Privacy Policy
Personal data processing policy for gettsleep.com. Edition 2.0.
1. General Provisions
1.1. This Privacy Policy (hereinafter the "Policy") defines the procedure for processing personal data of users of the website gettsleep.com (hereinafter the "Website") by the data controller -- Comfort Management Group LLC, OGRN 1197746296428, INN 9725009470 (hereinafter the "Controller").
1.2. The Policy is developed in accordance with Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data".
1.3. By using the Website and placing an Order, the User confirms that they have read this Policy and consent to the processing of their personal data on the terms set forth below.
2. Data We Process
| Data Category | Specific Data | Purpose |
|---|---|---|
| Identification | First name, last name | Placing the Order, identity verification at check-in |
| Contact | Email, phone number | Sending the Voucher, fiscal receipt, and Order notifications |
| Personal (optional) | Date of birth | Birthday coupon as part of the loyalty program |
| Payment | Card type, last 4 digits (full card details are not stored) | Processing payment and refunds |
| Technical | IP address, browser type, cookies | Website operation, analytics, security |
| Order Data | Property, dates, tariff, status, booking history | Contract fulfillment, loyalty program, dispute resolution |
3. Legal Basis for Processing
3.1. Contract performance — processing of data necessary for placing and fulfilling the Order (name, contacts, Order parameters). Separate consent is not required.
3.2. Consent of the data subject — processing of data for marketing communications and the loyalty program. Consent is given separately upon registration in the Personal Account. The User may withdraw consent at any time.
3.3. Legal requirement — data retention for the purpose of compliance with tax and accounting legislation.
4. Data Sharing
| Recipient | Data Shared | Legal Basis |
|---|---|---|
| Service Provider for the specific Order (name and details are displayed in the "Service Provider Information" pop-up at checkout) | Guest name, contact details, Order parameters | Contract performance. The Service Provider is an independent data controller and bears its own responsibility for data processing after receipt. |
| Payment service provider | Bank card data (via secure gateway) | Payment processing |
| Fiscal software provider | Email for receipt delivery | Federal Law No. 54-FZ |
| Analytics services | Anonymized technical data | Website improvement |
The Controller does not share personal data with third parties for commercial purposes without the consent of the data subject.
5. Data Retention Periods
| Data Category | Retention Period |
|---|---|
| Order data and payment documents | No less than 5 years (tax legislation requirements) |
| Personal data for contract performance | No less than 3 years from the date the Order is fulfilled |
| Account data | Until account deletion + 1 year |
| Marketing data (with consent) | Until consent is withdrawn or 3 years from last activity |
| Technical data (logs, cookies) | Up to 1 year |
6. Data Subject Rights
The User has the right to:
- Request information -- about the data being processed and the legal basis for processing;
- Correct -- inaccurate or incomplete data (including through the Personal Account);
- Delete -- your data / close your account (except where processing is required by law);
- Restrict -- the processing of your data;
- Withdraw consent -- for data processing that was provided voluntarily;
- File a complaint -- with the data protection authority (Roskomnadzor, rkn.gov.ru).
To exercise your rights, send a request to: privacy@gettsleep.com or by post to the Controller's registered address. Response time: 30 calendar days.
7. Data Security
7.1. The Controller applies technical and organizational measures to protect personal data in accordance with the requirements of Federal Law No. 152-FZ.
7.2. Payment data is transmitted through a PCI DSS-certified gateway. Full bank card details are not stored on the Controller's servers.
7.3. Access to personal data is granted only to authorized employees who are required to maintain confidentiality.
8. Cookies
8.1. The Website uses cookies to ensure functionality, analytics, and to improve the user experience.
8.2. The User may manage cookie settings in their browser. Disabling cookies may affect the operation of certain Website features.
8.3. By continuing to use the Website after being shown the cookie notice, the User consents to the use of cookies.
9. Policy Changes
The Controller may amend this Policy without prior notice. The current version is always available at: gettsleep.com/privacy.
Data Controller
Comfort Management Group LLC
OGRN: 1197746296428, INN: 9725009470
Address: Moscow Region, Khimki, building E2, premises 3
Email: privacy@gettsleep.com