Personal Data Processing Policy
This Personal Data Processing Policy defines the procedure for processing and protecting personal data by the ЧУП «СитиРентал» (hereinafter referred to as the Operator).
1. General Provisions
1.1. The Operator pays particular attention to the protection of individuals’ personal data and to ensuring their rights when processing personal data.
1.2. This Policy has been developed in accordance with the legislation of the Republic of Belarus, including the Law of the Republic of Belarus dated May 7, 2021 No. 99-Z “On Personal Data Protection”.
1.3. The Policy defines the main purposes, principles and conditions of personal data processing, categories of personal data subjects, the composition of processed data, as well as the rights of personal data subjects.
1.4. The personal data Operator is:
- ЧУП «СитиРентал»;
- UNP: 591045221;
- legal address: 6 Studencheskaya St., Grodno;
- postal address: 31 Polyannaya St., Grodno, 230016;
- email: info@cityrent.by;
- website: https://mascaron.by/.
1.5. The state registration certificate was issued on October 4, 2023 by the Grodno City Executive Committee.
2. Basic Terms
2.1. Personal data means any information relating to an identified individual or an individual who can be identified.
2.2. Personal data processing means any action or set of actions involving personal data, including collection, systematization, storage, modification, use, provision, blocking, deletion and destruction of personal data.
2.3. Personal data subject means an individual whose personal data is being processed.
2.4. Personal data Operator means a person who independently or jointly with other persons organizes and carries out personal data processing.
3. Principles of Personal Data Processing
The Operator processes personal data in accordance with the following principles:
- lawfulness and fairness of processing;
- processing data only for predetermined and lawful purposes;
- preventing processing that is incompatible with the purposes for which the data was collected;
- processing only the personal data necessary for the stated purposes;
- preventing excessive processing of personal data;
- ensuring the accuracy and relevance of personal data;
- storing personal data no longer than necessary to achieve the purposes of processing, unless another retention period is established by law;
- taking the necessary organizational and technical measures to protect personal data.
4. Categories of Data Subjects and Processed Personal Data
4.1. The Operator may process personal data of the following categories of individuals:
- visitors to mascaron.by;
- customers and potential customers;
- persons submitting requests through feedback forms;
- persons making bookings or paying for services;
- potential investors and partners;
- job applicants;
- other persons who voluntarily provide their personal data to the Operator.
4.2. Depending on the method of interaction with the Operator, the following personal data may be processed:
- first name, last name and other information provided by the user about themselves;
- telephone number;
- email address;
- information provided in a message or comment;
- information about selected apartments;
- information required for arranging and fulfilling a booking;
- information related to payment;
- information contained in a job applicant’s CV;
- information about education, work experience and professional skills;
- other information voluntarily provided by the personal data subject to the Operator.
5. Purposes of Personal Data Processing
Personal data may be processed by the Operator for the following purposes:
- processing website user requests;
- providing feedback to users;
- providing information about the Operator’s services;
- booking apartments and other services;
- preparing, concluding and performing agreements;
- accepting and processing payments for services;
- identifying payments;
- resolving issues related to accommodation and service provision;
- processing requests from potential investors and partners;
- reviewing cooperation proposals;
- considering job applicants;
- contacting applicants regarding vacancies;
- fulfilling obligations provided for by the legislation of the Republic of Belarus;
- protecting the rights and legitimate interests of the Operator.
6. Data Processing Through Website Forms
6.1. On mascaron.by, personal data may be provided by users through electronic forms.
6.2. In particular, personal data may be collected through:
- feedback forms and the “Contacts” section;
- booking forms;
- the online payment form;
- forms for investors;
- forms in the “Careers” section;
- other forms available on the website.
6.3. When completing a form, the user independently decides whether to provide personal data.
6.4. If personal data processing is based on the consent of the personal data subject, such consent may be obtained electronically by ticking the corresponding checkbox in the website form before submission.
7. Data Processing During Payment
7.1. To make a payment, the user may provide their first and last name, telephone number, email address, payment amount, information about the selected apartment and a comment.
