Privacy Policy
Version dated [publication date]. Applies to taminota.com, www.taminota.com, steel.taminota.com, and all their subdomains and sections, including the TAMINOTA STEEL division website at taminota.com/steel/.
Personal data operator: [full legal entity name] (the bureau, we), taxpayer ID [TIN], address: [postal address], Tashkent, Republic of Uzbekistan. Email for personal data enquiries: info@taminota.com. Phone: +998 99 011 62 29.
This policy is drawn up in accordance with the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 of 2 July 2019 (the Law). It describes what data the bureau's websites receive, why, where the data is stored, to whom it is disclosed, and how you can exercise control over it.
1. Terms
- Personal data — information relating to an identified or identifiable natural person: name, phone number, email address, messenger username.
- Data subject — the natural person the personal data relates to: you, when you send a request or write to us.
- Processing — any operation on data: collection, storage, use, transfer, destruction.
- Operator — the bureau, which determines the purposes of processing and processes the data.
- Request — a message sent through a form on any of the websites: a price request, a part-number match, an industry enquiry, a partnership proposal, a steel products request.
2. Scope
The policy covers all pages of the listed websites in all languages and any correspondence that starts from these websites. It does not cover the social networks and messengers linked from the footer (Telegram, Instagram, LinkedIn); their own rules apply there.
The websites are intended for enterprises and procurement professionals. We do not knowingly collect data of persons under 18.
3. What data we receive and where it comes from
3.1. Request forms
You enter the data yourself. The set of fields depends on the form.
| Website and form | Fields | Required |
|---|---|---|
| taminota.com — price request, selection, industry enquiry, contact form | what you need (item, part number or description), name, contact (phone or email), company, "urgent" and "price list needed" flags | item, contact; name where the form asks for it, otherwise the request records "Name not given" |
| taminota.com — partnership | cooperation format, name, company, contact, note | name, contact |
| TAMINOTA STEEL — steel products request | item (grade, size, standard), tonnage, delivery city, name, company, contact, comment | item, name, contact |
To each request the server adds: a number (TMN-Z-…, TMN-P-… or TMS-Z-…), date and time of submission, page language, the address of the page the form was sent from, and a processing status. Bureau staff may later add internal notes on the progress of the request.
3.2. Correspondence
If you reply to us by email, phone or Telegram, we receive the data you provide in the correspondence and the technical data of the channel: sender address, phone number, first and last name, Telegram username and account identifier, to the extent the messenger passes them to the other party under its own rules. If you contact the bureau through its Telegram bot, the bot records your name, username and Telegram identifier, the text of your request, its urgency and the contact you give, and forwards the messages to the bureau's working group.
3.3. Technical data
- IP address. The server sees the IP address of every request and keeps it in memory for no longer than one hour, solely to limit the number of form submissions (20 per hour per address) and catalogue requests (240 per hour). The IP address is not written to disk, except for a line in the server's system log when these limits are exceeded.
- Funnel counter. The websites count how many times a page was opened, how many times visitors started filling in a form, and how many requests were sent. Only the event type and the page path are sent to the server; the counter collects no visitor identifier, cookie, IP address or browser details and cannot tell one person from another. Counts are stored per day for 90 days.
- Browser headers. The browser language (Accept-Language) and its name (User-Agent) are read on the home page to open the right language version and to avoid redirecting search engine robots. These headers are not stored.
- Cookies and local storage. Listed in section 11 and in the separate Cookie Policy.
3.4. What we do not collect
Special categories of personal data (health, beliefs, biometrics), payment details, data for profiling, advertising identifiers. The websites contain no third-party visitor counters, advertising networks or social media pixels.
4. Purposes of processing
- To answer your request: find a manufacturer, calculate a price, prepare a specification, agree delivery terms.
- To handle the request up to the conclusion of a contract and during its performance: communication, clarifications, progress notes.
- To receive and consider partnership proposals.
- To keep the websites running: limit automated submissions, count the funnel without identifying visitors, remember the language and interface settings you chose.
- To fulfil obligations set by the legislation of the Republic of Uzbekistan, including responding to lawful requests of authorised bodies.
The data is not used for mailings you did not ask for and is not sold.
5. Legal grounds
- Taking steps at your request prior to entering into a contract, and performing a contract to which you or the company you represent is a party (Article 18 of the Law).
- Your consent, given when you send a request (Articles 18 and 21 of the Law).
- The operator's obligations established by legislation (Article 18 of the Law).
- The bureau's legitimate interests in protecting the websites from automated submissions and in keeping anonymised statistics (Article 18 of the Law).
6. Consent and its withdrawal
By sending a request through a form you consent to the processing of the data in it for the purposes in section 4, including the disclosures described in sections 8 and 9. The consent text is placed under the submit button of every form.
You may withdraw consent at any time by writing to info@taminota.com from the address or number given in the request, or by quoting the request number. After withdrawal we stop processing and destroy the data, except where retention is required by legislation or for the performance of a contract already concluded.
