Privacy Policy

This Privacy and Personal Data Processing Policy (the “Policy”) has been drawn up in accordance with the Law of the Republic of Uzbekistan No. ZRU-547 of 02.07.2019 “On Personal Data” (the “Law”) and other legal acts of the Republic of Uzbekistan.

The Policy defines how personal data of users of the website rodasoleil.uz (the “Website”) is processed and how its security is ensured.

Operator processing personal data: YaTT «Pavlova Polina Vyacheslavovna» (sole proprietor, Republic of Uzbekistan) — ЯТТ «Павлова Полина Вячеславовна», address: Toshkent sh., Bektemir tumani, Oltintopgan ko'chasi, 8.

By using the Website, by providing data when placing an order, registering, subscribing to the newsletter or in any other way, the user consents to the processing of personal data on the terms of this Policy.

Personal data — information recorded on an electronic, paper and/or other tangible medium that relates to an identified or identifiable natural person (the data subject).

Processing of personal data — any action or set of actions performed with personal data, including collection, organisation, storage, modification, retrieval, use, transfer, de-identification, blocking and destruction.

Operator / owner of the personal data database — the legal entity that owns the website rodasoleil.uz and determines the purposes and the composition of the personal data processed.

User — a natural person who accesses the Website over the Internet and uses it.

Cookies — a small piece of data sent by a web server and stored on the user’s device.

The Operator undertakes not to transfer personal data to third parties without the consent of the data subject, except in the cases provided for by the legislation of the Republic of Uzbekistan.

Personal data is transferred to third parties only in the following cases and only to the extent necessary for:

• Delivery of the order (courier and express operators)
• Acceptance of payment (banks and payment systems: Humo, UzCard, Anorbank)
• Tax and accounting records
• Compliance with requests of authorised state bodies
• Exchanging messages via messengers and social media (Telegram, Instagram Direct, Facebook Messenger) — limited to the conversation itself

Cross-border transfer of personal data outside the Republic of Uzbekistan takes place only where the receiving party provides adequate protection of data subjects’ rights in accordance with Article 26 of the Law.

The technological means used to store the personal data of citizens of the Republic of Uzbekistan are located in the territory of the Republic of Uzbekistan in accordance with Article 27¹ of the Law.

The Operator applies legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying, dissemination and other unlawful actions.

The storage period of personal data is determined by the purposes of processing. Order data is kept for the period established by accounting and tax legislation. Once the storage periods expire, the data is destroyed or de-identified. Messenger and social-media conversations are kept for as long as is necessary to handle the enquiry and to confirm what was agreed with the customer, after which they are deleted or de-identified.