Data Processing Notice

What data is collected

When you submit a request through the contact form, we collect the following data:

Name — so we can address you properly;
Phone number — so we can contact you;
Message (optional) — the text of your enquiry;
Consent to personal data processing — by submitting the form you consent to the processing described below.

Purposes of processing

Personal data is processed solely for the following purposes:

responding to your enquiry;
providing insurance consultancy and brokerage services.

Retention period

Personal data is retained for 90 (ninety) days from the date of receipt, after which it is automatically deleted. Data may be deleted earlier upon your request (see "Your rights" below).

Storage location

Data is stored on a server located within the Russian Federation (cloudru cloud infrastructure). Some data may be transmitted to the Telegram service for prompt notification (see "Transfer of data to third parties").

Transfer of data to third parties

To promptly notify our staff of new enquiries, your personal data (name, phone number, message text) may be transmitted via the Telegram service (Telegram FZ-LLC, UAE). Transmission is encrypted (TLS/HTTPS). Telegram may process data on servers located outside the Russian Federation.

By submitting the form, you consent to this transfer. You may withdraw your consent at any time (see "Your rights" below).

Technical safeguards

The following measures are applied to protect personal data:

encryption in transit (TLS/HTTPS);
daily encrypted backup of records (AES-256);
access restricted to authorised personnel of the Operator only;
automatic deletion upon expiry of the retention period.

Your rights (152-FZ, Arts. 14–21)

Under Russian Federation Federal Law No. 152-FZ, you have the right to:

Right of access — obtain information about what personal data of yours is processed and how;
Right to rectification — request correction of incomplete, outdated, or inaccurate data;
Right to erasure — request deletion of your personal data;
Right to restriction of processing — request blocking of data pending verification or correction;
Right to withdraw consent — withdraw your consent to processing at any time;
Right to lodge a complaint — apply to the competent authority (Roskomnadzor) or to a court if you believe the Operator has acted unlawfully.

How to exercise your rights

To exercise any of the rights listed above, send a request to:

info@gcg.expert

Your request should include:

your full name;
contact details for a reply;
a description of the action you are requesting (access, correction, deletion, withdrawal of consent, etc.).

Requests are processed within 30 days of receipt, in accordance with Arts. 20–21 of Federal Law No. 152-FZ.