Privacy & cookies

1. Who is responsible?

The controller and owner of AERON is Individual Entrepreneur Ismailova Shakhnoza Avazbekovna (ИП Исмаилова Шахноза Авазбековна). Russian tax ID (INN): 772618062800. Sole trader registration number (OGRNIP): 320774600034147. Postal address for privacy requests: 117405, Moscow, Varshavskoye Shosse, 141, 11, 10, Russia. Telephone: +7 (985) 364-27-64.

You can send access, correction, erasure and consent-withdrawal requests by post to this address, or call for assistance. Email for enquiries and privacy requests: sales@aeron-steel.ru.

This website serves business customers. Its English version does not change the identity or location of the supplier. GDPR applies where its territorial conditions are met. Any required EU representative or data protection officer and their contact details must be identified before relevant processing starts. No such appointment has been confirmed.

2. Data, purposes, legal bases and retention

The form processes your full name, company, telephone, email, optional comments and steel specification, including grades, dimensions, weight and delivery calculations. The four contact fields are required for form submission. Browsing and calculations remain available without them; you may also contact us by phone or email.

The form obtains separate consent to process an enquiry under GDPR Article 6(1)(a), where applicable. Read the consent text for its scope, duration and withdrawal method. Contractual steps or legal record-keeping duties may have a separate basis under Articles 6(1)(b) or (c). Consent to an enquiry is not consent to advertising. Optional theme storage relies on separate consent under Article 6(1)(a), which does not cover marketing.

Before submission, your entries are held in page memory. “Send enquiry” transmits them to the website server, which validates the fields and hands a text email to its mail transport for delivery to sales@aeron-steel.ru. The handler does not create an enquiry database. Hosting and email services may still retain queues, logs and backups; their actual retention periods and processing locations have not yet been confirmed.

Abuse prevention uses a hash of the network address and attempt counters, with a 15-minute per-address window and a one-hour global window. Expired counters are removed on the next eligible request; temporary-file retention also depends on server configuration. Enquiry content is not stored in this file.

Enquiries are handled until resolved; further retention requires a separate purpose and legal basis, including applicable contract and accounting duties. The controller must establish and implement the actual deletion schedule for correspondence, queues and backups. This schedule remains unconfirmed.

Yandex Metrica analytics runs only after separate consent. The website does not enable marketing emails or automated decisions with legal or similarly significant effects. Do not submit sensitive, biometric or children’s data. Calculations are indicative.

3. Cookies, preferences and Yandex Metrica

Necessary localStorage remembers your cookie decision. Theme storage and analytics are separate optional categories, off before explicit consent. “Accept all” enables both, “Necessary only” declines both, and “Settings” offers individual choices. Closing the notice or scrolling is not consent. Browsing, calculators and enquiry submission remain available with either choice.

Analytics consent loads Yandex Metrica counter 112567681. The recipient is YANDEX LLC, Russia. To measure visits and improve the website, the service may process network addresses, browser identifiers, device information, visited page and referral URLs, clicks, scrolling and Session Replay interactions. Enquiry fields are marked as excluded from recording; contact details and enquiry text are not sent to dataLayer. The basis is separate analytics consent (GDPR Article 6(1)(a), where applicable). This does not authorise marketing emails or replace required international-transfer safeguards.

Full Metrica cookie inventory and durations · Yandex privacy policy. Actual records depend on browser and service settings; records on Yandex domains may outlast the website consent duration. The controller must establish report-retention settings and the service contractual arrangements.

Withdraw at any time using “Cookie settings” in any footer: choose “Necessary only” or disable just analytics. The counter stops and accessible _ym* records on this website are removed. This does not erase data already sent or records on Yandex domains; contact the controller about erasure. We keep your refusal to avoid asking repeatedly. Clear browser storage to reset the notice. Previous theme permission is not converted into analytics consent; the updated notice asks again.

4. Sending an enquiry and downloading a specification

“Send enquiry” sends the form to the server for emailing to sales@aeron-steel.ru. “Accepted for sending” means that the server mail transport has accepted the message. It does not confirm inbox delivery, stock availability or a concluded contract. If submission fails, your entries remain in the form and you can contact us by phone or email.

“Download specification” saves a text file on your device without sending it to the server. You control its deletion. Do not include passport numbers, health information or unnecessary information about other people.

5. Recipients and international transfers

Company staff handling an enquiry, hosting providers and email service providers may be relevant recipients. Their identities, roles, access and processing locations must be verified. The website code does not directly send specifications to mills in China. Hosting cannot currently be described as exclusively located in Russia or the EEA.

Where applicable, processor contracts and lawful safeguards for transfers outside the EEA are required. No adequacy decision, standard contractual clauses or transfer assessment is confirmed by this notice. The form now sends data to the server. Before enabling it on your hosting, Russian localisation and cross-border notification obligations require an operational review, including queues and logs. The English translation itself does not satisfy these obligations. See the EDPB transfer guidance.

6. Your choices and rights

Where GDPR applies, you may request access, correction, erasure, restriction or portability where their conditions are met, object to legitimate-interest processing, and withdraw consent without affecting earlier lawful processing. You can complain to a competent supervisory authority, including in your habitual residence or place of work.

Send privacy requests by post to the controller at 117405, Moscow, Varshavskoye Shosse, 141, 11, 10, Russia. Describe the request without sending identity documents in the first message. Identity verification should be proportionate. The GDPR response period is generally one month; permitted extensions require notification and reasons within that month. See the EDPB guide to your rights and the European data protection authorities.

7. Security and changes

The website does not persist enquiry fields in its own browser storage. The controller must verify access controls, provider agreements, deletion procedures and incident handling for hosting and received email. It must update this notice when the processing changes and obtain new consent before introducing optional tracking. The revision date above identifies this notice.

References: GDPR — official text; CNIL guidance on cookies and consent.

Business and bank details