Terms of use of the site

If third-party users have registered or started using the site sofithotel.ru — means full and unconditional agreement with these Terms of Use of the Site. If the Site User does not agree with these Rules, he must leave the site.

The site administrator has the right to make adjustments to these Rules, in this case, if the user continues to use the site, it means that he automatically agrees to the changes.

1. Basic concepts and definitions

1.1. Website — a collection of web pages hosted on the Internet, united by a single theme, design and a single domain address space sofithotel.ru .

1.2. Site administrator — authorized site management employees acting on behalf of the Company, organizing and (or) processing personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;

1.3. The User is an adult capable individual who accesses the Site via the Internet.

1.4. Personal data (PD) — any information relating directly or indirectly to a specific or identifiable individual (subject of personal data);

1.5. Confidentiality - the need to prevent leakage (disclosure) of any information;

1.6. Confidentiality of information — a mandatory requirement for a person who has access to certain information not to transfer such information to third parties without the consent of its owner;

1.7. Personal data processing — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

1.8. Automated processing of personal data — processing of personal data using computer technology;

1.9. Dissemination of personal data — actions aimed at disclosure of personal data to an indefinite circle of persons;

1.10. Provision of personal data — actions aimed at disclosure of personal data to a certain person or a certain circle of persons;

1.11. Blocking of personal data — temporary termination of processing of personal data (except in cases where processing is necessary to clarify personal data);

1.12. Destruction of personal data — actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed;

1.13. The Personal Data Information System (ISPDn) is a set of personal data contained in databases and information technologies and technical means that ensure their processing.

2. Use of site content sofithotel.ru

2.1. Copying of text and graphic information of the Site is allowed only for personal use by the User of the Site.

2.2. Copying and use of the contents of the website by third-party resources is allowed only if the active link to the website is placed sofithotel.ru

2.3. Commercial use of the Site by its Users is prohibited.

2.4. Copying and attempts to violate the program code used in the development of the Site are prohibited.

2.5. It is forbidden to use website design elements, corporate identity, logo sofithotel.ru . All rights to these objects are reserved.

2.6. It is prohibited to send spam on behalf of the Site.

2.7. It is prohibited to indicate personal data, including contact details, of other Users or other persons during registration on the Site without prior consent.

3. Processing of personal data

If the site User has passed the registration procedure, participated in the ongoing Promotions, contacted the hotline or other contact numbers, the Administrator's email address posted on the site sofithotel.ru , and also left a message in the Administrator's feedback windows or using other means, and provided the Administrator with his personal data, he automatically agrees to them processing, storage and use.

The Administrator processes personal data for the following purposes:

Identification of the User registered on the website sofithotel.ru , for placing an order, participating in Promotions, and (or) concluding a contract for the purchase and sale of goods, as well as contacting the hotline or other contact numbers, the Administrator's email address posted on the website sofithotel.ru , as well as the person who left a message in the Administrator's feedback windows or with using other means;
Providing the User with access to personalized Site resources;
Establishing feedback with the User, including sending notifications, requests regarding the use of the site, the provision of services, processing requests and requests from the User;
Determining the User's location to ensure security, fraud prevention;
Confirmation of the accuracy and completeness of the personal data provided by the User;
Creating an account for making purchases, if the User has agreed to create an account;
Notifications of the Website User about the Order status;
Providing the User with effective customer and technical support in case of problems related to the use of the website;
Providing the User with his consent, product updates, special offers, pricing information, newsletters and other information on behalf of the Company or on behalf of the Company's partners.
Carrying out advertising activities with the consent of the User;
Conclusion, execution and termination of civil law contracts with individuals, legal entities, individual entrepreneurs and other persons, in cases provided for by the current legislation of the Russian Federation and the Charter of the Administrator.

4. Principles of personal data processing

The processing of personal data in the Company is carried out on the basis of the following principles:

Processing of personal data is carried out on a legal and fair basis;
The processing of personal data is limited to the achievement of specific, predetermined and legitimate goals. Processing of personal data incompatible with the purposes of personal data collection is not allowed;
It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
Only those personal data that meet the purposes of their processing are subject to processing;
The content and volume of the processed personal data correspond to the stated purposes of processing. The processed personal data is not redundant in relation to the stated purposes of processing;
When processing personal data, the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the stated purposes of their processing is ensured;
The storage of personal data is carried out in a form that allows determining the subject of personal data for no longer than the purposes of personal data processing require, unless the period of personal data storage is established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor. The processed personal data is subject to destruction or depersonalization upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.

5. Personal data processing conditions

5.1. The processing of personal data is carried out in compliance with the principles and rules established by the Federal Law "On Personal Data".

5.2. If necessary, the Company may include the personal data of subjects in publicly available sources of personal data, while the Company takes the written consent of the subject to the processing of his personal data.

5.3. The Company may process special categories of personal data relating to race, nationality, health status, while the Company undertakes to take the written consent of the subject to the processing of his personal data

5.4. Making decisions based solely on automated processing of personal data that generate legal consequences for the subject of personal data or otherwise affect his rights and legitimate interests is not carried out.

5.5. If there is no need for the subject's written consent to the processing of his personal data, the subject's consent may be given by the subject of personal data or his representative in any form that allows to obtain the fact of its receipt.

