Personal data requests

Three kinds of request can be filed through the website: withdraw consent and delete data; obtain information about the data held about you; correct data. A request concerns data you left on this website.

Fill in the form on this page. If the form is unavailable, send the request by e-mail to info@grano-market.ru or by post to Bldg. 9, 15 Malaya Kaluzhskaya St., Donskoy Municipal District, Moscow, 119071, Russia: state the type of request, full name, document details, phone or email and, if possible, the date and number of your enquiry.

So that data does not reach a third party, the operator verifies identity to the extent the law requires: full name, details of the main identity document (series and number, issue date, authority) and details confirming your relationship with the operator — phone, email, date and number of the enquiry.

If you gave an email, a confirmation link is sent to it; the link is valid for 72 hours and following it serves as the electronic signature of the request. If only a phone is given, a manager confirms the request by calling. Until submission is confirmed the request is not processed and nothing is deleted.

A request through a representative states the representative’s full name and the basis of authority: a power of attorney made under Articles 185 and 185.1 of the Civil Code of the Russian Federation or another document confirming the authority. Document details are used only for comparison and are deleted when the request is closed.

Withdrawal and deletion — 30 calendar days. Information request — 10 working days; the period can be extended by no more than 5 working days with a reasoned notice. Correction — 7 working days. A period runs from the confirmation of submission; the request number and the due date are shown as soon as it is confirmed.

Deletion irreversibly destroys the person’s enquiries with all earlier versions, service records for duplicate and rate protection and, after the answer, the request’s own data including the document details. Backups (earlier versions of records) are deleted with them, and any remaining on the retention cycle within 7 days at the latest.

The record of destruction and minimal request metadata without contact details remain: they are kept for 3 years as evidence that the request was carried out.

Data is stored in a database located in the Russian Federation, on the primary and reserve sites of the two Russian hosting providers named in the privacy policy. The manager receives only a notice with the request number and a link to the closed administration area. Personal data is not sent to Telegram or other messengers; Yandex Metrica receives data only after your consent.

If identity cannot be verified or another lawful basis requires processing to continue, the operator sends a reasoned refusal within the same period. The decision to delete is taken by an authorised administrator of the operator.