Personal data processing policy
1. General provisions

This policy for the processing of personal data is drawn up in accordance with the requirements of the Federal Law of 27.07.2006.  152-FZ «On personal data» (hereinafter - the Law on personal data) and defines the procedure for processing of personal data and measures to ensure the security of personal data, The IP Starchuk Ruslan Vasilyevich (hereinafter - Operator).
1.1. The operator has as its main objective and condition of carrying out its activities the respect of human rights and freedoms of citizens when processing their personal data, including the protection of privacy, personal and family secrets.
1.2. This Operator’s Personal Data Processing Policy (hereinafter the Policy) applies to all information that the Operator may obtain about web visitorssite https://kaznacheyskiy-hotel.ru/.

2. Key Concepts Used in the Policy

2.1. Automated personal data processing - the processing of personal data by means of computer technology.
2.2. Blocking of personal data - temporary cessation of processing of personal data (except in cases where the processing is necessary to verify personal data).
2.3. Website - a set of graphic and information materials, as well as programs for computers and databases, providing their accessibility on the Internet by https network address://kaznacheyskiy-hotel.ru/.
2.4. Personal data information system - the set of personal data contained in databases and supporting their processing information technologies and technical means.
2.5. Depersonalization - actions As a result, it is not possible to determine the identity of the individual without using additional information.
2.6. Processing of personal data - any action (operation) or set of actions (operations)The following are not covered by this Agreement: (update, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
2.7. Operator - public authority, municipal authority, legal entity or natural person alone or jointly with other persons who organize and/or carry out the processing of personal data, as well as the purposes for which the processing of personal data is carried out, the composition of the personal data, The actions (operations) carried out with personal data.
2.8. Personal data is any information that relates directly or indirectly to a particular or identifiable User of the website https://kaznacheyskiy-hotel.ru/.
2.9. Personal data authorized by the subject of the personal data for dissemination is personal data, Access of an unlimited number of persons to whom the subject of personal data has given consent for processing of personal data, The authorized subject of personal data for dissemination in accordance with the procedure provided by the Personal Data Act (hereinafter - personal data authorized for dissemination).
2.10. The user is any visitor of the website https://kaznacheyskiy-hotel.ru/.
2.11. Disclosure of personal data - actions aimed at disclosing personal data to a specific person or group of persons.
2.12. Disclosure of personal data - any action aimed at disclosing personal data to an undefined group of persons (transfer of personal data) or to the disclosure of personal data of an unlimited number of persons, including the publication of personal data in the media, theThe Commission has also taken steps to ensure that the Member States are not obliged to make any changes to their national laws.
2.13. Cross-border transfer of personal data - transfer of personal data to the authority of a foreign state a foreign natural or legal person.
2.14. The destruction of personal data - any action as a result of which personal data is destroyed irrevocably with the possibility of further recovery of the content of personal data in the information system of personal data and/or the material storage of personal data is destroyed.

3. Basic rights and duties of the operator

3.1. The operator shall be entitled to:
— to receive from the subject of personal data reliable information and/or documents containing personal data;
— in case of withdrawal of consent to processing personal data by the subject, as well as sending a request for termination of processing personal data, The operator has the right to continue processing personal data without the consent of the subject of personal data if there are grounds specified in the Personal Data Act;
— determine independently the composition and list of measures necessary and sufficient to ensure the performance of duties, The provisions of the Personal Data Act and the regulatory acts adopted in accordance with it, unless otherwise provided by the Personal Data Act or other federal laws.
3.2. The operator shall:
— to provide the subject of personal data, upon request, with information regarding the processing of his or her personal data;
— to organize the processing of personal data in the manner established by the current legislation of the Russian Federation;
— respond to requests and queries of the subjects of personal data and their legal representatives in accordance with the requirements of the Personal Data Act;
— to provide the Authorized Body for the Protection of the Rights of Subjects of Personal Data with necessary information upon request of this Authority within 10 days from the date of receipt of such request;
— publish or otherwise provide unrestricted access to this Privacy Policy;
— take legal, organizational and technical measures to protect personal data from improper or accidental access, destruction, alteration, blocking, copying, provision, dissemination of personal data as well as other unlawful actions in relation to personal data;
— stop the transfer (distribution, provision, access) of personal data, stop processing and destroy personal data in order and cases, The Personal Data Act;
— perform other duties provided for in the Personal Data Act.

