Purpose of Processing
Conclusion, performance and termination of civil-law contracts.
Personal Data
Last name, first name, patronymic
Email address
Phone numbers
Legal Grounds
Contracts concluded between the Operator and the personal data subject.
Types of Personal Data Processing
Collection, recording, systematization, accumulation, storage, destruction and anonymization of personal data.

1. Conditions for Personal Data Processing

7.1. Personal data processing is carried out with the consent of the personal data subject to the processing of their personal data.
7.2. Personal data processing is necessary to achieve the purposes provided for by an international treaty of the Russian Federation or by law, and to perform the functions, powers and duties imposed on the Operator by the legislation of the Russian Federation.
7.3. Personal data processing is necessary for the administration of justice, the execution of a judicial act, or an act of another authority or official that is subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. Personal data processing is necessary for the performance of a contract to which the personal data subject is a party, beneficiary or guarantor, as well as for the conclusion of a contract at the initiative of the personal data subject or a contract under which the personal data subject will be a beneficiary or guarantor.
7.5. Personal data processing is necessary for the exercise of the rights and legitimate interests of the Operator or third parties, or for the achievement of socially significant purposes, provided that the rights and freedoms of the personal data subject are not violated.
7.6. Personal data is processed where access to such data has been provided by the personal data subject to an unlimited number of persons, or at the request of the personal data subject, hereinafter referred to as publicly available personal data.
7.7. Personal data subject to publication or mandatory disclosure in accordance with federal law is processed.

1. Procedure for the Collection, Storage, Transfer and Other Types of Personal Data Processing

The security of personal data processed by the Operator is ensured through the implementation of legal, organizational and technical measures necessary to fully comply with the requirements of the applicable legislation in the field of personal data protection.
8.1. The Operator ensures the security of personal data and takes all possible measures to prevent unauthorized persons from accessing personal data.
8.2. The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with applicable legislation, or if the personal data subject has given consent to the Operator to transfer data to a third party for the performance of obligations under a civil-law contract.
8.3. If inaccuracies are identified in personal data, the User may update such data independently by sending a notification to the Operator’s email address at ksenia-bonvoyage@mail.ru with the subject line “Personal Data Update”.
8.4. The period of personal data processing is determined by the achievement of the purposes for which the personal data was collected, unless another period is provided for by contract or applicable legislation.
The User may withdraw their consent to the processing of personal data at any time by sending a notification to the Operator by email at ksenia-bonvoyage@mail.ru with the subject line “Withdrawal of Consent to Personal Data Processing”.
8.5. All information collected by third-party services, including payment systems, communication tools and other service providers, is stored and processed by such persons, the Operators, in accordance with their User Agreement and Privacy Policy. The personal data subject and/or the User must familiarize themselves with these documents. The Operator is not responsible for the actions of third parties, including the service providers specified in this clause.
8.6. Restrictions established by the personal data subject on transfer, except for granting access, as well as on processing or the conditions of processing, except for obtaining access, of personal data permitted for distribution shall not apply in cases where personal data is processed in state, public or other public interests as defined by the legislation of the Russian Federation.
8.7. When processing personal data, the Operator ensures the confidentiality of personal data.
8.8. The Operator stores personal data in a form that makes it possible to identify the personal data subject for no longer than is required by the purposes of personal data processing, unless the personal data storage period is established by federal law or by a contract to which the personal data subject is a party, beneficiary or guarantor.
8.9. The condition for termination of personal data processing may be the achievement of the purposes of personal data processing, expiration of the personal data subject’s consent, withdrawal of consent by the personal data subject, a request to terminate personal data processing, or identification of unlawful personal data processing.

1. List of Actions Performed by the Operator with the Personal Data Received

9.1. The Operator carries out the collection, recording, systematization, accumulation, storage, clarification, including updating and modification, retrieval, use, transfer, including distribution, provision and access, anonymization, blocking, deletion and destruction of personal data.
9.2. The Operator carries out automated processing of personal data with the receipt and/or transfer of the information obtained via information and telecommunication networks, or without such networks.

1. Cross-Border Transfer of Personal Data

10.1. Before commencing cross-border transfer of personal data, the Operator is obliged to notify the authorized body for the protection of the rights of personal data subjects of its intention to carry out cross-border transfer of personal data. Such notification is submitted separately from the notification of the intention to process personal data.
10.2. Before submitting the above notification, the Operator is obliged to obtain the relevant information from the authorities of a foreign state, foreign individuals or foreign legal entities to whom personal data is planned to be transferred.

1. Confidentiality of Personal Data

The Operator and other persons who have gained access to personal data are obliged not to disclose personal data to third parties and not to distribute personal data without the consent of the personal data subject, unless otherwise provided by federal law.

1. Final Provisions

12.1. The User may receive any clarifications on matters of interest concerning the processing of their personal data by contacting the Operator by email at ksenia-bonvoyage@mail.ru.
12.2. Any changes to the Operator’s Personal Data Processing Policy will be reflected in this document. The Policy is valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is publicly available on the Internet at