53 Dagbitskiy Street, Samarkand City, Uzbekistan

Payment is made through the payment gateway of PJSCB Orient Finans Bank using Bank cards of the following payment systems:

 Visa International.

 Mastercard Worldwide.

 

 For payment (entering your card details) you will be redirected to the Orient Finans Bank payment gateway.

 The connection with the payment gateway and the transfer of information is carried out in a secure mode using the SSL encryption protocol.

 If your bank supports the technology of secure online payments Verified By Visa or MasterCard SecureCode, you may also need to enter a special password to make a payment.

 This site supports 256-bit encryption.

 The confidentiality of the reported personal information is provided by ORIENT FINANS BANK.

 

 The entered information will not be provided to third parties, except as provided by the legislation of the Republic of Uzbekistan.

 Payments by bank cards are carried out in strict accordance with the requirements of Visa Int payment systems.  and MasterCard Europe Sprl.

 You can pay with a bank card through the booking module when making a reservation, or at the hotel checkout.

 Refund procedure:

 Refunds to the card cannot be issued under any circumstances.

 Booking change procedure:

 To change your booking, please contact the hotel administrator.

 If you have any problems with payment, please contact the manager.

Terms of use

 

 1. General Provisions

 

 1.1.  LLC "Boutique Hotel Medina" - hotel "Medina Hotel” offers the Internet user to use the website www.medinahotel.uz (the Operator’s website) and other official web resources of the Operator on the terms and conditions set forth in this User Agreement. The Agreement comes into force from the moment the User expresses consent to its terms in the manner provided for in clause 1.4 of the Agreement.

 1.2.  The Operator offers Users access to the information content of the site www.medinahotel.uz.  All currently existing web resources, as well as any development of them and / or addition of new ones, is the subject of this Agreement.

 1.3.  The use of the Operator's website is governed by this Agreement, the Privacy Policy posted on the Operator's website.  The Agreement may be changed by the Operator without any special notice, the new version of the Agreement comes into force from the moment it is posted on the Internet on the Operator's website.

 1.4.  Starting to use / browse the site, or having gone through the procedure for providing their data and / or when posting a review / comment, the User is considered to have accepted the terms of the Agreement in full, without any reservations or exceptions.  If the User disagrees with any of the provisions of the Agreement, the User is not entitled to use the site.  If the Operator has made any changes to the Agreement in the manner provided for in clause 1.3 of the Agreement, with which the User does not agree, he is obliged to stop using the site.

 2. Online booking

 2.1.  In order to use the online booking service, the User must go through the procedure for providing personal data, as a result of which the Operator will receive the provided data for further processing and use.

 2.2.  The User undertakes to provide accurate and complete information about himself/herself on the questions proposed in the booking form and to keep this information up to date.  If the User provides incorrect information or the Operator has reason to believe that the information provided by the User is incomplete or unreliable, the Operator has the right, at its own discretion, to refuse the User to provide online booking services, including hotel accommodation services and other services.

 

2.3. The Operator reserves the right at any time to require the User to confirm the data specified during the online booking, and to request supporting documents in this regard (in particular, identity documents, including documents confirming payment for accommodation services at Boutique Hotel LLC  Medina", the failure to provide which, at the discretion of the Operator, may be equated to the provision of false information and entail the consequences provided for in clause 2.2 of the Agreement. If the User's data specified in the documents provided by him do not correspond to the data specified during online booking, and  Also, in the event that the data specified during the online booking does not allow the User to be identified, the Operator has the right to refuse to provide the User with services.

 2.4.  The User's personal information provided by the latter is stored and processed by the Operator in accordance with the terms of the Privacy Policy.

 2.5.  Conditions for obtaining a guarantee of arrival.

 2.5.1.  The condition for obtaining a guaranteed check-in at the hotel is that the User makes an advance payment in the manner and amount described in the official response (invoice) to the accepted online booking application.  The official response of the Operator's administration is always sent to the User's e-mail address, which he indicated in the request.

 2.6.  Terms of Service

 2.6.1.  The User is not entitled to sell and resell, as well as use for any commercial purposes any services of the Operator, except in cases where the User has received such permission from the Operator.

