+996 551 990 000 Иссык-Кульская область, Иссык-Кульский район, 114б/2, с. Бостери, 722103
RU EN KG
Book Now

Privacy Policy

1. This Personal Data Processing Policy (hereinafter — the Policy) governs the relations concerning the processing of personal data between Pansionat-Keremet LLC, TIN 01604199910194, address: Kyrgyz Republic, Issyk-Kul Region, Keremet Boarding House (hereinafter — the Company) and the User of the website (hereinafter — the User).

«User» means a legally capable natural person who has reached the age of 18 and wishes to order the Company's services, leave a comment, register on the website or perform any other actions provided for by the functionality of the Company's online resource.

«Website» or «the Company's online resource» means the website resort.baytur.kg, including all levels of domain names, owned by the Company.

«Personal data» means any information relating to a directly or indirectly identified or identifiable natural person (citizen).

«Processing of personal data» means any action (operation) or set of actions (operations) performed on personal data with or without the use of automation tools.

Such actions (operations) include: collection, receipt, recording, systematisation, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion and destruction of personal data.

2. This Policy defines the procedure for processing the personal data of users of the resort.baytur.kg website (hereinafter — the Website), the conditions and principles of personal data processing, the rights of Users and the obligations of the Company, as well as information on the measures implemented to protect the personal data being processed.

3. This Policy applies to all personal data that the Company receives from Users.

4. Use of the Company's website constitutes the User's unconditional consent to this Policy and to the conditions of processing of their personal data. Should the User disagree with these conditions, they must refrain from using the website.

5. When using the functionality of the Website, the User may provide the Company with the following personal data (the list and types of personal data depend on the specific functionality of the online resource used by the User):

  • the User's surname, first name and patronymic;
  • contact telephone number;
  • e-mail address;
  • planned check-in and check-out dates, number of guests;
  • user data (IP address, cookies, browser information, access time) collected automatically while visiting the website.

6. By providing their personal data, the User consents to the processing thereof (until the User withdraws their consent to the processing of personal data), including collection, storage, depersonalisation and transfer to third parties in the cases provided for by the Policy, by the Company for the purposes of providing the User with advertising and reference information and services in accordance with the functionality of the Website, and for other purposes under clause 8 of this Policy. When processing personal data, the Company is guided by the Digital Code of the Kyrgyz Republic of 31 July 2025 No. 178 and other applicable regulatory legal acts governing work with digital data.

The consent to the processing of personal data given by the User is valid from the date such consent is given until the purposes of processing are achieved or the User withdraws their consent, unless otherwise provided by the applicable law of the Kyrgyz Republic.

The User may withdraw the consent given to the Company at any time in the manner established by this Policy.

7. If the User wishes to clarify their personal data where such data are incomplete, inaccurate or out of date, or wishes to withdraw their consent to the processing of personal data, the User must send an official request to the Company with the subject line «Clarify personal data» or «Cease processing of personal data» to the e-mail address reservation.issykkul@baytur.kg. The letter must state the User's e-mail address and the relevant request.

8. The Company uses the data provided by the User for the purposes of:

8.1. registration and identification of the User on the Website, providing the User with the opportunity to make full use of the Website;

8.2. processing bookings, concluding contracts for the provision of hotel, tourist and recreational services;

8.3. further communication regarding the User's request, including by third parties — partners of the Company — in order to fulfil obligations under the User's request, and consultation on matters relating to the services provided by the Company;

8.4. creating an account and providing access to the User's account on partner websites;

8.5. sending informational messages;

8.6. advertising and promotion of goods, works (services), including on the basis of information obtained about the User's personal preferences and settings;

8.7. evaluating and analysing the operation of the Company's Website;

8.8. analysing the effectiveness of advertising placement and conducting statistical research based on the depersonalised information provided by the User;

8.9. informing the User about promotions, discounts and special offers by means of e-mail newsletters and telephone communication;

8.10. conducting marketing research, including with the involvement of third parties as contractors (performers, consultants);

8.11. maintaining communication with partner banks regarding the provision of loans to the User and/or the agreement of lending terms.

9. The Company does not verify the data submitted or specified by the User. Accordingly, the Company assumes that, when submitting personal data, the User:

9.1. is a legally capable person. Where the person using the Website lacks legal capacity, consent to the processing of personal data is given by their legal representative;

9.2. provides accurate information about themselves (or about the legally incapable person they represent);

9.3. independently keeps the submitted personal data up to date;

9.4. understands that information posted on the Website by the User may become available to other persons and may be copied or distributed by such users in the cases provided for by the Policy.

10. The Company processes personal data on the basis of the following principles:

10.1. lawfulness;

10.2. limitation of personal data processing to the achievement of specific, predetermined lawful purposes;

10.3. prevention of processing of personal data incompatible with the purposes of collecting and/or storing the data received from the User;

10.4. correspondence of the content and volume of the personal data processed to the purposes of their processing;

10.5. prevention of processing of data that are excessive in relation to the purposes of processing;

10.6. ensuring the accuracy, sufficiency and relevance of personal data in relation to the purposes of their processing;

10.7. destruction or depersonalisation of personal data in order to prevent their disclosure once the purposes of processing have been achieved, the need for such processing has ceased, or a demand for the destruction of personal data or a statement withdrawing consent to the processing of personal data has been received from the User.

11. When processing personal data, the Company takes the necessary and sufficient organisational and technical measures to protect personal data from unlawful access thereto, as well as from other unlawful actions in respect of personal data. The Company processes Users' personal data taking into account the following:

11.1. Users' personal data are processed using databases located in the territory of the Kyrgyz Republic.

11.2. Personal data are processed both with and without the use of automated means.

11.3. The Company undertakes not to transfer the information received from the User to third parties, except in the cases expressly specified in this Policy. Where necessary, the transfer of Users' personal data to third parties — partners of the Company — is carried out on the basis of Users' consent for the purpose of fulfilling obligations towards Users.

