Payment is
made through the payment gateway of PJSCB Orient Finans Bank using Bank cards
of the following payment systems:
Visa International.
Mastercard Worldwide.
For payment (entering your card details) you
will be redirected to the Orient Finans Bank payment gateway.
The connection with the payment gateway and
the transfer of information is carried out in a secure mode using the SSL
encryption protocol.
If your bank supports the technology of secure
online payments Verified By Visa or MasterCard SecureCode, you may also need to
enter a special password to make a payment.
This site supports 256-bit encryption.
The confidentiality of the reported personal
information is provided by ORIENT FINANS BANK.
The entered information will not be provided
to third parties, except as provided by the legislation of the Republic of
Uzbekistan.
Payments by bank cards are carried out in
strict accordance with the requirements of Visa Int payment systems. and MasterCard Europe Sprl.
You can pay with a bank card through the
booking module when making a reservation, or at the hotel checkout.
Refund procedure:
Refunds to the card cannot be issued under any
circumstances.
Booking change procedure:
To change your booking, please contact the
hotel administrator.
If you have any problems with payment, please
contact the manager.
Terms of
use
1. General Provisions
1.1.
LLC "Boutique Hotel Medina" - hotel "Medina Hotel” offers
the Internet user to use the website www.medinahotel.uz (the Operator’s
website) and other official web resources of the Operator on the terms and
conditions set forth in this User Agreement. The Agreement comes into force
from the moment the User expresses consent to its terms in the manner provided
for in clause 1.4 of the Agreement.
1.2.
The Operator offers Users access to the information content of the site
www.medinahotel.uz. All currently
existing web resources, as well as any development of them and / or addition of
new ones, is the subject of this Agreement.
1.3.
The use of the Operator's website is governed by this Agreement, the
Privacy Policy posted on the Operator's website. The Agreement may be changed by the Operator
without any special notice, the new version of the Agreement comes into force
from the moment it is posted on the Internet on the Operator's website.
1.4.
Starting to use / browse the site, or having gone through the procedure
for providing their data and / or when posting a review / comment, the User is
considered to have accepted the terms of the Agreement in full, without any
reservations or exceptions. If the User
disagrees with any of the provisions of the Agreement, the User is not entitled
to use the site. If the Operator has
made any changes to the Agreement in the manner provided for in clause 1.3 of
the Agreement, with which the User does not agree, he is obliged to stop using
the site.
2. Online booking
2.1. In
order to use the online booking service, the User must go through the procedure
for providing personal data, as a result of which the Operator will receive the
provided data for further processing and use.
2.2.
The User undertakes to provide accurate and complete information about
himself/herself on the questions proposed in the booking form and to keep this
information up to date. If the User
provides incorrect information or the Operator has reason to believe that the
information provided by the User is incomplete or unreliable, the Operator has
the right, at its own discretion, to refuse the User to provide online booking
services, including hotel accommodation services and other services.
2.3. The
Operator reserves the right at any time to require the User to confirm the data
specified during the online booking, and to request supporting documents in
this regard (in particular, identity documents, including documents confirming
payment for accommodation services at Boutique Hotel LLC Medina", the failure to provide which,
at the discretion of the Operator, may be equated to the provision of false
information and entail the consequences provided for in clause 2.2 of the
Agreement. If the User's data specified in the documents provided by him do not
correspond to the data specified during online booking, and Also, in the event that the data specified
during the online booking does not allow the User to be identified, the
Operator has the right to refuse to provide the User with services.
2.4.
The User's personal information provided by the latter is stored and
processed by the Operator in accordance with the terms of the Privacy Policy.
2.5.
Conditions for obtaining a guarantee of arrival.
2.5.1.
The condition for obtaining a guaranteed check-in at the hotel is that
the User makes an advance payment in the manner and amount described in the
official response (invoice) to the accepted online booking application. The official response of the Operator's
administration is always sent to the User's e-mail address, which he indicated
in the request.
2.6.
Terms of Service
2.6.1.
The User is not entitled to sell and resell, as well as use for any
commercial purposes any services of the Operator, except in cases where the
User has received such permission from the Operator.
3. General
provisions
3.1.
The Operator has the right to set restrictions on the provision of
services for all Users, including: the presence / absence of rooms, the length
of stay in the hotel, the maximum number of services / rooms / provided, the
maximum number of Users for simultaneous accommodation in the hotel, special
and individual requirements / wishes, etc.
