Data confidentiality

personal data processing policy
REDITUS hotels

Personal data processing policy

1. General provisions

This policy of personal data processing is made in accordance with the requirements of the Federal Law of 27.07.2006. №152-FZ «On personal data» and determines the procedure for processing personal data and measures to ensure the security of personal data used by REDITUS hotel (hereinafter — the Operator).
1.1. The operator sets the most important goal and condition of its activities to respect the rights and freedoms of man and citizen in the processing of his personal data, including the protection of the right to privacy, personal and family secrecy.
1.2. This Operator’s personal data processing policy (hereinafter — the Policy) applies to all information that the Operator may receive about visitors to the website http://reditus.com.ua/.


2. Basic concepts used in Politics

2.1. Automated processing of personal data — processing of personal data by means of computer technology;
2.2. Blocking of personal data — temporary cessation of personal data processing (except in cases when processing is necessary to clarify personal data);
2.3. Website — a set of graphic and information materials, as well as computer programs and databases that provide their availability on the Internet at the network address http://reditus.com.ua/;
2.4. Information system of personal data — a set of personal data contained in databases, and provide their processing of information technology and technical means;
2.5. Impersonalization of personal data — actions as a result of which it is impossible to determine without the use of additional information the affiliation of personal data to a particular User or other subject of personal data;
2.6. Processing of personal data — any action (operation) or set of actions (operations) carried out with the use of automation or without the use of such means with personal data, including collection, recording, systematization, accumulation, storage, refinement (update, change) , extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
2.7. Operator — a state body, municipal body, legal or natural person who independently or jointly with other persons organize and (or) carry out personal data processing, as well as determine the purposes of personal data processing, the composition of personal data to be processed, actions (operations) carried out with personal data;
2.8. Personal data — any information that relates directly or indirectly to a particular or determined by the User of the website http://reditus.com.ua/;
2.9. User — any visitor to the website http://reditus.com.ua/;
2.10. Provision of personal data — actions aimed at disclosing personal data to a certain person or a certain group of persons;
2.11. Dissemination of personal data — any action aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or to acquaint personal data of an unlimited number of persons, including the disclosure of personal data in the media, placement in information and telecommunications networks or providing access to personal data in any other way;
2.12. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign authority, foreign natural or foreign legal entity;
2.13. Destruction of personal data — any actions as a result of which personal data are destroyed irrevocably with the impossibility of further recovery of the content of personal data in the personal data information system and (or) material material data carriers are destroyed.


3. The Operator may process the following personal data of the User

3.1. Full Name;
3.2. E-mail address;
3.3. Telephone numbers;
3.4. Year, month, date and place of birth;
3.5. photos;
3.6. The site also collects and processes impersonal data about visitors (including cookies) using Internet statistics services (Yandex Metrics and Google Analytics and others).
3.7. The above data are further in the text of the Policy combined with the general concept of Personal Data.


4. Purposes of personal data processing

4.1. The purpose of processing the User’s personal data is to provide the User with access to the services, information and / or materials contained on the website.
4.2. The Operator also has the right to send the User notifications about new products and services, special offers and various events. The User can always refuse to receive information messages by sending a letter to the Operator to the e-mail address privacy@reditus.com.ua marked «Refusal to notify about new products and services and special offers.»
4.3. Impersonal user data collected through Internet statistics services are used to collect information about user actions on the site, improve the quality of the site and its content.

 

5. Legal grounds for personal data processing

5.1. The Operator processes personal data of the User only in case of their filling and / or sending by the User independently through the special forms located on the website http://reditus.com.ua/. By filling in the appropriate forms and / or sending their personal data to the Operator, the User agrees with this policy.
5.2. The Operator processes impersonal data about the User if it is allowed in the User’s browser settings (saving cookies and the use of JavaScript technology is enabled).


6. The order of collection, storage, transfer and other types of personal data processing

The security of personal data processed by the Operator is ensured by implementing the legal, organizational and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.
6.1. The operator ensures the preservation of personal data and takes all possible measures to exclude access to personal data of unauthorized persons.
6.2. The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases related to the implementation of applicable law.
6.3. In case of inaccuracies in personal data, the User can update them independently by submitting a message to the relevant Operator to the e-mail address of the Operator privacy@reditus.com.ua marked «Update of personal data».
6.4. The processing time of personal data is unlimited. The User may at any time revoke his consent to the processing of personal data by sending a message to the Operator by e-mail to the e-mail address of the Operator privacy@reditus.com.ua marked «Withdrawal of consent to the processing of personal data».


7. Cross-border transfer of personal data

7.1. Prior to the start of cross-border transfer of personal data, the operator must make sure that the foreign state to the territory of which the transfer of personal data is intended to provide reliable protection of the rights of personal data subjects.
7.2. Cross-border transfer of personal data on the territory of foreign states that do not meet the above requirements may be carried out only if there is written consent of the personal data subject to cross-border transfer of his personal data and / or performance of a contract to which the personal data subject is a party. data.


8. Final provisions

8.1. The User can receive any clarification on the necessary issues related to the processing of his personal data by contacting the Operator by e-mail privacy@reditus.com.ua.
8.2. This document will reflect any changes in the policy of personal data processing by the Operator. The policy is valid indefinitely until it is replaced by a new version.
8.3. The current version of the Policy is freely available on the Internet at http://reditus.com.ua/privacy.