken by an employee of the Operator; decisions producing legal consequences are not made solely by automated means.
5. Disclosure and entrusted processing
5.1. The Operator does not sell personal data. Data is disclosed only to:
- the party that develops and provides technical support for the Website, on the Operator’s instructions;
- Yandex.Cloud LLC (16 Lva Tolstogo Street, Moscow 119021, Russia), for hosting the Website on servers in the Russian Federation;
- YANDEX LLC (16 Lva Tolstogo Street, Moscow 119021, Russia), the Yandex Metrica service, on the Operator’s instructions and only if the visitor consents to analytics cookies;
- transport companies and banks, to fulfill an order;
- state authorities, upon a lawful request.
5.2. Parties processing data on the Operator’s instructions must maintain confidentiality and comply with the requirements of Article 19 of Federal Law No. 152-FZ.
5.3. Personal data is not transferred across borders.
6. Place of processing and data protection
The recording, systematization, accumulation, storage, clarification and retrieval of the personal data of citizens of the Russian Federation are carried out using databases located in the territory of the Russian Federation. Protection measures: access control, an encrypted connection to the Website (HTTPS), storage of uploaded documents outside the public part of the Website, backups in the territory of the Russian Federation, and logging of administrator actions.
7. Cookies
7.1. Necessary cookies (signing in to the personal account, the cart, the selected language) work without consent: the Website cannot work without them.
7.2. Analytics cookies of the Yandex Metrica service are enabled only after you click “Accept all” in the cookie window. Metrica collects a cookie identifier, IP address, browser and device information, the referral source and actions on pages. Session recording (Webvisor) is not used. The terms on which the service processes data are set out in the Yandex Privacy Policy.
7.3. You may withdraw consent to analytics cookies at any time via the “Cookie settings” link at the bottom of any page of the Website.
8. Rights of the personal data subject
The data subject has the right to obtain information about the processing of their data; to demand that incomplete, outdated, inaccurate or unlawfully obtained data be clarified, blocked or destroyed; to withdraw consent; and to appeal against the Operator’s actions to Roskomnadzor (the Russian data protection authority) or in court.
A request is sent by the means listed in clause 1.2 and must contain the surname, first name and patronymic, contact details for the reply, and information confirming the relationship with the Operator (for example, the email address used for registration). The Operator replies within 10 business days of receiving the request; this period may be extended by no more than 5 business days with notice of the reasons. If consent is withdrawn, the data is destroyed within 30 days, except for data the Operator is required by law to retain.
9. Destruction of data
When the periods in Section 3 expire, when the purpose of processing is achieved or when consent is withdrawn, the data is deleted from the Website database, and from backups when they are next replaced. Inquiries and price requests older than 12 months and declined verification requests older than 30 days are deleted automatically. Paper records are destroyed. Destruction is confirmed by a certificate or a log entry.
10. Incidents
In the event of an unlawful or accidental transfer (leak) of personal data, the Operator notifies Roskomnadzor within 24 hours and reports the results of its internal investigation within 72 hours (Part 3.1 of Article 21 of Federal Law No. 152-FZ).
11. Foreign users
The data of users from other countries is processed under the same rules and stored in the Russian Federation.
12. Changes to the Policy
The Operator may amend this Policy. A new version takes effect when it is published on this page; previous versions are kept by the Operator and provided on request. If a change affects the purposes of processing or the scope of data, the Operator requests new consent.