.d. The Operator may prohibit
access to the site, as well as stop receiving and processing any information
provided by Users, etc.
3.2.
The Operator has the right to send information messages to its
Users. Using the site www.medinahotel.uz
and any other third-party sites, the User also agrees to receive advertising
messages. The User has the right to
refuse to receive advertising messages by using the appropriate functionality
of the service within which or in connection with which the User received
advertising messages.
3.3. In
order to improve the quality of services, the Operator has the right to collect
opinions and feedback from Users on various issues by sending an appropriate
questionnaire to the User with questions, as well as by means of third-party
sites that have the official page of the hotel. The collected opinions and
reviews can be used to generate statistical data, which can be used by the Operator for its own
purposes. Reviews left by the User using
the Operator's website and / or other third-party sites may also be published
by the Operator on the official website of the Operator or on the official
pages of the hotel posted on third-party sites on the Internet, both with or
without the user name (login).
instructions. When writing
reviews, the User undertakes to be guided by the requirements of this
Agreement, including the requirements established by paragraph 5 of this
Agreement.
4. User
Content
4.1.
The User is solely responsible for the compliance of the content posted
by the User with the requirements of the current legislation, including
liability to third parties in cases where the placement by the User of this or
that content or the content of the content violates the rights and legitimate
interests of third parties, including the personal non-property rights of
authors, other intellectual the rights
of third parties, and/or encroaches on their intangible benefits.
4.2.
The User acknowledges and agrees that the Operator is not obliged to
view content of any kind posted and / or distributed by the User through the
official website of the hotel, including through third-party sites on the
Internet, and that the Operator has the right (but not the obligation ) at its own discretion, refuse to place and
/ or distribute content to the User or delete any content that is available on
the official resources of the Operator.
The user acknowledges and agrees that he must independently evaluate all
risks associated with the use of content, including an assessment of the reliability,
completeness or usefulness of this content.
4.3.
The User acknowledges and agrees that the technology of third-party
sites may require copying (reproducing) the content of the Operator's User, as
well as processing it by the Operator to comply with the technical requirements
of a particular service.
5. Terms of
use of the Operator's web resources
5.1.
The User is solely responsible to third parties for his actions related
to the use of the official web resources of the Operator, including if such
actions lead to a violation of the rights and legitimate interests of third
parties, as well as for compliance with the law when using the official web
resources of the Operator.
5.2.
When using the Operator's web resources, the User is not entitled to:
5.2.1.
upload, post, transmit or in any other way post and/or distribute
content that is illegal, malicious, libelous, offends morality, demonstrates
(or is propaganda) violence and cruelty, violates intellectual property rights,
promotes hatred and/or discrimination against people on the basis of racial, ethnic, gender, religious, social
characteristics, contains insults to any persons or organizations, contains
elements (or is propaganda) of pornography, child erotica, is advertising (or
is propaganda) of sexual services (including under type of other services), explains the
procedure for the manufacture, use or other use of narcotic substances or their
analogues, explosives or other weapons;
5.2.2.
violate the rights of third parties, including minors and / or harm them
in any form;
5.2.3.
impersonate another person or a representative of an organization and/or
community without sufficient rights, including as employees of the Operator,
site moderators, site owner, as well as use any other forms and methods of
illegal representation of other persons on the network, as well as mislead the Users or the Operator regarding
the properties and characteristics of any subjects or objects;
5.2.4.
upload, send, transmit or in any other way place and / or distribute
content, in the absence of rights to such actions under the law or any
contractual relationship;
5.2.5. upload, send, transmit or in any other way
place and / or distribute advertising information that is not specifically
authorized, spam (including search), lists of other people's e-mail addresses,
pyramid schemes, multi-level (network) marketing (MLM), Internet earning systems and e-mail
businesses, "letters of happiness", as well as use the Operator's
services to participate in these events, or use the Operator's services solely
to redirect users to pages of other domains;
5.2.7. collect and store personal data of other
persons without authorization;
5.2.8. disrupt the normal operation of the
Operator's web resources;
5.2.9.
promote actions aimed at violating the restrictions and prohibitions
imposed by the Agreement;
5.2.10.
otherwise violate the norms of the legislation of the Republic of
Uzbekistan, including the norms of international law.
