1. General
1.1. This Policy sets out how the personal data of visitors to https://ledxpo.com (the "Website") is processed and protected.
1.2. The personal data operator:
Limited Liability Company "LED EXPO Group" Short name: LLC "LED EXPO Group" (ООО «ЛЕД ЭКСПО Групп») OGRN 5157746270600, INN 7722351473, KPP 772201001 Registered address: 50 Aviamotornaya St., bldg. 2, floor 2, unit XI, room 21, Lefortovo District, Moscow 111024, Russia Email: info@ledexpogroup.ru Phone: +7 915 108-54-92 (Russian number)
referred to below as the Operator.
1.3. This Policy has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and other applicable legislation of the Russian Federation.
1.4. It applies to data received when visiting the Website, using the calculator, sending an enquiry or a file, and when contacting the Operator by the phone number or email address given on the Website.
1.5. This Policy is not itself a consent to the processing of personal data. Consent is requested separately and is not bundled with acceptance of the Terms of Use or with marketing consent.
2. Whose data and what data
2.1. The Operator processes data of visitors to the Website, prospective clients, clients and representatives of organisations that make enquiries.
2.2. The following may be processed through the Website form:
- name;
- company name;
- phone number and email address: both fields are required in the enquiry form and in the pop-up window, because an enquiry with only one channel of contact often goes unanswered;
- the name of the exhibition, the city and the intended dates;
- booth size and budget;
- the calculator configuration, add-ons and the approximate cost;
- the name, contents and technical properties of any attached design or brief;
- text and other information the visitor chooses to include in the enquiry or the file;
- the page address, date and time of submission, the consent version and the result of the submission.
2.3. When the Website loads and the server is contacted, the following may be processed automatically: IP address, date and time of the request, the address of the requested page, the referral source, browser type and version, operating system, device information, request headers and technical log entries.
2.4. The Operator does not ask you to send passport data, health information, political or religious views, biometric data, bank card details or other special or excessive information through the Website. Please do not include such information in the form or in uploaded files.
2.5. If a file contains the personal data of third parties, the sender confirms that there is a lawful basis for passing it to the Operator.
3. Purposes, legal bases and retention periods
3.1. Receiving an enquiry and preparing a quote
Purposes: receiving and reviewing the enquiry, clarifying the details of the exhibition, preparing a concept, a quote, a commercial proposal or a draft contract, and contacting the enquirer by the means they have chosen.
Legal bases: the visitor's separate consent; steps taken at the data subject's initiative prior to entering into a contract.
Retention: until work on the enquiry is complete, and no longer than one year from the last substantive contact, if no contract is concluded and further retention is not required by law.
3.2. Working with an attached design or brief
Purposes: reviewing the requirements, preparing a booth concept, a technical solution and a quote.
Legal bases: the visitor's separate consent; steps prior to entering into a contract.
Retention: until work on the enquiry is complete, and no longer than one year if no contract is concluded. The file may be deleted earlier at the sender's request, unless the law requires it to be kept.
3.3. Concluding and performing a contract
Purposes: agreeing terms, concluding and performing a contract, business correspondence, settlements, accounting and tax records, and protecting the rights of the Operator and the client.
Legal bases: conclusion and performance of a contract; compliance with obligations imposed by law; the legitimate interests of the parties within the limits permitted by law.
Retention: for the term of the contract and for the document retention periods, limitation periods and other periods laid down by law.
3.4. Security and operation of the Website
Purposes: protection against attacks and abuse, fixing errors, investigating incidents and keeping the form working.
Legal basis: the legitimate interests of the Operator, subject to respect for the visitor's rights.
3.5. Marketing messages
Purposes: sending news, offers and materials.
Legal basis: a separate marketing consent. Refusing it does not affect the handling of an enquiry.
Retention: one year from the date consent is given, or until it is withdrawn, whichever comes first.
4. Processing operations and methods
Collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, transfer to the recipients named in section 6, blocking, deletion and destruction. Both automated and non-automated processing may be used.
5. Cookies, third-party resources and analytics
5.1. Information about cookies and third-party resources is set out in the separate Cookie Policy.
5.2. The Website uses Yandex Metrica (number 111871470) with click maps and Webvisor. The counter loads when the page opens; a visitor may refuse analytics using the button in the cookie banner, after which the counter does not start and its cookies are deleted. Refusal does not affect the ability to send an enquiry. Metrica is a service of LLC "YANDEX" with servers in the Russian Federation. The contents of the enquiry form fields are excluded from Webvisor recordings: the fields are marked with an attribute that prohibits recording. The information collected and the cookies used are described in the Cookie Policy.
5.2.1. The internal LX_ANALYTICS event queue runs in the memory of the open page and does not store a visitor identifier in cookies or local storage.
6. Recipients and processors
6.1. Data may be accessed by employees of the Operator whose duties require it, to the extent necessary.
6.2. The Operator may instruct a processor to handle data: Russian hosting, a Russian CRM system, corporate email, technical support and other services required for the form to work, provided there is a data processing agreement in place and security and localisation requirements are met.
6.3. Data may be provided to state authorities on the grounds and in the manner prescribed by law.
7. Localisation and cross-border transfer
7.1. Recording, systematisation, accumulation, storage, clarification and retrieval of the personal data of citizens of the Russian Federation is carried out using databases located in the Russian Federation, in accordance with Article 18(5) of Federal Law No. 152-FZ.
7.2. Enquiry data is stored on a server in the Russian Federation and is sent to a Russian CRM system.
7.3. The Operator does not transfer the contents of enquiries to foreign services. The notification sent to the manager about a new enquiry contains no personal data: it carries only the enquiry number, the time and a link to the record.
7.4. If cross-border transfer becomes necessary in future, it will be carried out only after the requirements of Article 12 of Federal Law No. 152-FZ have been met, including notification of the supervisory authority.
8. Security
8.1. The Operator applies legal, organisational and technical measures to protect personal data against unlawful access, destruction, alteration, blocking, copying and distribution.
8.2. Measures include: transmission over HTTPS, restricted access to enquiry records, storage of files outside the public part of the Website, protection against automated submissions, and rate limiting.
9. Your rights
9.1. You have the right to obtain information about the processing of your data, to request that it be corrected, blocked or deleted, to withdraw consent and to complain to the supervisory authority.
9.2. Requests should be sent to info@ledexpogroup.ru. The Operator responds within the period prescribed by law.
9.3. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
10. Changes to this Policy
The current version is always published on this page. Material changes take effect from the date of publication.