 

3. General provisions

 

 3.1.  The Operator has the right to set restrictions on the provision of services for all Users, including: the presence / absence of rooms, the length of stay in the hotel, the maximum number of services / rooms / provided, the maximum number of Users for simultaneous accommodation in the hotel, special and individual requirements / wishes, etc.  .d.  The Operator may prohibit access to the site, as well as stop receiving and processing any information provided by Users, etc.

 3.2.  The Operator has the right to send information messages to its Users.  Using the site www.medinahotel.uz and any other third-party sites, the User also agrees to receive advertising messages.  The User has the right to refuse to receive advertising messages by using the appropriate functionality of the service within which or in connection with which the User received advertising messages.

 3.3.  In order to improve the quality of services, the Operator has the right to collect opinions and feedback from Users on various issues by sending an appropriate questionnaire to the User with questions, as well as by means of third-party sites that have the official page of the hotel. The collected opinions and reviews can be used to generate statistical data,  which can be used by the Operator for its own purposes.  Reviews left by the User using the Operator's website and / or other third-party sites may also be published by the Operator on the official website of the Operator or on the official pages of the hotel posted on third-party sites on the Internet, both with or without the user name (login).  instructions.  When writing reviews, the User undertakes to be guided by the requirements of this Agreement, including the requirements established by paragraph 5 of this Agreement.

4. User Content

 4.1.  The User is solely responsible for the compliance of the content posted by the User with the requirements of the current legislation, including liability to third parties in cases where the placement by the User of this or that content or the content of the content violates the rights and legitimate interests of third parties, including the personal non-property rights of authors, other intellectual  the rights of third parties, and/or encroaches on their intangible benefits.

 4.2.  The User acknowledges and agrees that the Operator is not obliged to view content of any kind posted and / or distributed by the User through the official website of the hotel, including through third-party sites on the Internet, and that the Operator has the right (but not the obligation  ) at its own discretion, refuse to place and / or distribute content to the User or delete any content that is available on the official resources of the Operator.  The user acknowledges and agrees that he must independently evaluate all risks associated with the use of content, including an assessment of the reliability, completeness or usefulness of this content.

 4.3.  The User acknowledges and agrees that the technology of third-party sites may require copying (reproducing) the content of the Operator's User, as well as processing it by the Operator to comply with the technical requirements of a particular service.

 

5. Terms of use of the Operator's web resources

 5.1.  The User is solely responsible to third parties for his actions related to the use of the official web resources of the Operator, including if such actions lead to a violation of the rights and legitimate interests of third parties, as well as for compliance with the law when using the official web resources of the Operator.

 5.2.  When using the Operator's web resources, the User is not entitled to:

 5.2.1.  upload, post, transmit or in any other way post and/or distribute content that is illegal, malicious, libelous, offends morality, demonstrates (or is propaganda) violence and cruelty, violates intellectual property rights, promotes hatred and/or discrimination against people on the basis of  racial, ethnic, gender, religious, social characteristics, contains insults to any persons or organizations, contains elements (or is propaganda) of pornography, child erotica, is advertising (or is propaganda) of sexual services (including under  type of other services), explains the procedure for the manufacture, use or other use of narcotic substances or their analogues, explosives or other weapons;

 5.2.2.  violate the rights of third parties, including minors and / or harm them in any form;

 5.2.3.  impersonate another person or a representative of an organization and/or community without sufficient rights, including as employees of the Operator, site moderators, site owner, as well as use any other forms and methods of illegal representation of other persons on the network, as well as  mislead the Users or the Operator regarding the properties and characteristics of any subjects or objects;

 5.2.4.  upload, send, transmit or in any other way place and / or distribute content, in the absence of rights to such actions under the law or any contractual relationship;

 

5.2.5.  upload, send, transmit or in any other way place and / or distribute advertising information that is not specifically authorized, spam (including search), lists of other people's e-mail addresses, pyramid schemes, multi-level (network) marketing (MLM),  Internet earning systems and e-mail businesses, "letters of happiness", as well as use the Operator's services to participate in these events, or use the Operator's services solely to redirect users to pages of other domains;

 

 

5.2.7.  collect and store personal data of other persons without authorization;

 5.2.8. disrupt the normal operation of the Operator's web resources;

 5.2.9.  promote actions aimed at violating the restrictions and prohibitions imposed by the Agreement;

 5.2.10.  otherwise violate the norms of the legislation of the Republic of Uzbekistan, including the norms of international law.