6. Exclusive rights to the content of web
resources and content
6.1.
All objects available on the Operator's web resources, including design
elements, text, graphics, illustrations, videos, sounds and other objects
(hereinafter referred to as the content of the web resources), as well as any
content posted on the Operator's web resources,
are subject to the exclusive rights of their copyright holders.
6.2.
The use of content, as well as any other elements of the Operator's web
resources, is possible only within the framework of the functionality offered
by a particular web resource. No
elements of the content of the Operator's web resources, as well as any content
posted on the Operator's web resources, can be used in any other way without
the prior permission of the copyright holder.
By use is meant, including: reproduction, copying, processing, distribution
on any basis, display in a frame, etc.
The exception is cases expressly provided for by the legislation of the
Republic of Uzbekistan or the terms of use of one or another web resource of
the Operator. The use by the User of the
elements of the content of web resources, as well as any content for personal
non-commercial use, is allowed provided that all signs of copyright protection,
related rights, trademarks, other notices of authorship are preserved, the name
(or pseudonym) of the author / title of the right holder is preserved unchanged form, preserving the corresponding object
unchanged. The exception is cases
expressly provided for by the legislation of the Republic of Uzbekistan or user
agreements of a particular web resource of the Operator.
7. Third
Party Sites and Content
7.1.
The Operator's web resources may contain links to other sites on the
Internet (third party sites). These
third parties and their content are not checked by the Operator for compliance
with certain requirements (authenticity, completeness, legality, etc.). The Operator is not responsible for any
information, materials posted on third-party websites that the User accesses
using web resources, including any opinions or statements expressed on
third-party websites, advertising, etc.,
as well as for the availability of such sites or content and the
consequences of their use by the User.
7.2. A
link (in any form) to any website, product, service, any information of a
commercial or non-commercial nature posted on the Operator's web resources does
not constitute an endorsement or recommendation of these products (services,
activities) by the Operator, unless is
directly indicated on the Operator's resources.
8. Advertising on the Operator's services
8.1.
The Operator is responsible for advertising posted by him on the
Operator's web resources, within the limits established by the legislation of
the Republic of Uzbekistan.
9. No Warranty, Limitation of Liability
9.1.
The User uses the Operator's web resources at his own risk. The Operator does not assume any
responsibility, including for the compliance of web resources with the goals of
the User;
9.2.
The Operator does not guarantee that: the web resources meet / will meet
the requirements of the User; web
resources will be provided continuously, quickly, reliably and without
errors; the results that may be obtained
using the services will be accurate and reliable and may be used for any
purpose or in any capacity (for example, to establish and / or confirm any
facts); the quality of any product,
service, information, etc. obtained using the web resources will meet the
User's
expectations;
9.3. Any information and / or materials (including
downloadable software, letters, any instructions and guides for action, etc.
), access
to which the User receives using the Operator's web resources, the User can use
at his own peril and risk and is solely
responsible for the possible consequences of using the specified information
and / or materials, including for the damage that this may cause to the User's
computer or third parties, for loss of data or any other harm;
9.4.
The Operator shall not be liable for any types of losses resulting from
the User's use of the Operator's web resources or individual parts/functions of
the Operator's web resources;
10. Other provisions
10.1.
This Agreement is an agreement between the User and the Operator
regarding the procedure for using web resources and services provided by them
and replaces all previous agreements between the User and the Operator.
10.2.
This Agreement is governed by and construed in accordance with the laws
of the Republic of Uzbekistan. Issues
not regulated by this Agreement shall be resolved in accordance with the
legislation of the Republic of Uzbekistan.
All possible disputes arising from the relations regulated by this
Agreement are resolved in the manner established by the current legislation of
the Republic of Uzbekistan, according to the rules of law.
10.3.
Due to the gratuitous nature of the services provided under this
Agreement, the rules on consumer protection provided for by the legislation of
the Republic of Uzbekistan cannot be applicable to relations between the User
and the Operator.
10.4.
Nothing in the Agreement can be understood as the establishment between
the User and the Operator of agency relations, partnership relations, relations
on joint activities, personal employment relations, or any other relations not
expressly provided for in the Agreement.
10.5.
If, for one reason or another, one or more provisions of this Agreement
are found to be invalid or unenforceable, this does not affect the validity or
applicability of the remaining provisions of the Agreement.
