Privacy policy

This Privacy Policy for Personal Data (hereinafter referred to as the Privacy Policy) applies to all information that Kaliningrad wagon-building factory JSC (hereinafter referred to as KVZ JSC) may receive about a User while browsing a website located on the Internet on a domain name https://www.kvz39.ru (hereinafter referred to as the "Site").

1. DEFINITION OF TERMS

1.1 The following terms are used in this Privacy Policy:
1.1.1. "Site Administration" means authorized employees for the management of the site who organize and (or) process personal data, as well as determine the purposes of personal data processing, the composition of personal data to be processed, and actions (operations) performed with personal data.
1.1.2. "Personal Data" means any information relating directly or indirectly to a specific or identifiable natural person (personal data subject).
1.1.3. "Personal data processing" means any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
1.1.4. "Confidentiality of personal data" is a mandatory requirement for the Operator or other person who has access to personal data to prevent their dissemination without the consent of the personal data subject or other legitimate grounds.
1.1.5. "Site User" (hereinafter referred to as the User) is a person who has access to the Site via the Internet and uses the Site.
1.1.6. "Cookies" are a small piece of data sent by a web server and stored on the user's computer, which the web client or web browser sends each time to the web server in an HTTP request when trying to open the page of the corresponding site.
1.1.7. "IP address" is a unique network address of a node in a computer network built using the IP protocol.

2. GENERAL PROVISIONS

2.1. The User's use of the Website means acceptance of this Privacy Policy and the terms of processing of the User's personal data.
2.2. In case of disagreement with the terms of the Privacy Policy, the User must stop using the Site.
2.3. This Privacy Policy applies only to this website. The Site Administration does not control and is not responsible for third-party sites to which the User can click on the links available on the Site.
2.4. The Website Administration does not verify the accuracy of the personal data provided by the Website User.

3. SUBJECT OF THE PRIVACY POLICY

3.1. This Privacy Policy establishes the obligations of the Site Administration to keep confidential and ensure the confidentiality of personal data that the User provides at the request of the Site Administration when registering on the Site or when placing an order to purchase Goods, provide Services or perform Work.
3.2. Personal data authorized for processing under this Privacy Policy is provided by the User by filling out the form on the Website and may include the following information:
3.2.1. last name, first name, patronymic of the User;
3.2.2. User's contact phone number;
3.2.3. e-mail address (e-mail);
3.2.4. the address of the delivery of the Goods or the place of provision of Services (if required);
3.2.5. the User's place of residence (if required).
3.3. The Website protects Data that is automatically transmitted during viewing of ad blocks and when visiting pages where the statistical script of the system ("pixel") is installed:

• IP address;
• information from cookies;
• information about the browser (or other program that provides access to the display of ads);
• Access time;
• the address of the page where the ad block is located;
• the referrer (the address of the previous page).

3.3.1. Disabling cookies may result in the inability to access parts of the Site that require authorization.
3.3.2. The Website collects statistics on the IP addresses of its visitors. This information is used to identify and resolve technical problems and to monitor the legality of financial payments.
3.4. Any other personal information not mentioned above (purchase history, browsers and operating systems used, etc.) is subject to secure storage and non-disclosure, except as provided in clauses 5.2. and 5.3. of this Privacy Policy.

4. PURPOSES OF COLLECTING THE USER'S PERSONAL INFORMATION

4.1. The Site Administration may use the User's personal data for the following purposes:
4.1.1. Identification of the User registered on the Site, for placing an order and (or) concluding a Contract for the purchase and sale of goods or services remotely.
4.1.2. Providing the User with access to personalized Site resources.
4.1.3. Establishing feedback with the User, including sending notifications, requests regarding the use of the Site, provision of services, processing requests and requests from the User.
4.1.4. Determining the User's location to ensure security and fraud prevention.
4.1.5. Confirmation of the accuracy and completeness of the personal data provided by the User.
4.1.6. Creation of an account for making purchases or ordering services, if the User has consented to the creation of an account.
4.1.7. Notifications of the Website User about the Order status.
4.1.8. Processing and receiving payments, confirming taxes or tax benefits, challenging payments, determining the right to receive a credit line by the User.
4.1.9. Providing the User with effective customer and technical support in case of problems related to the use of the Website.
4.1.10. Providing the User with his consent, product or service updates, special offers, pricing information, newsletters and other information on behalf of the Site or on behalf of the Site's partners.
4.1.11. Carrying out advertising activities with the User's consent.
4.1.12. Providing the User with access to the sites or services of the Site's partners in order to receive products, updates and services.

