PERSONAL DATA PROCESSING AND PROTECTION POLICY
1. GENERAL PROVISIONS
This Personal Data Processing and Protection Policy has been developed in accordance with Federal Law No. 152-FZ of July 27, 2006, "On Personal Data," as well as other regulatory legal acts of the Russian Federation.
Personal data controller: NEW WAVE TRVL CO., LTD., registration number 0835566026241, registered address: 59/45 4 Road, 83120, Kingdom of Thailand, telephone: +66 61 271-44-77, email: e-mail@newwave.travel (hereinafter referred to as the Operator).
The Operator processes personal data in compliance with the principles of legality, minimization, and security, respecting the rights and freedoms of individuals and citizens. This Policy applies to all information obtained from users when using the Company's services.
2. USER'S PERSONAL INFORMATION
For the purposes of this Policy, personal information means:
Data provided by the User:
– Last name, first name, patronymic;
– Date of birth;
– Telephone number;
– Email address;
– Identity document details for the purpose of arranging travel services and visas;
– Other information submitted when submitting an application.
Data automatically transmitted when using the Company's services:
– IP address;
– Cookies;
– Browser and device information;
– Technical specifications;
– Date and time of access.
3. PRINCIPLES OF PERSONAL DATA PROCESSING
Personal data is processed:
– Lawfully and fairly;
– For specific, predetermined purposes;
– Without merging databases that are incompatible in their processing purposes; - to the extent necessary to achieve the objectives;
- ensuring the accuracy and relevance of the data;
- for the period necessary to achieve the processing objectives.
Personal data is destroyed or anonymized when the processing objectives are achieved or when there is no longer any need to achieve them.
4. PURPOSES OF PERSONAL DATA PROCESSING
The Operator processes personal data for the following purposes:
- preparing, concluding, and executing contracts;
- providing tourism and related services;
- identifying the User;
- sending notifications;
- promoting goods and services (subject to consent);
- complying with the requirements of the legislation of the Russian Federation.
5. LEGAL BASIS FOR PROCESSING
Personal data is processed on the basis of:
- Federal Law No. 152-FZ;
- Federal Law No. 149-FZ;
- the Civil Code of the Russian Federation;
- other regulatory acts of the Russian Federation;
- agreements with Users;
– consent of the personal data subject.
6. TERMS OF PERSONAL DATA PROCESSING
Processing is carried out:
– with the consent of the personal data subject;
– without consent – in cases expressly provided for by law;
– as part of the execution of the contract;
– to protect the legitimate interests of the Operator.
7. ASSIGNMENT OF PROCESSING TO THIRD PARTIES
The Operator has the right to assign the processing of personal data to third parties under a contract. Such third parties are obligated to:
– comply with the requirements of personal data legislation;
– ensure the confidentiality of information;
– take necessary protective measures;
– notify the Operator of security breaches.
The Operator is responsible to the personal data subject, unless otherwise provided by law.
8. TRANSFER OF PERSONAL DATA
Personal data may be transferred:
– with the consent of the User;
– for the execution of the contract;
– as required by law;
– in the event of a business reorganization or sale (while maintaining the processing terms).
Personal data is not transferred to third parties without legal grounds.
9. PERSONAL DATA PROTECTION MEASURES
The Operator takes the necessary organizational and technical measures, including:
– restricting access to personal data;
– using secure data transmission channels;
– internal processing regulations;
– monitoring compliance with legal requirements;
– regular security threat assessments.
In the event of an incident, the Operator notifies personal data subjects within the timeframe established by law.
10. RIGHTS OF PERSONAL DATA SUBJECTS
A personal data subject has the right to:
– receive information about the processing of their data;
– request clarification, blocking, or destruction of data;
– revoke consent;
– appeal the Operator's actions to Roskomnadzor or the court. Requests should be sent to: email@newwave.travel or by phone: +66 61 271-44-77.
11. DISPUTE RESOLUTION
Before filing a claim, it is mandatory to submit a claim. A response to the claim must be sent within 7 calendar days. Disputes are resolved in accordance with Russian Federation law.
12. CONFIDENTIALITY
The operator and persons with access to personal data are obligated to maintain confidentiality and not disclose personal data without legal grounds.
13. FINAL PROVISIONS
This Policy is valid indefinitely until a new version is approved. The Operator reserves the right to amend the Policy. All questions should be directed to: email@newwave.travel or by phone: +66 61 271-44-77.
OPERATOR DETAILS
Name: NEW WAVE TRVL CO., LTD.
Registration number: 0835566026241
Legal address: 59/45 หมู่ 4 ตำบลกะทู้ อำเภอกะทู้ จังหวัดภูเก็ต 83120, Kingdom of Thailand
Phone: +66 61 271-44-77
E-mail: e-mail@newwave.travel
Director: นางสาวโสภิตา ผลเจริญ (Losgitta Palcharoen)