General ProvisionsThis Privacy Policy sets out the principles and approaches of Layag LLC regarding the processing and protection of personal data, as well as the purposes and procedures for such processing.
This Privacy Policy has been developed in accordance with applicable Russian legislation, including but not limited to:
- Federal Law of the Russian Federation No. 152-FZ dated July 27, 2006 “On Personal Data”;
- Decree of the Government of the Russian Federation No. 1119 dated November 1, 2012 “On Approval of Requirements for the Protection of Personal Data during Processing in Personal Data Information Systems”;
- Decree of the Government of the Russian Federation No. 687 dated September 15, 2008 “On Approval of the Regulation on the Specifics of Processing Personal Data without the Use of Automation Tools”;
- Federal Law No. 149-FZ dated July 27, 2006 “On Information, Information Technologies, and Information Protection”;
- and other applicable regulatory legal acts of the Russian Federation.
By using the website
http://layag-travel.com (the “Website”), the user fully agrees to this Privacy Policy and the terms of personal data processing described herein. If the user does not agree with these terms, they should refrain from using the Website.
By submitting personal data when leaving comments or reviews, sending inquiries, or completing forms on the Website, the user provides their consent to the Operator for the processing of such personal data.
Key DefinitionsPersonal DataAny information relating directly or indirectly to an identified or identifiable individual (data subject).
UserAny visitor to the website
http://layag-travel.com. The User is a data subject.
OperatorLayag LLC
19, Bldg. 2 Frunze Street, Premises 1-N
Saint Petersburg, 196070
Russia
INN: 7810962922
Confidentiality of Personal DataAn obligation of the Operator or any other party granted access to personal data to prevent their disclosure without the consent of the data subject or other lawful grounds.
Personal Data Information SystemA set of databases containing personal data and information technologies and technical means used to process such data.
Provision of Personal DataActions aimed at disclosing personal data to a specific person or a specific group of persons.
Distribution of Personal DataAny actions aimed at disclosing personal data to an indefinite number of persons, including publication in mass media, posting on information and telecommunication networks, or providing access by any other means.
Processing of Personal DataAny action or set of actions performed with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating or modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, or destruction of personal data.
Categories of Personal Data ProcessedUnder this Privacy Policy, personal data includes:
- Information voluntarily provided by the User when leaving comments or reviews, submitting inquiries, or completing forms on the Website;
- Data automatically transmitted during the use of the Website, including IP address, cookie data, browser information, access time, and requested page addresses;
- Data provided for the informational activities of the Website, including name or full name, phone number, and email address.
Principles and Purposes of Personal Data ProcessingWhen processing personal data, the Operator adheres to the following principles:
- Personal data is processed lawfully and fairly;
- Personal data is processed only for specified, legitimate purposes;
- The scope of processed personal data corresponds to the stated purposes and is adequate and relevant;
- Personal data is kept accurate and up to date;
- Personal data is stored no longer than required to achieve the purposes of processing or as required by applicable law.
The Operator processes personal data using automated tools as well as without automation.
The purposes of processing personal data include:
- Entering into and performing contracts between the Operator and the User, as well as complying with applicable legal requirements;
- Processing incoming inquiries and communicating with Users;
- Organizing participation in promotions, prize draws, and event registrations;
- Sending informational and promotional emails;
- Conducting marketing and other research and providing services.
Upon achieving the purposes of processing or upon withdrawal of consent by the data subject, personal data shall be destroyed unless otherwise provided by an agreement between the Operator and the data subject.
Main ProvisionsBy providing personal data on the Website (including during registration, order placement, form completion, or correspondence), the User consents to the processing of their personal data in accordance with Federal Law No. 152-FZ “On Personal Data”.
The following personal data may be collected:
- Surname;
- First name;
- Phone number;
- Email address.
The Operator may also collect statistical data, including:
- User IP address;
- Date, time, and number of visits;
- Referring website address;
- Information about visited pages and viewed advertisements;
- Browser and device information (device type, browser type and version, operating system, etc.).
Personal data is used for:
- User registration on the Website;
- Order placement;
- Providing information about discounts, promotions, new services, and offers;
- Conducting surveys;
- Customer support;
- Improving Website functionality and user experience;
- Fulfillment of other obligations related to the use of the Website and its services.
The Operator undertakes not to disclose personal data to third parties, except where such disclosure is required by applicable law or expressly provided for in this Privacy Policy.
The Operator does not verify the accuracy of personal data provided by the User and assumes that the User provides accurate and up-to-date information. The User bears full responsibility for the consequences of providing inaccurate or invalid personal data.
Consent to the processing of personal data remains valid for the duration of the User’s use of the Website services.
Rights of Data SubjectsThe Operator takes reasonable measures to ensure the accuracy and relevance of personal data and to delete outdated, inaccurate, or excessive data.
The User has the right to:
- Request information regarding the personal data processed by the Operator;
- Request correction, updating, or deletion of inaccurate or outdated personal data;
- Withdraw consent to the processing of personal data in accordance with applicable law.
Requests and inquiries regarding personal data may be sent to:
nl@layag-travel.comPersonal Data SecurityThe Operator implements necessary technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include internal audits of data collection, storage, and processing practices, as well as physical security measures to prevent unauthorized access to systems where personal data is stored.
Changes to This Privacy PolicyThe Operator reserves the right to amend this Privacy Policy at any time. The current version will indicate the date of the latest update. The updated Privacy Policy comes into force upon publication on the Website unless otherwise provided by applicable law.