Updated on 24 March 2026.

This page is translated using AI tools.

1. General Provisions

1.1. This document (hereinafter – the Policy) defines the policy regarding the processing of personal data of users of the website of the Federal State Budgetary Educational Institution of Higher Education "Russian State University of Tourism and Service" (hereinafter – the Operator) on the website on the Internet information and telecommunications network at: https://vestnik-rusjournal.ru/index.php/vestnik/en (hereinafter – the Website).

1.2. This Policy has been developed on the basis of paragraph 2, part 1, article 18.1 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data", as well as the Recommendations for drawing up a document defining the operator's policy regarding the processing of personal data, in accordance with the procedure established by Federal Law No. 152-FZ of 27 July 2006 "On Personal Data".

1.3. In compliance with the requirements of part 2, article 18.1 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data", the Policy is published in open access on the Internet information and telecommunications network on the Operator's Website at: https://vestnik-rusjournal.ru/index.php/vestnik/en/privacy-policy.

1.4. This Policy applies solely to the Website. The Operator does not control and is not responsible for third-party websites that the User may access via links available on the Website.

1.5. The concepts contained in article 3 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" are used in this Policy with the same meaning.

1.6. The following terms are also used in this Policy:

User – authors, reviewers, readers, and editors who visit the Website and use the information, materials, and services of the Website. The Website User is a personal data subject within the meaning of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data".

Website Services – interactive (dialog) software components on the pages of the Website used for integration with information systems and providing Website users with certain capabilities for accessing information on the Website, namely: submission of scientific materials for subsequent publication, payment for publications, author's personal account, reading and viewing of published materials (hereinafter – Services, Website Services).

1.7. Rights and obligations of the Operator.

1.7.1. The Operator must:

- process personal data solely for the purposes specified in the Policy, in accordance with the procedure established by the applicable legislation of the Russian Federation, and take measures necessary and sufficient to ensure the fulfillment of the duties provided for by Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and the regulatory legal acts adopted in compliance therewith;

- not disclose personal data without the User's consent, unless otherwise provided for by the applicable legislation of the Russian Federation;

- process personal data in compliance with the principles and rules provided for by Federal Law No. 152-FZ of 27 July 2006 "On Personal Data";

- organize the protection of personal data in accordance with the requirements of the legislation of the Russian Federation;

- consider requests from the User (or the User's legal representative) regarding the processing of personal data and provide reasoned responses;

- provide the User (or the User's legal representative) with the opportunity for free access to their personal data;

- take measures to update, block, and destroy the User's personal data in the cases established by Federal Law No. 152-FZ of 27 July 2006 "On Personal Data".

- Users with the role of "reviewer" are guaranteed anonymity in the processing of personal data; the retention period for reviews is no more than three years.

1.7.2. The Operator has the right to:

- independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the duties provided for by Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and the regulatory legal acts adopted in compliance therewith, unless otherwise provided for by Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" or other federal laws;

- entrust the processing of personal data to another person with the User's consent, unless otherwise provided for by federal law, on the basis of a contract concluded with such person, including a state or municipal contract, or by the adoption of a relevant act by a state or municipal body;

- in the event that the User withdraws consent to the processing of personal data, continue processing personal data without the User's consent if there are grounds specified in Federal Law No. 152-FZ of 27 July 2006 "On Personal Data";

- receive from the User accurate information and/or documents containing the User's personal data for the purposes of processing specified in clause 2.2 of the Policy;

- require the User to timely update the personal data provided.

- transfer the User's data to third parties, including indexing systems (Scopus, WoS, eLibrary), payment services, and DOI aggregators.

1.8. Rights and obligations of the User.

1.8.1. The User must:

- ensure the accuracy of the personal data provided to the Operator that is necessary for the processing purposes set out in clause 2.2 of the Policy;

- provide the Operator, when necessary, with information for the clarification (updating, modification) of the personal data provided.

1.8.2. The User has the right to:

- full information regarding the processing of their personal data by the Operator, except in cases provided for by the legislation of the Russian Federation;

- obtain clarification of their personal data, its blocking or destruction in cases where the personal data is incomplete, outdated, inaccurate, unlawfully obtained, or is no longer necessary for the stated purpose of processing;

- withdraw consent to the processing of personal data;

- take measures provided for by law to protect their rights;

- appeal, to the competent authority for the protection of personal data subjects or in court, any unlawful actions or inaction of the Operator in the processing of their personal data.

The Operator and Users also have other rights and bear other obligations as provided for by the legislation of the Russian Federation.

2. Purposes of Personal Data Processing

2.1. Processing of personal data shall be strictly limited to the achievement of specific, predetermined, and lawful purposes. Any processing of personal data incompatible with the purposes for which such data were collected is expressly prohibited. Personal data processed shall not be excessive or irrelevant in relation to the stated purposes of their processing.

Only personal data that directly correspond to and are necessary for the stated purposes of processing shall be subject to processing.

2.2. The Operator processes the User's personal data for the following purposes:

2.2.1. Identification of the User registered on the Website for the purposes of: logging in and gaining access to services and the personal account; identifying materials submitted for publication; and displaying author information in published materials.

