Policy of protection and processing of personal data of users of the Ruking Service

1. General provisions

1.1. The Policy for the protection and processing of personal data of users of the Ruking Service on the Internet information and Telecommunications network (hereinafter referred to as the "Privacy Policy") has been developed in accordance with the provisions of the Constitution of the Russian Federation, Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" (hereinafter referred to as the "Federal Law") and other regulatory legal acts.
The policy of protection and processing of personal data of the online booking service Ruking is aimed at preserving the confidentiality of personal data of Users using the services of the online booking service on the site www.ruking.ru (hereinafter referred to as "Service").
1.2. This Privacy Policy sets out the procedure for obtaining, protecting, storing, processing and transmitting personal data of Users of the site, and applies to all information that the Operator can receive about Users during their use of the site.
This Privacy Policy does not apply to other sites and does not apply to third-party sites. The Operator is not responsible for third-party sites to which Users can click on links available on the site.
1.3. The personal data of the Site Users include: surname, first name, patronymic, gender, date and place of birth, citizenship, passport data, address of the place of registration and residence, home / mobile phone, personal /work email address, information about the location of the connection to the Service (geolocation), information of the payment instrument, if necessary, mutual settlements using the Service, including payment card data, including information about the card number, expiration date, security code, cookies, IP address, device identifier, as well as other personal and analytical data, the indication of which is necessary for the use of the Service. The Operator can receive all personal data about Users only from them.
The Operator does not collect and process the User's personal data about his race, nationality, political views, religious or philosophical beliefs, private life.
The personal data of the Website Users is confidential information and cannot be used by the Operator or any other person for personal purposes.
1.4. The processing of personal data of Website Users is carried out solely for the purposes of:
1. providing the User with the opportunity to interact with the Site for authorization on the Ruking platform in any available way, including for the purpose of creating a personal account, personalizing the services provided, creating bookmarks, saving the necessary search parameters, booking accommodation facilities, managing reservations, providing any travel services, concluding and executing contracts;
2. establishing feedback with the User, including sending mailings, individual offers, notifications, including new discounts and special offers, processing requests and requests from Users, displaying and individualizing advertising on the site and/or sending advertising information via telecommunication networks (including via mobile communication, push-notifications, email);
3. providing Users with the necessary assistance, including choosing the necessary accommodation facility, making and completing reservations, sending funds to pay for services rendered, participating in loyalty programs and bonus programs. Records of telephone conversations are stored for a limited period of time and are deleted automatically if the Operator does not consider it necessary to save them for a longer period (if reasonably necessary), including for the purpose of investigating fraud cases;
4. improving the quality of service provision, conducting marketing, statistical, analytical and other research by the Operator to optimize the operation of the platform Ruking.ru , its individual capabilities, product and service development Ruking.ru , improving their user-friendliness.
1.5. The website Operator provides Users with free, free access to their personal data, including the right to receive copies of any record containing their personal data, except as provided by law.
1.6. The Operator develops measures to protect the personal data of Users of the site.

2. Terms and definitions

In this Privacy Policy, the following concepts are used:
A website is a set of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at a network address http://ruking.ru /, providing online booking services.
Operator is an organization that independently or jointly with other persons organizes the processing of personal data, as well as determines the purposes of processing personal data to be processed, actions (operations) performed with personal data.
The processing of personal data of Users is carried out by the Operator of the Service Limited Liability Company "Ruking" (OGRN 1227700202025).
The site user is an individual, a user of the site's online booking services, a personal data subject who voluntarily registered on the site and provided the necessary personal data during registration.
Personal data - any information relating directly or indirectly to a specific or identifiable individual (subject of personal data), which by itself or in combination with other information available on the site, allows you to identify the identity of the user.
Personal data processing - any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
Automated processing of personal data is the processing of personal data using computer technology.
Dissemination of personal data – any actions aimed at disclosure of personal data to an indefinite circle of persons (transfer of personal data) or familiarization with personal data of an unlimited circle of persons, including the publication of personal data in the media, posting in information and telecommunications networks or providing access to personal data in any other way.
Cross–border transfer of personal data is the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity. Provision of personal data – actions aimed at disclosure of personal data to a certain person or a certain circle of persons.
Blocking of personal data is a temporary termination of the processing of personal data (except in cases where processing is necessary to clarify personal data).
Destruction of personal data – actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and/or as a result of which the material carriers of personal data are destroyed.
Destruction of personal data – actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and/or as a result of which the material carriers of personal data are destroyed.

