Privacy Policy Regarding the Processing of Personal Data

1. General Provisions

This Privacy Policy Regarding the Processing of Personal Data (hereinafter, the "Policy") has been drawn up in accordance with the requirements of Federal Law No. 152-FZ "On Personal Data" dated 27 July 2006, and sets out the procedure for processing personal data and the measures taken to ensure its security by Mountain King's Castle hotel (hereinafter, the "Operator").

The Policy applies to all personal data that the Operator receives from visitors to the arshan138.ru website and hotel guests — including through booking forms, and communications by phone, email and messaging apps.

2. Personal Data Operator

3. What Data Is Processed

When filling out forms on the website and contacting the booking department, the Operator may collect the following data:

• name;
• phone number;
• email address (if provided);
• intended check-in and check-out dates, number of guests, selected room;
• the text of the inquiry or a comment on the request.

The Operator does not request or process special categories of personal data (concerning health, religious beliefs, etc.), nor does it process bank card data — payment for the stay is made on site, without transmitting card details through the website.

4. Purposes of Processing

• processing room booking requests and clarifying the details of the stay;
• communicating with the guest by phone, email or messaging apps;
• informing the guest of a change in the status of their request;
• with separate consent — informing the guest about promotions and special offers from the hotel.

5. Legal Grounds for Processing

Personal data is processed with the consent of the data subject, expressed by ticking a box on the booking form on the website, or by way of implied conduct — a phone call or a message via a messaging app containing personal data.

6. Storage and Destruction of Data

Personal data is stored no longer than required by the purposes of its processing, unless a different retention period is established by the legislation of the Russian Federation. Once the purposes of processing have been achieved, or if the data subject withdraws their consent, the data is destroyed or de-identified.

7. Disclosure to Third Parties

The Operator does not disclose personal data to third parties, except in cases directly provided for by the legislation of the Russian Federation (for example, at the request of authorized government bodies).

8. Rights of the Data Subject

You are entitled at any time to:

• request information about the personal data processed by the Operator;
• demand the correction, blocking or destruction of data if it is incomplete, outdated or inaccurate;
• withdraw consent to the processing of personal data.

To exercise these rights, it is sufficient to send a request to zamok@eastland.ru or call +7 (902) 763 55 66.

9. Protective Measures

The Operator takes the necessary organizational and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, dissemination, and from other unlawful actions by third parties.

10. Amendments to the Policy

The Operator reserves the right to make amendments to this Policy. The new version takes effect from the moment it is published on the website, unless otherwise stated in the new version.

11. Contacts

For any questions related to the processing of personal data, please contact the Operator using any of the methods indicated: phone +7 (902) 763 55 66, email zamok@eastland.ru, or at the address: 18 Gagarina St, Arshan, Republic of Buryatia, Russia.