Privacy notice
Revised 1 October 2026 · version 2026-10-01.2
Draft notice for SvarVid.ru, SvarVid.com and the public Smartmetal site hosted on Sites. It distinguishes current website functions from the arrangements required before enquiry collection resumes.
1. Controller and scope
The project materials identify the company as ООО «Смартметал» (Smartmetal LLC). The controller’s complete identity, address and a verified privacy contact must be added before this notice is approved. See Legal information for the current contact and identification status.
This notice concerns website visitors and prospective enquirers. Employee data, signed-contract administration and recruitment require their own grounds and documentation; they are not covered by this draft.
2. What happens now
Enquiry fields and uploads are disabled. The application rejects new submissions before reading their contents and does not create enquiry records or attachments. Browsing, search, comparison and language switching remain available.
To deliver pages and protect the connection, hosting infrastructure receives technical request information, including IP address and browser information. Pausing the form does not eliminate all processing of technical data.
The website code contains no advertising pixels, third-party analytics or profiling features. Search and comparison operate within the current page; search text is not separately sent to the website database.
3. Proposed enquiry processing
Once setup is complete, the purpose is to answer the particular enquiry, clarify a technical task, prepare a quotation or arrange support. Enquiry consent must not be used as permission for advertising emails.
Data subjects are visitors, enquirers and business representatives. Proposed fields are name, company (optional), email or telephone, enquiry type, task description and product of interest; support requests also include model and serial number. An attachment is optional. The record also contains a reference, submission time, language, consent version and handling status.
Do not send identity documents, individuals’ payment details, health or other sensitive data, biometric data or third-party personal data without a lawful basis. Confidential drawings should only be shared after a suitable channel and NDA have been agreed.
Brochure requests
A separate form is planned for delivery of a selected PDF: company, recipient email and brochure identifier. These details are used to fulfil that document request. Requesting a brochure does not constitute marketing consent.
The form and automatic file delivery are currently disabled; visitor details are not accepted through it. Email delivery, initial data recording in Russia, processors and retention periods must be verified before activation. Documents can be requested by telephone.
4. Grounds and processing operations
The proposed form uses separate, voluntary enquiry consent. Visiting the website, reading this notice and giving consent are distinct actions; a page visit does not provide consent for enquiry processing or marketing.
Proposed operations are collection, recording, organisation, storage, updating, retrieval, use to respond, restriction, deletion and destruction, using automated systems and authorised staff. Enquiries are not intended for public disclosure.
Other grounds, such as contractual necessity or a legal obligation, apply only where their conditions are met. The ground for technical logs must be established after reviewing the actual hosting arrangements.
5. Recipients, storage and transfers
The current implementation uses Sites and Cloudflare D1/R2 for database and file storage. Russian localisation of the primary personal-data database has not been confirmed. Publishing this notice or checking a consent box is therefore insufficient to resume enquiries.
Before launch, the actual processor entities, countries of processing, Russian database location, access and deletion arrangements, and any international-transfer basis and safeguards must be identified. This draft does not authorise unrestricted disclosure to unspecified third parties.
There is no public enquiry list or public attachment download. The controller must limit staff access to what is necessary and confirm processor contracts and organisational safeguards.
6. Retention and ending processing
The proposed retention criterion is completion of the enquiry and the agreed follow-up discussion. Once the purpose ends or consent is withdrawn, data should be deleted unless another lawful ground requires retention. Contract-document retention must be specified separately.
Before approval, specific periods for enquiries, technical logs and backups, a responsible person and a deletion procedure must be established. Automatic deletion of previously received enquiries is not currently configured; this notice does not claim otherwise.
7. Rights and requests
You may request information about processing, correction of inaccurate data, cessation of unlawful processing and deletion where the applicable law provides for it, and withdraw consent. Withdrawal does not invalidate processing lawfully carried out beforehand.
Where GDPR or UK GDPR applies, rights to restriction, objection and portability may also apply subject to their legal conditions, together with the right to complain to the competent supervisory authority. Applicability depends on the controller’s activities and processing, not merely on the .com domain.
Identify the matter concerned and any existing enquiry reference. Do not attach a passport copy to an initial request. Until the listed mailboxes are confirmed operational, call the contact person to establish a channel for your request.
8. Updates
The date and version appear at the top. Before enquiries resume, this draft must be completed with factual information and approved by the controller. Changes do not retrospectively expand any earlier consent.