This Privacy and Personal Data Processing Policy regulates the procedure for processing and use personal and other data on www.ayala.kz  website (hereinafter referred to as the Operator). The current version of this Privacy Policy is permanently available for review on the Internet at: www.ayala.kz

By providing personal and other data to the Operator via the Website, the User confirms his/her consent to the use of the said data on the terms and conditions set out in this Privacy Policy.

If the User does not agree with the terms of this Privacy Policy, he/she must stop using the Site.

Using the Site by the User means the unconditional acceptance of the User with this Privacy Policy.

1.TERMS AND DEFINITIONS

1.1. Site means a website located on the Internet at: www.ayala.kz

All exclusive rights to the Site and its individual elements (including software, design) belong to the Operator in full. Transfer of the exclusive rights to the User is not the subject of this Privacy Policy.

1.2. User means a person using the Site.

1.3. Legislation means the current legislation of the Republic of Kazakhstan.

1.4. Personal Data means personal data of the User which the User provides him/herself during registration on in the process of using the Site functions.

1.5. Data means other data about the User (not covered by the definition for Personal Data).

1.6. Registration means filling by the User of the Registration Form on the Site by entering requested data and sending scanned documents.

1.7. Registration Form means a form located on the Site the User must fill in in order to be able to use the Site in full.

1.8. Service(s) means services provided by the Operator on the basis of the Agreement.

2. PERSONAL DATA COLLECTING AND PROCESSING

2.1. The Operator collects and stores only those Personal Data that are necessary for the provision of Services by the Operator and interaction with the User.

2.2. Personal Data may be used for the following purposes:

2.2.1 provision of Services to the User;

2.2.2 Identification of the User;

2.2.3 Interaction with the User;

2.2.4 Sending advertising materials, information and requests to the User;

2.2.5 Conducting statistical and other surveys;

2.3. The data processed by the Operator include:

2.3.1 surname, first name and patronymic;

2.3.2 email address;

2.3.3 telephone number (including mobile).

2.4. The User is prohibited to indicate personal data of third parties on the Site (except when the User represents interests of such persons and has got the third party’s documentary confirmation for such actions.

3. PERSONAL AND OTHER DATA PROCESSING PROCEDURE

3.1. The Operator undertakes to use Personal Data in accordance with the Law On Personal Data of the Republic of Kazakhstan and the Operator’s internal documents.

3.2. The Personal Data and other Data of the User shall be kept confidential, except when the said data is publicly available.

3.3. The Operator has the right to retain an archive copy of Personal Data.

The Operator has the right to store Personal Data and Data on servers outside the Republic of Kazakhstan.

3.4. The Operator has the right to disclose Personal Data and Data of the User without the User’s consent to the following entities:

3.4.1 State bodies, including inquiry and investigation agencies, as well as local self-government bodies at their reasoned request;

3.4.2 in other cases expressly provided for by the current legislation of the Republic of Kazakhstan.

3.5. The Operator has the right to disclose Personal Data and Data to third parties not specified in clause 3.4. of this Privacy Policy in the following cases:

3.5.1 the User has expressed his/her consent to such actions;

3.5.2 transfer is necessary within the framework of the User’s use of the Website or provision of Services to the User

3.6. The Operator performs automated processing of Personal Data and Data.

4. PROTECTION OF PERSONAL DATA

4.1. The Operator shall ensure proper protection of Personal and other Data in accordance with the Legislation and take necessary and adequate organizational and technical measures to protect Personal Data.

4.2. The protection measures shall, among other things, ensure protection of Personal Data from unauthorized or accidental access, destruction, modification, blocking, copying, disclosure, distribution, and other illegal actions of third parties with respect to Personal Data.

5. MISCELLANEOUS

5.1. The law of the Republic of Kazakhstan shall apply to this Privacy Policy and relations between the User and the Operator arising in connection with this Privacy Policy.

5.2. All possible disputes arising out of this Agreement shall be resolved in accordance with the applicable legislation at the place of registration of the Operator.

Before applying to the court, the User must comply with the mandatory pre-trial procedure and send the respective claim to the Operator in writing. The period for responding to the claim shall be 30 (thirty) business days.

5.3. If, for any reason, one or more provisions of the Privacy Policy are declared invalid or unenforceable, this shall not affect the validity or applicability of the remaining provisions of the Privacy Policy.

5.4. The Operator has the right to change the Privacy Policy (in whole or in part) unilaterally at any time without prior agreement with the User. All changes shall become effective publication thereof on the Website.

5.5. The User undertakes to follow the changes in the Privacy Policy by reviewing the current version of the Privacy Policy.

5.6. All suggestions or questions regarding this Privacy Policy should be sent to the Operator by e-mail info@ayala.kz or by telephone on the following numbers: +77028083323, 87273276043.