Privacy Policy

1. 1.1 This Privacy Policy (hereinafter referred to as the “Policy”) is adopted by the Administrator and applies to all information that the Administrator may obtain about the User of the website gexrussia.com (hereinafter referred to as the “Site” or “Service”) from any device and through any form of communication with the Administrator.
2. 1.2. By using the Site (including browsing, reading content, submitting or uploading information) and providing personal data, the User consents to the processing of their personal data in accordance with this Policy, unless additional consent requirements are stipulated by this Policy.
3. 1.3. For the purposes of this Policy, the “Administrator” refers to the legal entity LLC "GEX", with registered address: 129090, Moscow, Troitskaya St., 10 building 1, apt. 176, OGRN 1257700297854, ITPN 9702076744.

1. 2.1. Personal data refers to any information relating directly or indirectly to an identified or identifiable individual (personal data subject) — the User.
2. 2.2. Processing of personal data includes any action (operation) or set of actions performed with personal data, whether automated or not, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), anonymization, blocking, deletion, and destruction.
3. 2.3. The Administrator processes the following personal data: surname, first name and patronymic (if applicable), date of birth, passport details, phone number, email address and residential addresses of the Service User.
4. 2.4. Cookies are small text files stored in the visitors’ browsers. Through cookies and during interaction with various Administrator web projects, the following anonymized statistical data may be automatically collected:
• Type of user interaction on the Service (clicks, cursor hovers, etc.);
• Date and time of interaction;
• Page URL;
• Referrer;
• IP address (not used in statistical analysis);
• User-Agent;
• ClientID (browser identifier from the Cookie file);
• Screen resolution;
• HTML element class clicked;
• Data on viewed services.
1. 2.5. Visitors can manage cookie settings through their browser preferences.
2. 2.6. Changes to browser settings that result in blocking or deleting cookies may cause some features of the Service to become unavailable.

3.1. The Administrator processes User personal data for the purposes of informational and reference support, including providing information about the Administrator’s services and identifying the Service User.

1. 4.1. The User’s personal data may be processed for an indefinite period, by any lawful means, including in personal data information systems using automation tools or without them.
2. 4.2. Personal data is processed for the duration of contractual or other legal relationships between the User and the Administrator, by any lawful means.
3. 4.3. All personal data is obtained directly from the User, their representative, or from a person who has authorized the Administrator to process the User's data, unless otherwise required by Russian law.
4. 4.4. The Administrator may disclose personal data to investigative or law enforcement authorities or other authorized bodies in accordance with applicable Russian law.
5. 4.5. The legal grounds for processing personal data include: the Constitution of the Russian Federation, the Civil Code of the Russian Federation, the Labor Code of the Russian Federation, the User's consent, and any agreements between the Administrator and the User.
6. 4.6. To protect User personal data, the Administrator applies the following safeguards against unauthorized access or other unlawful acts:
• Legal measures, including internal data protection policies, appointment of responsible data protection personnel, and service regulations;
• Organizational measures, such as the designation of responsible individuals and storage of physical media in secured safes;
• Technical measures, such as the use of certified information protection systems compliant with Russian legislation and interaction with the national cyberattack detection and prevention system.

1. 5.1. The User has the right to exercise their data protection rights under Russian law, including but not limited to:
2. – Clarify or update personal data, request blocking or deletion;
3. – Request a list of processed personal data, legal grounds for processing, data sources, processing and storage periods, and other related information.

1. 6.1. The Administrator agrees to use the User’s personal data solely for the purposes set forth in this Policy.
2. 6.2. The Administrator must take precautions to protect the confidentiality of User personal data, using standard business practices for such data protection.
3. 6.3. The Administrator is obligated to store personal data for the period necessary to achieve the purposes outlined in this Policy, unless a longer period is required by law.
4. 6.4. The Administrator may retain User data that must be preserved under applicable Russian law.

1. 7.1. The consent provided under this Policy is valid for an unlimited period. The User may revoke their consent to the processing of personal data by notifying the Administrator in writing via email.