Personal Data Processing and Protection Policy

1. General Provisions

This personal data processing policy is compiled in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V “On Personal Data and Their Protection” and defines the procedure for processing personal data and measures to ensure the security of personal data by LLP “VIP Clinic” (VIP Clinic) (hereinafter referred to as the Operator).

The Operator’s primary goal and essential condition for carrying out its activities is to respect human and civil rights and freedoms when processing personal data, including the protection of privacy, personal and family secrets. This Operator’s policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information the Operator may receive about visitors to the wyndhamgardenastana.com website.

2. Key Terms Used in the Policy

Automated processing of personal data – processing of personal data using computer technology;
Blocking of personal data – temporary cessation of personal data processing (except when processing is necessary for clarification of personal data);
Website – a collection of graphical and informational materials, as well as software and databases, accessible on the Internet at the network address wyndhamgardenastana.com;
Personal data information system — a collection of personal data contained in databases and information technologies and technical means that ensure its processing;
Anonymization of personal data — actions rendering it impossible to determine, without additional information, the personal data’s association with a specific User or another personal data subject;
Processing of personal data – any action (operation) or series of actions (operations) performed with personal data, whether using automated means or not, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, usage, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data;
Operator – a state, municipal, legal or individual entity that independently or jointly with other parties organizes and/or performs personal data processing, and defines the purposes of personal data processing, the content of personal data to be processed, and the actions (operations) to be performed with personal data;
Personal data – any information directly or indirectly related to an identified or identifiable User of the wyndhamgardenastana.com website;
User – any visitor to the wyndhamgardenastana.com website;
Provision of personal data – actions aimed at disclosing personal data to a specific person or a specific group of persons;
Distribution of personal data – any actions aimed at disclosing personal data to an indefinite group of persons (transferring personal data) or providing access to personal data to an unlimited group of persons, including publication in mass media, posting in information and telecommunication networks, or granting access to personal data in any other way;
Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state, to a foreign state authority, a foreign individual, or a foreign legal entity;
Destruction of personal data – any actions resulting in the irrevocable destruction of personal data with no possibility of further recovery in the personal data information system and/or the destruction of personal data carriers.

3. The Operator May Process the Following Personal Data of the User

Last name, first name, patronymic;
Email address;
Phone numbers;
Additionally, anonymized data on website visitors (including cookies) is collected and processed through Internet statistics services (Yandex Metrica, Google Analytics, and others). The above data is collectively referred to as Personal Data in this Policy.

4. Purposes of Processing Personal Data

The purpose of processing the User’s personal data is to inform the User by sending emails. The Operator also reserves the right to send the User notifications about new products and services, special offers, and various events. The User may always opt out of receiving informational messages by sending an email to info@wyndhamgardenastana.com with the subject “Opt-out of notifications on new products, services, and special offers.”
Anonymized User data collected through Internet statistics services is used to collect information on User actions on the website, improve the quality of the site, and its content.

5. Legal Basis for Personal Data Processing

The Operator processes the User’s personal data only if the User submits it independently through special forms on the wyndhamgardenastana.com website. By filling out these forms and/or submitting personal data to the Operator, the User agrees to this Policy.
The Operator processes anonymized User data if permitted in the User’s browser settings (e.g., cookie storage and JavaScript are enabled).

6. Procedure for Collecting, Storing, Transmitting, and Other Types of Personal Data Processing

The security of personal data processed by the Operator is ensured by implementing the necessary legal, organizational, and technical measures required to fully comply with current personal data protection laws.

The Operator ensures the confidentiality of personal data and takes all possible measures to prevent unauthorized access to personal data.
The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases required by applicable law.
If inaccuracies are found in personal data, the User can update them independently by sending a notification to the Operator’s email at info@wyndhamgardenastana.com marked “Update of personal data.”
The period of personal data processing is unlimited. The User may withdraw consent to personal data processing at any time by sending a notification to the Operator’s email at info@wyndhamgardenastana.com with the subject “Withdrawal of consent for personal data processing.”

7. Cross-Border Transfer of Personal Data

Before cross-border transfer of personal data, the Operator must ensure that the foreign state to which the personal data is transferred provides reliable protection of personal data subjects’ rights.
Cross-border transfer of personal data to foreign states that do not meet the above requirements may be carried out only with the subject’s written consent or in fulfillment of a contract to which the personal data subject is a party.

8. Final Provisions

The User may obtain any clarification on matters of interest regarding their personal data processing by contacting the Operator via email at info@wyndhamgardenastana.com.
Any changes to this personal data processing policy will be reflected in this document. The Policy is valid indefinitely until replaced by a new version.
The current version of the Policy is freely available on the Internet at wyndhamgardenastana.com/privacy-policy.