Privacy Policy on Personal Data Processing

1. General Provisions

1.1. This Privacy Policy (hereinafter — the "Policy") has been developed in accordance with applicable data protection principles and governs the procedure for processing personal data, as well as the measures taken by Vitthala Prem Travels (hereinafter — the "Operator") to ensure their protection.

1.2. The Operator’s primary goal is to guarantee the rights and freedoms of every individual when processing their personal data, including the protection of the right to privacy, family, and personal confidentiality.

1.3. This Policy applies to all visitors of the website: https://justprem.org/ (hereinafter — the "Website").

2. Definitions

For the purposes of this Policy:

  • Personal Data — any information relating directly or indirectly to an identified or identifiable individual (the "User").

  • Processing of Personal Data — any action (operation) or set of actions performed on personal data, with or without the use of automated means, including collection, recording, systematization, storage, updating, retrieval, use, transfer, dissemination, anonymization, blocking, deletion, or destruction of personal data.

  • Operator — Vitthala Prem Travels, Rishikesh, India, which organizes and/or carries out the processing of personal data and determines the purposes of processing, the scope of personal data processed, and the actions performed.

  • Anonymization — actions that make it impossible to determine the identity of a User without additional information.

  • Blocking — temporary suspension of personal data processing.

  • Dissemination — any actions aimed at disclosing personal data to an indefinite number of persons.

  • Cross-border transfer — transfer of personal data to the territory of a foreign country.

  • User — any visitor of the Website.

3. Rights and Obligations of the Operator

The Operator has the right to:

  • Request accurate and updated information from the subject of personal data.

  • Continue processing personal data in cases provided for by law, even if the User withdraws consent.

  • Determine and apply the necessary technical and organizational measures for the protection of personal data.

The Operator undertakes to:

  • Provide the User, upon request, with information regarding the processing of their personal data.

  • Ensure the lawful organization of personal data processing.

  • Respond to inquiries from Users and regulatory authorities.

  • Protect personal data from unauthorized or unlawful access, alteration, destruction, or dissemination.

  • Stop processing and destroy personal data when the purposes of processing have been achieved, or when consent is withdrawn, unless otherwise required by law.

4. Rights and Obligations of Users

Users have the right to:

  • Receive information about the processing of their personal data.

  • Request corrections, blocking, or deletion of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for processing.

  • Withdraw consent to the processing of personal data.

  • Restrict or object to certain uses of their personal data, including for marketing purposes.

  • File a complaint with regulatory authorities or a court regarding unlawful actions in relation to their data.

Users are obliged to:

  • Provide accurate and up-to-date information about themselves.

  • Notify the Operator of changes to their personal data.

5. Principles of Personal Data Processing

  • Processing is carried out lawfully, fairly, and transparently.

  • Personal data is collected only for specific, explicit, and legitimate purposes.

  • Only data that is necessary to achieve these purposes will be processed.

  • Data will be kept accurate and up to date, and stored no longer than required for the purposes for which it was collected.

  • Personal data will be processed with appropriate security measures to protect against unauthorized or unlawful processing.

6. Categories of Personal Data Processed

The Operator may process the following personal data:

  • Full name

  • Email address

  • Contact phone number

  • Passport or ID details (only when required for travel bookings and contracts)

  • Automatically collected data through cookies and analytics (browser, device information, IP address, session data, etc.)

  • Photographs and video recordings (in case of events or retreats, with consent)

Purposes of processing include:

  • Execution and support of travel and retreat bookings.

  • Communication with Users regarding orders and inquiries.

  • Providing updates, offers, and newsletters (with consent).

  • Technical support and Website functionality.

  • Marketing and event documentation (with consent).

7. Cookies and Analytics

7.1. The Website uses cookies and analytical tools (e.g., Google Analytics, Yandex.Metrica) to analyze Website use and improve functionality.

7.2. Users can disable cookies in their browser, but some Website functions may not be available as a result.

8. Legal Grounds for Processing

  • Consent of the User.

  • Execution of a contract to which the User is a party.

  • Compliance with legal obligations.

  • Legitimate interests of the Operator (such as Website improvement and marketing), provided such interests do not override the User’s rights and freedoms.

9. Storage and Protection of Personal Data

  • Data is stored securely in systems with technical and organizational protection measures.

  • Access is restricted to authorized personnel only.

  • Data is kept no longer than necessary for the purposes stated, unless a longer retention period is required by law.

10. Transfer of Personal Data

  • Personal data will not be shared with third parties except as required by law or with the User’s consent (e.g., hotels, airlines, or payment processors for retreat/travel bookings).

  • Cross-border data transfers may take place when necessary for providing services (e.g., booking international flights or accommodations).

11. Confidentiality

All employees and third parties who may have access to personal data are obliged not to disclose or distribute it without proper authorization.

12. Final Provisions

  • The User may contact the Operator with any questions related to personal data processing at: justlovecommunity31@gmail.com

  • The Operator may update this Policy at any time. The current version is always available on the Website: https://justprem.org/privacy.