Privacy Policy#

1. GENERAL PROVISIONS#

Almaty
05.04.2024

1.1. This Privacy Policy (hereinafter – the "Policy") defines the procedure for processing and protecting personal data of users of the website up-rate.kz (hereinafter – the "Site"), as well as other information resources administered by Limited Liability Partnership "Ap Rate" (hereinafter – "Ap Rate" LLP, the "Provider", the "Operator").

1.2. Use of the Site means the User's unconditional consent to this Policy and the terms of processing their personal information stated herein.

1.3. If the User does not agree with the terms of the Policy, the User must stop using the Site.

1.4. This Policy applies only to the Site. The Operator does not control and is not responsible for third-party websites to which the User may follow links available on the Site.

1.5. The Site administration does not verify the accuracy of personal data provided by the User of the Site.

2. DEFINITIONS#

2.1. Personal data – any information relating to a directly or indirectly identified or identifiable individual (the subject of personal data).

2.2. Processing of personal data – any action or set of actions performed on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2.3. User – a person who has access to the Site via the Internet and uses the Site.

2.4. Cookies – small text files placed on the User's device when visiting a website that allow the Site to remember the User's actions and settings.

2.5. IP address – a unique network address of a node in a computer network built on the IP protocol.

3. PURPOSES OF COLLECTION AND PROCESSING OF PERSONAL DATA#

3.1. The Operator processes Users' personal data for the following purposes:

3.1.1. Providing online reputation management services;

3.1.2. Processing Users' applications and requests;

3.1.3. Communicating with the User, including sending notices, requests, and information related to the use of the Site and the provision of services, as well as processing requests and applications from the User;

3.1.4. Improving the quality of the Site, the convenience of its use, and developing new services;

3.1.5. Conducting statistical and other research based on depersonalized data;

3.1.6. Ensuring Site security and preventing fraud;

3.1.7. Complying with the requirements of the legislation of the Republic of Kazakhstan.

4. PERSONAL DATA SUBJECT TO PROCESSING#

4.1. The Operator may process the following personal data of Users:

4.1.1. Surname, name, patronymic;

4.1.2. Phone number;

4.1.3. Email address;

4.1.4. Location data (address);

4.1.5. Organization data (name, BIN/IIN, address);

4.1.6. Logins and passwords for accounts on internet resources (provided by the User voluntarily for service delivery);

4.1.7. Technical data: IP address, browser type, operating system, data about visited pages, visit time, referrer (address of the previous page);

4.1.8. Other information provided by the User when filling out forms on the Site or in correspondence.

5. METHODS AND TERMS OF PERSONAL DATA PROCESSING#

5.1. Processing of the User's personal data is carried out using automation tools and without using such tools.

5.2. The Operator undertakes to use personal data in accordance with the law of the Republic of Kazakhstan on personal data and other regulatory legal acts of the Republic of Kazakhstan.

5.3. The Operator ensures the safety of personal data and takes all possible measures that prevent access to personal data by unauthorized persons.

5.4. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with the applicable legislation of the Republic of Kazakhstan.

5.5. The term of personal data processing is determined by the achievement of the purposes of personal data processing unless another term is provided by the agreement or applicable law.

5.6. Upon expiration of the processing term, personal data shall be destroyed or depersonalized unless otherwise provided by the legislation of the Republic of Kazakhstan.

6. MEASURES FOR PROTECTING PERSONAL DATA#

6.1. The Operator takes necessary legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, modification, blocking, copying, provision, distribution, and other unlawful actions.

6.2. Such measures include:

6.2.1. Appointment of responsible persons for organizing personal data processing;

6.2.2. Restricting access to personal data and establishing an access procedure;

6.2.3. Monitoring measures taken to ensure the security of personal data;

6.2.4. Detecting unauthorized access to personal data and taking measures;

6.2.5. Restoring personal data modified or destroyed as a result of unauthorized access to them;

6.2.6. Using information security tools that have passed conformity assessment.

7. RIGHTS OF PERSONAL DATA SUBJECTS#

7.1. The User has the right to obtain information related to the processing of their personal data, including:

7.1.1. Confirmation of the fact that the Operator processes personal data;

7.1.2. Legal grounds and purposes of personal data processing;

7.1.3. Methods of personal data processing used by the Operator;

7.1.4. Terms of personal data processing, including storage periods;

7.1.5. Other information provided by the legislation of the Republic of Kazakhstan.

7.2. The User has the right to require the Operator to clarify, block, or destroy their personal data if the personal data are incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing.

