Agreement for the processing of personal data

Policy regarding the processing of personal data

1. General Provisions

This personal data processing policy has been drawn up in accordance with the requirements of the Federal Law of July 27, 2006. No. 152-FZ “On Personal Data” and determines the procedure for processing personal data and measures to ensure the security of personal data Yubileinaya Hotel LLC (hereinafter referred to as the Operator).

The operator sets as its most important goal and condition for carrying out its activities the observance of the rights and freedoms of man and citizen when processing his personal data, including the protection of the rights to privacy, personal and family secrets.

This Operator's policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator can obtain about website visitors u28.ru

2. Basic concepts used in the Policy

Automated processing of personal data - processing of personal data using computer technology;

Blocking of personal data - temporary cessation of processing of personal data (except for cases where processing is necessary to clarify personal data);

Website is a collection of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address u28.ru

Information system of personal data - a set of personal data contained in databases, and information technologies and technical means that ensure their processing;

Depersonalization of personal data - actions as a result of which it is impossible to determine without the use of additional information the ownership of personal data to a specific User or other subject of personal data;

Processing of personal data - any action (operation) or set of actions (operations) performed using automation tools or without the use of such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

Operator - a state body, municipal body, legal or natural person, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;

Personal data - any information relating directly or indirectly to a specific or identified User of the website u28.ru

User - any visitor to the website u28.ru

Providing personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons;

Distribution of personal data - any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or to familiarize with personal data to an unlimited number of persons, including the publication of personal data in the media, posting in information and telecommunication networks or providing access to personal data in any other way;

Destruction of personal data - any actions as a result of which personal data are destroyed irrevocably with the impossibility of further restoration of the content of personal data in the personal data information system and (or) as a result of which the material media of personal data are destroyed.

3. The Operator may process the following personal data of the User

• Last name, first name, patronymic;
• Email;
• Address;
• Phone number;

The site also collects and processes anonymized data about visitors (including cookies) using Internet statistics services:

- Yandex.Metrika (Yandex Metrika) The above data below in the text of the Policy are united by the general concept of Personal Data.

4. Purposes of processing personal data

The purpose of processing the User’s personal data is to inform the User by sending emails; conclusion, execution and termination of civil contracts.

The Operator also has the right to send notifications to the User about new products and services, special offers and various events. The User can always refuse to receive information messages by sending a letter to the Operatorand the email address "bron@u28.ru" with the note "Opt-out of notifications about new products and services and special offers."

Anonymized data of Users, collected using Internet statistics services, serves to collect information about the actions of Users on the site, improve the quality of the site and its content.

5. Legal grounds for processing personal data

The Operator processes the User's personal data only if it is filled out and/or sent by the User independently through special forms located on the website u28.ru. By filling out the appropriate forms and/or sending his personal data to the Operator, the User expresses his consent to this Policy. The Operator processes anonymized data about the User if this is allowed in the User’s browser settings (saving of cookies and the use of JavaScript technology is enabled).

6. The procedure for collecting, storing, transferring and other types of processing of personal data

The security of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection. The operator ensures the safety of personal data and takes all possible measures to prevent access to personal data by unauthorized persons. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to the implementation of current legislation.

7. Rights of the subject of personal data

In accordance with Federal Law No. 152-FZ “On Personal Data,” the subject of personal data or his legal representative has the right to receive information regarding the processing of his personal data, namely:

confirmation of the fact of processing of personal data;

legal grounds and purposes of processing personal data;

applied methods of processing personal data;

information about legal entities and individuals (except for the operator’s employees) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the operator or on the basis of federal law;

processed personal data related to the relevant subject of personal data, the source of their receipt;

terms of processing of personal data, including periods of their storage;

the procedure for the exercise by the subject of personal data of the rights provided for by Federal Law No. 152-FZ “On Personal Data”;

name or surname, first name, patronymic and address of the person processing personal data on behalf of the operator, if the processing has been or will be assigned to such a person;

other information provided for by Federal Law No. 152-FZ “On Personal Data”.

The subject of personal data or his legal representative has the right to demand clarification of his personal data, its blocking or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing.

The subject of personal data or his legal representative has the right to withdraw consent to the processing of personal data in cases provided for by law.

The personal data subject’s appeal to the operator in order to exercise his rights established by Federal Law No. 152-FZ “On Personal Data” is carried out in writing in the prescribed form during a personal visit to the Yubileiny Hotel LLC.

the subject of personal data or his legal representative.

The application form is issued to the subject of personal data or his legal representative by an authorized employee of Yubileiny Hotel LLC and is filled out by the subject of personal data or his legal representative with a handwritten signature in the presence of the specified employee.

An authorized employee of Yubileiny Hotel LLC, having received an application in the prescribed form, verifies the information specified in it about the main document identifying the subject of personal data and his legal representative, the grounds on which the person acts as a representative of the subject of personal data, and the submitted When applying, the originals of these documents.

The response to the appeal is sent to the subject of personal data in writing - by registered mail by mail to the address specified in the appeal.

The period for generating a response and transferring it to the post office for dispatch cannot exceed thirty days from the date the operator received the request.

The deadline for making necessary changes to personal data that is incomplete isinaccurate or irrelevant, cannot exceed seven working days from the date the subject of personal data or his representative provided information confirming that

personal data is incomplete, inaccurate or out of date.

The period for destruction of personal data that is illegally obtained or is not necessary for the stated purpose of processing cannot exceed seven working days from the date the subject of personal data or his representative provides information confirming that the personal data is illegally obtained or is not necessary for the stated purpose of processing .

The right of the subject of personal data to access his personal data is limited if the provision of personal data violates the rights and legitimate interests of other persons.

If information relating to the processing of personal data, as well as the processed personal data, was provided for familiarization to the subject of personal data at his request, the subject of personal data has the right to send a second request in order to obtain information relating to the processing of personal data and to familiarize himself with such personal data not earlier than thirty days after the initial request is made.

The subject of personal data has the right to send a repeated request in order to obtain information regarding the processing of personal data, as well as in order to familiarize himself with the processed personal data before the expiration of the specified period if such information and (or) the processed personal data were provided to him for review in full volume based on the results of consideration of the initial request. A repeated request must contain a justification for sending a repeated request.

8. Final provisions

The User can receive any clarification on issues of interest regarding the processing of his personal data by contacting the Operator via email bron@u28.ru.

This document will reflect any changes to the Operator’s personal data processing policy. The policy is valid indefinitely until it is replaced by a new version.

The current version of the Policy is freely available on the Internet at https://u28.ru/en/include/licenses_detail.php