Privacy Policy

Privacy Policy

Site danangvisarun.com (Best Bus Vietnam)

Effective from August 25, 2026, version 1.0.

1. General

This Policy is drawn up in accordance with Federal Law No. 152-FZ “On Personal Data” of the Russian Federation (as amended by Federal Laws No. 23-FZ of 28.02.2025, No. 420-FZ of 30.05.2025, and No. 519-FZ of 28.12.2024, effective 01.07.2025, 30.05.2025, and 01.09.2025 respectively) and Federal Law No. 149-FZ “On Information, Information Technologies and Information Protection” — because the Operator is a citizen of the Russian Federation, and Russian law governs how the Operator handles personal data regardless of where a visitor is browsing from.

The Policy sets out how the Operator processes personal data collected through danangvisarun.com, the rights of data subjects, and the measures taken to protect the data.

Terms:

• Personal data — any information relating to a directly or indirectly identified or identifiable individual (a data subject).
• Operator — the individual who organizes and carries out the processing of personal data, and determines its purposes and scope.
• Processing — any action or set of actions performed with personal data, including collection, recording, systematization, accumulation, storage, clarification, use, transfer, anonymization, blocking, deletion, and destruction.
• Data subject — a person whose personal data is processed by the Operator (a site visitor, a lead-form applicant).
• Consent — a specific, informed, conscious, and unambiguous expression of will by the data subject.
• Cookie — small text files stored by the visitor’s browser when visiting the site.

2. About the Operator

• Full name: Иванов Сергей Анатольевич
• Status: private individual, citizen of the Russian Federation
• Operating address: Da Nang, Socialist Republic of Vietnam
• Email for personal-data questions: legal@vietnam-visa.ru (backup channel — krasty000@gmail.com)

The Operator is not registered as a sole proprietor or self-employed entity. Personal data is processed for purposes directly tied to running danangvisarun.com.

3. Legal basis for processing

The Operator processes personal data on the basis of:

1. The data subject’s consent — the primary channel.
2. Federal Law No. 152-FZ “On Personal Data” of the Russian Federation.
3. Federal Law No. 149-FZ “On Information, Information Technologies and Information Protection”.

Personal data submitted through the lead form on danangvisarun.com is collected only after the subject gives explicit consent, recorded as a separate document, “Consent to Personal Data Processing” (see /consent/).

4. Purposes of processing

The Operator processes personal data exclusively for:

• handling visa run and e-visa requests
• consultations on visa extension and border crossings
• arranging transport between Da Nang / Nha Trang and the Laos / Cambodia borders

Additionally, for anonymized visit statistics via Yandex Webmaster / Yandex Metrika (see section 8).

Personal data is not used for marketing mailouts, profiling, or transfer to third parties for advertising purposes. Any expansion of purposes requires new consent from the subject.

5. Categories of data subjects

• Visitors to danangvisarun.com who fill in the lead form.

6. Personal data collected

Through the lead form:

• Name (as entered by the visitor).
• Contact details (phone, Telegram username, or email — visitor’s choice).
• The message text.

Automatically when visiting the site:

• IP address.
• Browser type and version, operating system (User-Agent).
• Site analytics events (pages viewed, time on site) via Yandex Webmaster / Metrika.
• Referrer (the URL the visitor arrived from).

Biometric data and special categories of personal data (race, political views, health, religion, etc.) are never requested or processed.

7. Methods and retention period

Methods: collection, recording, systematization, accumulation, storage, clarification, use, transfer (in the cases described in section 8), anonymization, deletion.

Retention period: until the subject withdraws consent, but no longer than 3 (three) years from the last active contact with the subject or the last consent given — whichever comes first. After this period, personal data is deleted or anonymized.

The Operator does not use automated processing to make legally significant decisions about a subject.

8. Disclosure to third parties

The Operator discloses personal data to third parties only in the following cases:

Personal data is never disclosed to advertising networks, marketing platforms, or third-party CRM systems.

Cross-border transfer: none takes place. Although the Operator resides in the Socialist Republic of Vietnam, the Operator’s own access to the data from a device outside Russia does not constitute cross-border transfer, since the primary collection, recording, and storage of the data happen on servers located in Russia.

9. Rights of the data subject

The data subject has the right to:

1. Receive information about the Operator, and the purposes and methods of processing their personal data.
2. Request correction, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose.
3. Withdraw consent to processing at any time. To withdraw, email legal@vietnam-visa.ru with the subject line “Withdraw consent” and the contact details you used, so we can identify your record. The Operator must stop processing and delete the data within 30 days of receiving the withdrawal request, except where continued processing is required by law.
4. Appeal the Operator’s actions or omissions to the relevant data-protection authority or in court.
5. Be informed of a security incident that affected their personal data.

10. Protective measures

The Operator applies the following technical and organizational measures:

• Data transfer over HTTPS (TLS 1.2+) with an SSL certificate.
• Database access restricted by SSH key.
• Regular database backups.
• Access to personal data limited to the Operator only.
• Logging of changes and deletions to personal data.
• Anonymization of personal data in web-server logs (email and phone numbers masked).
• No third-party advertising scripts or trackers on the site.

11. Notification of security incidents

If an unlawful or accidental disclosure of personal data occurs that violates a subject’s rights, the Operator will:

• Notify the relevant authority within 24 hours of discovering the incident.
• Complete an internal investigation within 72 hours, establish the cause, and share the findings with the authority.

Affected subjects are informed through the contact channels they provided (email / phone / Telegram).

12. Changes to this Policy

The Operator may amend this Policy. The current version is always published at https://danangvisarun.com/privacy/.

For material changes (new purposes of processing, a new category of data, a new third-party recipient) the Operator will:

• Update the version number and date of the document.
• Post a notice on the site’s home page within 10 days.
• Request renewed consent from active subjects where necessary.

Document version: 1.0 Revision date: August 25, 2026 Contact for personal-data questions: legal@vietnam-visa.ru