10.6. Inaction on the part of the Operator in case
of violation by the User or other users of the provisions of the Agreements
does not deprive the Operator of the right to take appropriate actions to
protect their interests later, and also does not mean the Operator’s waiver of
their rights in the event of subsequent similar or similar violations.
10.7.
This Agreement is drawn up in Russian and in some cases may be provided
to the User for review in another language.
In case of discrepancy between the Russian-language version of the
Agreement and the version of the Agreement in a different language, the
provisions of the Russian-language version of this Agreement shall apply.
Privacy
Policy
1. General Provisions
1.1.
This document defines the policy of the Medina Hotel (hereinafter
referred to as the Hotel) regarding the processing and security of personal
data.
1.2.
This policy has been developed in order to implement the requirements of
the legislation in the field of processing and ensuring the security of
personal data and is aimed at ensuring the full protection of the rights and
freedoms of a person and citizen when processing his personal data by the
Hotel.
1.3.
The provisions of this Policy are the basis for the organization of all
processes in the Hotel related to the processing and protection of personal
data.
1.4.
This Policy has been developed in accordance with the legislation of the
Republic of Uzbekistan.
1.5.
This Policy states:
- purposes of personal data processing;
- general principles and rules for the
processing of personal data;
- classification of personal data and Personal
Data Subjects;
- the rights and obligations of the Subjects
of personal data and the Hotel for their processing;
- the procedure for organizing the processing
of personal data.
1.6.
This Policy is subject to placement on a public resource - on the
official website of the hotel www.medinahotel.uz in unlimited access.
1.7.
This Policy is subject to revision in connection with changes in the
legislation of Uzbekistan in the field of processing and protection of personal
data, based on the results of assessing the relevance, sufficiency and
effectiveness of the measures taken to ensure the security of personal data
processing at the Hotel.
1.18.
This Policy applies to actions (operations) or a set of actions
(operations) performed using automation tools or without using such tools with
personal data, including collection, recording, systematization, accumulation,
storage, clarification (updating, changing), extraction, use, transfer (distribution, provision,
access), depersonalization, blocking, deletion, destruction of personal data.
2. Basic
terms and definitions
Automated processing of personal data -
processing of personal data using computer technology.
Biometric personal data - information that
characterizes the physiological and biological characteristics of a person, on
the basis of which it is possible to establish his identity and which is used
by the operator to identify the subject of personal data.
Blocking of personal data - temporary
suspension of the processing of personal data (except when processing is
necessary to clarify personal data).
Security of personal data - the state of
protection of personal data, characterized by the ability of users, technical
means and information technologies to ensure the confidentiality, integrity and
availability of personal data when they are processed in personal data
information systems
Personal data information system - a set of
personal data contained in databases and information technologies and technical
means that ensure their processing.
Confidentiality of personal data - a mandatory
requirement for the Hotel or other person who has gained access to personal
data to prevent their disclosure and distribution without the consent of the
subject of personal data or other legal grounds
Processing of personal data - any action
(operation) or a set of actions (operations) performed with the use of
automation tools or without the use of such tools with personal data, including
collection, recording, systematization, accumulation, storage, clarification
(updating, changing), extraction, use,
transfer (distribution, provision, access), depersonalization, blocking,
deletion, destruction of personal data
Publicly
available personal data - personal data, access of an unlimited number of
persons to which is granted with the consent of the subject of personal data or
which, in accordance with laws, is not subject to the requirement of
confidentiality. Depersonalization of personal data - actions, as a result of
which it becomes impossible to determine the ownership of personal data by a
specific subject of personal data without the use of additional information
Operator - a state body, municipal body, legal
entity or individual, independently or jointly with other persons organizing
and (or) carrying out the processing of personal data, as well as determining
the purposes of processing personal data, the composition of personal data to
be processed, the actions (operations) performed with personal data.
Provision of personal data - actions aimed at
disclosing personal data to a specific person or a certain circle of persons
Personal data - any information relating to a
directly or indirectly identified or identifiable natural person (subject of
personal data).
Special categories of personal data - personal
data relating to race, nationality, political views, religious or philosophical
beliefs, health status and intimate life of the subject of personal data
The subject of personal data is a natural
person who is directly or indirectly identified or determined using data.
Destruction of personal data - actions, as a
result of which it becomes impossible to restore the content of personal data
in the information system of personal data and (or) as a result of which
material carriers of personal data are destroyed.