4. Основные права и обязанности субъектов персональных данных

4.1. The Data Subjects have the right to:
— Receive information regarding the processing of their personal data, except in cases provided for by federal laws. The data is provided to the subject of personal data by the Operator in an accessible form and should not contain personal data relating to other subjects of personal data, except where there are legitimate grounds for disclosure of such personal data. The list of information and the procedure for obtaining it is set out in the Personal Data Act;
— to require the operator to update his personal data, block or delete them in case of incomplete, outdated, inaccurate personal data, Illegally obtained or not necessary for the stated purpose of processing, as well as taking legal measures to protect their rights;
— To require prior consent when processing personal data for the purpose of marketing goods, works and services;
— withdrawal of consent to the processing of personal data, as well as sending a request for termination of processing of personal data;
— to appeal to the authorized body for protection of rights of subjects of personal data or in court proceedings illegal actions or omissions of the Operator when processing his personal data;
— to exercise other rights provided for by the legislation of the Russian Federation.
4.2. The Data Subjects are obliged to:
— provide the Operator with reliable data about themselves;
— to inform the Operator about the updating (updating, modification) of their personal data.
4.3. Persons who provide the Operator with inaccurate information about themselves or other subjects of personal data without the latter’s consent are liable in accordance with the law of the Russian Federation.

5. Principles of personal data processing

5.1. Processing of personal data is conducted in a lawful and fair manner.
5.2. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. Personal data shall not be processed in a manner incompatible with the purposes for which it is collected.
5.3. Databases containing personal data processed for incompatible purposes shall not be combined.
5.4. Only personal data that is relevant to the purposes of processing shall be processed.
5.5. The content and volume of personal data processed correspond to the stated purposes of processing. The personal data processed shall not be redundant in relation to the stated purposes for which they are processed.
5.6. Personal data processing shall be carried out in such a way as to ensure that the personal data are accurate, sufficient and, where necessary, relevant to the purposes for which they are processed. The operator takes and/or ensures that necessary measures are taken to remove or correct incomplete or inaccurate data.
5.7. The personal data shall be stored in a form that allows the identification of the subject of the personal data not longer than is necessary for the purposes of processing the personal data, if the term of storage of personal data is not set by federal law, a contract to which the beneficiary or guarantor is party and the subject of the personal data. The processed personal data is destroyed or depersonalized when the processing purposes are achieved or if the necessity to achieve these purposes has been lost, unless otherwise provided by federal law.

6. Purposes of processing personal data

Processing purpose
ordering detail
Personal data
  • surname, first name, patronymic
  • e-mail address
  • phone numbers
Legal basis
  • Operator’s statutory (constituent) documents
  • Contracts between the operator and the data subject
Types of processing
  • Collection, recording, systematization, accumulation, storage, destruction and depersonalization
  • Sending information letters to the e-mail address

7. Conditions for processing personal data

7.1. The processing of personal data is carried out with the consent of the subject of the personal data for the processing of his personal data.
7.2. Processing of personal data is necessary for the purposes stipulated by the international treaty of the Russian Federation or law, To carry out the functions, powers and duties assigned by the legislation of the Russian Federation to the operator.
7.3. Processing of personal data is necessary for the administration of justice, execution of a court act, an act of another body or official, The Russian Federation has adopted a law on enforcement of the obligations of the State.
7.4. Processing of personal data is necessary for the performance of a contract, which is either the beneficiary or guarantor of which the subject of personal data is, as well as for the conclusion of a contract at the initiative of the subject of personal data or a contract under which the subject of personal data will be the beneficiary or guarantor.
7.5. Processing of personal data is necessary for the exercise of rights and legitimate interests of the operator or third parties or to achieve purposes of public interest provided that that the rights and freedoms of the subject of personal data are not violated.
7.6. Processing of personal data, access to an unlimited number of persons provided by the subject of personal data or at his request (hereinafter: publicly available personal data).
7.7. Personal data subject to publication or mandatory disclosure under federal law are processed.

