Privacy Policy
PRIVACY POLICY FOR THE WEBSITE https://yusupov-palace.ru/ru
This Privacy Policy describes how the Cultural Institution “St. Petersburg Palace of Culture for Educators” (TIN 7812024086, PSRN 1027810279595, registered address: 94 Moika River Embankment, St. Petersburg, 190068) (the “Operator”) processes personal data on the website https://yusupov-palace.ru/ru.
1. Basic Terms
Event means any service for holding an event, including performances, excursions, concerts, lectures, theatrical games, author's programs, weddings, celebrations, business events, presentations, children's parties, photo shoots, fashion shows, exhibitions, and other events organized by the Operator and/or at the Operator's venue at its registered address.
Personal data means any information relating directly or indirectly to an identified or identifiable individual.
User means a personal data subject whose personal data is processed while using the website, and a visitor of the website.
Personal Data Operator means a legal entity or other person that organizes and/or carries out personal data processing and determines the purposes, scope, and actions performed with personal data. For the website, the Operator is the Cultural Institution “St. Petersburg Palace of Culture for Educators”.
Personal data processing means any action with personal data, including collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, blocking, deletion, and destruction.
Cookies are small text files stored on the User's device when visiting the website. Cookies contain information about the User's interaction with the Operator's website.
2. User Rights
Users have the right to access their personal data, request correction, blocking or deletion, withdraw consent to processing, and appeal the Operator's actions or inaction to the territorial body of Roskomnadzor.
To exercise these rights, Users may send a request to Web@yusupov-palace.ru or to: 94 Moika River Embankment, St. Petersburg, 190068.
The request must include information about the identity document of the User or representative, full name, and information about the relationship with the Operator in which the personal data was obtained.
3. Personal Data Processed by the Operator
The Operator may collect and use technical information related to Users' behavior on the website. Technical information that may identify Users is processed under this Policy.
With Users' consent, the Operator processes personal data submitted through website forms for ticket and subscription purchases, event requests, exclusive event booking, marketing communications, special offers, loyalty programs, surveys, analytics, and correct operation of the website.
| Purpose | Categories of personal data | Actions and methods | Processing period |
| Processing ticket and subscription purchase forms. | Full name, email, phone number, selected event, ticket quantity, price and type, order details, date, time, place, duration and/or route, parent or legal representative status, audio guide purchase information. | Collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer to third parties including affiliates and employees, blocking, deletion and destruction. Processing may be automated and non-automated, with transfer over the Internet and without transfer over the Operator's internal network. | Until the purpose of processing is achieved in accordance with Part 4 of Article 21 of Federal Law No. 152-FZ “On Personal Data”, but in any case no more than 10 years. |
| Processing “leave a request” forms for booking and holding events. | Full name, email, phone number, selected event type, event date, time, place, duration and/or route, number of guests, and any other information entered in the comment field. | The same processing actions and methods as above. | Until the purpose is achieved, but no more than 10 years. |
| Processing “application” forms for exclusive events and group booking. | Full name, citizenship, email, phone number, selected event, date, time, place, duration and/or route, number of guests including minors, age of minors, parent/legal representative status, student status, payment method, booking number, and comments. | The same processing actions and methods as above. | Until the purpose is achieved, but no more than 10 years. |
| Providing information, including advertising information, about Operator services, special offers, promotions, loyalty program terms, benefits, direct communications, analytics, surveys, discounts and other website features. | Full name, citizenship, email, phone number, selected event, date, time, place, route, number and age of guests, ticket or subscription price and type, order and booking details, payment method, audio guide information, comments, and cookie contents. | The same processing actions and methods as above. | Until the purpose is achieved, but no more than 10 years. |
For correct website operation and statistical purposes, the Operator processes session cookie data including _ym_d, _ym_uid, locale, tmr_lvid, tmr_lvidTS, domain_sid, _ym_isad, tmr_detect, _ym_visorc, DEFAULT_COOKIE_NAME_FOR_POPUP_USER_VISITED, DEFAULT_COOKIE_NAME_STATISTIC_COUNT_VISITED_PAGES, and XSRF-TOKEN (CSRF-TOKEN). Processing periods range from one browser session to 1 year, depending on the cookie.
Users may disable the collection and further processing of cookies in their browser settings. More information is available on the websites of Google Chrome, Yandex Browser, and Mozilla Firefox.
4. Transfer of Personal Data to Third Parties
For analytics purposes, the Operator transfers personal data to the web analytics service provider Yandex LLC (“Yandex Metrica”) (TIN 7736207543, PSRN 1027700229193, registered address: 16 Lev Tolstoy Street, Moscow, 119021).
More information about Yandex Metrica is available at https://yandex.ru/support/metrica/ru/general/how-it-works, https://yandex.ru/support/metrica/ru/code/data-collected, and https://yandex.ru/support/metrica/ru/general/cookie-usage.
For ticket purchases and events, the Operator transfers personal data to Voyager LLC (TIN 7802511242, PSRN 1157847138900), YCLIENTS LLC (TIN 7708274185, PSRN 5157746100716), and, for correct website operation related to ticket purchases, Infotech LLC (TIN 7810099978, PSRN 1077847395944).
The Operator may also transfer personal data specified in Section 3 to employees, partners, affiliates, contractors providing website hosting and information system support, persons involved in marketing research and correct website operation, and public authorities where directly required by Russian law.
5. Personal Data Security
Users' personal data is confidential information. The Operator protects personal data from loss, alteration, and unauthorized access in accordance with the legislation of the Russian Federation, including Articles 18, 18.1, and 19 of Federal Law No. 152-FZ.
6. Changes to the Privacy Policy
The Operator updates this Privacy Policy at its discretion as necessary. The current version is published on the Operator's website.
7. Collection of Personal Data of Minors
The website is not intended for processing personal data of minors except as expressly provided in Section 3 of this Policy. If Users believe that a child has provided personal data through a website feedback form, they may notify the Operator at Web@yusupov-palace.ru or at: 94 Moika River Embankment, St. Petersburg, 190068.