3. Purposes
of personal data processing
3.1.
The hotel processes personal data for the following purposes:
- provision of hotel and / or additional
services at the Medina Hotel in accordance with the Rules for the provision of
hotel services at the Medina Hotel, posted on the official website of the Hotel
www.medinahotel.uz, the civil legislation of the Republic of Uzbekistan and the
category assigned to the Hotel.
- providing the Subject of personal data with
confirmation of the reservation of a room / rooms at the Medina Hotel;
- conclusion of contracts with the Personal
Data Subject for the provision of hotel and additional services at the Medina
Hotel and their further execution;
-organization and management of personnel
records management in the Hotel;
- attraction and selection of candidates for
work in the Hotel;
- formation of statistical reporting,
including for submission to the controlling bodies of state power of the
Republic of Uzbekistan;
- providing the Personal Data Subject with
information about the services provided, about current marketing promotions and
new services;
- as well as for other purposes, the
achievement of which is not prohibited by law, international treaties of the
Republic of Uzbekistan
4. Classification of personal data and
categories of Subjects, personal data processed by the Hotel
4.1.
Personal data includes any information relating directly or indirectly
to a specific or identifiable natural person (subject of personal data)
processed by the Hotel to achieve the specified goals.
4.2.
The hotel does not process special categories of personal data relating
to race, nationality, political views, religious and philosophical beliefs,
unless otherwise provided by the legislation of the Republic of Uzbekistan.
4.3. The Hotel processes personal data of the
following categories of Personal Data Subjects:
- individuals who are employees of the Hotel;
- individuals who are candidates for positions
of employees of the Hotel;
- individuals performing work and providing
services under civil law contracts concluded with the Hotel;
- individuals who are clients of the Hotel
(guests) and / or legally represent the interests of the clients of the Hotel,
or intend to become such;
- individuals who purchase or intend to
purchase third-party services through the Hotel, provided that their personal
data is included in the automated systems of the Hotel in connection with the
provision of hotel and / or additional services to them by the Hotel; other
individuals who have expressed their consent to the processing by the Hotel of
their personal data or the processing of personal data of which is necessary
for the Hotel to perform duties, perform functions or powers assigned and / or
provided for by an international treaty of the Republic of Uzbekistan or the
law of the Republic of Uzbekistan.
5. Basic principles of personal data
processing
5.1.
The processing of personal data in the Hotel is carried out on the basis
of the following principles:
- legality of the purposes and methods of
processing personal data;
- compliance of the purposes of processing
personal data with the purposes predetermined and declared when collecting
personal data;
- compliance of the composition and volume of
processed personal data, as well as methods of processing personal data with
the stated purposes of processing;
- reliability of personal data, their
sufficiency for the purposes of processing,
- inadmissibility of processing personal data
that is excessive in relation to the purposes stated when collecting personal
data;
- inadmissibility of processing personal data
that is incompatible with the purposes of collecting personal data;
- the inadmissibility of combining databases
containing personal data, the processing of which is carried out for purposes
that are incompatible with each other;
- ensuring the storage of personal data no
longer than required by the purposes of processing personal data, if the period
of storage of personal data is not established by law, an agreement to which
the subject of personal data is a party;
Destruction
of personal data - actions, as a result of which it becomes impossible to
restore the content of personal data in the information system of personal data
and (or) as a result of which material carriers of personal data are destroyed.
3. Purposes of personal data processing
3.1.
The hotel processes personal data for the following purposes:
- provision of hotel and / or additional
services at the Medina Hotel in accordance with the Rules for the provision of
hotel services at the Medina Hotel, posted on the official website of the Hotel
www.medinahotel.uz, the civil legislation of the Republic of Uzbekistan and the
category assigned to the Hotel.
- providing the Subject of personal data with
confirmation of the reservation of a room / rooms at the Medina Hotel;
- conclusion of contracts with the Personal
Data Subject for the provision of hotel and additional services at the Medina
Hotel and their further execution;
-organization and management of personnel
records management in the Hotel;
- attraction and selection of candidates for
work in the Hotel;
- formation of statistical reporting,
including for submission to the controlling bodies of state power of the
Republic of Uzbekistan;
- providing the Personal Data Subject with
information about the services provided, about current marketing promotions and
new services;
- as well as for other purposes, the
achievement of which is not prohibited by law, international treaties of the
Republic of Uzbekistan
4.