5.6. The Company has the right to entrust the processing of personal data to another person with the consent of the personal data subject, unless otherwise provided by federal law, on the basis of an agreement concluded with this person (hereinafter referred to as the Administrator's order). At the same time, the Company in the contract obliges the person processing personal data on behalf of the Company to comply with the principles and rules of personal data processing provided for in this document and Federal Law No. 152-FZ "On Personal Data".

5.7. If the Company entrusts the processing of personal data to another person, the Company is responsible to the subject of personal data for the actions of this person. The person who processes personal data on behalf of the Company is responsible to the Company.

5.8. The Company undertakes and obliges other persons who have gained access to personal data not to disclose to third parties and not to distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.

6. Rights of the subject of personal data

6.1. In accordance with No. 152-FZ "On Personal Data", a personal data subject has the right to:

6.1.1 Get information regarding the processing of PD by the Administrator, namely:

Confirmation of the fact of personal data processing by the Administrator;
Legal grounds and purposes of personal data processing;
Purposes and methods of personal data processing used by the Administrator;
Name and location of the Administrator, information about persons (with the exception of employees of the Administrator) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Administrator or on the basis of federal law;
Processed personal data related to the relevant personal data subject, the source of their receipt, unless another procedure for the submission of such data is provided for by federal law;
Terms of processing of personal data, including the terms of their storage;
The procedure for the exercise by the subject of personal data of the rights provided for by No. 152-FZ "On Personal Data";
Information about the transborder data transfer carried out or proposed;
The name or surname, first name, patronymic and address of the person processing personal data on behalf of the Administrator, if processing is or will be entrusted to such a person;
Other information provided by No. 152-FZ "On Personal Data" or other federal laws.

6.1.2. Require the Administrator to clarify his personal data, block or destroy them if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing;

6.1.3. To object to making decisions against themselves that generate legal consequences based solely on automated processing of personal data;

6.1.4. Withdraw consent to the processing of personal data in the cases provided for by law.

6.2. The right of a personal data subject to access his/her personal data may be restricted in accordance with the federal laws of the Russian Federation.

7. Responsibilities of the Company

7.1. In accordance with the requirements of Federal Law No. 152-FZ "On Personal Data", the Company is obliged to:

7.1.1. To provide the subject of personal data at his request with information concerning the processing of his personal data, or to legally provide a refusal;

7.1.2. At the request of the personal data subject to clarify the processed personal data, block or delete if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing.

7.1.3. Keep a Log of the requests of personal data subjects, which should record the requests of personal data subjects to receive personal data, as well as the facts of providing personal data on these requests.

7.1.4. Notify the subject of personal data about the processing of personal data if the personal data was not received from the subject of personal data. The following cases are an exception:

The PD subject has been notified about the processing of his PD by the relevant Administrator;
PD is received by the Company on the basis of federal law or in connection with the execution of an agreement to which the PD subject is a party or beneficiary or guarantor;
PD are made publicly available by the PD subject or obtained from a publicly available source;
The Company processes PD for statistical or other research purposes, for the professional activity of a journalist or scientific, literary or other creative activity, if the rights and legitimate interests of the PD subject are not violated;
Providing the PD subject with the information contained in the PD Processing Notification violates the rights and legitimate interests of third parties.

7.1.5. If the purpose of personal data processing is achieved, immediately terminate the processing of personal data and destroy the relevant personal data within a period not exceeding thirty days from the date of achievement of the purpose of personal data processing, unless otherwise provided for by the contract to which the personal data subject is a party, beneficiary or guarantor, or by another agreement between the Company and the personal data subject. or if the Company does not have the right to process personal data without the consent of the personal data subject on the grounds provided for by No. 152-FZ "On Personal Data" or other federal laws.

7.1.6. If the subject of personal data withdraws consent to the processing of their personal data, stop processing personal data and destroy personal data within a period not exceeding thirty days from the date of receipt of the said withdrawal, unless otherwise provided by the agreement between the Company and the subject of personal data. The Company is obliged to notify the subject of personal data about the destruction of personal data.

7.1.7. In case of receipt of the subject's request to stop processing personal data in order to promote goods, works, services on the market, immediately stop processing personal data.

8. Measures to ensure the security of personal data during their processing

8.1. When processing personal data, the Company takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, and also from other illegal actions in relation to personal data.

8.2. Ensuring the security of personal data is achieved, in particular:

Identification of threats to the security of personal data during their processing in personal data information systems;
The application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems necessary to meet the requirements for the protection of personal data, the implementation of which ensures the levels of personal data security established by the Government of the Russian Federation;
The use of information security tools that have passed the compliance assessment procedure in accordance with the established procedure
Assessment of the effectiveness of the measures taken to ensure the security of personal data prior to the commissioning of the personal data information system;
Taking into account machine carriers of personal data;
Detection of unauthorized access to personal data and taking measures
Recovery of personal data modified or destroyed due to unauthorized access to them;
Establishing rules for access to personal data processed in the personal data information system, as well as ensuring registration and accounting of all actions performed with personal data in the personal data information system;
Control over the measures taken to ensure the security of personal data and the level of security of personal data information systems.

9. Changing the rules of use of the site

9.1. The Company has the right to make changes to these Rules.

9.2. When making changes, the date of the last revision update is indicated in the title of the Rules. The new version of the Rules comes into force from the moment it is posted on the Company's website, unless otherwise provided by the new version of the Rules.