11.4. The Company, and where it is necessary to transfer Users' personal data to third parties — partners of the Company — those persons, undertake to keep personal data secret and not to disclose or distribute them without the User's consent, unless otherwise provided by the applicable law of the Kyrgyz Republic and/or this Policy.

11.5. Users' personal data are stored on electronic media and, for the purposes of fulfilling obligations towards Users, may be stored on physical media after the personal data have been extracted.

11.6. Personal data are stored for the period objectively necessary to fulfil obligations towards Users and are determined by the following events (whichever occurs earlier):

11.6.1. until the User deletes the personal data through their personal account;

11.6.2. until the personal data are destroyed by the Company following receipt from the User of a demand for the destruction of personal data or a withdrawal of consent to their processing;

11.6.3. until the expiry of the term of the User's consent.

11.7. The Company has the right to store the User's personal data in depersonalised form after fulfilling its obligations towards the User for the purposes specified in clause 8.7 of this Policy, except where a demand for the destruction of data or a withdrawal of consent to processing has been received.

12. Where it is necessary to transfer Users' personal data to third parties — partners of the Company — in the cases expressly provided for by the Policy, such transfer is carried out subject to the following conditions:

12.1. the third party — partner of the Company — ensures the confidentiality of personal data during their processing and use and undertakes not to disclose the data to other persons, nor to distribute Users' personal data without their consent;

12.2. the third party — partner of the Company — guarantees compliance with the following measures to ensure the security of personal data during their processing: use of information protection tools; detection and recording of instances of unauthorised access to personal data and taking measures to restore personal data; restriction of access to personal data; monitoring and evaluation of the effectiveness of the measures applied to ensure the security of personal data, and other measures provided for by the law of the Kyrgyz Republic;

12.3. the third party — partner of the Company — is prohibited from transferring and distributing Users' personal data.

13. The following shall not be deemed a breach of the obligations provided for by this Policy: the transfer of information in accordance with justified and applicable requirements of the law of the Kyrgyz Republic; the provision by the Company of information to partners acting under a contract (agreement) with the Company in order to fulfil obligations towards the User; and the transfer by the Company to third parties of data about the User in depersonalised form for the purposes of evaluating and analysing the operation of the Company's Website, providing personal recommendations, displaying advertisements based on the User's personal preferences and settings, and conducting marketing, analytical and/or statistical research.

14. The Company has the right to use «cookies» technology. Cookies are data automatically transmitted to the Company in the course of using the Website by means of software installed on the User's device, including the IP address, geographical location, information about the browser and the type of operating system of the User's device, the technical characteristics of the hardware and software used by the User, and the date and time of access to the Website. Cookie files do not contain confidential information. Cookies are used to remember the User's preferences and settings, as well as to collect analytical data about visits to the Website. Use of the Website means that the User agrees to the use of all cookie files and analytical data about visits to the Website, and to their transfer to third parties.

15. The Company receives information about the User's IP address and details of the website from which they arrived via a link. This information is not used to identify the visitor.

16. The User has the right to receive from the Company information concerning the processing of their personal data. The Company provides the User or their representative, free of charge, with the opportunity to review the personal data relating to the User. If the information is found to be incomplete, inaccurate or out of date, the Company shall, on the basis of the information provided by the User, make the necessary changes to the User's personal data within a period not exceeding 7 (seven) working days and shall notify the User of the changes made. If the User or their representative provides the Company with evidence of unlawful receipt or processing of their personal data, or of a discrepancy between the actions performed on their personal data and the purposes of processing, the Company undertakes, within a period not exceeding 7 (seven) working days, to destroy such personal data of the User and to notify the User of the measures taken.

17. The Company undertakes to cease processing the User's personal data, or to ensure that a third party — partner of the Company — ceases such processing, in the event of:

17.1. detection of unlawful processing of the User's personal data;

17.2. withdrawal by the User of consent to the processing of their personal data;

17.3. receipt from the User of a demand for the destruction of personal data;

17.4. achievement of the purpose of processing the personal data. Upon the occurrence of the events specified in this clause, the Company shall cease processing the personal data and ensure their destruction within a period not exceeding 30 (thirty) days, unless a different period is established by law. Where it is impossible to destroy the User's personal data within the specified period, the Company shall block the User's personal data and ensure their destruction within the period established by the law of the Kyrgyz Republic, but no later than 6 (six) months.

18. The Company independently determines the list of third parties — Partners of the Company — and brings it to the attention of Users by any available means, including by publication on the Website.

19. The Company has the right to send the User notifications about new products and services, special offers and various events. The User has the right to refuse to receive informational messages by sending the Company a letter to the e-mail address reservation.issykkul@baytur.kg marked «Refusal of notifications».

20. The Company has the right to make changes to this Policy at any time. The current text of the Policy is posted on the Website.

21. Continued use of the Website or its services after publication of a new version of the Policy constitutes acceptance of the Policy and its terms by the User. Should the User disagree with the terms of the Policy, they must immediately cease using the Website and its services.

22. All questions regarding this Policy and/or the processing of personal data should be sent to the Company's e-mail address: reservation.issykkul@baytur.kg

Pansionat-Keremet LLC

Kyrgyz Republic, Issyk-Kul Region, Keremet Boarding House

TIN 01604199910194

OKPO 22099068

This English text is provided for the convenience of guests. The legally binding version is the Russian one; in the event of any discrepancy, the Russian text shall prevail.