 

 6. Exclusive rights to the content of web resources and content

 6.1.  All objects available on the Operator's web resources, including design elements, text, graphics, illustrations, videos, sounds and other objects (hereinafter referred to as the content of the web resources), as well as any content posted on the Operator's web resources,  are subject to the exclusive rights of their copyright holders.

 6.2.  The use of content, as well as any other elements of the Operator's web resources, is possible only within the framework of the functionality offered by a particular web resource.  No elements of the content of the Operator's web resources, as well as any content posted on the Operator's web resources, can be used in any other way without the prior permission of the copyright holder.  By use is meant, including: reproduction, copying, processing, distribution on any basis, display in a frame, etc.  The exception is cases expressly provided for by the legislation of the Republic of Uzbekistan or the terms of use of one or another web resource of the Operator.  The use by the User of the elements of the content of web resources, as well as any content for personal non-commercial use, is allowed provided that all signs of copyright protection, related rights, trademarks, other notices of authorship are preserved, the name (or pseudonym) of the author / title of the right holder is preserved unchanged  form, preserving the corresponding object unchanged.  The exception is cases expressly provided for by the legislation of the Republic of Uzbekistan or user agreements of a particular web resource of the Operator.

 

7. Third Party Sites and Content

 7.1.  The Operator's web resources may contain links to other sites on the Internet (third party sites).  These third parties and their content are not checked by the Operator for compliance with certain requirements (authenticity, completeness, legality, etc.).  The Operator is not responsible for any information, materials posted on third-party websites that the User accesses using web resources, including any opinions or statements expressed on third-party websites, advertising, etc.,  as well as for the availability of such sites or content and the consequences of their use by the User.

 7.2.  A link (in any form) to any website, product, service, any information of a commercial or non-commercial nature posted on the Operator's web resources does not constitute an endorsement or recommendation of these products (services, activities) by the Operator, unless  is directly indicated on the Operator's resources.

 

 8. Advertising on the Operator's services

 

 8.1.  The Operator is responsible for advertising posted by him on the Operator's web resources, within the limits established by the legislation of the Republic of Uzbekistan.

 

 9. No Warranty, Limitation of Liability

 

 9.1.  The User uses the Operator's web resources at his own risk.  The Operator does not assume any responsibility, including for the compliance of web resources with the goals of the User;

 9.2.  The Operator does not guarantee that: the web resources meet / will meet the requirements of the User;  web resources will be provided continuously, quickly, reliably and without errors;  the results that may be obtained using the services will be accurate and reliable and may be used for any purpose or in any capacity (for example, to establish and / or confirm any facts);  the quality of any product, service, information, etc. obtained using the web resources will meet the

 

User's expectations;

 

9.3.  Any information and / or materials (including downloadable software, letters, any instructions and guides for action, etc.

), access to which the User receives using the Operator's web resources, the User can use at his own peril and  risk and is solely responsible for the possible consequences of using the specified information and / or materials, including for the damage that this may cause to the User's computer or third parties, for loss of data or any other harm;

 9.4.  The Operator shall not be liable for any types of losses resulting from the User's use of the Operator's web resources or individual parts/functions of the Operator's web resources;

 

 10. Other provisions

 

 10.1.  This Agreement is an agreement between the User and the Operator regarding the procedure for using web resources and services provided by them and replaces all previous agreements between the User and the Operator.

 10.2.  This Agreement is governed by and construed in accordance with the laws of the Republic of Uzbekistan.  Issues not regulated by this Agreement shall be resolved in accordance with the legislation of the Republic of Uzbekistan.  All possible disputes arising from the relations regulated by this Agreement are resolved in the manner established by the current legislation of the Republic of Uzbekistan, according to the rules of law.

