Privacy Policy Regarding the Processing of Personal Data

1. General Provisions

This Privacy Policy Regarding the Processing of Personal Data (hereinafter, the "Policy") has been drawn up in accordance with the requirements of Federal Law No. 152-FZ "On Personal Data" dated 27 July 2006, and sets out the procedure for processing personal data and the measures taken to ensure its security by Mountain King's Castle hotel (hereinafter, the "Operator").

The Policy applies to all personal data that the Operator receives from visitors to the arshan138.ru website and hotel guests — including through the website's forms, and communications by phone, email and messaging apps.

2. Personal Data Operator

3. What Data Is Processed

The booking form on the website submits to the Operator:

• your name;

• your phone number;

• the intended check-in and check-out dates, the number of guests, the selected room;

• a comment on the request.

The question form in the "Q & A" section submits:

• your name;

• a contact for the reply — a phone number or an email address;

• the text of your question.

With every request the website automatically stores the IP address it was sent from, browser information (User-Agent) and the language version of the website used. When you contact the Operator by phone, email or a messaging app, the Operator receives whatever information you provide yourself.

The Operator does not request or process special categories of personal data (health, religious beliefs and the like), nor does it process bank card details — accommodation is paid for on site, and no card details are transmitted through the website.

4. Purposes of Processing

• handling room booking requests and clarifying the details of a stay;

• answering questions submitted through the website;

• contacting the guest by phone, email or a messaging app;

• protecting the website's forms against automated submissions — the IP address and browser information are stored for this purpose;

• measuring website traffic using depersonalized statistics.

5. Legal Grounds for Processing

Personal data is processed with the consent of the data subject, given by ticking the checkbox in a form on the website, or through implied actions — a phone call or a message in a messaging app in which personal data is provided.

6. Storage and Destruction of Data

Personal data is stored no longer than the purposes of its processing require, unless a different retention period is established by the legislation of the Russian Federation. Once the purposes of processing have been achieved, and also if the data subject withdraws consent, the data is destroyed or depersonalized.

Requests submitted through the website are stored in the website's database. A backup copy of the database is taken once a day: the archive is encrypted and placed in object storage (see section 7), and outdated copies are deleted automatically.

7. Transfer to Third Parties

The Operator does not sell personal data and does not pass it to third parties for their own purposes. The following services are engaged to run the website and process data on the Operator's behalf:

• Yandex.Metrica (Yandex LLC) — the traffic counter. It receives depersonalized information about the visit: the page address, the referring source, the device and browser type, the IP address and on-page activity. Your name, phone number and the text of your request are not passed to the counter — it only receives the fact that a form was submitted, the selected room, the number of nights and the cost of the stay. See our Cookie Policy for details;

Otherwise, personal data is not transferred to third parties, except in cases expressly provided for by the legislation of the Russian Federation (for example, at the request of authorized state authorities).

8. Rights of the Data Subject

At any time you have the right to:

• request information about the personal data processed by the Operator;

• demand that the data be corrected, blocked or destroyed if it is incomplete, outdated or inaccurate;

• withdraw your consent to the processing of personal data.

To exercise these rights, simply send a request to zamok@eastland.ru or call +7 (902) 763 55 66.

9. Security Measures

The Operator takes the necessary organizational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions by third parties.

In particular: the website runs over the secure HTTPS protocol; access to submitted requests is limited to the Operator's staff with a personal account in the website's admin panel; backups are stored in encrypted form.

10. Changes to This Policy

The Operator may make changes to this Policy. The new version takes effect from the moment it is published on the website, unless otherwise provided by the new version.

11. Contacts

For any questions related to the processing of personal data, you can contact the Operator by any of the means listed: phone +7 (902) 763 55 66, email zamok@eastland.ru, or at the address: 18 Gagarina St, Arshan, Republic of Buryatia, Russia.

Our Cookie Policy explains the data-storage technologies used in your browser.