PRIVACY POLICY
of the website https://maroontashkent.com
Last updated: March 11, 2026
1. General Provisions
1.1. This Privacy Policy (hereinafter referred to as the “Policy”) has been developed in
accordance with the Law of the Republic of Uzbekistan “On Personal Data” (hereinafter referred
to as the “Law”) and defines the procedure for processing and protecting personal data of users
of the website https://maroontashkent.com (hereinafter referred to as the “Website”).
1.2. The Operator (owner of the personal data database) is LLC “SADKO INTERNATIONAL
HOSPITALITY”, located at:
100007, Tashkent city, Yashnabad district, Dustabad MFY, Makhtumkuli street, building 120
Phone: +998 (99) 088-00-33
Email: info@maroontashkent.com
Registered in accordance with the legislation of the Republic of Uzbekistan (hereinafter referred
to as the “Operator”).
1.3. Use of the Website constitutes the user’s unconditional acceptance of this Policy and the
conditions for processing their personal data specified herein. If the user does not agree with
these conditions, they must refrain from using the Website.
1.4. The Operator reserves the right to amend this Policy. The new version of the Policy enters
into force from the moment it is published on the Website unless otherwise provided in the new
version. The current version of the Policy is always available on the Website at:
https://maroontashkent.com/privacy/en

2. Basic Definitions
The following terms are used in this Policy:
Personal Data – any information relating to an identified or identifiable individual (user),
recorded on electronic, paper, or other physical media.
Personal Data Subject (User) – an individual whose personal data is processed and who uses
the Website.
Operator (Owner of the Personal Data Database) – a legal entity that processes personal
data and determines the purposes and content of such processing.
Processing of Personal Data – any action (operation) or set of actions performed with or
without the use of automation tools, including collection, recording, systematization,
accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision,
distribution), anonymization, blocking, deletion, and destruction of personal data.
Personal Data Database – an information system containing personal data.
Cross-border Transfer – transfer of personal data to the territory of a foreign state.
Third Party – a person who is not the data subject or the operator but is related to them
through personal data processing activities.

3. Categories of Personal Data
3.1. The Operator may process the following personal data of the user:
• Full name (if available);
• Contact phone number;
• Email address (e-mail);
• Information necessary for table reservation or ordering services (for example, preferences,
special requests, date and time of visit);
• Technical information automatically collected when visiting the Website (cookies, IP address,
browser information, time of visit, requested page address).
3.2. The Operator does not process special categories of personal data related to racial or ethnic
origin, political opinions, religious or philosophical beliefs, health conditions (except
information voluntarily provided by the user in connection with special requests, such as
allergies), or intimate life.

4. Purposes of Collecting and Processing Personal Data
4.1. The Operator collects and processes personal data of the user solely for the following
purposes:
Provision of services: table reservations, event organization, communication with the user
regarding their inquiries, and fulfillment of contractual obligations.
Improvement of service quality: analysis of visitor preferences and optimization of the
Website and offered services.
Marketing purposes: informing users about special offers, promotions, and events (subject to
separate consent from the user to receive such communications). The user may unsubscribe from
such communications at any time by sending written notice to the Operator’s email address.
Security and protection of rights: prevention of fraud and protection against unlawful use of
the Website.

5. Legal Grounds for Personal Data Processing
5.1. Personal data processing is carried out on the following legal grounds:
• Consent of the personal data subject to the processing of their personal data (Article 21 of the
Law). Consent may be given in any form that confirms the fact of its receipt, including by
ticking a box on the Website when filling out forms.
• Necessity for the performance of a contract to which the subject is a party (for example, a
reservation agreement).
• Necessity to comply with the legislation of the Republic of Uzbekistan.
• Necessity to protect the legitimate interests of the Operator or third parties, provided that such
processing does not violate the rights and legitimate interests of the subject.

6. Procedure and Conditions for Processing Personal Data
6.1. Localization of databases.
In accordance with Article 27-1 of the Law, the collection, systematization, and storage ofpersonal data of citizens of the Republic of Uzbekistan must be carried out in personal data
databases located on technical equipment physically situated within the territory of the Republic
of Uzbekistan.
6.2. Personal data processing may be carried out both with the use of automation tools and
without them.
6.3. The Operator takes necessary legal, organizational, and technical measures to protect
personal data from unlawful or accidental access, destruction, modification, blocking, copying,
distribution, and other unlawful actions. These measures include:
• appointment of a person responsible for organizing personal data processing;
• use of information protection tools (antivirus software, firewalls);
• assessment of possible harm to data subjects in case of violations;
• internal monitoring of compliance with personal data processing requirements.
6.4. Retention periods.
Personal data is stored no longer than required for the purposes of its processing unless another
retention period is established by law or contract with the subject. After the purposes of
processing have been achieved or consent has been withdrawn, the data shall be destroyed in
accordance with the Law.
6.5. Transfer of data to third parties.
The Operator may transfer personal data to third parties (for example, courier services or
partners involved in organizing events) only in the following cases:
• the subject has given consent to such transfer;
• the transfer is necessary for the performance of a contract with the subject;
• the transfer is required by the legislation of the Republic of Uzbekistan.
Third parties receiving access to personal data are obliged to ensure its confidentiality and
security.
6.6. Cross-border transfer.
Cross-border transfer of personal data to countries that do not provide adequate protection of the
rights of personal data subjects is carried out only with the written consent of the subject or in
other cases provided for by Article 15 of the Law.

7. Rights of the Personal Data Subject
7.1. The personal data subject (user) has the right to:
• know about the existence and composition of their personal data held by the Operator;
• receive information regarding the processing of their personal data (confirmation of processing,
purposes, methods, retention period, name of the Operator, composition of the data, information
about cross-border transfer, etc.);
• request correction or completion of personal data if it is inaccurate, outdated, or incomplete;
• request blocking or deletion of personal data if it is processed unlawfully, incomplete, outdated,
or if consent has been withdrawn;
• withdraw consent to personal data processing in the same form in which it was given.
Withdrawal of consent results in termination of processing and destruction of data unless further
processing is permitted by law;
• seek protection of their rights from the authorized state body (the State Personalization Center)
or in court.

8. Processing of Cookies and Technical Data
8.1. The Website may collect technical information using cookies and web analytics services (for
example, Yandex.Metrica and Google Analytics). This information is used to analyze user
behavior and improve the operation and content of the Website.
8.2. The user may disable cookies in their browser settings. However, this may result in incorrect
functioning of some Website features.
8.3. Technical data is processed on the basis of the Operator’s legitimate interest in improving
service quality and is not used to identify the user.

9. Contact Information and Request Procedure
9.1. All questions, suggestions, requests, and demands related to personal data processing,
including the exercise of data subject rights, may be sent to the Operator in the following ways:
• Email: info@maroontashkent.com
• Postal address:
100007, Tashkent city
Yashnabad district
Dustabad MFY
Makhtumkuli street, building 120
• Through the feedback form on the Website.
9.2. The request must contain information allowing the identification of the subject (full name,
contact details) as well as the essence of the request. The Operator undertakes to review the
request and provide a response within 10 (ten) days from the date of receipt unless otherwise
provided by law.

10. Final Provisions
10.1. This Policy is a publicly available document and must be published on the Operator’s
Website.
10.2. Compliance with the requirements of this Policy is monitored by people responsible for
organizing personal data processing within the Operator.
10.3. Liability for violation of personal data legislation is determined in accordance with the
legislation of the Republic of Uzbekistan
Our manager will contact you and clarify all the details.
Leave the information for the table reservation
Made on
Tilda