3. Storage, processing and transfer of personal data of Website Users

3.1. The processing of personal data of Website Users is carried out exclusively for the purposes specified in clause 1.4. of this Privacy Policy.
3.2. The processing of personal data is carried out by the Service with the consent of the User both from the moment of booking and immediately after the User's registration on the Service.
3.3. Obtaining the User's consent to the processing of his personal data is a necessary condition for the User to make a reservation or register on the Service. The User can get acquainted with the contents of the document "Consent to the processing of personal data" at any time, including when making a reservation.
3.4. The personal data of the Website Users are stored electronically in the personal data information system of the website.
When storing personal data of Website Users, organizational and technical measures are observed to ensure their safety and exclude unauthorized access to them.
Only the Operator's employees who are allowed to work with the personal data of the Site Users and have signed an agreement on non-disclosure of personal data of the Site Users can have access to the processing of personal data of the Site Users.
3.5. The processing of personal data on the website is carried out in an automated way.
3.6. The Operator may transfer to the Accommodation Facility, including those located outside the Russian Federation, in which the User made the reservation, as well as to the supplier and contractor of other tourist services, data on the reservation made, including personal data of Users. Such information may include the name, contact details, names of guests traveling with the User, and any preferences that were specified at the time of booking. In case of disputes related to the booking, the Operator may, if necessary, provide the administration of the accommodation with information about the booking process. Such information may include a copy of the booking confirmation as proof that the booking has been made.
3.7. Before the start of the cross-border transfer of personal data, the Operator is obliged to make sure that the foreign state to whose territory the transfer of personal data is supposed to be carried out provides reliable protection of the rights of personal data subjects. The cross-border transfer of personal data on the territory of foreign states that do not meet the above requirements may be carried out only if the personal data subject has written consent to the cross-border transfer of his personal data and/or the execution of the contract to which the personal data subject is a party.
3.8. When transferring the personal data of the Site Users, the Operator warns the persons receiving this information that this data can only be used for the purposes for which they are reported, and requires written confirmation from these persons of compliance with this condition.

4. Rights and obligations of the Operator

4.1. The Operator has the right to establish requirements for the composition of Users' personal data, which must be provided for the use of the site, while the Operator is guided by this Policy, the Constitution of the Russian Federation, and other federal laws.
4.2. The Operator does not verify the accuracy of the personal data provided by Users, believing that they act in good faith and keep the information about their personal data up to date.
4.3. The Operator is not responsible for the voluntary transfer by Users of their contact data, password or login to third parties.
4.4. The Operator does not have the right to receive and process personal data of Users about their political, religious and other beliefs and private life.
4.5. The Operator is obliged, at its own expense, to protect the personal data of the Site Users from misuse or loss in accordance with the procedure established by the legislation of the Russian Federation.
4.6. The Operator is obliged to take measures necessary and sufficient to ensure the fulfillment of the obligations provided for by the Federal Law and the regulatory legal acts adopted in accordance with it. The operator independently determines the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations provided for by Federal Law and regulatory legal acts adopted in accordance with it.