7.2. Bank card payments on the website are processed using the bePaid electronic payment system.
7.3. The Operator processes information required to arrange the payment, identify it, confirm payment and fulfil obligations to the customer.
7.4. Bank card details are entered by the user on the payment service provider’s side and are processed in accordance with the rules of the relevant payment service provider.
8. Processing of Job Applicants’ Data
8.1. When applying for a vacancy, the Operator may process the applicant’s name, telephone number, email address, CV information, education, work experience, professional skills and other information provided by the applicant.
8.2. Such personal data is used to consider the applicant, assess their suitability for the vacancy and contact the applicant.
8.3. If a user applies for a future vacancy, the provided data may be stored for the period necessary to consider the applicant when a suitable vacancy becomes available, or until consent is withdrawn if the processing is based on consent.
9. Legal Grounds for Personal Data Processing
The Operator processes personal data on the following legal grounds:
- consent of the personal data subject;
- conclusion and performance of an agreement with the personal data subject;
- fulfilment of obligations imposed on the Operator by law;
- other grounds provided for by the legislation of the Republic of Belarus.
10. Personal Data Processing and Retention Periods
10.1. Personal data is stored no longer than required for the purposes of processing, unless another retention period is established by the legislation of the Republic of Belarus.
10.2. Upon achievement of the processing purpose, withdrawal of consent or termination of the legal grounds for processing, personal data shall be deleted or destroyed unless further storage is required by law.
11. Transfer of Personal Data to Third Parties
11.1. The Operator does not disclose personal data without the consent of the personal data subject, except in cases provided for by the legislation of the Republic of Belarus.
11.2. To ensure the operation of the website, process payments and bookings, communicate with customers and perform other necessary operations, the Operator may engage authorized persons and service providers who process data on behalf of or in the interests of the Operator.
11.3. Personal data may be transferred to government authorities and other organizations in cases and in accordance with the procedures established by the legislation of the Republic of Belarus.
12. Rights of the Personal Data Subject
The personal data subject has the right to:
- withdraw previously given consent to personal data processing;
- obtain information about the processing of their personal data;
- request correction of personal data if it is incomplete, outdated or inaccurate;
- obtain information about the provision of their personal data to third parties in cases provided for by law;
- request the termination of processing and deletion of personal data where there are no lawful grounds for processing;
- appeal against the actions or inaction of the Operator in accordance with the procedure established by the legislation of the Republic of Belarus.
13. Procedure for Exercising the Rights of the Personal Data Subject
13.1. To exercise the rights provided for by personal data protection legislation, the personal data subject may contact the Operator.
Operator’s postal address: 31 Polyannaya St., Grodno, 230016.
Contact email: info@cityrent.by.
13.2. The request must contain information sufficient to identify the applicant and determine the substance of their requirements to the extent provided for by the legislation of the Republic of Belarus.
13.3. Consent to personal data processing may be withdrawn in the manner provided for by law, including in the same form in which such consent was given, where applicable.
14. Personal Data Protection
14.1. The Operator takes the necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access, alteration, deletion, blocking, distribution and other unlawful actions.
14.2. Access to personal data is provided only to persons who require it in order to perform their respective duties.
14.3. Persons who have access to personal data are required to comply with confidentiality requirements and personal data protection legislation.
15. Use of Cookies
15.1. The mascaron.by website may use cookies and similar technologies to ensure the correct operation of the website, save user preferences and obtain statistical information.
15.2. The user may independently restrict or disable the use of cookies through their browser settings. Restricting cookies may affect the operation of certain website functions.
16. Final Provisions
16.1. Matters relating to personal data processing that are not regulated by this Policy are governed by the legislation of the Republic of Belarus.
16.2. The Operator has the right to amend this Policy taking into account changes in legislation, information systems used and personal data processing procedures.
16.3. The current version of this Policy is publicly available on the website https://mascaron.by/.
Personal Data Operator:
ЧУП «СитиРентал»
UNP 591045221
Legal address: 6 Studencheskaya St., Grodno
Postal address: 31 Polyannaya St., Grodno, 230016
Email: info@cityrent.by
