PRIVACY POLICY
1. General Provisions
This Personal Data Processing Policy (“Policy”) is prepared in accordance with the requirements of the Federal Law of July 27, 2006 No. 152-FZ, “On Personal Data,” and defines the procedure for processing personal data and the measures taken by Palm Garden Ayurveda (hereinafter referred to as the "Operator") to ensure the security of such data.
It applies to all information that the Operator may receive about visitors to the website http://palmgarden-resort.compalmgarden-resort.com.
2. Key Definitions
  • Automated processing: Processing of personal data using computing technology.
  • Blocking of personal data: Temporary suspension of personal data processing (unless needed to clarify the data).
  • Website: The combination of graphical and informational materials, software, and databases available at http://palmgarden-resort.com palmgarden-resort.com.
  • Personal data: Any information that directly or indirectly identifies an individual visitor of the website palmgarden-resort.com.
  • Operator: The entity (physical or legal) that organizes or carries out personal data processing, including determining the purposes and means of processing palmgarden-resort.com.
3. Rights and Obligations of the Operator
The Operator has the right to:
  • Request accurate personal data from the data subject.
  • Continue processing despite consent withdrawal if required by law palmgarden-resort.com.
The Operator must:
  • Provide data subjects with information upon request.
  • Organize processing in compliance with Russian law.
  • Respond to requests from data subjects and authorities within 10 days.
  • Publish this Policy and ensure data protection via legal, technical, and organizational measures palmgarden-resort.com.
4. Rights and Obligations of Data Subjects
Data subjects (you) have the right to:
  • Access information about processing of your personal data.
  • Request correction, blocking, or deletion of inaccurate, outdated, or illegal data.
  • Withdraw consent for data processing.
  • Lodge complaints with supervisory authorities or courts palmgarden-resort.com.
You (data subjects) must:
  • Provide accurate personal data.
  • Notify the Operator of any changes to your personal data palmgarden-resort.com.
5. Processing Principles
  • Processing must be lawful, fair, and purpose-specific.
  • Data must be adequate, relevant, and limited to specified purposes.
  • Only data necessary for stated purposes should be processed.
  • Stored data must be accurate and up to date; unnecessary or outdated data should be deleted or corrected palmgarden-resort.com.
6. Purpose of Data Processing
Personal data may be processed to provide users access to services, information, or materials on the website. Examples include phone number and email address communication, pursuant to Federal Law No. 149-FZ “On Information, Information Technologies, and Information Protection” palmgarden-resort.com.
7. Conditions for Processing
Data is processed:
  • With the subject’s consent.
  • As required for compliance with law or fulfilling legal or contractual obligations.
  • When processing is necessary for legitimate interests or legally important public purposes, provided it does not violate data subject rights palmgarden-resort.com.
8. Data Processing, Storage, Transfer
  • The Operator implements legal, organizational, and technical measures to protect personal data from unauthorized access.
  • Personal data will not be disclosed to third parties except as required by law or with your explicit consent.
  • You may update information by emailing gm@palmgarden-resort.com with the subject “Updating personal data.”
  • Processing continues only as long as necessary—data is deleted when no longer needed, consent expires, or if processing is unlawful.
  • Third-party services (e.g., payment systems) store and process data according to their own privacy policies; the Operator is not responsible for their actions palmgarden-resort.com.
9. Types of Processing Operations
The Operator may perform the following actions with personal data: collection, recording, systematization, accumulation, storage, updating, retrieval, usage, transfer, anonymization, blocking, deletion, and destruction. Automated and manual processing methods are both employed palmgarden-resort.com.
10. Cross‑Border Data Transfer
Before transferring personal data across borders, the Operator must notify the relevant supervisory authority and obtain necessary information regarding the foreign recipients palmgarden-resort.com.
11. Confidentiality
The Operator and any persons with access to your data must not disclose or distribute personal data without your consent unless disclosure is mandated by federal law palmgarden-resort.com.
12. Final Provisions