Personal Data Processing Policy
1. General Provisions This personal data processing policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” and defines the procedure for processing personal data and the measures to ensure the security of personal data undertaken by Open Soul Retreat (hereinafter referred to as the Operator)
1.1. The Operator’s most important goal and condition for carrying out its activities is to observe the rights and freedoms of individuals and citizens when processing their personal data, including the protection of the right to privacy, and personal and family confidentiality
1.2. This Operator’s personal data processing policy (hereinafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website https://opensoulretreat.com/
2. Key terms used in the Policy 2.1. Automated processing of personal data — processing of personal data using computer technology
2.2. Blocking of personal data — temporary suspension of personal data processing (except in cases where processing is necessary to уточнить personal data)
2.3. Website — a set of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at https://opensoulretreat.com/
2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing
2.5. Depersonalization of personal data — actions as a result of which it is impossible to determine, without using additional information, that the personal data belongs to a specific User or other personal data subject
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without automation tools on personal data, including collection, recording, systematization, accumulation, storage, уточнение (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data
2.7. Operator — a state body, municipal body, legal entity or individual who independently or jointly with other persons organizes and/or carries out the processing of personal data, and also determines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data
2.8. Personal data — any information relating directly or indirectly to an identified or identifiable User of the website https://opensoulretreat.com/
2.9. User — any visitor to the website https://opensoulretreat.com/
2.10. Provision of personal data — actions aimed at disclosure of personal data to a specific person or a specific group of persons
2.11. Dissemination of personal data — any actions aimed at disclosure of personal data to an indefinite group of persons (transfer of personal data) or at making personal data available to an unlimited number of persons, including publication of personal data in mass media, placement in information and telecommunication networks, or providing access to personal data in any other way
2.12. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign state authority, a foreign individual, or a foreign legal entity
2.13. Destruction of personal data — any actions as a result of which personal data is destroyed irreversibly with no possibility of further restoration of the content of personal data in the personal data information system and/or physical media containing personal data are destroyed
3. The Operator may process the following personal data of the User 3.1. Last name, first name, patronymic
3.2. Email address
3.3. Phone numbers
3.4. Year, month, date and place of birth
3.5. Photographs
3.6. The website also collects and processes anonymized data about visitors (including “cookie” files) using internet statistics services (Yandex Metrica and Google Analytics and others)
3.7. The above data is hereinafter referred to collectively as Personal Data
4. Purposes of personal data processing 4.1. The purpose of processing the User’s personal data is to inform the User by sending emails; to conclude, perform, and terminate civil law contracts; and to provide the User with access to services, information and/or materials contained on the website
4.2. The Operator also has the right to send the User notifications about new products and services, special offers, and various events. The User can always opt out of receiving informational messages by sending a letter to the Operator at balisoultrips@gmail.com with the subject “Opt-out of notifications about new products and services and special offers”
4.3. Anonymized User data collected through internet statistics services is used to collect information about Users’ actions on the website, improve the quality of the website and its content
5. Legal grounds for processing personal data 5.1. The Operator processes the User’s personal data only if the User fills in and/or submits it independently through special forms located on the website https://opensoulretreat.com/. By filling in the relevant forms and/or sending their personal data to the Operator, the User expresses their consent to this Policy
5.2. The Operator processes anonymized data about the User if this is allowed in the User’s browser settings (cookie storage is enabled and JavaScript technology is used)
6. Procedure for collection, storage, transfer, and other types of personal data processing The security of personal data processed by the Operator is ensured by implementing legal, organizational, and technical measures necessary to fully comply with current legislation in the field of personal data protection
6.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized persons from accessing personal data
6.2. The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with current legislation
6.3. If inaccuracies in personal data are identified, the User can update them independently by sending a notice to the Operator’s email address balisoultrips@gmail.com with the subject “Updating personal data”
6.4. The processing period for personal data is unlimited. The User may withdraw their consent to the processing of personal data at any time by sending a notice to the Operator via email to balisoultrips@gmail.com with the subject “Withdrawal of consent to the processing of personal data”
7. Cross-border transfer of personal data 7.1. Before starting cross-border transfer of personal data, the Operator must ensure that the foreign state to whose territory the transfer is planned provides reliable protection of the rights of personal data subjects
7.2. Cross-border transfer of personal data to the territory of foreign states that do not meet the above requirements may be carried out only if the personal data subject has provided written consent to the cross-border transfer of their personal data and/or if it is necessary for the performance of a contract to which the personal data subject is a party
7. Final Provisions 8.1. The User may obtain any clarifications regarding the processing of their personal data by contacting the Operator via email at balisoultrips@gmail.com
8.2. Any changes to the Operator’s personal data processing policy will be reflected in this document. The Policy is valid indefinitely until it is replaced by a new version
8.3. The current version of the Policy is publicly available on the Internet at https://opensoulretreat.com/policy