Personal data processing policy

This policy describes which personal data the website https://rfl.ru receives, for what purposes it is processed, who it is shared with, and how it is protected. It covers data a visitor submits through forms and data the website receives automatically.

The personal data operator is ООО «Логистика для Вас» (RFL brand):

• INN 7722681023, KPP 770401001, OGRN 1097746119096
• Legal address: 119002, Moscow, Sivtsev Vrazhek lane, 29/16, premises 3/3/5
• Correspondence address: 140070, Moscow Region, Lyubertsy district, Tomilino, Pionerskaya st., 1B
• General director: Kazurov Artyom Vyacheslavovich
• Phone: +7 495 668-09-34
• Email: sales@fresh-logic.ru

The policy is published under part 2 of article 18.1 of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.

Processing follows the Constitution of the Russian Federation, the Civil Code in the part that covers pre-contractual relations and performance of a contract, Federal Law No. 152-FZ, and Federal Law No. 149-FZ of 27 July 2006 “On Information, Information Technologies and Information Protection”.

The terms “personal data”, “processing”, “operator”, “personal data subject”, “depersonalisation”, “blocking”, and “destruction” are used as defined in article 3 of Law No. 152-FZ.

The operator does not ask for more data than is needed to answer a request. The website does not collect special categories of personal data or biometric data.

The set of data depends on the form:

• a quote or cost request — name, phone number, email, company name, selected service, approximate storage volume, a comment, and a file if the visitor attaches one;
• a question to an expert — name, a contact for the reply, and the question;
• a comment on a blog post — name, email (not published), and the comment;
• data the browser sends — IP address, browser type and language, page address, referrer and UTM tags, date and time of the visit, cookie identifiers.

The operator processes data only for the purpose for which the visitor provided it:

• to handle a request: contact the sender, clarify the brief, and prepare a reply;
• to calculate the cost of a specific project;
• to answer a question sent through the blog and, in depersonalised form, to publish typical answers;
• to publish a comment after moderation: only the name and the text are shown;
• to conduct pre-contractual correspondence and, if a contract is signed, to perform it;
• to collect depersonalised statistics on how visitors use the website.

The ground for processing is the data subject’s consent (item 1 of part 1 of article 6 of Law No. 152-FZ). Consent is given by ticking the field before the form is sent. The form cannot be sent without that tick.

If the parties move to negotiations and a contract, processing also relies on item 5 of part 1 of article 6 of Law No. 152-FZ — to conclude and perform a contract to which the data subject is a party.

Consent lasts until it is withdrawn. Withdrawal does not make processing that took place before the withdrawal unlawful.

The text confirmed by the tick is published separately: consent to personal data processing.

The operator collects, records, systematises, accumulates, stores, updates, extracts, uses, provides access to, depersonalises, blocks, deletes, and destroys personal data.

Processing is mixed, with and without automation. Databases that store form submissions are located on servers in the Russian Federation. Data is not shared beyond the cases in section 7.

The operator does not sell personal data, does not share it for advertising, and does not publish it except as described here. Form data goes only to the systems needed to handle the request:

• Bitrix24 CRM — requests from the website, processed and stored on servers in the Russian Federation under a contract that requires confidentiality and compliance with Law No. 152-FZ;
• Yandex Metrica (counter No. 111499971) — depersonalised visit statistics. The service receives visit data and cookie identifiers, but not the name, phone, email, or message text entered in a form.

Personal data is not transferred across borders and is not sent to foreign legal entities or individuals.

Data may be disclosed to public authorities only to the extent and on the grounds expressly provided by Russian law, for example in response to a reasoned request from a court or an investigative body.

Data is kept no longer than the purpose requires:

• quote form data — up to three years from the last request, or for the statutory retention period of the deal if a contract is signed;
• questions to experts and the related correspondence — up to one year from the reply;
• comments — while the article is published, or until the author asks to delete the comment;
• web analytics — for the period set by the statistics service.

A visitor who submitted data may:

• obtain confirmation that processing takes place, and information about its grounds, purposes, methods, and the persons who received the data;
• require incomplete, outdated, or inaccurate data to be corrected;
• require data to be blocked or destroyed if it was obtained unlawfully or is no longer needed for the stated purpose;
• withdraw consent;
• complain about the operator to Roskomnadzor or to a court.

A request, demand, or withdrawal of consent is sent to sales@fresh-logic.ru or by post to 140070, Moscow Region, Lyubertsy district, Tomilino, Pionerskaya st., 1B.

The message should identify the sender and the data: full name, the contact used in the form, and the substance of the demand. A representative attaches a document confirming authority.

The operator replies within thirty days of receipt. If the message is incomplete, the period starts again when the clarification arrives.

After a withdrawal, or once the purpose is achieved, the operator stops processing and destroys the data within thirty days, unless the law or a current contract requires otherwise.

The operator takes legal, organisational, and technical measures against unlawful access, destruction, alteration, blocking, copying, and distribution:

• access to the systems that store requests is limited to employees who need it for their work;
• the browser and the website exchange data over HTTPS;
• employees who handle requests are informed that personal data is confidential;
• backups are kept, and CRM access is available only under personal accounts;
• the operator monitors for unauthorised access and responds to incidents.

Cookies are small text files the website stores in the visitor’s browser so the site works correctly, remembers the traffic source, and does not count one visit several times.

Yandex Metrica (counter No. 111499971) collects depersonalised visit data: pages, depth, source, device, and browser.

Cookies can be disabled or deleted in the browser. The website remains available, but some functions, such as attributing the source of a request, may work less accurately.

The list of cookies, retention, and how to refuse analytics are described in the cookie policy.

The operator may change the policy if the law, the forms, or the services in use change. A new version takes effect when it is published at https://rfl.ru/politika-obrabotki-personalnyh-dannyh/, unless the version itself sets a later date.

Material changes are published before they apply. Visitors should read the current version before sending a form.

This version is effective from 8 September 2026.