Personal Data Processing Policy

1. General Provisions

This Personal Data Processing Policy (hereinafter — the “Policy”) applies to all information that the Operator — Individual Entrepreneur Trofimenko Mikhail Sergeevich (hereinafter — the “Operator”, “Aurora Trip”) — may obtain about the User during the use of the website, its services and feedback forms.

The Policy has been developed in accordance with Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”. By using the website and submitting data through the forms, the User consents to the terms of this Policy.

2. Key Definitions

• Personal data — any information relating to a directly or indirectly identified natural person (data subject).
• Processing of personal data — any action performed with personal data: collection, recording, systematisation, storage, use, transfer, deletion.
• Operator — the person who organises and carries out the processing of personal data.
• User — a visitor to the website.

3. What Data Is Processed

The Operator processes personal data that the User provides voluntarily when filling in forms on the website:

• name;
• telephone number;
• email address (if provided);
• other information voluntarily specified by the User in the message (for example, preferred dates, number of participants, convenient time to be contacted).

Depersonalised technical data is also collected automatically: cookies, IP address, information about the browser and actions on the website — by means of internet analytics services.

4. Purposes of Processing

• processing requests and enquiries, contacting the User via the contact details provided;
• selecting tours and excursions, providing consultations, booking and arranging services;
• informing the User about the status of a request, changes and offers (subject to consent);
• improving the operation of the website and the quality of service.

5. Legal Grounds

The Operator processes personal data on the basis of the data subject’s consent, as well as for the purposes of performing a contract to which the data subject is a party.

6. Conditions of Processing and Protection

Processing is carried out with the User’s consent, within the territory of the Russian Federation. The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful access, destruction, alteration and distribution. Access to the data is available only to authorised employees.

The Operator does not transfer personal data to third parties, except in cases necessary for the provision of the service (for example, to the partners organising a specific tour), as well as cases provided for by the legislation of the Russian Federation.

7. Rights of the Data Subject

The User has the right to: obtain information about the processing of their data; request its clarification, blocking or deletion; withdraw consent to processing. To exercise these rights, please send a request to the email auroratrip3@gmail.com.

8. Storage Periods

Personal data is stored no longer than required by the purposes of processing, or until consent is withdrawn by the User. Once the purposes have been achieved, the data is deleted or depersonalised.

9. Cookies

The website uses cookies. The procedure for their use is described in the Cookie Policy. The User can disable cookies in their browser settings.

10. Changes to the Policy

The Operator has the right to amend this Policy. A new version takes effect from the moment it is posted on the website. The current version is always available on this page.