Appendix No. 2

to Order No. 43-p dated October 5, 2026

On Approval of the Personal Data Processing Policy, Cookie Policy and Consent Forms

Appendix No. 1

to the Personal Data Processing Policy

of the Autonomous Non-Profit Organization «Smolensk Region Export Support Center»

COOKIE POLICY

for the websites export67.com and ved.export67.com

Version dated October 5, 2026

1. General Provisions

1.1. This Cookie Policy (hereinafter — the Cookie Policy) describes which cookies are used on the websites and https://ved.export67.com (hereinafter — the Website), for what purposes, on what legal grounds and for how long. It also explains how visitors can manage their preferences.

1.2. The Operator is the Autonomous Non-Profit Organization «Smolensk Region Export Support Center» (TIN 6732143784, PSRN 1176733007186, KPP 673201001, registered address: 23 Engels Street, Smolensk, Smolensk Region, 214014, Russian Federation).

1.3. Cookies, together with IP addresses and information about devices and behavior on the Website, make it possible to distinguish individual visitors. Therefore, the Operator considers their processing (except for strictly necessary cookies) to constitute the processing of personal data. Such processing is carried out only with the visitor's consent.

2. Categories of Cookies

2.1. Strictly Necessary Cookies. These ensure the functioning of the Website, including navigation, form submission, protection against automated requests (CAPTCHA), and saving visitors' preferences in the cookie banner. They are used without consent because the Website cannot function without them. They are not used to identify visitors and are not transferred to third parties.

2.2. Analytics Cookies. These are set by the Yandex Metrica web analytics service (counter No. 45055490 on export67.com and No. 111719832 on ved.export67.com). They are used to collect website traffic statistics and improve the Website. They are used only after obtaining the visitor's consent. Data is processed by Yandex LLC (TIN 7736207543, 16 Leo Tolstoy Street, Moscow, 119021, Russian Federation) on behalf of the Operator, using servers located in the Russian Federation. The «Webvisor» feature (recording visitors' actions and the contents of form fields) is not used.

2.3. External Content. Embedded external content from third-party services (video players, etc.) that sets cookies is not used on the Website.

2.4. Advertising, marketing and retargeting cookies, foreign web analytics tools and tracking pixels are not used on the Website. No cross-border transfer of data is carried out.

3. List of Cookies

The actual list of cookies may be updated when services change. The Operator updates this table accordingly.

4. Legal Basis and Procedure for Obtaining Consent

4.1. Analytics cookies are used on the basis of the visitor's consent (Clause 1, Part 1, Article 6 of Federal Law No. 152-FZ of July 27, 2006 «On Personal Data»).

4.2. When visiting the Website for the first time, a cookie banner is displayed with the buttons «Accept All Cookies» and «Cookie Settings» (with subsections for selecting cookies). Consent is given by clicking the «Accept All Cookies» button or enabling the relevant category in the «Cookie Settings» section. Continuing to use the Website, scrolling the page or closing the banner does not constitute consent.

4.3. Yandex Metrica scripts are not loaded until consent has been obtained. Refusing consent does not restrict access to the Website.

4.4. The following data are processed for analytics purposes: cookies and visitor identifiers, IP address, information about the browser, operating system and device, screen resolution, language, date and time of visits, pages viewed and actions performed on them, referral source, and approximate location determined by IP address. Data processing operations include collection, recording, systematization, accumulation, storage, retrieval, use, transfer (provision, access) to Yandex LLC as a party processing data on behalf of the Operator, anonymization, deletion and destruction. The processing method is automated, with data transmitted over the Internet.

5. Retention Periods and Data Destruction

5.1. Consent remains valid for 12 (twelve) months from the date it is given or until it is withdrawn. Upon expiration of this period, the cookie banner is displayed again.

5.2. Analytics data are processed for no longer than 12 (twelve) months from the date consent is obtained. Upon withdrawal of consent, data collection ceases immediately. Collected data are destroyed within no more than 30 (thirty) days using the Yandex Metrica visitor data deletion function or upon a visitor's request sent to info@export67.com.

6. Managing Cookies

6.1. Visitors may change or withdraw their preferences at any time by clicking the «Cookie Settings» link at the bottom of each page of the Website.

6.2. Visitors may also delete cookies or prevent them from being stored through their browser settings, or install the Yandex Metrica opt-out extension (https://yandex.ru/support/metrica/general/opt-out.html). Disabling strictly necessary cookies may make certain Website features unavailable.

7. Final Provisions

7.1. The Cookie Policy is an integral part of the Operator's Personal Data Processing Policy (/privacy_policy/). The current version is available on the Website at /politika-ispolzovaniya-cookie-fajlov/.

7.2. Questions regarding the use of cookies should be sent to info@export67.com.