2.2.2. Providing information regarding the operation of the Website (Services), as well as monitoring, evaluating, and improving the quality of the Services.

2.2.3. Granting the User access to personalized resources and features of the Website.

2.2.4. Establishing and maintaining communication channels with the User, including sending notifications, requests, and inquiries related to the use of the Website, provision of services, performance of work, and processing of the User's requests, applications, and feedback.

2.2.5. Determining the User's location to ensure security, prevent fraud, and protect against unauthorized or fraudulent use of the User's personal data on the Website.

2.2.6. Creating a user account for https://vestnik-rusjournal.ru/index.php/vestnik/en, provided that the User has given explicit consent to such account creation.

2.2.7. Providing the User with effective customer support and technical assistance in the event of issues or difficulties related to the use of the Website.

2.2.8. Sending advertising, promotional, and marketing materials to the User, solely upon obtaining the User's prior explicit consent.

2.2.9. Issuing payment invoices and facilitating feedback channels for communication and interaction with the editorial office.

3. Legal Grounds for Personal Data Processing

3.1. The legal grounds for processing personal data by the Operator shall be the following regulatory acts and instruments:

- The Constitution of the Russian Federation;

- The Civil Code of the Russian Federation;

- Federal Law No. 149-FZ dated July 27, 2006, "On Information, Information Technologies and Protection of Information";

- Federal Law No. 294-FZ dated December 26, 2008, "On Protection of Rights of Legal Entities and Individual Entrepreneurs in the Course of State Control (Supervision) and Municipal Control";

- Decree of the President of the Russian Federation No. 188 dated March 6, 1997, "On Approval of the List of Information Constituting Confidential Information";

- Resolution of the Government of the Russian Federation No. 1119 dated November 1, 2012, "On Approval of Requirements for the Protection of Personal Data during Their Processing in Personal Data Information Systems";

- Order of the Federal Service for Technical and Export Control of Russia (FSTEC) No. 21 dated February 18, 2013, "On Approval of the Composition and Content of Organizational and Technical Measures for Ensuring the Security of Personal Data during Their Processing in Personal Data Information Systems";

- The User's explicit consent to the processing of personal data provided via the Website.

4. Scope and Categories of Personal Data Processed, Categories of Personal Data Subjects**

4.1. The Operator may process personal data of the following Users: visitors of the Operator’s website.

4.2. The personal data processed by the Operator includes (select as applicable):

- surname, first name, patronymic (middle name) of the User;

- place of residence (region/city);

- mobile phone number;

- email address;

- information about positions held and place of work;

- data that is automatically transmitted to the Website’s Services during their use via the software installed on the User’s device, namely: IP address, cookie data, information about the User’s browser (or other program used to access the Services), technical specifications of the hardware and software used by the User, date and time of access to the Services, addresses of requested pages, search and viewing history on the Website and its Services.

4.3. The Operator ensures that the content and scope of the processed personal data correspond to the stated purposes of processing set forth in Section 2 of the Policy.

4.4. The Operator does not process biometric personal data or special categories of personal data concerning racial or ethnic origin, political views, religious or philosophical beliefs, or intimate life.

5. Procedure and Conditions for the Processing of Personal Data

5.1. The Operator processes personal data in accordance with the requirements of the legislation of the Russian Federation using the following methods:

- non-automated processing of personal data;

- automated processing of personal data with or without transmission of the obtained information via information and telecommunications networks;

- mixed processing of personal data.

5.2. List of actions performed by the Operator with the User’s personal data for the purposes set forth in clause 2.2 of the Policy: collection, recording, systematization, accumulation, storage, rectification (updating, modification), extraction, use, transfer (dissemination, provision, access), anonymization, blocking, erasure, destruction.

5.3. The Operator processes personal data subject to obtaining the User’s consent (hereinafter — Consent) obtained in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data,” except for cases established by the legislation of the Russian Federation where personal data may be processed without such Consent.

5.4. The User decides to provide their personal data and gives Consent freely, by their own will, and in their own interest.

5.5. The term for processing personal data is determined by the achievement of the purposes for which the personal data were collected, unless a different term is stipulated by an agreement with the User or by applicable law.

The grounds for termination of personal data processing may include the achievement of the purposes of processing, the loss of necessity to achieve such purposes, expiration of the Consent, withdrawal of Consent by the User, as well as the discovery of unlawful processing of personal data.

5.6. Consent may be withdrawn by the following method: a written request sent to the email address science@rguts.ru.

5.7. The Operator disseminates personal data that the User has authorized for dissemination, i.e., takes actions aimed at disclosing them to an indefinite circle of persons, in compliance with the requirements, prohibitions, and conditions established by Part 9 of Article 9 and Article 10.1 of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data.” Disclosure to third parties and dissemination of personal data without the User’s consent is not permitted unless otherwise provided for by federal law. Consent to the processing of personal data authorized by the User for dissemination is obtained separately from other consents given by the User for the processing of their personal data, taking into account the Requirements for the Content of Consent to the Processing of Personal Data Authorized by the Personal Data Subject for Dissemination, approved by Order No. 18 of Roskomnadzor of February 24, 2021.

