Personal data storage and processing policy

1.1. This Personal Data Storage and Processing Policy (hereinafter — the Policy) defines the procedure for storing and processing the personal data of users of the hurma.uz service (hereinafter — the Service). The data operator is Booking System LLC (hereinafter — the Operator).

1.2. Personal data is processed in accordance with the legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547 dated July 2, 2019.

1.3. By using the Service and providing their personal data, the User confirms that they have read this Policy.

2.1. Processing is carried out lawfully, fairly, and to the extent consistent with the stated purposes. Data is not used in ways incompatible with the purposes of its collection.

2.2. The Operator ensures the accuracy and relevance of the data processed, as well as its confidentiality and security.

3.1. The Operator processes the following categories of personal data:

account and profile data (surname, first name, patronymic);

contact details (phone number, email address);

booking data (hotel, check-in and check-out dates, guest details, and passport data where required for check-in);

technical data (IP address, cookies, browser and device information);

history of requests to the support team.

3.2. The Operator does not process special categories of personal data (health, political views, etc.), except where expressly provided by law.

4.1. Personal data is processed for the following purposes:

placing, confirming and supporting bookings;

providing user support and handling requests;

sending notifications related to bookings and the operation of the Service;

complying with the requirements of the legislation of the Republic of Uzbekistan.

5.1. The legal grounds for processing are:

the User’s consent to the processing of personal data;

the agreement concluded by accepting the public offer published on the Service;

the requirements of the legislation of the Republic of Uzbekistan.

6.1. Personal data is stored in databases located in the Republic of Uzbekistan.

6.2. Data is kept no longer than required for the purposes of processing or the periods established by law, after which it is deleted or anonymised.

7.1. The User has the right to:

receive information about the processing of their personal data;

request correction, blocking or deletion of their data;

withdraw consent to processing by contacting support@hurma.uz;

appeal the Operator’s actions in the manner established by law.

7.2. Requests are handled within the timeframes established by the legislation of the Republic of Uzbekistan. Withdrawal of consent may make certain features of the Service unavailable.

8.1. The Operator transfers personal data to third parties only to the extent necessary to provide the services:

to Hotels and other accommodation providers — to process the booking and arrange check-in;

to payment providers — to process payment;

to government authorities — in cases provided for by law.

8.2. Cross-border transfer of data takes place only where an adequate level of protection is ensured and in accordance with the legislation of the Republic of Uzbekistan.

9.1. The Operator applies organisational and technical measures to protect personal data: access control, encryption of transfer channels, action logging and backups.

9.2. Access to personal data is granted only to those employees of the Operator who need it to perform their duties.

Booking System LLC

Address: 66 Gagarina Street, Tashkent, 100015, Republic of Uzbekistan

TIN: 303205650

Email: support@hurma.uz