Ostrov home · Privacy Policy · Terms of Service · Data Deletion

Privacy Policy

Ostrov
Last updated: 13 October 2026

This policy explains how Ostrov handles personal information when you use ostrov.center, contact our team, request our services, or use an Ostrov application connected to Facebook or Instagram. Please also read our Terms of Service and Data Deletion Instructions.

Who is responsible

The operator is Limited Liability Company “Center for Development and Creativity ‘Ostrov’” (registered Russian name: ООО «Центр развития и творчества „Остров“»), OGRN 1217800035089, tax identification number (INN) 7814787527.

Registered address: Building 532, Quarter 0010142, Lakhdenpokhsky District, Republic of Karelia, 186700, Russian Federation.

For privacy questions and requests, contact persdata@ostrov.center.

Information you provide

We process information you choose to provide, such as your name, email address, telephone number, messenger contact, enquiry, preferred dates, group composition and accommodation preferences. If you create an account or arrange a stay, we also process account information, requests, booking details and the guest-registration information needed for that service. Where necessary for guest registration, this can include dates of birth and identity-document details provided by the guest or an authorised representative.

Please provide only information relevant to your request. Do not send passwords, access tokens, payment-card details or copies of identity documents in public comments or social-network messages.

Facebook and Instagram information

If you interact with an official Ostrov account, we may receive your platform identifier, username or display name, and the messages, comments or other content you send to us. Information available through a connected application depends on the permissions and features authorised in Meta. We use that information only to provide the connected feature, manage the relevant interaction and respond to your request. We do not request your Facebook or Instagram password.

Connecting or removing an app is managed through Meta's own settings. Removing access does not, by itself, delete information already held by Ostrov. To request its deletion, follow our Data Deletion Instructions. Meta separately processes information under its own policies.

Website and technical information

Our website processes technical information such as IP addresses, browser and device information, request times, security logs and activity on website pages. Cookies and similar technologies support website functions, account sessions and usage measurement. The website uses Google Analytics, Yandex Metrica (including session-replay features) and Meta Pixel for usage and interaction measurement. These providers process information under their own policies; technical and usage information may be transmitted to them.

You can manage cookies in your browser and use the available privacy controls of the relevant provider. Restricting cookies can affect account and website functionality.

AI-assisted website chat

Messages submitted through the website chat are processed by an AI assistant. To provide a response, message text is transmitted to third-party AI service providers, including providers outside the Russian Federation. Copies of the conversation are available to the centre's administration. Do not submit information that you do not want processed in this way.

Website chat history is kept for 30 days and then deleted; backup copies are removed within the following 30 days. This chat-specific period does not replace separate retention requirements for a booking or another record that you ask us to create.

Why we use information

  • To answer enquiries and communicate about the service you requested.
  • To prepare calculations, process applications, arrange stays and maintain guest and account records.
  • To operate authorised social-media features and manage interactions with our official accounts.
  • To maintain security, prevent misuse and investigate technical problems.
  • To understand website use and improve our services.
  • To meet applicable legal, accounting and record-keeping obligations.

Where required, we obtain consent. We also process information where needed to take steps at your request, perform an agreement, meet a legal obligation, or pursue a lawful interest, subject to applicable law. Marketing messages are subject to the applicable consent and opt-out requirements; you can ask us to stop them.

Who may receive information

Authorised team members and service providers may process information needed for their work, including hosting, communications, email, document storage, analytics and technical support. We may provide information to authorities where legally required, or to another party at your request or with an appropriate legal basis.

Services used by Ostrov can process information in countries other than yours. Any transfer of personal information is subject to applicable requirements and safeguards. Internal guest records are not public website content.

Retention and security

We keep information for the period needed for the purpose for which it was collected, to provide the requested service and to meet applicable obligations. Retention depends on the type of record; booking, accounting or dispute-related records may need to be kept after an account or app connection is removed.

We use access restrictions and other organisational and technical measures to protect information. No method of storage or transmission is completely secure.

Your choices and requests

You can contact persdata@ostrov.center to request access, correction or deletion of your information, withdraw consent, or raise a privacy concern. Other rights, including restriction, objection, portability or a complaint to a competent authority, may apply depending on the relevant law.

We may need proportionate information to verify that you are entitled to make a request. We will explain if any information must be retained and the reason. Withdrawing consent does not affect processing already lawfully carried out or retention required on another legal basis.

Children and representatives

Guest information about children should be provided by their parent, guardian or other authorised representative as appropriate. Social-platform accounts remain subject to the platform's own age requirements. Contact us if you believe a child's information has been provided without appropriate authority.

Updates

We may update this policy when our services or data practices change. The current version and its date are published on this page.

Спланировать поездку на «Остров»