Policy in the field of processing and protection of personal data of clients of the business hotel "Continent"

1. General provisions

1.1. Individual entrepreneur Demchenko Pyotr Vyacheslavovich processes personal data on a legal and fair basis.
1.2. Personal data processing is carried out in accordance with the Constitution of the Russian Federation, Federal Law "On Personal Data" No. 152-FZ dated 07/27/2006, Decree of the Government of the Russian Federation No. 687 dated September 15, 2008 and No. 1119 dated 11/01/2012, as well as other regulatory legal acts.
1.3. Basic concepts used in the Policy:
- Hotel - IP Demchenko P.V., providing hotel services to the client;
- The client is an individual, a consumer of hotel services, a subject of personal data;
- Hotel services – the actions of the Hotel to accommodate Customers in the accommodation facility, as well as other activities related to accommodation and accommodation, which includes basic and additional services provided to the Client;
- Operator – a person who independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;
- Personal data is information stored in any format relating to a specific or identifiable individual (subject of personal data) based on such information, which by itself or in combination with other information available to the Hotel, allows the identification of the Client's identity;
- Personal data processing is any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
- Personal data information system is a set of information technologies and technical means contained in personal data databases and ensuring their processing;
- Provision of personal data – actions aimed at disclosing personal data to a certain person or a certain circle of persons
- Cross–border transfer of personal data is the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity;
- Use of personal data – actions (operations) with personal data performed by the operator for the purpose of making decisions or performing other actions that generate legal consequences for the subject of personal data or other persons or otherwise affect the rights and freedoms of the subject of personal data or other persons;

2. Purposes of processing the Client's personal data

2.1. Personal data of clients may be processed for the following purposes:
- Hotel room reservations;
- registration and execution of a contract for the provision of services for accommodation or temporary accommodation in a Hotel.
2.2. The Operator is not allowed to process personal data incompatible with the specified purposes.
2.3. Personal data may not be used for the purpose of causing property and moral harm to citizens, hindering the exercise of the rights and freedoms of citizens of the Russian Federation.

3. The content of the Client's personal data

3.1. The volume and content of the processed personal data strictly corresponds to the stated purposes of processing and are not excessive in relation to the purposes of processing.
3.2. The personal data of the Clients collected and processed by the Hotel include:
- Last name, First Name, Patronymic;
- Date and place of birth;
- Passport data;
- Registration address (and place of residence);
- Contact phone number;
- Information about the place of work.
3.3. The Hotel staff receives personal data with the written consent of the Client.
3.4. The Hotel staff has the right to verify the accuracy and relevance of the personal data provided.
3.5. When using the room reservation service, the following information is saved: full name, phone number and e-mail address of the Client. In order to provide a hotel service, these data are used to uniquely identify a reservation once during its execution.

4. Processing of the Client's personal data

4.1. The processing of personal data of Clients in order to achieve the set goals consists of the following possible actions: collection, storage, refinement, updating, modification, use, transfer, destruction.
4.2. The processing of personal data of Clients is carried out without the use of automation tools.
4.3. Only Hotel employees who are authorized to work with Clients' personal data and have signed a Non-disclosure Agreement may have access to the processing of Clients' personal data.
4.4. In order to comply with the current legislation in the field of migration policy, the Hotel transfers the personal data of Customers to the FMS in compliance with the norms of personal data protection.
4.5. The Hotel does not transfer the personal data of Customers to third parties without the consent of the personal data subject, unless otherwise provided by federal law.
4.6. There is no cross-border transfer of personal data.

5. Protection of the Client's personal data

5.1. The Hotel respects the confidentiality of personal data, takes legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, dissemination of personal data, as well as from other illegal actions.
5.2. When processing personal data carried out without the use of automation tools, the Hotel complies with the requirements established by Decree of the Government of the Russian Federation dated September 15, 2008 No. 687 "On Approval of the Regulation on the specifics of processing personal data carried out without the use of automation tools".
5.3. Director Anna Evgenievna Barchevskaya has been appointed responsible for organizing the processing of personal data in IP Demchenko P.V. (phone: 8(8652) 94-17-95).
5.4. The technical protection measures adopted at the hotel include: fire and burglar alarms, video surveillance and anti-virus protection.
5.5. The Hotel has notified the authorized body for the protection of the rights of personal data subjects about the processing of personal data in accordance with the requirements established by the Federal Law "On Personal Data".
5.6. In case of detection of illegal actions with personal data, the operator is obliged to eliminate the violations within a period not exceeding three working days from the date of such detection. The operator is obliged to notify the personal data subject about the elimination of violations.

6. The rights of the Client

6.1. The Client has the right to: access to information about himself, including information containing confirmation of the fact of processing personal data, the purpose of such processing, as well as other information specified in Part 7 of Article 14 of Federal Law 152-FZ "On Personal Data".
6.2. The personal data subject has the right to require the operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing, as well as to take measures provided for by law to protect their rights.
6.3. If the personal data subject believes that the operator is processing his personal data in violation of the law or otherwise violates his rights and freedoms, the personal data subject has the right to appeal the actions or omissions of the operator to the authorized body for the protection of the rights of personal data subjects or in court.

7. Liability for violation of the rules governing the processing of personal data of Clients

7.1. The Hotel is responsible for the personal information that is at its disposal and establishes the personal responsibility of employees for compliance with the established confidentiality regime.
7.2. Each employee who receives a document containing the Client's personal data for work is solely responsible for the safety of the carrier and the confidentiality of the information.
7.3. The Hotel staff is obliged to ensure proper consideration of Customer requests, applications and complaints, as well as to facilitate compliance with the requirements of the competent authorities.
7.4. Persons guilty of violating the rules governing the receipt, processing and protection of personal data of Clients are subject to disciplinary, administrative, civil or criminal liability in accordance with federal laws.