1. Definitions

1.1 In this Privacy Policy, the following terms are used:

1.1.1. "Site Administration" (hereinafter referred to as "Administration") - authorized employees responsible for managing the Shaherezada travel website, who organize and/or process personal data, as well as determine the purposes of processing personal data, the composition of personal data subject to processing, actions (operations) performed with personal data.

1.1.2. "Personal data" - any information relating to a directly or indirectly identified or identifiable natural person (personal data subject).

1.1.3. "Processing of personal data" - any action (operation) or a combination of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

1.1.4. "Confidentiality of personal data" - a requirement for the Operator or another person who has access to personal data not to disclose it without the consent of the personal data subject or the presence of another legitimate basis.

1.1.5. "Shaherezada travel website" - a collection of interconnected web pages located on the Internet under a unique address (URL): shaherezada-travel.uz, including its subdomains.

1.1.6. "Subdomains" - pages or a set of pages located on third-level domains owned by the Shaherezada travel website, as well as other temporary pages with the Administration's contact information at the bottom.

1.1.7. "User of the Shaherezada travel website" (hereinafter referred to as "User") - a person who has access to the Shaherezada travel website through the Internet and uses the information, materials, and products of the Shaherezada travel website.

1.1.8. "Cookies" - a small piece of data sent by a web server and stored on a user's computer, which a web client or web browser sends back to the web server in an HTTP request every time the corresponding site page is accessed.

1.1.9. "IP address" - a unique network address of a node in a computer network through which the User gains access to the Agency.

2. General Provisions

2.1. The use of the Shaherezada travel website by the User implies acceptance of this Privacy Policy and the terms of processing the User's personal data.

2.2. If the User disagrees with the terms of the Privacy Policy, the User must stop using the Shaherezada travel website.

2.3. This Privacy Policy applies to the Shaherezada travel website. The Agency does not control and is not responsible for third-party websites that the User may access through links available on the Shaherezada travel website.

2.4. The Administration does not verify the accuracy of the personal data provided by the User.

3. Subject of the Privacy Policy

3.1. This Privacy Policy establishes the obligations of the Administration to ensure the non-disclosure and protection of the confidentiality of personal data that the User provides at the request of the Administration when registering on the Shaherezada travel website or subscribing to the informational e-mail newsletter.

3.2. Personal data permitted for processing under this Privacy Policy is provided by the User by filling out forms on the Shaherezada travel website and includes the following information:
3.2.1. User's surname, first name, patronymic;
3.2.2. User's contact phone number;
3.2.3. User's email address (e-mail);
3.2.4. User's place of residence (if necessary);
3.2.5. User's photograph (if necessary).

3.3. The Agency protects the data that is automatically transmitted when visiting pages:
- IP address;
- information from cookies;
- information about the browser;
- access time;
- referrer (address of the previous page).

3.3.1. Disabling cookies may result in the inability to access parts of the site that require authorization.

3.3.2. The Agency collects statistics on the IP addresses of its visitors. This information is used to prevent, detect, and resolve technical issues.

3.4. Any other personal information not specified above (visit history, browsers used, operating systems, etc.) is reliably stored and not disclosed, except as provided for in clause 5.2. of this Privacy Policy.

4. Purposes of collecting user personal information

4.1. The Administration may use the User's personal data for the following purposes:
4.1.1. Identification of a User registered on the Shaherezada travel website for further authorization.
4.1.2. Providing the User with access to personalized data of the Shaherezada travel website.
4.1.3. Establishing feedback with the User, including sending notifications, requests related to the use of the Shaherezada travel website, processing User's requests and applications.
4.1.4. Determining the User's location to ensure security and prevent fraud.
4.1.5. Confirming the authenticity and completeness of personal data provided by the User.
4.1.6. Creating a user account for the use of certain parts of the Shaherezada travel website if the User has given consent to create an account.
4.1.7. Notifying the User by email.
4.1.8. Providing the User with effective technical support in case of problems related to the use of the Shaherezada travel website.
4.1.9. Providing the User with special offers, newsletters, and other information

5. Methods and Terms of Personal Information Processing

5.1. Processing of the User's personal data is carried out without any time limitations, by any lawful means, including in information systems of personal data using automation tools or without using such tools.

5.2. The User's personal data may be transferred to the authorized state authorities of the Republic of Uzbekistan only on the grounds and in accordance with the procedure established by the legislation of the Republic of Uzbekistan.

5.3. In the event of loss or disclosure of personal data, the Administration is not obliged to inform the User about the loss or disclosure of personal data.

5.4. The Administration takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, alteration, blocking, copying, distribution, as well as from other unlawful actions of third parties.

5.5. Together with the User, the Administration takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.

6. Rights and Obligations of the Parties

6.1. The User has the right to:

6.1.1. Make an independent decision to provide their personal data necessary for using the Shaherezada travel website and give consent to their processing.

6.1.2. Update or supplement the provided information on personal data in case of changes in this information.

6.1.3. The User has the right to receive information from the Administration regarding the processing of their personal data, unless such right is restricted in accordance with federal laws. The User has the right to request the Administration to clarify their personal data, block, or delete it if the personal data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose of processing, as well as take legal measures to protect their rights. To do this, it is enough to notify the Administration via the specified email address.

6.2. The Administration is obliged to:

6.2.1. Use the received information exclusively for the purposes specified in clause 4 of this Privacy Policy.

6.2.2. Ensure the confidentiality of the information, not disclose it without the prior written permission of the User, as well as not to sell, exchange, publish, or disclose in any other possible way the transmitted personal data of the User, except for clause 5.2. of this Privacy Policy.

6.2.3. Take precautions to protect the confidentiality of the User's personal data according to the procedure commonly used to protect this type of information in the ordinary course of business.

6.2.4. Block personal data related to the respective User from the moment of the User's request or request of their legal representative or the authorized body for the protection of the rights of personal data subjects for the period of verification in case of revealing incomplete or inaccurate personal data or unlawful actions.