 10.3.  Due to the gratuitous nature of the services provided under this Agreement, the rules on consumer protection provided for by the legislation of the Republic of Uzbekistan cannot be applicable to relations between the User and the Operator.

 10.4.  Nothing in the Agreement can be understood as the establishment between the User and the Operator of agency relations, partnership relations, relations on joint activities, personal employment relations, or any other relations not expressly provided for in the Agreement.

 10.5.  If, for one reason or another, one or more provisions of this Agreement are found to be invalid or unenforceable, this does not affect the validity or applicability of the remaining provisions of the Agreement.

10.6.  Inaction on the part of the Operator in case of violation by the User or other users of the provisions of the Agreements does not deprive the Operator of the right to take appropriate actions to protect their interests later, and also does not mean the Operator’s waiver of their rights in the event of subsequent similar or similar violations.

 10.7.  This Agreement is drawn up in Russian and in some cases may be provided to the User for review in another language.  In case of discrepancy between the Russian-language version of the Agreement and the version of the Agreement in a different language, the provisions of the Russian-language version of this Agreement shall apply.

 

Privacy Policy

 

 1. General Provisions

 

 1.1.  This document defines the policy of the Medina Hotel (hereinafter referred to as the Hotel) regarding the processing and security of personal data.

 1.2.  This policy has been developed in order to implement the requirements of the legislation in the field of processing and ensuring the security of personal data and is aimed at ensuring the full protection of the rights and freedoms of a person and citizen when processing his personal data by the Hotel.

 1.3.  The provisions of this Policy are the basis for the organization of all processes in the Hotel related to the processing and protection of personal data.

 1.4.  This Policy has been developed in accordance with the legislation of the Republic of Uzbekistan.

 1.5.  This Policy states:

 - purposes of personal data processing;

 - general principles and rules for the processing of personal data;

 - classification of personal data and Personal Data Subjects;

 - the rights and obligations of the Subjects of personal data and the Hotel for their processing;

 - the procedure for organizing the processing of personal data.

 1.6.  This Policy is subject to placement on a public resource - on the official website of the hotel www.medinahotel.uz in unlimited access.

 1.7.  This Policy is subject to revision in connection with changes in the legislation of Uzbekistan in the field of processing and protection of personal data, based on the results of assessing the relevance, sufficiency and effectiveness of the measures taken to ensure the security of personal data processing at the Hotel.

 1.18.  This Policy applies to actions (operations) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction,  use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

 

2. Basic terms and definitions

 Automated processing of personal data - processing of personal data using computer technology.

 Biometric personal data - information that characterizes the physiological and biological characteristics of a person, on the basis of which it is possible to establish his identity and which is used by the operator to identify the subject of personal data.

 Blocking of personal data - temporary suspension of the processing of personal data (except when processing is necessary to clarify personal data).

 Security of personal data - the state of protection of personal data, characterized by the ability of users, technical means and information technologies to ensure the confidentiality, integrity and availability of personal data when they are processed in personal data information systems

 Personal data information system - a set of personal data contained in databases and information technologies and technical means that ensure their processing.

 Confidentiality of personal data - a mandatory requirement for the Hotel or other person who has gained access to personal data to prevent their disclosure and distribution without the consent of the subject of personal data or other legal grounds

 Processing of personal data - any action (operation) or a set of actions (operations) performed with the use of automation tools or without the use of such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction,  use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data

 

Publicly available personal data - personal data, access of an unlimited number of persons to which is granted with the consent of the subject of personal data or which, in accordance with laws, is not subject to the requirement of confidentiality. Depersonalization of personal data - actions, as a result of which it becomes impossible to determine the ownership of personal data by a specific subject of personal data without the use of additional information

 Operator - a state body, municipal body, legal entity or individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, the actions (operations) performed  with personal data.

 Provision of personal data - actions aimed at disclosing personal data to a specific person or a certain circle of persons

 Personal data - any information relating to a directly or indirectly identified or identifiable natural person (subject of personal data).

