1.General Provisions
This Policy for Processing Personal Data has been developed in compliance with GDPR regulations and outlines the procedures for handling personal data and ensuring its security by Z.M. The Project Travel and Tour Ltd (referred to as “the Operator” hereafter).

The Operator’s primary aim and commitment in its operations is to uphold the rights and freedoms of individuals and citizens concerning their personal data, including safeguarding privacy, personal, and familial confidentiality.

This Operator Policy on personal data processing (referred to as “the Policy” henceforth) is applicable to all data concerning visitors to the website www.project-cyprustours.com that the Operator may acquire.

2.Basic concepts used in the Policy

Automated processing of personal data – processing of personal data using computer equipment;

Blocking of personal data – temporary suspension of the processing of personal data (unless it is necessary to process personal data);

Website – a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address www.project-cyprustours.com; 

Personal data information system – a set of personal data contained in databases, and information technologies and technical means ensuring their processing;

Personalization of personal data means actions that cannot be determined without the use of additional information if the personal data belong to a specific User or other subject of personal data;

Personal data processing – any action (operation) or set of actions (operations) performed with the use of automation tools or without the use of such tools with personal data, including the collection, recording, systematization, accumulation, storage, refinement (update, change), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

Operator – a state body, municipal body, legal or natural person, independently or jointly with other persons organizing and (or) processing personal data, as well as determining the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data;

Personal data – any information relating directly or indirectly to a specific or definable User of the website www.project-cyprustours.com; 

User – any visitor of the website www.project-cyprustours.com; 

Provision of personal data – actions aimed at disclosing personal data to a specific person or a specific circle of persons;

Dissemination of personal data – any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or to become familiar with personal data of an unlimited number of persons, including public disclosure of personal data in the media, placement in information and telecommunication networks or access to personal data in any other way;

Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state to the authority of a foreign state, foreign natural or foreign legal entity;

Destruction of personal data – any actions that result in personal data being irretrievably destroyed with the impossibility of further restoring the content of personal data in the personal data information system and (or) the result of which are destroyed the physical media of personal data.

3.The operator can process the following personal data of the User

Full Name;

Email address;

Phone numbers;

The website also collects and analyses anonymous information about visitors, which includes data like cookies, using Internet tracking services such as Yandex Metrika and Google Analytics, among others. This combined data is referred to as a Policy, which falls under the broader category of Personal Data.

4.Purpose of processing personal data

The purpose of processing the User’s personal data is to manage, fulfil, and end civil contracts; clarify order details; and book tours.

The Operator also has the right to send the User notifications about new products, services, events, and special offers. The User can opt out of receiving these messages by emailing the Operator at www.project-cyprustours.com with the subject “Opting out of notifications about new products, services, and special offers.”

Anonymous data about Users collected through Internet tracking services is used to understand how Users interact with the site, and to improve its quality and content.

5.Legal grounds for the processing of personal data

The Operator only processes personal data provided directly by the User through forms on the website www.project-cyprustours.com. When the User fills out these forms or sends personal data to the Operator, they agree to this Policy.

The Operator also processes anonymous data about the User if it’s allowed in the User’s browser settings (such as enabling cookies and JavaScript technology).

6.The order of collection, storage, transmission and other types of personal data processing

The Operator ensures that personal data they handle is kept safe by following legal, organizational, and technical measures required by data protection laws.

The Operator takes steps to keep personal data secure and prevents unauthorized access to it.

User’s personal data won’t be shared with anyone else unless required by law.

If the User finds any mistakes in their personal data, they can update it themselves by emailing the Operator at info@project-cyprustour.com with the subject “Updating personal data”.

There’s no time limit on how long personal data is processed. The User can withdraw their consent to the processing of their personal data at any time by emailing the Operator at info@project-cyprustour.com with the subject “Withdrawing consent to personal data processing”.

7.Cross-border transfer of personal data

Before sending personal data across borders, the Operator must make sure that the foreign country it’s sending the data to protects the rights of people’s personal data.

If the foreign country doesn’t have adequate protection for personal data, the Operator can only send the data there if the person whose data it is agrees in writing, or if sending the data is part of a contract they’re involved in.

8.Final provisions

If the User has any questions about how their personal data is handled, they can email the Operator at info@project-cyprustour.com. 

Any updates to how the Operator process personal data will be recorded in this document. The policy will stay in effect until a new version replaces it.

You can find the current version of the Policy for free on the Internet at www.project-cyprustours.com/privacy-policy