This is an English translation of our Russian-language document. In case of any discrepancy, the Russian version prevails: norvel.travel/privacy

Legal

Personal data processing policy

1. General provisions

This Privacy Policy (the “Policy”) describes how information obtained from users of the website norvel.travel (the “Website”) is collected, used, stored and disclosed. The Policy has been drawn up in accordance with Federal Law No. 152-FZ of July 27, 2006 “On Personal Data”.

Data submitted through the Website’s forms is processed only with the User’s separate consent: the User ticks the checkbox in the form, and the text of the consent is published on the page “Consent to the processing of personal data”.

2. Personal data operator

Individual Entrepreneur Alexey Mikhailovich Kholzakov
INN 290130120277, OGRNIP 310290104100061
Address: Arkhangelsk, 16 Voskresenskaya St., 2nd floor
Email: booking@norvel.travel
Phone: +7 909 555-03-55

3. What data we collect

Data from an inquiry: name, phone number, the selected trip, number of guests, preferred dates—the User provides these personally in a form on the Website. If the User writes to us by email or in a messenger app—the email address or the messenger username.
When a trip is arranged (separately, when the contract is concluded): surname, first name, patronymic, date of birth and passport details of the guests, including children—these are provided by their parents or legal representatives; for hunting—the details of the hunting license and the firearms permit. This data is required for the contract, border-zone permits and fishing or hunting licenses.
Technical data: IP address, browser type and version, operating system, date and time of access to the Website, cookie data.
Activity data: information about the pages viewed and navigation paths on the Website.

4. Purposes of processing

Processing inquiries and booking trips;
Communicating with the User regarding the provision of services;
Obtaining the border-zone permits, licenses and authorizations required for the trip;
Improving the operation of the Website;
Performing obligations arising from contractual relations.

5. Legal basis for processing

Personal data is processed on the following grounds:

the User’s consent to the processing of personal data;
the need to perform a contract to which the User is a party;
the need to protect the legitimate interests of the operator.

6. Cookies

The Website uses cookies to ensure its proper operation, analyze traffic and personalize content. Cookies are small files placed on the User’s device. The User may configure the browser to refuse cookies; however, this may affect the operation of the Website.

Necessary cookies—ensure the basic operation of the Website;
Analytics cookies (Yandex Metrica, including Webvisor, which records actions on the page: scrolling and clicks)—collect anonymized information about visits in order to improve the Website; on the first visit, the Website displays a notice about this;
Functional cookies—remember the User’s settings and preferences.

7. Transfer to third parties

Personal data may be transferred to third parties only in the following cases:

with the User’s explicit consent;
as required by the legislation of the Russian Federation;
to parties that help process the inquiry and provide the service: the VK WorkMail email service (VK LLC), the Yandex Metrica service (Yandex LLC), the Google Sheets service (Google LLC)—for a backup copy of inquiries; and, when a trip is arranged, to the border authorities of the Federal Security Service of the Russian Federation (FSB of Russia) (permits) and to the bodies that issue fishing and hunting licenses.

8. Storage and protection of data

Personal data is stored on secure servers and processed using technical and organizational measures that ensure protection against unauthorized access, copying, modification or destruction. Data is stored no longer than the purposes of processing require, or until the User withdraws consent.

9. User’s rights

To receive information about their personal data processed by the operator;
To demand that their personal data be clarified, blocked or destroyed;
To withdraw consent to the processing of personal data;
To appeal against actions or inaction of the operator to the authorized body for the protection of the rights of personal data subjects (Roskomnadzor) or in court.

10. Cross-border transfer of data

Inquiries from the Website are stored and processed on servers in the Russian Federation. To ensure that an inquiry is not lost if the Website fails, a copy of it (name, phone number, the selected trip, number of guests, preferred dates, the page and the advertising tag from which the User arrived) is saved in a spreadsheet in the Google Sheets service (Google LLC, USA); only the Operator has access to the spreadsheet, and copies are deleted together with the inquiry. Staff members receive notifications of new inquiries (name, phone number, the selected trip), among other channels, through the Telegram messenger, whose servers may be located outside the Russian Federation. If the User writes to us on Telegram or WhatsApp on their own initiative, the correspondence passes through the servers of these services under their rules.

11. Minors

The forms on the Website are completed by adults. The Operator receives the data of children traveling on a trip only from their parents or legal representatives, and only for the contract and the permits. If it becomes known that the data of a minor has been obtained without parental consent, it will be deleted as soon as possible.

12. Changes to the Policy

The Operator may amend this Policy without prior notice to the User. The new version takes effect from the moment it is posted on the Website.

13. Contact information

For any questions related to the processing of personal data, please contact the operator: Individual Entrepreneur Alexey Mikhailovich Kholzakov, booking@norvel.travel, +7 909 555-03-55.

Last updated: November 3, 2026