Version 2026-10-11
Organization data processing instruction
1. Parties and scope
The authorized organization owner instructs the provider named in Contacts to process workspace data for customer records, bookings/resources, work and approval, object inspection, history, internal payment records, export, support and recovery. This instruction forms part of the service agreement and is accepted separately at setup; version, account, organization and time are recorded.
2. Data and operations
Data covers customer/staff names and contacts, roles, object/vehicle details, bookings, work, object photos and comments. Operations include collection from organization input, recording, organization, accumulation, storage, correction, retrieval, use, permitted staff/customer-link access, restriction, anonymization, deletion and destruction. Public dissemination, advertising, special categories and biometric identification are excluded.
3. Provider duties
Process only documented purposes and actions; preserve confidentiality, the stated security measures and Russian hosting. Provide relevant evidence of performance and safeguards on a justified request and assist with rights, correction and erasure. Service recipients and backups follow the privacy policy. New recipients and overseas access require prior agreement. Customer data is not sold or used to train external models.
4. Organization duties and incidents
The organization supplies lawful bases, notices and authorization and manages accurate data and permissions. It remains responsible to its data subjects; the provider is responsible to the organization for its instruction. The provider informs the organization of discovered unlawful disclosure/access without undue delay, targeting within 12 hours after discovery, with available facts to support statutory notifications. Contact uses the owner email and support@trassami.ru. On termination, export and erasure follow the privacy policy; confidentiality continues and required records remain only on other lawful bases.