7.3. The User has the right to withdraw consent to the processing of personal data by sending the Operator a relevant notice.

7.4. The User has the right to appeal the actions or inaction of the Operator to the authorized body for protection of personal data subjects' rights or in court.

8. USE OF COOKIES AND TRACKING TECHNOLOGIES#

8.1. The Site uses "cookies" technology to personalize content and for User convenience.

8.2. Cookies are small text files placed on the User's device when visiting a website.

8.3. The Site uses the following types of cookies:

8.3.1. Necessary cookies – ensure the operation of the core functions of the Site;

8.3.2. Functional cookies – remember the User's choices and improve Site functionality;

8.3.3. Analytics cookies – help understand how Users interact with the Site by collecting and reporting information anonymously.

8.4. The User can configure their browser to refuse cookies or to notify when such files are sent. However, in this case some Site functions may not work properly.

8.5. The Site may use web analytics services to collect information about visits to the Site. The collected information is used to improve the operation of the Site.

9. PROCESSING OF PERSONAL DATA OF MINORS#

9.1. The Site is not intended for persons under 18 years of age.

9.2. The Operator does not intentionally collect personal data of minors.

9.3. If the Operator learns that personal data of a minor were collected without the consent of parents or legal representatives, the Operator will take measures to delete such information.

10. TRANSFER OF PERSONAL DATA TO THIRD PARTIES#

10.1. The Operator does not transfer personal data to third parties except in the following cases:

10.1.1. The User has given consent for such actions;

10.1.2. The transfer is provided for by the legislation of the Republic of Kazakhstan in accordance with the procedure established by law;

10.1.3. The transfer is necessary for the performance of an agreement to which the User is a party;

10.1.4. The transfer is necessary to protect the rights and legitimate interests of the Operator or third parties when there is a threat of violation of such rights and interests.

10.2. When transferring personal data to third parties, the Operator requires such persons to comply with confidentiality and personal data security.

11. CHANGES TO THE PRIVACY POLICY#

11.1. The Operator has the right to make changes to this Privacy Policy.

11.2. When changes are made, the date of the last update is indicated in the current version.

11.3. The new version of the Policy takes effect from the moment it is posted on the Site unless otherwise specified in the new version of the Policy.

11.4. Continued use of the Site after changes are made indicates the User's consent to the new version of the Policy.

12. CONTACT INFORMATION#

12.1. The User may send any proposals or questions regarding this Privacy Policy to the Operator:

12.1.1. By email: [email protected]

12.1.2. By phone: +7 700 441 78 28

12.1.3. By address: Kazakhstan, Almaty

12.2. The Operator undertakes to review and respond to the User's request within a period not exceeding 30 days from the date of receipt of the request.

13. FINAL PROVISIONS#

13.1. This Privacy Policy is drawn up in accordance with the legislation of the Republic of Kazakhstan, including:

13.1.1. The Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and Their Protection";

13.1.2. Other regulatory legal acts of the Republic of Kazakhstan governing issues of personal data processing and protection.

13.2. All relations between the User and the Operator related to personal data processing are governed by this Policy and the legislation of the Republic of Kazakhstan.

13.3. In case of disputes between the User and the Operator, they shall be resolved through negotiations, and if no agreement is reached, in court in accordance with the legislation of the Republic of Kazakhstan.

13.4. This Privacy Policy is drawn up in Russian. In case of disagreements in interpretation of the terms of this Policy, the Russian text shall prevail.

13.5. This Privacy Policy is an integral part of the Public Offer published on the Site.