Personal Data Processing Policy

UralAgro LLC · version of 10 October 2026

This is a translation provided for convenience. The legally binding version of this policy is the Russian text. Read the Russian original

1. General provisions

This policy sets out how UralAgro Limited Liability Company (OOO «UralAgro») (INN 5612165537, OGRN 1165658076616, Samara; the “Operator”) processes and protects personal data in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.

The policy applies to all information the Operator receives through the website uralagrorus.ru, its forms and the buyer account, as well as by phone, email and messengers when preparing and performing transactions.

2. What data we process

Farm request “Sell your crop”: name or farm name, phone number, district or region, information about the crop (crop, volume, price), comments.

Buyer registration and account: email address, last name, first name, position, phone number, company details (name, taxpayer ID, country), documents for counterparty verification, history of requests, reservations and deals.

Technical data: IP address, browser and device information, cookies, data on pages visited — including through the Yandex.Metrica web analytics service.

3. Purposes of processing

To contact you about your request and discuss the price, quality, volume and pickup of the crop.

To conclude and perform a supply or purchase contract and to issue specifications, invoices and shipping documents, including in the FGIS Zerno system.

To verify the counterparty before opening lot quality data and reservations.

To provide access to the personal account and to send notifications about new lots under your alerts.

To improve the website based on anonymised visit statistics.

4. Legal grounds

The consent of the data subject (Clause 1, Part 1, Article 6 of Law 152-FZ), which you give by submitting a request or registering on the website.

The conclusion and performance of a contract to which the data subject, or the company they represent, is a party (Clause 5, Part 1, Article 6 of Law 152-FZ).

The performance of obligations imposed on the Operator by law: accounting and tax records, grain traceability (Clause 2, Part 1, Article 6 of Law 152-FZ).

5. How we process data

The Operator collects, records, systematises, stores, updates, uses, transfers (in the cases below), anonymises, blocks and deletes personal data, with and without the use of automation tools.

Databases containing the personal data of Russian citizens are located in the Russian Federation (Part 5, Article 18 of Law 152-FZ).

Data is transferred to third parties only to perform a transaction and to comply with the law: to carriers, laboratories, elevators, banks and state information systems — to the extent necessary for the specific operation. Data is never sold or transferred for advertising.

Farm data is not published on the website: in the catalogue a lot is anonymised — code, quality, volume, price and shipment point, without the farm's name or district. Buyers in the public feed are shown only by a masked name and country.

Data is stored for as long as it is needed for the purposes of processing or until consent is withdrawn; transaction documents are kept for the periods set by accounting and archiving legislation.

6. Your rights

To obtain information about the processing of your data and to demand that it be corrected, blocked or deleted if it is incomplete, outdated or processed unlawfully.

To withdraw your consent to processing by writing to the Operator. After withdrawal, data is deleted within 30 days unless its retention is required by law or contract.

To appeal against the Operator's actions to Roskomnadzor (the Russian data protection authority) or in court.

7. Data protection

Only employees who need data for their work have access to it; access to the system is protected by a password and a second factor, and actions are logged. The connection to the website is encrypted (HTTPS).

8. Cookies and web analytics

The website uses cookies to sign in to the account and the Yandex.Metrica service to count visits. You can disable cookies in your browser settings: the website will remain available, but signing in to the account will not work.

9. Contacts

Send questions about the processing of personal data, withdrawals of consent and requests to uralagrorus@mail.ru. We will reply within 10 business days.

The Operator may update this policy; the current version is always on this page. Version of 10 October 2026.

Personal Data Processing Policy · UralAgro