 Special categories of personal data - personal data relating to race, nationality, political views, religious or philosophical beliefs, health status and intimate life of the subject of personal data

 The subject of personal data is a natural person who is directly or indirectly identified or determined using data.

 Destruction of personal data - actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed.

 

3. Purposes of personal data processing

 3.1.  The hotel processes personal data for the following purposes:

 - provision of hotel and / or additional services at the Medina Hotel in accordance with the Rules for the provision of hotel services at the Medina Hotel, posted on the official website of the Hotel www.medinahotel.uz, the civil legislation of the Republic of Uzbekistan and the category assigned to the Hotel.

 - providing the Subject of personal data with confirmation of the reservation of a room / rooms at the Medina Hotel;

 - conclusion of contracts with the Personal Data Subject for the provision of hotel and additional services at the Medina Hotel and their further execution;

 -organization and management of personnel records management in the Hotel;

 - attraction and selection of candidates for work in the Hotel;

 - formation of statistical reporting, including for submission to the controlling bodies of state power of the Republic of Uzbekistan;

 - providing the Personal Data Subject with information about the services provided, about current marketing promotions and new services;

 - as well as for other purposes, the achievement of which is not prohibited by law, international treaties of the Republic of Uzbekistan

 4. Classification of personal data and categories of Subjects, personal data processed by the Hotel

 4.1.  Personal data includes any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data) processed by the Hotel to achieve the specified goals.

 4.2.  The hotel does not process special categories of personal data relating to race, nationality, political views, religious and philosophical beliefs, unless otherwise provided by the legislation of the Republic of Uzbekistan.

 

4.3.  The Hotel processes personal data of the following categories of Personal Data Subjects:

 - individuals who are employees of the Hotel;

 - individuals who are candidates for positions of employees of the Hotel;

 - individuals performing work and providing services under civil law contracts concluded with the Hotel;

 - individuals who are clients of the Hotel (guests) and / or legally represent the interests of the clients of the Hotel, or intend to become such;

 - individuals who purchase or intend to purchase third-party services through the Hotel, provided that their personal data is included in the automated systems of the Hotel in connection with the provision of hotel and / or additional services to them by the Hotel; other individuals who have expressed their consent to the processing by the Hotel of their personal data or the processing of personal data of which is necessary for the Hotel to perform duties, perform functions or powers assigned and / or provided for by an international treaty of the Republic of Uzbekistan or the law of the Republic of Uzbekistan.

 5. Basic principles of personal data processing

 5.1.  The processing of personal data in the Hotel is carried out on the basis of the following principles:

 - legality of the purposes and methods of processing personal data;

 - compliance of the purposes of processing personal data with the purposes predetermined and declared when collecting personal data;

 - compliance of the composition and volume of processed personal data, as well as methods of processing personal data with the stated purposes of processing;

 - reliability of personal data, their sufficiency for the purposes of processing,

 - inadmissibility of processing personal data that is excessive in relation to the purposes stated when collecting personal data;

 - inadmissibility of processing personal data that is incompatible with the purposes of collecting personal data;

 - the inadmissibility of combining databases containing personal data, the processing of which is carried out for purposes that are incompatible with each other;

 - ensuring the storage of personal data no longer than required by the purposes of processing personal data, if the period of storage of personal data is not established by law, an agreement to which the subject of personal data is a party;

 

Destruction of personal data - actions, as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed.

 

 3. Purposes of personal data processing

 3.1.  The hotel processes personal data for the following purposes:

 - provision of hotel and / or additional services at the Medina Hotel in accordance with the Rules for the provision of hotel services at the Medina Hotel, posted on the official website of the Hotel www.medinahotel.uz, the civil legislation of the Republic of Uzbekistan and the category assigned to the Hotel.