Classification of personal data and categories of Subjects, personal data
processed by the Hotel
4.1.
Personal data includes any information relating directly or indirectly
to a specific or identifiable natural person (subject of personal data)
processed by the Hotel to achieve the specified goals.
4.2.
The hotel does not process special categories of personal data relating
to race, nationality, political views, religious and philosophical beliefs,
unless otherwise provided by the legislation of the Republic of Uzbekistan.
4.3. The Hotel processes personal data of the
following categories of Personal Data Subjects:
- individuals who are employees of the Hotel;
- individuals who are candidates for positions
of employees of the Hotel;
- individuals performing work and providing
services under civil law contracts concluded with the Hotel; - individuals who
are clients of the Hotel (guests) and / or legally represent the interests of
the clients of the Hotel, or intend to become such;
- individuals who purchase or intend to purchase
third-party services through the Hotel, provided that their personal data is
included in the automated systems of the Hotel in connection with the provision
of hotel and / or additional services to them by the Hotel;
- other individuals who have expressed their
consent to the processing by the Hotel of their personal data or the processing
of personal data of which is necessary for the Hotel to perform duties, perform
functions or powers assigned and / or provided for by an international treaty
of the Republic of Uzbekistan or the law of the Republic of Uzbekistan.
5. Basic
principles of personal data processing
5.1.
The processing of personal data in the Hotel is carried out on the basis
of the following principles:
- legality of the purposes and methods of
processing personal data;
- compliance of the purposes of processing
personal data with the purposes predetermined and declared when collecting
personal data;
- compliance of the composition and volume of
processed personal data, as well as methods of processing personal data with
the stated purposes of processing;
- reliability of personal data, their
sufficiency for the purposes of processing,
- inadmissibility of processing personal data
that is excessive in relation to the purposes stated when collecting personal
data;
- inadmissibility of processing personal data
that is incompatible with the purposes of collecting personal data;
- the inadmissibility of combining databases
containing personal data, the processing of which is carried out for purposes
that are incompatible with each other;
- ensuring the storage of personal data no
longer than required by the purposes of processing personal data, if the period
of storage of personal data is not established by law, an agreement to which the
subject of personal data is a party;
- destruction or depersonalization of personal
data upon reaching the goals of processing or in case of loss of the need to
achieve these goals, unless otherwise provided by the legislation of the
Republic of Uzbekistan, the contract to which the Subject of personal data is a
party;
- ensuring the confidentiality and security of
the processed personal data.
6.
Organization of personal data processing
6.2.
The hotel processes personal data, both with the use of automation
tools, and without the use of automation tools.
6.3.
The Hotel may include the personal data of the subjects in public
sources of personal data, while the Hotel takes the written consent of the
subject to the processing of his personal data.
6.4. No
decisions are made on the basis of exclusively automated processing of personal
data that give rise to legal consequences in relation to the subject of
personal data or otherwise affect his rights and legitimate interests.
6.5. If
there is no need for a written consent of the subject to the processing of his
personal data, the consent of the subject may be given by the subject of
personal data or his representative in any form that allows obtaining the fact
of its receipt.
6.6.
The hotel has the right to entrust the processing of personal data to
another person with the consent of the subject of personal data, unless
otherwise provided by law, on the basis of an agreement concluded with this
person (hereinafter referred to as the instruction of the operator). At the same time, the Hotel in the contract
obliges the person who processes personal data on behalf of the Hotel to comply
with the principles and rules for the processing of personal data provided for
by this law.
6.7.
Providing access to public authorities (including regulatory,
supervisory, law enforcement and other bodies) to personal data processed by
the Hotel is carried out in the amount and manner established by the relevant
legislation of the Republic of Uzbekistan
7. Rights
of the Personal Data Subject
7.1. The subject of personal data has the
right:
- receive information regarding the processing
of his personal data in the manner, form and terms established by the Personal
Data Legislation;
- demand clarification of their personal data,
their Blocking or Destruction in the event that personal data is incomplete,
outdated, inaccurate, illegally obtained, is not necessary for the stated
purpose of processing or is used for purposes not previously declared when the
Subject of personal data provided consent to processing personal data;
- take measures provided by law to protect
their rights; - withdraw your consent to
the processing of personal data.
7.2.
