Privacy policy
Controller, data from requests and cookies, bases under Law No. 99-Z, cross-border transfer and how to withdraw consent.
Текст of the privacy policy
1. Controller and applicable law
The personal data controller is ООО «КДМ Карго», Republic of Belarus. Processing follows Law of the Republic of Belarus of 7 May 2021 No. 99-Z “On personal data protection”.
The site’s main server infrastructure and the request database are hosted in the Republic of Belarus.
2. Data categories
The form processes a phone number and a description of the job; the user may also give a name, company, cargo, route and other transport details.
To protect the site and understand the enquiry we may process IP address, referral source, page history within the session, device type, language, time zone and technical logs.
3. Purposes and legal bases
Data is needed to accept and store the request, contact the applicant, check trip parameters, prepare an offer, keep business correspondence and keep the site secure.
The legal basis is consent when the form is submitted, steps to conclude or perform a contract, and other grounds provided by the law of the Republic of Belarus.
4. Storage of requests
Requests are stored in a local SQLite Payload CMS database on the site server. Access is limited to authorised CMS users.
No single retention period is set in the site configuration: the controller stores data for as long as needed to reply, discuss or perform transport and to meet mandatory legal requirements. Automatic deletion on a fixed date is not configured. The data subject may request deletion; the controller reviews and fulfils it if further storage is not required by law.
5. Telegram and cross-border transfer
For prompt notification, request content is sent via the Telegram API and kept in the controller’s working chats for the period of handling the enquiry and business correspondence. Telegram may process data outside the Republic of Belarus, where the level of protection may differ.
Transfer takes place after the user consents when submitting the form. A Telegram failure does not cancel storage of an accepted request in SQLite; if the database is unavailable, the request may be delivered only in Telegram.
6. Data-subject rights and deletion
The data subject may obtain information about processing, request correction, cessation of processing or deletion of data, withdraw consent and appeal the controller’s actions in the manner set by the law of the Republic of Belarus.
A request may be sent by email or phone from the Contacts section. The controller may ask for information sufficient to identify the applicant and the related request.
7. Cookies and policy changes
Cookie categories, purposes, retention and how to withdraw a choice are described in a separate Cookie policy.
The policy is updated when processing, recipients or legal requirements change; the current date is shown on the page.