Personal Data Processing Policy
1. General provisions
1.1. This Policy sets out how personal data of users of ewpr.by and its subdomains (the Site) is processed, in accordance with Law of the Republic of Belarus No. 99-Z of 7 May 2021 “On Personal Data Protection” (the Law).
1.2. The data controller (operator) is Ecowoodproduction LLC, payer account number (UNP) 391631372, registered by the Postavy District Executive Committee on 8 December 2022, registered office: 1 Zavodskaya St., Voropaevo, Postavy District, Vitebsk Region, 211830, Republic of Belarus. Contact e-mail for personal data matters: ecowoodpr@gmail.com.
2. Purposes, scope and retention
| Purpose | Data subjects and data | Legal basis | Retention |
|---|---|---|---|
| Handling an enquiry, preparing a quote or offer, contacting the applicant | People who submit a form on the Site: name, phone, e-mail, company name, message, order parameters, attached files (if they contain personal data) | Consent of the data subject (Art. 5 of the Law) | 3 (three) years from receipt of the enquiry; if a contract is concluded — the periods required by law for contract records |
| Handling a hotel booking request and contacting the guest | People who submit a booking request: name, phone, e-mail, arrival and departure dates, number of guests, wishes | Consent of the data subject (Art. 5 of the Law) | 3 (three) years from receipt of the request |
| Protecting the Site’s forms against automated and repeated submissions | Visitors submitting forms: IP address, e-mail address (as a technical submission counter) | Processing required to keep the Site secure and to meet the operator’s duty to protect personal data (Art. 17 of the Law) | No more than 1 day |
2.1. The operator does not process special categories of personal data and makes no decisions based solely on automated processing. The Site uses no web analytics or advertising cookies.
3. Consent
3.1. Consent is given separately by ticking the consent box in the Site’s form before sending it. Without consent the form cannot be sent. Silence, inaction or continued use of the Site is not consent.
3.2. Before consent is given, the operator informs the data subject of: the operator’s name and address (Ecowoodproduction LLC, payer account number (UNP) 391631372, registered by the Postavy District Executive Committee on 8 December 2022, registered office: 1 Zavodskaya St., Voropaevo, Postavy District, Vitebsk Region, 211830, Republic of Belarus); the purposes (handling the enquiry or booking, preparing a quote, contacting the applicant); the data (as entered in the form); the consent period (3 (three) years from submission); the actions (collection, systematisation, storage, alteration, use, depersonalisation, blocking, provision to authorised processors, deletion; mixed processing); authorised processors (section 4); and the data subject’s rights, including the right to withdraw consent at any time (section 5).
3.3. Refusing consent has no consequence other than not being able to send the form; you can still contact the operator using the contacts on the Site.
4. Transfer and storage
4.1. Personal data is stored in a database on a server located in the Republic of Belarus. Authorised processors acting under contract with the operator: the hosting provider (server in the Republic of Belarus) and the operator’s e-mail service provider.
4.2. Internal messenger notifications to staff about new enquiries contain no applicant personal data — only the type of enquiry, company name and a link to the protected admin panel.
4.3. Data entered in the Site’s forms is not transferred abroad. If a visitor allows external services in the cookie settings, watching an embedded YouTube video sends visitor data (IP address, browser data) to Google LLC (USA) — see the Cookie Policy.
5. Data subject rights
5.1. You may: withdraw consent at any time without giving reasons (Art. 10); obtain information about the processing of your data (Art. 11); require correction of incomplete, outdated or inaccurate data (Art. 12); obtain information on provision of your data to third parties once a year free of charge (Art. 13); require the processing to stop and the data to be deleted where there is no basis for processing (Art. 13); and appeal to the National Personal Data Protection Center of the Republic of Belarus (Art. 15).
5.2. To exercise your rights, send the operator a written application or an electronic document (Art. 14 of the Law) stating your full name, address, date of birth, identification number (or ID document number), the substance of your request and your signature. Consent may also be withdrawn the same way it was given — by e-mail to ecowoodpr@gmail.com from the address stated in your enquiry.
5.3. Requests for information are answered within 5 working days; correction, cessation of processing, deletion and withdrawal of consent are carried out within 15 days of receipt.
6. Security
6.1. The operator applies legal, organisational and technical measures to protect personal data (Art. 17 of the Law): a person responsible for internal control over personal data processing is appointed, enquiries are accessible only to authorised staff via a password-protected admin panel, and traffic is encrypted with HTTPS.
7. Final provisions
7.1. The operator may amend this Policy; the new version takes effect when published on the Site. Questions: ecowoodpr@gmail.com.