PERSONAL DATA PROCESSING POLICY
Moscow, February 05, 2026
This Personal Data Processing Policy (hereinafter — the Policy) has been developed in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data", Federal Law No. 38-FZ of 13.03.2006 "On Advertising", Government Decree No. 1119 of 01.11.2012, and other regulatory acts of the Russian Federation.
The Policy defines the procedure for processing and the measures to ensure the security of personal data taken by:
LIMITED LIABILITY COMPANY "HEBI TRAVEL"
OGRN: 1237700710862
INN: 7734486010 KPP: 772901001
Legal address: 119415, Moscow, municipal district Prospekt Vernadskogo, Lobachevskogo St., 10, apt. 14
General Director: Degtyareva Victoria Andreevna
Phone: +7 925 384 2191
E-mail: eco@hebitravel.ru
(hereinafter — the Operator)
This Policy applies to all personal data that the Operator receives through the following websites:
https://устойчивыйтуризм.рф
https://hebitravel.ru
https://туризмбудущего.рф
as well as through feedback forms, applications for events, awards, forums, catalogues, verifications, business retreats, and other Operator projects.
Use of the Website signifies the user's (hereinafter — the User) consent to this Policy and the terms of processing of their personal data. If the User does not agree with the Policy, they must immediately cease using the Website.
1. DEFINITIONS
1.1. The following terms are used in this Privacy Policy:
1.1.1. "Website Administration" — authorized employees managing the website, acting on its behalf, who organize and/or carry out the processing of personal data, and determine the purposes of processing, the composition of personal data to be processed, and the actions performed with personal data.
1.1.2. "Personal Data" — any information relating directly or indirectly to an identified or identifiable natural person (data subject).
1.1.3. "Processing of Personal Data" — any action or set of actions performed with or without the use of automated tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
1.1.4. "Confidentiality of Personal Data" — a mandatory requirement for the Website Administration not to permit intentional disclosure without the consent of the data subject or another legal basis.
1.1.5. "Website User (User)" — a person who has access to the website via the Internet and uses it for their own purposes.
1.1.6. "Cookies" — a small piece of data sent by a web server and stored on the user's computer, which the web client or browser transmits to the web server in each HTTP request when attempting to open a page of the corresponding website.
1.1.7. "IP address" — a unique network address of a node in a computer network built on the IP protocol.
2. GENERAL PROVISIONS
2.1. Use of the Website by the User constitutes acceptance of this Privacy Policy and the terms of processing of the User's personal data.
2.2. If the User disagrees with the terms of the Privacy Policy, the User must cease using the website.
2.3. This Privacy Policy applies only to this website. The Website Administration does not control and is not responsible for third-party websites to which the User may navigate via links available on this website.
2.4. The Website Administration does not verify the accuracy of personal data provided by the User.
3. SUBJECT MATTER OF THE PRIVACY POLICY
3.1. This Privacy Policy establishes the obligations of the Website Administration not to intentionally disclose personal data that the User provides in response to various requests from the Website Administration (e.g., when registering on the website, placing an order, subscribing to notifications, etc.).
3.2. Personal data permitted for processing under this Privacy Policy is provided by the User by filling out special forms on the Website and usually includes the following:
3.2.1. Last name, first name, patronymic of the User;
3.2.2. Contact phone number of the User;
3.2.3. Email address (e-mail);
3.2.4. Place of residence and other data.
3.3. The Website Administration also takes measures to protect Personal Data that is automatically transmitted during visits to website pages:
— IP address;
— cookie data;
— browser information (or other software accessing the website);
— access time;
— visited page addresses;
— referrer (address of the previous page), etc.
3.3.1. Disabling cookies may result in inability to access the website.
3.3.2. The website collects statistics on IP addresses of its visitors. This information is used to identify and resolve technical issues and to monitor the correctness of operations.
3.4. Any other personal information not mentioned above (browsing history, browsers and operating systems used, etc.) is not subject to intentional disclosure, except as provided in Sections 5.2 and 5.3 of this Privacy Policy.