8. Collection, storage, transfer and other processing of personal data

The security of personal data processed by the Operator is ensured through the implementation of legal, organizational and technical measures, necessary to fully comply with the requirements of current legislation in the field of personal data protection.
8.1. The operator shall ensure that personal data is kept safe and take all possible measures to prevent unauthorised persons from accessing personal data.
8.2. The User’s personal data will never, under any conditions, be transferred to third parties, except in cases related to the execution of the applicable laws or in case of if the subject of personal data has given consent to the Operator for the transfer of data to a third party for the performance of obligations under a civil contract.
8.3. In case of imprecision in personal data, the User can update them themselves, by sending a notification to the Operator at the e-mail address hotel@kaznacheyskiy-hotel.ru with the remark «Updating personal data».
8.4. The processing period of personal data is determined by the achievement of the purposes for which the personal data were collected, unless a different period is provided for in the contract or the applicable legislation.
The user may withdraw his consent to the processing of personal data at any time, Sending a notification to the Operator by e-mail to the e-mail address hotel@kaznacheyskiy-hotel.ru with the mark «Withdrawal of consent to processing personal data».
8.5. All information collected by third party services, including payment systems, communication means and other service providers, is stored and processed by the specified persons (Operators) in accordance with their User Agreement and Privacy Policy. The subject of personal data and/or with specified documents. The operator is not liable for the actions of third parties, including the service providers referred to in this paragraph.
8.6. Prohibitions on transfer (except access) and processing or conditions of processing (except access) imposed by the personal data subject personal data authorized for distribution shall not be processed in cases of state, public and other public interest, defined by the legislation of the Russian Federation.
8.7. The operator shall ensure the confidentiality of personal data when processing personal data.
8.8. The Operator shall store personal data in a form that allows the identification of the subject of the personal data for no longer than is required by the purposes of processing the personal data, if the term of storage of personal data is not set by federal law, a contract to which the beneficiary or guarantor is party and the subject of the personal data.
8.9. The termination of processing may be conditional upon the fulfilment of the purposes for which the personal data are processed, the expiration of the period of consent of the subject of the personal data, withdrawal of consent by the subject of personal data or request to stop processing of personal data, as well as detection of unlawful processing of personal data.

9. List of actions taken by the Operator with the personal data obtained

9.1. The operator collects, records, systematizes, accumulates, stores, updates (updates, changes), extracts, uses, transfers (distribution, provision, access), depersonalization, blocking, deletion and destruction of personal data.
9.2. The operator carries out automated processing of personal data with the receipt and/or transmission of information received on information and telecommunications networks or without such.

10. Cross-border transfer of personal data

10.1. The operator shall notify the competent authority for the protection of the rights of the subjects of personal data of its intention before starting cross-border transfer activities cross-border transfer of personal data (such notice is sent separately from the notification of intention to process personal data).
10.2. The operator, before submitting the above-mentioned notification, is obliged to obtain from the authorities of a foreign state, foreign individuals, foreign legal entities, to which the cross-border transfer of personal data, relevant information is planned.

11. Confidentiality of personal data

The operator and other persons who have access to personal data are obliged not to disclose personal data to third parties or to distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.

12. Final provisions

12.1. The user can obtain any clarification on matters of interest regarding the processing of his personal data by contacting the Operator via e-mail hotel@kaznacheyskiy-hotel.ru.
12.2. This document will reflect any changes to the personal data processing policy of the Operator. The policy is valid indefinitely until it is replaced by a new version.
12.3. The current version of the Open Access Policy is available on the Internet at https://kaznacheyskiy-hotel.ru/politika_konfidencialnostis .

COMPANY DETAILS
Individual entrepreneur Starchuk Ruslan Vasilyevich
INN: 502603528704
CPT: 502701001
Name of the bank: BRANCH "CENTRAL" BANK VTB (PJSC)
BIC: 044525411
P/C: 40802810119150000019