Consent to Receive Promotional Material

GENERAL PROVISIONS

1. This Personal Data Processing Policy (hereinafter referred to as the 'Policy') constitutes the rules for processing personal data and measures to ensure their security at Encore Resort LLC (hereinafter referred to as the 'Operator'), developed in accordance with Federal Law No. 152-FZ of July 27, 2006 'On Personal Data' (hereinafter referred to as '152-FZ').

2. The Policy aims to protect the rights and freedoms of individuals and citizens during the processing of their personal data, including the protection of rights to privacy, personal and family secrets.

3. In accordance with Part 2 of Art. 18.1. of the Federal Law, this Policy is published for unrestricted access on the Operator’s Website.

4. All issues related to the processing of personal data not regulated by this Policy shall be resolved in accordance with the current legislation of the Russian Federation in the field of personal data.

5. The Policy applies to all employees of the Operator and structural units processing personal data.

Basic Concepts

The concepts defined in Art. 3 of 152-FZ are used: personal data, personal data processing, operator, personal data subject, confidentiality of personal data, etc.

Principles and Purposes of Personal Data Processing

1. The processing of personal data by the Operator is carried out based on the following principles:

   • legality and fairness;
   • limitation of processing to specific, predetermined, and legitimate purposes;
   • compliance of the content and volume of processed data with the stated purposes;
   • accuracy and sufficiency of data;
   • limitation of data storage to the achievement of processing purposes;
   • confidentiality and security.

2. Purposes of personal data processing:

   • execution of agreements with personal data subjects (clients, counterparties);
   • employment, registration of labor and other relations with employees provided for by law;
   • personnel records, maintenance and storage of personnel documentation;
   • providing access control and on-site security;
   • sending information and advertising materials to subjects, participation in promotions and events (with the subject’s consent);
   • compliance with tax, labor, and pension legislation requirements;
   • ensuring personnel safety and property security.

Legal Grounds for Personal Data Processing

1. Processing is carried out on the basis of:

   • The Constitution of the Russian Federation and federal laws (including 152-FZ, Labor Code of the Russian Federation, Tax Code of the Russian Federation);
   • consent of the personal data subject to processing;
   • agreements concluded with the subject;
   • publicly available data sources.

Composition of Processed Personal Data

1. The Operator processes data necessary strictly for the stated purposes, which may include:

   • For individual clients/counterparties: Full name, passport details, contact details (phone, e-mail), address, payment details.
   • For employees (candidates): Full name, passport details, workbook details, TIN, SNILS, education, military registration, marital status, address, contacts, photo, health data (for specific purposes).
   • For visitors: identity document data, time spent on the territory, video recordings from surveillance systems.