 - providing the Subject of personal data with confirmation of the reservation of a room / rooms at the Medina Hotel;

 - conclusion of contracts with the Personal Data Subject for the provision of hotel and additional services at the Medina Hotel and their further execution;

 -organization and management of personnel records management in the Hotel;

 - attraction and selection of candidates for work in the Hotel;

 - formation of statistical reporting, including for submission to the controlling bodies of state power of the Republic of Uzbekistan;

 - providing the Personal Data Subject with information about the services provided, about current marketing promotions and new services;

 - as well as for other purposes, the achievement of which is not prohibited by law, international treaties of the Republic of Uzbekistan

 

4. Classification of personal data and categories of Subjects, personal data processed by the Hotel

 4.1.  Personal data includes any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data) processed by the Hotel to achieve the specified goals.

 4.2.  The hotel does not process special categories of personal data relating to race, nationality, political views, religious and philosophical beliefs, unless otherwise provided by the legislation of the Republic of Uzbekistan.

 4.3.  The Hotel processes personal data of the following categories of Personal Data Subjects:

 - individuals who are employees of the Hotel;

 - individuals who are candidates for positions of employees of the Hotel;

 - individuals performing work and providing services under civil law contracts concluded with the Hotel; - individuals who are clients of the Hotel (guests) and / or legally represent the interests of the clients of the Hotel, or intend to become such;

 - individuals who purchase or intend to purchase third-party services through the Hotel, provided that their personal data is included in the automated systems of the Hotel in connection with the provision of hotel and / or additional services to them by the Hotel;

 - other individuals who have expressed their consent to the processing by the Hotel of their personal data or the processing of personal data of which is necessary for the Hotel to perform duties, perform functions or powers assigned and / or provided for by an international treaty of the Republic of Uzbekistan or the law of the Republic of Uzbekistan.

 

5. Basic principles of personal data processing

 5.1.  The processing of personal data in the Hotel is carried out on the basis of the following principles:

 - legality of the purposes and methods of processing personal data;

 - compliance of the purposes of processing personal data with the purposes predetermined and declared when collecting personal data;

 - compliance of the composition and volume of processed personal data, as well as methods of processing personal data with the stated purposes of processing;

 - reliability of personal data, their sufficiency for the purposes of processing,

 - inadmissibility of processing personal data that is excessive in relation to the purposes stated when collecting personal data;

 - inadmissibility of processing personal data that is incompatible with the purposes of collecting personal data;

 - the inadmissibility of combining databases containing personal data, the processing of which is carried out for purposes that are incompatible with each other;

 - ensuring the storage of personal data no longer than required by the purposes of processing personal data, if the period of storage of personal data is not established by law, an agreement to which the subject of personal data is a party;

 - destruction or depersonalization of personal data upon reaching the goals of processing or in case of loss of the need to achieve these goals, unless otherwise provided by the legislation of the Republic of Uzbekistan, the contract to which the Subject of personal data is a party;

 - ensuring the confidentiality and security of the processed personal data.

 

6. Organization of personal data processing

 6.2.  The hotel processes personal data, both with the use of automation tools, and without the use of automation tools.

 6.3.  The Hotel may include the personal data of the subjects in public sources of personal data, while the Hotel takes the written consent of the subject to the processing of his personal data.

 6.4.  No decisions are made on the basis of exclusively automated processing of personal data that give rise to legal consequences in relation to the subject of personal data or otherwise affect his rights and legitimate interests.

 6.5.  If there is no need for a written consent of the subject to the processing of his personal data, the consent of the subject may be given by the subject of personal data or his representative in any form that allows obtaining the fact of its receipt.

 6.6.  The hotel has the right to entrust the processing of personal data to another person with the consent of the subject of personal data, unless otherwise provided by law, on the basis of an agreement concluded with this person (hereinafter referred to as the instruction of the operator).  At the same time, the Hotel in the contract obliges the person who processes personal data on behalf of the Hotel to comply with the principles and rules for the processing of personal data provided for by this law.

 6.7.  Providing access to public authorities (including regulatory, supervisory, law enforcement and other bodies) to personal data processed by the Hotel is carried out in the amount and manner established by the relevant legislation of the Republic of Uzbekistan

 

7. Rights of the Personal Data Subject

 7.1. The subject of personal data has the right:

 - receive information regarding the processing of his personal data in the manner, form and terms established by the Personal Data Legislation;

 - demand clarification of their personal data, their Blocking or Destruction in the event that personal data is incomplete, outdated, inaccurate, illegally obtained, is not necessary for the stated purpose of processing or is used for purposes not previously declared when the Subject of personal data provided consent to processing  personal data;

 - take measures provided by law to protect their rights;  - withdraw your consent to the processing of personal data.