The subject of personal data is obliged to provide complete, accurate
and reliable information about his personal data.
7.3.
The right of the subject of personal data to access his personal data
may be limited in accordance with the laws
8. Rights and obligations of the Hotel when
processing personal data
8.1.
The hotel has the right:
- process the personal data of the Personal
Data Subject in accordance with the stated purpose;
- require the Personal Data Subject to provide
reliable personal data necessary for the execution of the contract, the
provision of services,
- identification of the Subject of personal
data, as well as in other cases provided for by the legislation on personal
data;
- restrict the access of the Personal Data
Subject to his personal data if it violates the rights and legitimate interests
of third parties, as well as in other cases provided for by the legislation of
the Republic of Uzbekistan;
- process publicly available personal data of
individuals;
- to process personal data subject to
publication or mandatory disclosure in accordance with the legislation of the
Republic of Uzbekistan;
- clarify the personal data being processed,
block or delete if the personal data is incomplete, outdated, inaccurate,
illegally obtained or not necessary for the stated purpose of processing.
- keep a record of requests from the Subjects
of personal data;
- entrust the processing of personal data to
another person with the consent of the Personal Data Subject.
8.2. In
accordance with the requirements of the law "On Personal Data"
The hotel
is obliged:
- provide the subject of personal data, at his
request, with information regarding the processing of his personal data, or
legally provide a refusal.
- at the request of the subject of personal
data, clarify the processed personal data, block or delete if the personal data
is incomplete, outdated, inaccurate, illegally obtained or not necessary for
the stated purpose of processing.
- keep records of requests from personal data
subjects.
- notify the subject of personal data about
the processing of personal data in the event that personal data was not
received from the subject of personal data, with the exception of cases
provided for by the law of the Republic of Uzbekistan.
- if the purpose of processing personal data
is achieved, immediately stop processing personal data and destroy the relevant
personal data, unless otherwise provided by the agreement to which the subject
of personal data is a party, or another agreement between the Hotel and the
subject of personal data.
- in case of withdrawal by the subject of
personal data of consent to the processing of his personal data, stop
processing personal data and destroy personal data within the period
established by the legislation of the Republic of Uzbekistan. The Hotel is obliged to notify the subject of
personal data about the destruction of personal data.
- The hotel undertakes and obliges other
persons who have gained access to personal data not to disclose them to third
parties and not to distribute personal data without the consent of the subject
of personal data, unless otherwise provided by law.
- Appoint the person(s) responsible for
organizing the processing of personal data.
9. Measures to ensure the security of personal
data during their processing
9.1. When processing personal data, the Hotel
takes the necessary legal, organizational and technical measures to protect
personal data from unauthorized or accidental access to them, destruction,
modification, blocking, copying, provision, distribution of personal data, as
well as from other illegal actions in relation to personal data.
9.2. Ensuring the security of personal data is
achieved, in particular: - Determination of threats to the security of personal
data during their processing in personal data information systems. - The application of organizational and
technical measures to ensure the security of personal data during their
processing in personal data information systems necessary to fulfill the
requirements for the protection of personal data, the implementation of which
ensures the levels of protection of personal data established by the Government
of the Republic of Uzbekistan.
- Evaluation of the effectiveness of the
measures taken to ensure the security of personal data prior to the
commissioning of the personal data information system.
- Taking into account machine carriers of
personal data.
- Detection of facts of unauthorized access to
personal data and taking measures.
- Recovery of personal data modified or
destroyed due to unauthorized access to them.
- Establishing rules for access to personal
data processed in the personal data information system, as well as ensuring the
registration and accounting of all actions performed with personal data in the
personal data information system.
- Training of the Hotel staff involved in the
processing of personal data on the issues of ensuring the security of personal
data.
- Control over the measures taken to ensure
the security of personal data and the level of security of personal data
information systems.
10. Responsibility of the Hotel
10.1.
Control over the fulfillment of the requirements of this Policy, the
rules and requirements applicable to the processing of personal data in the
Hotel is carried out by persons appointed by the Order of the executive body of
the Hotel.
10.2.
The hotel, as well as its officials and employees, bear criminal, civil,
administrative and disciplinary liability for non-compliance with the
principles and conditions for the processing of personal data, as well as for
the disclosure or illegal use of personal data in accordance with the
legislation of the Republic of Uzbekistan.