Privacy Policy

1. Introduction & Data Controller

Bashneft International B.V. (“Company”, “we”, “us”, or “our”), with its registered office at Joop Geesinkweg 901, Amsterdam-Duivendrecht, 1114AB, Netherlands, respects your privacy and is committed to protecting the personal data of our clients, commercial partners, suppliers, and website visitors in compliance with the European Union General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Dutch data protection laws.

2. Personal Data We Collect

We may collect and process the following categories of personal information when you interact with our website or submit an inquiry:

• Contact & Identity Data: Your full name, company title, email address, and telephone/mobile number submitted through our Contact Form or direct email correspondence.
• Commercial Inquiry Data: Details regarding petroleum product inquiries, storage leasing requests, shipping logistics, or corporate partnership proposals included in your messages.
• Technical & Usage Data: IP address, browser type and version, time zone setting, operating system, and browsing activity collected via cookies and server logs. See our Cookie Policy for full details.

3. How & Why We Use Your Personal Data

We process your personal data only when we have a lawful basis under Article 6 of the GDPR, including:

• Responding to Inquiries & Pre-Contractual Steps: To review and respond to questions, commercial quotes, storage requests, and support inquiries submitted via our website.
• Legitimate Business Interests: To maintain the security and integrity of our IT infrastructure, prevent spam or fraudulent activity, and improve our digital services.
• Legal & Regulatory Compliance: To comply with applicable Dutch, EU, and international trade, maritime, and environmental compliance obligations.

4. Data Sharing & International Transfers

We do not sell, rent, or trade your personal information to third parties. We only share personal data with trusted service providers (such as transactional email infrastructure and secure cloud hosting) who act as data processors under strict confidentiality and GDPR-compliant data processing agreements.

5. Data Retention & Security

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. We implement industry-standard technical and organizational security measures, including strict schema validation, TLS encryption, and access controls.

6. Your Rights Under the GDPR

Under the GDPR, you have the right to request access to, rectification of, or erasure of your personal data, to restrict or object to processing, and the right to data portability. You may also withdraw consent at any time where processing is based on consent.