 7.2.  The subject of personal data is obliged to provide complete, accurate and reliable information about his personal data.

 7.3.  The right of the subject of personal data to access his personal data may be limited in accordance with the laws

 

 8. Rights and obligations of the Hotel when processing personal data

 8.1.  The hotel has the right:

 - process the personal data of the Personal Data Subject in accordance with the stated purpose;

 - require the Personal Data Subject to provide reliable personal data necessary for the execution of the contract, the provision of services,

 - identification of the Subject of personal data, as well as in other cases provided for by the legislation on personal data;

 - restrict the access of the Personal Data Subject to his personal data if it violates the rights and legitimate interests of third parties, as well as in other cases provided for by the legislation of the Republic of Uzbekistan;

 - process publicly available personal data of individuals;

 - to process personal data subject to publication or mandatory disclosure in accordance with the legislation of the Republic of Uzbekistan;

 - clarify the personal data being processed, block or delete if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing.

 - keep a record of requests from the Subjects of personal data;

 - entrust the processing of personal data to another person with the consent of the Personal Data Subject.

 8.2.  In accordance with the requirements of the law "On Personal Data"

 

The hotel is obliged:

 

 - provide the subject of personal data, at his request, with information regarding the processing of his personal data, or legally provide a refusal.

  - at the request of the subject of personal data, clarify the processed personal data, block or delete if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing.

 - keep records of requests from personal data subjects.

 - notify the subject of personal data about the processing of personal data in the event that personal data was not received from the subject of personal data, with the exception of cases provided for by the law of the Republic of Uzbekistan.

 - if the purpose of processing personal data is achieved, immediately stop processing personal data and destroy the relevant personal data, unless otherwise provided by the agreement to which the subject of personal data is a party, or another agreement between the Hotel and the subject of personal data.

 - in case of withdrawal by the subject of personal data of consent to the processing of his personal data, stop processing personal data and destroy personal data within the period established by the legislation of the Republic of Uzbekistan.  The Hotel is obliged to notify the subject of personal data about the destruction of personal data.

 - The hotel undertakes and obliges other persons who have gained access to personal data not to disclose them to third parties and not to distribute personal data without the consent of the subject of personal data, unless otherwise provided by law.

 - Appoint the person(s) responsible for organizing the processing of personal data.

 9. Measures to ensure the security of personal data during their processing

 9.1. When processing personal data, the Hotel takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data.

 

9.2.  Ensuring the security of personal data is achieved, in particular: - Determination of threats to the security of personal data during their processing in personal data information systems.  - The application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems necessary to fulfill the requirements for the protection of personal data, the implementation of which ensures the levels of protection of personal data established by the Government of the Republic of Uzbekistan.

 - Evaluation of the effectiveness of the measures taken to ensure the security of personal data prior to the commissioning of the personal data information system.

 - Taking into account machine carriers of personal data.

 - Detection of facts of unauthorized access to personal data and taking measures.

 - Recovery of personal data modified or destroyed due to unauthorized access to them.

 - Establishing rules for access to personal data processed in the personal data information system, as well as ensuring the registration and accounting of all actions performed with personal data in the personal data information system.

 - Training of the Hotel staff involved in the processing of personal data on the issues of ensuring the security of personal data.

 - Control over the measures taken to ensure the security of personal data and the level of security of personal data information systems.

 10. Responsibility of the Hotel

 10.1.  Control over the fulfillment of the requirements of this Policy, the rules and requirements applicable to the processing of personal data in the Hotel is carried out by persons appointed by the Order of the executive body of the Hotel.

 10.2.  The hotel, as well as its officials and employees, bear criminal, civil, administrative and disciplinary liability for non-compliance with the principles and conditions for the processing of personal data, as well as for the disclosure or illegal use of personal data in accordance with the legislation of the Republic of Uzbekistan.