7. Retention periods
| Data | Period |
|---|---|
| Requests and internal notes on them | [3 (three) years] from the date of the last entry on the request; where a contract is concluded, for its term and [3 (three) years] after |
| Correspondence on a request | the same period as the request |
| Telegram bot records | the same period as the request |
| IP address in server memory | no longer than 1 hour |
| Funnel counter (no personal data) | 90 days |
| Cookies and local storage | see section 11 |
When the period expires or the purpose is achieved, the data is deleted. The recovery copy (section 8) is refreshed once a week and contains the records as they stood at the time of sending.
8. To whom data is disclosed and where it is stored
| Recipient | What is disclosed | Why |
|---|---|---|
| Bureau staff | requests, by role; the contact field is visible only to staff with the right to access contacts | handling the request |
| Telegram Messenger Inc. (the Telegram messenger) | a notification of every request to the bureau's closed working group: item, name, company, contact, comment; once a week, a recovery archive of the taminota.com request records sent by the bot to the same closed chat | immediate notification of the responsible employee; data preservation |
| Hetzner Online GmbH (Germany), hosting provider | all website data and request records are stored on a rented server | hosting and storage |
| State bodies of the Republic of Uzbekistan | data on a lawful request | compliance with the law |
Data is not disclosed to anyone else. Staff access to requests is restricted by roles in the bureau's internal panel; the panel is password-protected and reachable only over HTTPS.
9. Cross-border transfer
The websites' server is physically located in Germany; Telegram's servers are outside the Republic of Uzbekistan. The transfer is carried out under part three of Article 27-1 and Article 15 of the Law: to states that ensure adequate protection of personal data, and otherwise with your consent, which you give when sending a request. The websites do not collect biometric or genetic data or data of telecommunications service users, which are subject to mandatory storage in the Republic of Uzbekistan.
10. Your rights and how to exercise them
Under Article 30 of the Law you have the right to:
- know whether the bureau holds your personal data and obtain its composition, source, purposes, methods and periods of processing, information on persons with access, and on cross-border transfer;
- demand correction of inaccurate or incomplete data;
- demand suspension of processing or destruction of the data, including by submitting such a demand electronically;
- withdraw consent;
- appeal against the bureau's actions to the authorised state body, the State Personalisation Centre under the Cabinet of Ministers of the Republic of Uzbekistan, or to a court.
To do so, write to info@taminota.com or to the operator's postal address, stating your name, the contact from the request or the request number, and the substance of your demand. We reply within the period set by legislation; a notice of refusal to provide information, where there are lawful grounds for refusal, is sent in writing within ten days. To avoid disclosing your data to another person, we may ask you to confirm that the enquiry comes from you, for example by writing from the same address or number given in the request.
11. Cookies and local storage
The websites do not use cookies for tracking. Only records needed for functions you switch on yourself are kept in the browser:
| Key | Type | Purpose | Lifetime |
|---|---|---|---|
tmn_yaz | cookie | the language you chose manually, so the home page does not redirect you to another version | 1 year |
tmn_avto | cookie | a marker that the automatic redirect to a language version has already happened | 1 year |
tmn_tema | localStorage | the chosen theme, light or dark | until site data is cleared |
tmn_zvuk | localStorage | whether interface sounds are on | until site data is cleared |
tmn-podbor | localStorage | the list of catalogue items added to your selection | until cleared or "Reset" is pressed |
tmn_uvedomlen | localStorage | a marker that the cookie notice has been shown | until site data is cleared |
None of these records contains personal data or is shared with third parties. The TAMINOTA STEEL website sets no cookies; in local storage it keeps two records: tmn_spec (the list of items added to the specification) and tmn_uvedomlen (the same notice marker). You can disable the records in your browser settings; the site will keep working but will stop remembering your choices. Details are in the Cookie Policy.
12. Security
- The websites and the internal panel work only over HTTPS; HSTS is enabled.
- A Content Security Policy (CSP) forbids pages from loading code or sending data anywhere other than the site's own domain; fonts and all resources are hosted on our own server.
- Form submissions and catalogue requests are rate-limited per address.
- Access to requests is role-based; the contact field is hidden from roles without the corresponding right.
- Keys, tokens and staff passwords are stored separately from the records and are excluded from archive copies.
- The server runs under a dedicated system account with restricted write permissions.
13. Visitors from other countries
The websites are addressed to enterprises in Uzbekistan and manufacturing plants in China. If you are located in another country, your data is processed under this policy and the legislation of the Republic of Uzbekistan; the rights listed in section 10 are available to you in the same way, at the same address.
14. Changes to this policy
A new version is published on this page with a new date. If the changes concern the purposes of processing, the list of recipients or the retention periods, we will notify those whose requests are in progress via the contact given in the request.
15. Operator details
[Full legal entity name]
Taxpayer ID [TIN] · registration number [number]
Address: [postal address], Tashkent, Republic of Uzbekistan
Person responsible for organising personal data processing: [position, name]
Email: info@taminota.com · Phone: +998 99 011 62 29
Websites: taminota.com · steel.taminota.com