Personal Data Processing Policy of the “Baitaq” Party (Kazakhstan)

  1. General Provisions

This Personal Data Processing Policy (hereinafter – the “Policy”) regulates the procedure for collecting, using, storing, and protecting personal data collected through the website of the “Baitaq” Party in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” No. 94-V dated May 21, 2013, and related regulatory acts.

The “Baitaq” Party (hereinafter – the Operator) ensures the protection of the rights and freedoms of individuals when processing personal data and takes necessary organizational and technical measures.

  1. Types of Personal Data Processed

We may process the following categories of personal data:

First and last name

Phone number

Email address

City of residence

Information provided in web forms (requests, subscriptions, registrations)

Technical information: IP address, cookies, activity data on the website

  1. Purposes of Processing Personal Data

Personal data may be processed for the following purposes:

Responding to citizen requests

Subscription to informational newsletters

User registration on the website

Informing about party activities

Improving the quality of the website and its services

Compliance with the laws of the Republic of Kazakhstan

  1. Legal Grounds for Processing

The Operator processes personal data based on:

Consent of the personal data subject

Applicable laws of the Republic of Kazakhstan

Statutory activities of the Party

  1. Storage of Data within the Territory of the Republic of Kazakhstan

In accordance with Kazakhstani legislation, collection, processing, and storage of personal data gathered through the website are carried out on servers located within the territory of the Republic of Kazakhstan.

  1. Transfer of Personal Data to Third Parties

The Operator may transfer data:

To authorized state bodies upon official request

To technical contractors (hosting providers, mailing services) supporting the website’s functionality

Data transfer is carried out only within the legal framework and subject to confidentiality obligations.

  1. Cross-Border Data Transfer

Cross-border data transfer may only be performed with the consent of the personal data subject and provided that the recipient country ensures an adequate level of data protection.

  1. Data Retention Period

Personal data shall not be retained longer than necessary to achieve the purposes of processing, or until the personal data subject withdraws consent. After the retention period expires, the data shall be destroyed.

  1. Rights of the Personal Data Subject

Users have the right to:

Obtain information regarding their personal data

Request correction, updating, blocking, or deletion of their data

Withdraw consent for data processing

Request clarification regarding data processing practices

Requests may be submitted to the Operator using the contact information provided below.

  1. Measures for Personal Data Protection

The Operator takes organizational and technical measures in accordance with legislation, including:

Restricting access to personal data

Ensuring protection of servers and communication channels

Regular monitoring of compliance with personal data processing rules

In the event of a security incident, the Operator must notify the authorized state body of the Republic of Kazakhstan as required by law.

  1. Person Responsible for Personal Data Protection

The Operator appoints an authorized employee responsible for organizing work related to personal data protection. Contact details are provided below.

  1. Consent to Personal Data Processing

By submitting data through website forms, the user confirms that they have read this Policy and consent to the processing of their personal data.

  1. Operator Contact Information

For all questions related to personal data, you may contact:

Email: info@baitaq.kz

Operator: “Baitaq” Party