A lock on a cable above water

Personal Data Processing Policy

1. General Provisions

This Personal Data Processing Policy (the “Policy”) regulates the procedure for collecting, using, storing and protecting personal data of users of the Baytaq party website in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” No. 94-V dated 21.05.2013 and related regulations.

The Baytaq party (the “Operator”) ensures the protection of human rights and freedoms during personal data processing and takes the necessary organizational and technical measures.

2. Categories of Processed Data

We may process the following categories of data:

•⁠ ⁠First name and last name •⁠ ⁠Phone number •⁠ ⁠Email address •⁠ ⁠City of residence •⁠ ⁠Data specified by the user when completing forms (requests, subscription, registration) •⁠ ⁠Technical data: IP address, cookies, information about actions on the website

3. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

•⁠ ⁠Responding to citizens' requests •⁠ ⁠Subscription to information newsletters •⁠ ⁠User registration on the website •⁠ ⁠Informing users about party activities •⁠ ⁠Improving the quality of the website and its services •⁠ ⁠Compliance with the requirements of the legislation of the Republic of Kazakhstan

4. Legal Grounds for Processing

The Operator processes personal data on the basis of:

•⁠ ⁠Consent of the personal data subject •⁠ ⁠Legislation of the Republic of Kazakhstan •⁠ ⁠The statutory activities of the party

5. Data Storage in the Republic of Kazakhstan

In accordance with the legislation of the Republic of Kazakhstan, the collection, processing and storage of personal data collected through the website are carried out on servers located in the territory of the Republic of Kazakhstan.

6. Transfer of Personal Data to Third Parties

The Operator may transfer data to:

•⁠ ⁠Authorized government bodies upon their official request •⁠ ⁠Technical contractors (hosting, email newsletters) that ensure operation of the website

Data is transferred only within lawful grounds and subject to confidentiality.

7. Cross-border Data Transfer

Cross-border transfer may be carried out only with the consent of the personal data subject and provided that the recipient country ensures an appropriate level of protection.

8. Storage Periods

Personal data is stored no longer than required to achieve the processing purposes or until the data subject withdraws consent. After the storage period expires, the data is destroyed.

9. Rights of the Personal Data Subject

The user has the right to:

•⁠ ⁠Receive information about their data •⁠ ⁠Request correction, update, blocking or destruction of their data •⁠ ⁠Withdraw consent to data processing •⁠ ⁠Request clarification about processing

A request may be sent to the Operator using the contacts indicated below.

10. Personal Data Protection Measures

The Operator takes organizational and technical measures in accordance with legal requirements, including:

•⁠ ⁠Restricting access to data •⁠ ⁠Protecting servers and communication channels •⁠ ⁠Regular monitoring of compliance with personal data processing rules

In the event of a security incident, the Operator is obliged to notify the authorized body of the Republic of Kazakhstan in the manner established by law.

11. Person Responsible for Personal Data Processing

The Operator appoints an employee responsible for organizing work on personal data protection. The contact for requests is indicated below.

12. Consent to Personal Data Processing

By submitting data through website forms, the user confirms that they have read this Policy and consent to the processing of their personal data.

13. Operator Contacts

For questions related to personal data, you can contact:

•⁠ ⁠Email: info@baitaq.kz •⁠ ⁠Operator: Baytaq party