5.8. When processing personal data, the Operator adopts or ensures the adoption of necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, as well as from other unlawful actions in relation to personal data.

5.9. Personal data is stored in a form that permits identification of the User for no longer than required by the purposes of processing, except where the storage period for personal data is established by federal law or by a contract to which the User is a party, beneficiary, or guarantor.

5.10. When processing personal data, the Operator complies with the requirements of Article 18 of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data.”

5.11. When processing personal data, the Operator undertakes to maintain the confidentiality of personal data.

5.12. Cross-border transfer of personal data by the Operator is carried out only to the extent of transferring metadata of articles or other scientific materials.

5.13. In the event of unlawful or accidental transfer (provision, dissemination, access) of personal data, the Operator shall notify the User thereof within 10 business days.

5.14. The Operator, together with the User, takes all necessary measures to prevent losses or other adverse consequences caused by unlawful or accidental transfer (provision, dissemination, access) of the User’s personal data.

Here is the continuation of the translation, maintaining the same legal style and terminology as the previous sections.

6. Blocking, Rectification, and Destruction of Personal Data. Responses to User Requests for Access to Personal Data

6.1. If unlawful processing of personal data is identified upon a request from the User (their representative), or upon a request from the User (their representative) or from the authorized body for the protection of the rights of personal data subjects, the Operator shall block the unlawfully processed personal data relating to the relevant User, or ensure their blocking, from the moment of such request or receipt of the said User’s request, for the duration of the verification period.

If inaccurate personal data is identified upon a request from the User or their representative, or upon their request or upon a request from the authorized body for the protection of the rights of personal data subjects, the Operator shall block the personal data relating to that User, or ensure their blocking, from the moment of such request or receipt of the said request, for the duration of the verification period, provided that blocking of the personal data does not violate the rights and legitimate interests of the User or third parties.

6.2. If the fact of inaccuracy of personal data is confirmed, the Operator shall, on the basis of information provided by the User (their representative) or by the authorized body for the protection of the rights of personal data subjects, or other necessary documents, rectify the personal data or ensure their rectification within seven business days from the date of submission of such information.

6.3. If unlawful processing of personal data is identified, the Operator shall, within a period not exceeding three business days from the date of such identification, cease the unlawful processing of personal data or ensure its cessation, and if it is impossible to ensure the lawfulness of processing, the Operator shall, within a period not exceeding ten business days from the date of identification of the unlawful processing, destroy such personal data or ensure their destruction.

6.4. Upon achievement of the purpose of processing personal data, the Operator shall destroy the personal data or ensure their destruction within a period not exceeding thirty days from the date of achievement of the purpose of processing, unless otherwise provided by a contract to which the User is a party, beneficiary, or guarantor, or by another agreement between the Operator and the User, or unless the Operator is entitled to process personal data without the User’s consent on the grounds set forth in Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” or other federal laws.

6.5. If the User withdraws consent to the processing of their personal data and if the retention of personal data is no longer required for the purposes of processing, the Operator shall destroy the personal data or ensure their destruction within a period not exceeding thirty days from the date of receipt of such withdrawal, unless otherwise provided by a contract to which the User is a party, beneficiary, or guarantor, or by another agreement between the Operator and the User, or unless the Operator is entitled to process personal data without the User’s consent on the grounds set forth in Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” or other federal laws.

6.6. Within a period not exceeding seven business days from the date the User (their representative) provides information confirming that such personal data was obtained unlawfully or is not necessary for the stated purpose of processing, the Operator shall destroy such personal data.

6.7. Processed personal data shall be destroyed if the necessity for achieving the purposes of processing is lost, unless otherwise provided for by federal law.

6.8. The Operator responds to requests and inquiries from the User (their representative) concerning the processing of personal data carried out by the Operator in the following manner: upon request sent to the email address science@rguts.ru, with the reason for the request being mandatory.

7. Liability of the Parties

7.1. The Operator shall be liable for violation of the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” in accordance with the legislation of the Russian Federation.

7.2. The User shall have the right to seek recovery of damages and/or compensation for moral harm in court.

Moral harm caused to the User as a result of violation of their rights, violation of the rules for processing personal data, as well as violation of the requirements for the protection of personal data established in accordance with Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” and the provisions of this Policy, shall be subject to compensation in accordance with the legislation of the Russian Federation. Compensation for moral harm shall be made regardless of compensation for property damage and losses incurred by the User.

8. Dispute Resolution

8.1. In the event of disputes and/or disagreements arising from the relationship between the User and the Operator, such matters shall be resolved in accordance with the applicable legislation of the Russian Federation.

8.2. The applicable legislation of the Russian Federation shall govern this Policy and the relations between the User and the Operator.

9. Final Provisions

9.1. The Operator shall have the right to amend this Policy without the User’s consent.

9.2. The new version of the Policy shall take effect from the moment it is posted on the Website, unless otherwise provided for in the new version of the Policy.

The new version of the Policy shall apply to relations arising after its entry into force.

9.3. All suggestions or questions regarding this Policy shall be sent to science@rguts.ru.