5. The rights of users to protect their personal data

5.1. In order to ensure the protection of their personal data stored on the site, users have the right to:
- receive full information about your personal data, their processing, storage and transfer;
- identify their representatives to protect their personal data;
- to demand the exclusion or correction of incorrect or incomplete personal data, as well as data processed in violation of this Regulation and the legislation of the Russian Federation;
5.2. Users have the right to independently restrict the collection of information by third parties using the standard privacy settings of the Internet browser they use to work with the site, as well as to change, delete or supplement the personal data provided by them at any time. Users have the right at any time to edit in their Personal Account the personal data provided by them during registration or authorization independently and/or by sending a notification to the Operator to the Operator's email address contact@ruking.ru marked "Updating of personal data".
5.3. If Users believe that the processing of their personal data is carried out in violation of the requirements of Federal Law or otherwise violates their rights and freedoms, they have the right to appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects.
5.4. The User can always refuse to receive informational messages by sending an email to the Operator contact@ruking.ru marked "Refusal of notifications about new products and services and special offers".

6. Procedure for blocking and destruction of personal data

6.1. In case of detection of unlawful processing of personal data when contacting Users, the Operator is obliged to block the unlawfully processed personal data relating to these Users from the moment of such request for the verification period.
6.2. In case of identification of inaccurate personal data when contacting Users, the Operator is obliged to block personal data related to these Users from the moment of such request for the verification period, if the blocking of personal data does not violate the rights and legitimate interests of users or third parties.
6.3. In case of confirmation of the fact of inaccuracy of personal data, the Operator, based on the information provided by Users or other necessary documents, is obliged to clarify personal data within 2 (two) working days from the date of submission of such information and remove the blocking of personal data.
6.4. If it is impossible to ensure the legality of the processing of personal data, the Operator is obliged to destroy such personal data within a period not exceeding 2 (two) working days from the date of detection of unlawful processing of personal data.
6.5. The Operator is obliged to notify Users about the elimination of violations or the destruction of personal data.
6.6. If the Users withdraw their consent to the processing of their personal data, the Operator is obliged to stop processing them and, if the storage of personal data is no longer required for the purposes of processing personal data, destroy the personal data within a period not exceeding 7 (seven) days from the date of receipt of the said withdrawal.
6.7. The period of processing of personal data is unlimited. The User can withdraw his consent to the processing of personal data at any time by sending a notification to the Operator via e-mail to the Operator's e-mail address customer.service@ruking.ru marked "Withdrawal of consent to the processing of personal data".
6.8. The terms of storage of personal data of Users are put into effect from the moment of acceptance by the User of consent to the processing of his personal data on the Site and are valid until the User declares his desire to delete his personal data from the Site. In case of deletion of data from the Site on the initiative of one of the parties, namely, termination of use of the Site, the User's personal data is stored in the Operator's databases for five years in accordance with the legislation of the Russian Federation.

7. Responsibility for violating the rules governing the processing and protection of personal data of users of the site


7.1. Persons guilty of violating the rules governing the receipt, processing and protection of personal data of Users of the site are brought to disciplinary, material, civil, administrative and criminal liability in accordance with the procedure established by the current legislation of the Russian Federation.
7.2. Moral damage caused to the Users of the site as a result of violation of their rights, violation of the rules for processing personal data established by Federal Law, as well as requirements for the protection of personal data established in accordance with Federal Law, is subject to compensation in accordance with the legislation of the Russian Federation. Compensation for moral damage is carried out regardless of compensation for property damage and losses incurred by Users.

8. Changing the Privacy Policy

8.1. In the event of changes in the current legislation of the Russian Federation, amendments to regulatory documents on the protection of personal data, this Privacy Policy is valid to the extent that it does not contradict the current legislation until it is brought into compliance with such.
8.2. This Privacy Policy may be changed or terminated unilaterally without prior notice to the User. The new version of the Privacy Policy comes into force from the moment it is posted on the website, unless otherwise provided by the new version of the Privacy Policy.
8.3. If the User does not agree with the new terms, then he must immediately delete his profile from the Site, otherwise the continued use of the Site by the User means that the User agrees with the terms of this Policy.
8.4. The User can receive any clarifications on issues of interest concerning the processing of his personal data by contacting the Operator via e-mail customer.service@ruking.ru .
8.5. This document will reflect any changes to the Operator's personal data processing policy. The policy is valid indefinitely until it is replaced by a new version.
8.6. The current version of the Policy is available on the Internet at http://ruking.ru