4. PURPOSES OF COLLECTING USER PERSONAL DATA
4.1. The Website Administration may use the User's personal data for the following purposes:
4.1.1. Identification of the User registered on the website for placing an order and/or entering into an Agreement.
4.1.2. Providing the User with access to personalized website resources.
4.1.3. Establishing feedback with the User, including sending notifications and requests regarding the use of the website, provision of services, processing requests and applications from the User.
4.1.4. Determining the User's location to ensure security and prevent fraud.
4.1.5. Confirming the accuracy and completeness of personal data provided by the User.
4.1.6. Creating a user account for making purchases, if the User has consented to account creation.
4.1.7. Notifying the User of the Order status (where such service is available).
4.1.8. Providing the User with effective customer and technical support in case of issues related to the use of the website.
4.1.9. Providing the User, with their consent, with product updates, special offers, price information, newsletters, and other information on behalf of the website or its partners.
4.1.10. Carrying out advertising activities with the User's consent.
4.1.11. Providing the User with access to third-party websites or services of website partners for the purpose of receiving their offers, updates, or services.
5. METHODS AND TERMS OF PROCESSING PERSONAL DATA
5.1. Processing of the User's personal data is carried out without limitation of term, by any lawful means, including in personal data information systems using automated tools or without the use of such tools.
5.2. The User agrees that the Website Administration is entitled to transfer personal data to third parties, in particular to courier services, postal organizations, and telecommunications operators, exclusively for the purpose of fulfilling the User's orders placed on the website under the Public Offer Agreement.
5.3. The User's personal data may be transferred to authorized public authorities only on the grounds and in the manner established by applicable law.
6. OBLIGATIONS OF THE PARTIES
6.1. The User undertakes to:
6.1.1. Provide correct and truthful personal data required for using the website.
6.1.2. Update or supplement the provided personal data if such information changes.
6.1.3. Take measures to protect access to their confidential data stored on the website.
6.2. The Website Administration undertakes to:
6.2.1. Use the information received exclusively for the purposes specified in Section 4 of this Privacy Policy.
6.2.2. Not disclose the User's personal data, except as provided in Sections 5.2 and 5.3 of this Privacy Policy.
6.2.3. Block personal data relating to the relevant User from the moment of the User's request or application, or that of their legal representative or the authorized body for the protection of the rights of personal data subjects, for the period of verification, in case of detection of inaccurate personal data or unlawful actions.
7. LIABILITY OF THE PARTIES
7.1. The Website Administration is liable for intentional disclosure of the User's Personal Data in accordance with applicable law, except as provided in Sections 5.2, 5.3, and 7.2 of this Privacy Policy.
7.2. In the event of loss or disclosure of Personal Data, the Website Administration shall not be liable if such confidential information:
7.2.1. Became public domain prior to its loss or disclosure.
7.2.2. Was received from a third party prior to its receipt by the Website Administration.
7.2.3. Was obtained by third parties through unauthorized access to website files.
7.2.4. Was disclosed with the User's consent.
7.3. The User is responsible for the legality, accuracy, and truthfulness of the provided Personal Data in accordance with applicable law.
8. DISPUTE RESOLUTION
8.1. Prior to filing a claim in court regarding disputes arising from the relationship between the Website User and the Website Administration, it is mandatory to submit a claim (a written proposal for voluntary settlement of the dispute).
8.2. The recipient of the claim shall, within 30 calendar days of receiving the claim, notify the claimant in writing of the results of the claim review.
8.3. If no agreement is reached, the dispute shall be referred to a court in accordance with applicable law.
8.4. Applicable law governs this Privacy Policy and the relationship between the User and the Website Administration.
9. ADDITIONAL TERMS
9.1. The Website Administration reserves the right to make changes to this Privacy Policy without the User's consent.
9.2. The new Privacy Policy takes effect upon its publication on the Website, unless otherwise provided by the new version of the Privacy Policy.
10. FINAL PROVISIONS
The Operator reserves the right to amend this Policy. The current version is published on the following websites: https://туризмбудущего.рф/privacy_en