Personal Data Processing Policy
Edition of 24 September 2026. The unified policy of Biocard Logistics LLC applies to all personal-data processing, including biocard.com and its subdomains. English translation of the published Russian policy.
1. General provisions
This Policy sets out the procedure for processing and protecting personal data at Biocard Logistics LLC (the controller) and fulfils the requirement of Article 18.1(2) of Russian Federal Law No. 152-FZ of 27 July 2006, On Personal Data.
Controller: Biocard Logistics LLC (ООО «Биокард Логистикс»), OGRN 1057749274384, INN 7734535394. Address: 123423, Moscow, Karamyshevskaya Embankment, 44, premises 14, Russian Federation.
The Policy applies to all personal data processed by the controller: data obtained through biocard.com (contact forms, quotation forms and the AI assistant chat), correspondence and calls, conclusion and performance of contracts with customers and contractors, transport, storage and release of cargo, and data of employees and job applicants. This Policy replaces the controller's 2023 personal-data policy.
2. Data we process
| Source | Data |
|---|---|
| Website forms and chat | Name or company name, telephone number, email address, enquiry text and the page from which the enquiry is made. |
| Technical data | IP address, browser and device information, date and time of the enquiry and anonymised visit statistics. |
| Correspondence and calls | Enquiry content and contact details you provide yourself. |
| Customers and their representatives | Surname, first name and patronymic, position, telephone number, email address, power of attorney and electronic signature details, and client account login data. |
| Cargo senders and recipients | Surname, first name and patronymic, telephone number and collection or delivery address; on release of cargo, identity document details and the recipient's signature. |
| Contractors, carriers and drivers | Surname, first name and patronymic, telephone number, driving licence and vehicle details, and trip information. |
| Employees and applicants | Information required by employment law and information in applicants' CVs. |
The controller does not collect special categories of personal data or biometric personal data through the website. Employees' health information is processed only in cases provided for by employment law. The website is not intended to collect data of minors.
3. Purposes of processing
- considering an enquiry and preparing a response, including a quotation;
- preparing, concluding and performing a contract, and communicating about transport and storage;
- receiving, transporting, storing and releasing cargo, including checking the recipient's authority;
- international transport and arranging customs clearance;
- accounting, tax records and electronic document exchange;
- recruitment, personnel records and compliance with employment law;
- improving service quality and the website, and anonymised analytics and statistical research;
- sending information and advertising materials, only with separate consent.
4. Legal grounds
Processing is based on the data subject's consent, a contract to which the subject is a party or beneficiary (including a cargo recipient), and requirements of Russian law, including legislation on medicines, freight forwarding, customs regulation, accounting and employment. Customers provide sender and recipient data where legal grounds exist (clause 13.5 of the General Terms of Service — in Russian).
5. Processing and retention periods
Processing is performed with and without automated means and includes collection, recording, systematisation, accumulation, storage, clarification, use, transfer, anonymisation, blocking, deletion and destruction.
- Enquiries and correspondence: up to three years from the last interaction.
- AI assistant conversations: up to 12 months, then automatically deleted.
- Contract-related documents, including sender and recipient data in transport and primary accounting documents: for periods established by law.
- Applicant data: until a recruitment decision, but no longer than 30 days unless the applicant consents to inclusion in a talent pool.
- Employee data: for periods established by employment and archival law.
- After withdrawal of consent, processing stops and data is deleted within 30 days, except where retention is required by law.
Data is stored and processed on servers located in the Russian Federation.
6. Transfer to third parties
The controller does not sell personal data or transfer it for third-party advertising. Transfer may take place:
- to parties engaged to perform the contract with you (carriers, warehouses and contractors), to the extent needed for transport or storage;
- to service providers processing data on the controller's instructions, subject to confidentiality;
- to public authorities in the cases and to the extent provided for by law.
Cross-border transfer takes place only where necessary to perform an international transport and customs-clearance contract. Sender and recipient information is transferred, to the extent needed for transport, to carriers, agents and customs representatives in the countries of origin, transit and destination. Transfer complies with Article 12 of Federal Law No. 152-FZ, including notification of Roskomnadzor of the cross-border transfer.
7. Data protection
The controller takes legal, organisational and technical measures: restricting access according to job requirements, separating access rights, secure transmission channels, backups, logging actions involving data, employee training and internal controls.
8. Your rights
- Obtain information about the processing of your data and the data involved.
- Request clarification, blocking or destruction of incomplete, outdated or unlawfully obtained data.
- Withdraw consent at any time.
- Challenge the controller's actions before Roskomnadzor or a court.
Send a request to t.botkin@biocard.com or by post to the controller's address. A response is provided within 30 days. For identification, include your surname, first name and patronymic and information confirming your interaction with the controller.
9. Cookies, analytics and the AI assistant
The use of cookies and web analytics is described in the Cookie Policy — in Russian. The processing of chat conversations is described in the AI Assistant Terms — in Russian.
10. Changes
The controller may amend the Policy. The current edition is published on this page, with its edition date at the beginning. From 24 September 2026, this Policy replaces the controller's 2023 personal-data policy.