Privacy policy
How we process and protect the personal data of hotel guests and website users.
1. General provisions
This Privacy Policy (the "Policy") sets out the procedure for processing and protecting the personal data of users of the website bellagiohotel.kz (the "Website") and guests of the "BELLAGIO HOTEL" (the "Hotel").
The personal data operator is the "BELLAGIO HOTEL", Republic of Kazakhstan, Konaev, Industrialnaya Street 2B. Contact for data processing enquiries: info@bellagiohotel.kz.
Personal data is processed in accordance with the Constitution of the Republic of Kazakhstan and the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Its Protection" (the "Law").
By submitting a request on the Website or contacting the Hotel by phone, messenger or email, you confirm that you have read this Policy and consent to the processing of your personal data on the terms set out herein.
2. Definitions
Personal data means information relating to a data subject who is identified or identifiable on the basis of such information.
Processing of personal data means any operation performed on personal data: collection, recording, systematisation, accumulation, storage, alteration, supplementation, use, transfer, depersonalisation, blocking and erasure.
Data subject means the individual to whom the personal data relates (a guest of the Hotel or a visitor of the Website).
Consent means the voluntary, specific and informed expression of the data subject's will to have their personal data processed.
Cookies are small text files stored in the device browser when you visit the Website.
3. What data we process
Data you provide yourself when making a booking, submitting a request or contacting the Hotel:
- first and last name;
- phone number and email address;
- check-in and check-out dates, room category, number of guests;
- preferences regarding the restaurant, SPA, transfer and additional services;
- the content of your comments, questions and messages.
Data collected automatically when you visit the Website: IP address; device, browser and operating system type; language and screen resolution; pages viewed, time and duration of the visit; referral source; cookie data and analytical service identifiers.
Data required to provide hotel services is processed to the extent provided for by the legislation of the Republic of Kazakhstan, including guest registration rules.
We do not collect or process special categories of personal data (racial or ethnic origin, political views, religious beliefs, health status, criminal record), except where expressly required by law.
4. Purposes of processing
Personal data is processed solely for the following purposes:
- making, confirming, amending and cancelling bookings of rooms, restaurant tables, SPA services and event halls;
- arranging transfers and other additional services at the guest's request;
- communicating with the guest: confirming requests, answering enquiries, notifying about booking status changes;
- settlements and preparation of payment and reporting documents;
- improving the Website, analysing traffic and service quality in depersonalised form;
- ensuring the safety of guests and property and preventing fraud;
- complying with the requirements of the legislation of the Republic of Kazakhstan.
5. Legal grounds for processing
The consent of the data subject given by submitting a request on the Website or contacting us by phone, messenger or email.
Performance of a contract to which the data subject is a party (booking and provision of hotel services).
Exercise of the rights and legitimate interests of the Operator, provided that this does not violate the rights and freedoms of the data subject.
Performance of obligations imposed on the Operator by the legislation of the Republic of Kazakhstan.
7. Sharing data with third parties
Personal data is not sold and is not transferred to third parties for purposes unrelated to the services provided by the Hotel.
Data may be transferred to: payment and financial institutions — for settlements; providers of hosting and technical support for the Website; web analytics services — in depersonalised form; messaging services (for example, WhatsApp) — where the guest contacts us through that channel; authorised state bodies — upon a reasoned request in cases established by law.
Website pages may contain embedded elements of third-party services (YouTube video, Yandex and 2GIS maps). When they are loaded, the relevant service may receive technical information about your device and IP address in accordance with its own privacy policy.
Transfer of personal data outside the Republic of Kazakhstan is carried out only where the recipient ensures protection of personal data comparable to that provided for by the Law.
8. Retention periods and data protection
Booking data and related correspondence are stored for the period necessary to provide services and handle possible enquiries — up to 3 (three) years from the guest's departure date.
Documents for which a mandatory retention period is established by law (accounting, settlement and cash documents) are stored for at least 5 (five) years.
Web analytics data and cookies are stored for no longer than 12 (twelve) months, unless a shorter period is configured in the relevant service.
Data whose processing period has expired or whose consent has been withdrawn shall be erased or depersonalised in the manner and within the periods established by the Law.
Organisational and technical measures are applied to protect the data: transmission over the secure HTTPS protocol, separation of employee access rights on a least-privilege basis, limitation of the persons with access to booking systems, backup and logging of data access.
9. Rights of the data subject
You have the right to:
- obtain information about the processing of your personal data, including its scope, purposes and recipients;
- request rectification, amendment or supplementation of personal data that is incomplete, outdated, inaccurate or unlawfully obtained;
- request blocking or erasure of personal data whose processing is carried out in violation of the law or is not necessary for the stated purposes;
- withdraw consent to the processing of personal data;
- lodge a complaint with the authorised body in the field of personal data protection or with a court.
The exercise of these rights does not extend to data whose processing is mandatory by law, including documents subject to mandatory retention.
10. Withdrawal of consent and enquiries
Enquiries regarding the processing of personal data should be sent to info@bellagiohotel.kz or by post to: Republic of Kazakhstan, Konaev, Industrialnaya Street 2B.
The enquiry must state your first and last name, contact details and the substance of the request; where necessary, documents confirming your identity and the information provided should be attached.
Enquiries are reviewed within 15 (fifteen) business days from receipt, unless another period is provided for by law.
Withdrawal of consent does not affect the lawfulness of processing carried out before it was received and does not terminate processing that is mandatory by law.
11. Data of minors
The Hotel's services are intended for adult guests. A booking on behalf of a minor is made by their legal representative.
Personal data of minors is processed only to the extent necessary for accommodation and the provision of services, and is provided by legal representatives.
If personal data of a minor was provided without the consent of the legal representative, such data is erased upon the representative's request.
12. Changes to this Policy
The Operator may amend this Policy. The new edition takes effect from the moment it is published on this page.
If the procedure for processing personal data changes materially, the Operator publishes a corresponding notice on the Website.
The current edition of the Policy is available at bellagiohotel.kz/ru/privacy and in the language versions of the Website.
The date of the last revision is stated at the top of this page.
Contacts for data processing enquiries
Requests regarding the processing of personal data, withdrawal of consent and requests to rectify or erase data should be sent to the contacts below.
- Email: info@bellagiohotel.kz
- Phone: +7 777 488 88 84
- Address: Республика Казахстан, г. Конаев, ул. Индустриальная, 2Б
This edition of the Policy applies from the date stated at the top of this page.