5. METHODS AND TERMS OF PERSONAL INFORMATION PROCESSING

5.1. The processing of the User's personal data is carried out without time limit, in any lawful way, including in personal data information systems using automation tools or without the use of such tools.
5.2. The User agrees that the Site Administration has the right to transfer personal data to third parties, in particular, courier services, postal organizations, telecommunication operators, solely for the purpose of fulfilling the User's order placed on the Site, including the delivery of Goods, Services or Work.
5.3. The User's personal data may be transferred to authorized persons state authorities of the Russian Federation only on the grounds and in accordance with the procedure established by the legislation of the Russian Federation.
5.4. In case of loss or disclosure of personal data, the Site Administration informs the User about the loss or disclosure of personal data.
5.5. The Site Administration takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties.
5.6. The Site Administration, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.

6. OBLIGATIONS OF THE PARTIES

6.1. The User is obliged to:
6.1.1. Provide information about personal data necessary for using the Website.
6.1.2. Update and supplement the information provided about personal data in case of changes to this information.
6.2. The Site Administration is obliged to:
6.2.1. Use the information received exclusively for the purposes specified in clause 4 of this Privacy Policy.
6.2.2. Ensure that confidential information is kept confidential, not disclosed without the User's prior written permission, and not sold, exchanged, published, or otherwise disclosed the User's personal data, with the exception of clauses 5.2. and 5.3. of this Privacy Policy.
6.2.3. Take precautions to protect the confidentiality of the User's personal data in accordance with the procedure usually used to protect such information in the existing business environment.
6.2.4. To block personal data related to the relevant User from the moment of the request or request of the User or his legal representative or the authorized body for the protection of the rights of personal data subjects for the verification period, in case of identification of false personal data or illegal actions.

7. LIABILITY OF THE PARTIES

7.1. The Site Administration, which has not fulfilled its obligations, is liable for losses incurred by the User in connection with the misuse of personal data, in accordance with the legislation of the Russian Federation, except for the cases provided for in clauses 5.2., 5.3. and 7.2. of this Privacy Policy.
7.2. In case of loss or disclosure of Confidential Information, the Site Administration is not responsible if this confidential information is:
7.2.1. Became public domain before its loss or disclosure.
7.2.2. It was received from a third party before it was received by the Site Administration.
7.2.3. It was disclosed with the User's consent.

8. DISPUTE RESOLUTION

8.1. Before filing a claim with the court for disputes arising from the relationship between the Site User and the Site Administration, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute).
8.2. The recipient of the claim shall, within 30 calendar days from the date of receipt of the claim, notify the claimant in writing of the results of the claim review.
8.3. If no agreement is reached, the dispute will be referred to a judicial authority in accordance with the current legislation of the Russian Federation.
8.4. The current legislation of the Russian Federation applies to this Privacy Policy and the relationship between the User and the Site Administration.

9. ADDITIONAL CONDITIONS

9.1. The Site Administration has the right to make changes to this Privacy Policy without the User's consent.
9.2. The new Privacy Policy comes into force from the moment it is posted on the Website, unless otherwise provided by the new version of the Privacy Policy.
9.3. All suggestions or questions regarding this Privacy Policy should be sent to the following email address: secretar@kvz39.ru
9.4. The current Privacy Policy is posted on the page at https://kvz39.ru/en/privacy-policy.

Revision: December 30, 2025

Kaliningrad wagon-building factory JSC,
49 Vagonostroitelnaya str., Kaliningrad, 236010, Russian Federation
IIN/RRC: 3905031160 / 390601001, OGRN: 1023900764293