Published: 9 November 2026.
This Policy describes how personal data of visitors to nsc.spb.ru is processed and protected.
1. Data controller
Limited Liability Company “Northern Shipping Company — Petersburg” (LLC “NSC-Petersburg”), PSRN 1027802729998, TIN 7805173785, registration reason code 780501001.
Address: office 544, 35A Marshala Govorova Street, Saint Petersburg, 198095, Russian Federation. Privacy enquiries may be sent to Email.
2. Data processed
When the website is visited, the server may automatically record the IP address, request date and time, requested page, referrer, browser type and version, operating system information and technical request identifiers.
If a visitor contacts the Controller by email, the Controller may process the name, email address, telephone number, position, organisation and any other information voluntarily included in the message.
3. Purposes and legal grounds
Technical data is processed to operate and secure the website, prevent attacks, diagnose errors and produce aggregated technical statistics. Enquiry data is used to respond, conduct business correspondence and comply with legal obligations.
Processing is carried out under Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, based on the data subject’s consent, the need to respond to an enquiry, enter into or perform a contract, or pursue the Controller’s lawful interests without infringing the data subject’s rights.
4. Cookies and Yandex Metrica
After the visitor gives explicit consent, the website loads Yandex Metrica (counter No. 31060551). The service may set analytics cookies and receive device and browser information, IP address, viewed pages, referrer and website interactions. This data is used to measure aggregate traffic and improve the website. Session replay is disabled.
Metrica is not loaded before consent. A visitor may decline analytics or change the choice later using “Cookie settings” in the footer. The choice itself is stored locally in the browser. A technical WordPress cookie may be used on the restricted login page to operate the administration area.
5. Processing and retention
Automated processing may include collection, recording, organisation, storage, updating, use, restriction and deletion. Technical access logs are retained for no longer than 30 days unless a longer period is required to investigate an incident or comply with the law. Correspondence is retained for as long as necessary to handle the enquiry and meet applicable contractual and legal obligations.
6. Storage and disclosure
Server infrastructure and databases used to collect data of Russian citizens are located in the Russian Federation. Visitor data is not transferred across national borders.
The Controller may engage a Russian hosting provider and website maintenance contractors under an agreement requiring confidentiality and compliance with data protection law. If analytics consent is given, technical data is disclosed to YANDEX LLC to operate Yandex Metrica. Data may also be disclosed to public authorities where required by law.
7. Security
The Controller applies necessary legal, organisational and technical safeguards, including access controls, secure connections, backups, software updates, event logging and restrictions on the execution of uploaded files.
8. Data subject rights
A data subject may request information about processing, correction, restriction or deletion of their data, withdraw consent and request that processing cease where provided by law. Requests may be sent to Email and should contain sufficient information to identify the requester and locate the relevant data.
9. Policy changes
The Controller may update this Policy following changes in law or website operations. The current version is always available on this page.