Privacy policy

1.1 This Privacy Policy for the collection and processing of personal data is drafted in accordance with the Civil Code of the Republic of Kazakhstan, the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”, the Law of the Republic of Kazakhstan “On Informatization”, and other relevant regulations. It defines the procedure for processing personal data and the security measures taken by KazFeltec LLP (hereinafter referred to as the “Operator”).

1.2 The Operator considers the observance of human and civil rights and freedoms in the collection and processing of personal data, including the protection of the right to privacy, personal and family secrets, to be its highest priority and a fundamental condition for its activities.

1.3 This Policy applies to all information that the Operator may receive about visitors of the website http://kazfeltec.com.

2.1 Automated processing of personal data – processing using computer technology.

2.2 Blocking of personal data – temporary suspension of collection, accumulation, modification, supplementation, distribution, depersonalization, and destruction of personal data.

2.3 Internet resource – information (text, graphic, audiovisual, or other formats) placed on a platform with the unique network address http://kazfeltec.com and operating on the Internet.

2.4 Personal data information system – an organized set of information and communication technologies, service personnel, and technical documentation intended for processing personal data.

2.5 Depersonalization of personal data – actions making it impossible to identify the subject from the data.

2.6 Processing of personal data – any actions aimed at collecting, storing, modifying, supplementing, using, distributing, depersonalizing, blocking, or destroying personal data.

2.7 Personal data – any information related to a specific or identifiable individual (user of the website http://kazfeltec.com), recorded on electronic, paper, or other material media.

2.8 User – any visitor of the website http://kazfeltec.com.

2.9 Distribution of personal data – any actions resulting in data being transmitted to third parties or disclosed to the public.

2.10 Cross-border transfer of personal data – the transfer of data to the territory of foreign states.

2.11 Destruction of personal data – actions resulting in the complete and irreversible deletion of personal data.

3.1 The Operator has the right to:

• receive reliable information and/or documents containing personal data from the subject, provided there is consent or other legal grounds;
• continue processing personal data without the subject’s consent, if permitted by law (Article 9 of the Law “On Personal Data”);
• collect and process personal data as stipulated by applicable laws and regulations;
• independently determine necessary and sufficient measures to fulfill legal obligations, unless otherwise specified by law.

3.2 The Operator is obliged to:

• take and comply with all necessary legal, organizational, and technical measures to protect personal data;
• comply with all relevant legislation of the Republic of Kazakhstan on personal data and their protection;
• provide, upon request, information to authorized bodies on methods and procedures for compliance;
• destroy personal data upon achieving the purpose of collection/processing or as required by law;
• provide proof of consent where required;
• provide, upon request, information to the subject within established timeframes;
• give reasoned responses in case of refusal to provide information;
• within one business day:
  • amend or supplement personal data or destroy them if correction is not possible;
  • block data if violations are reported;
  • destroy data if violations are confirmed;
  • remove block if no violation is found;
• provide the subject or their legal representative free access to their data;
• fulfill other duties as stipulated by law.

4.1 Personal data subjects have the right to:

• be informed whether the Operator or a third party holds their personal data;
• obtain confirmation of the existence, purpose, source, and methods of collection and processing;
• obtain a list of their personal data;
• obtain data processing timelines, including retention periods;
• request amendment or supplementation of their data (with supporting documentation);
• request blocking of their data if collection or processing is in violation of the law;
• request destruction of their data if collected or processed unlawfully, or in other cases as provided by law;
• withdraw consent for collection, processing, distribution, transfer to third parties, and cross-border transfer, except as otherwise provided by law;
• grant or deny consent for public distribution;
• seek protection of their rights and interests, including compensation for damages;
• exercise other rights granted by law.

4.2 Personal data subjects are required to provide their data in cases prescribed by law.

• Full name
• Email address
• Phone numbers
• Anonymized data (including cookies) collected via analytics tools (Yandex Metrica, Google Analytics, etc.)

5.5 All of the above are collectively referred to as “Personal Data” in this Policy.

5.6 The Operator does not collect or process special categories of personal data (race, ethnicity, political views, religious/philosophical beliefs, private life).

5.7 The distribution of personal data made public by the subject must be terminated at any time upon the subject’s request, which must include their full name, contact information, and a list of data to be excluded from processing. These data may only be processed by the Operator to whom the request was submitted.

5.8 Consent for public distribution is revoked upon the Operator’s receipt of such a request.

• Collection and processing must be lawful and fair;
• Limited to achieving specific, pre-defined, and legitimate purposes;
• Databases processed for incompatible purposes must not be combined;
• Only relevant data may be collected and processed;
• Content and scope must match the declared purposes, excessive processing is not allowed;
• Data must be accurate, sufficient, and up-to-date, with steps taken to delete or correct inaccurate/incomplete data;
• Data stored in an identifiable form no longer than necessary, and destroyed/anonymized when no longer needed unless otherwise required by law.

7.1 To provide access to services, information, and/or materials on the website http://kazfeltec.com.

7.2 The Operator may send notifications about new products, services, special offers, and events. The User may opt out by emailing info@kazfeltec.com with the subject “Opt-out of product and service updates and special offers.”

7.3 Anonymized data is used for user behavior statistics and to improve the website’s quality and content.

• Legislation of the Republic of Kazakhstan and other regulatory acts concerning personal data protection;
• User’s consent for data collection and processing.

8.2 The Operator collects and processes data only when the User voluntarily provides it through forms on the website or by email. By submitting data, the User agrees to this Policy.

8.3 The Operator processes anonymized data if permitted by the User’s browser settings (e.g., cookies and JavaScript enabled).

8.4 The subject voluntarily decides to provide and consent to processing their data.

9.1 Data is collected and processed with the subject’s consent.

9.2 Data may also be processed without consent in cases where the subject fails to fulfill legal obligations, or as otherwise prescribed by law.

10.1 Security is ensured through the implementation of legal, organizational, and technical measures in accordance with the legislation of the Republic of Kazakhstan.

10.2 The Operator maintains confidentiality and integrity of personal data and prevents unauthorized access.

10.3 Data is never transferred to third parties, except as required by law or with explicit consent.

10.4 Users may update their data by emailing info@kazfeltec.com with the subject “Personal Data Update.”

10.5 The period for processing is defined by the purposes for which it was collected, unless otherwise specified by law or consent. Users may withdraw consent by notifying the Operator at info@kazfeltec.com with the subject “Withdrawal of Consent for Personal Data Processing.”

10.6 Third-party service providers process data in accordance with their own terms and policies; the Operator is not responsible for their actions.

10.7 Restrictions by the data subject do not apply if processing is in the public interest as prescribed by law.

10.8 Confidentiality is maintained throughout processing.

10.9 Data is stored no longer than necessary for the purposes of processing, unless otherwise required by law.

10.10 Processing is terminated when:

• purposes have been achieved;
• consent expires or is withdrawn;
• unlawful processing is identified.

11.1 The Operator performs: collection, recording, systematization, accumulation, storage, updating, retrieval, use, distribution, depersonalization, blocking, and destruction of personal data.

11.2 Automated processing may be performed with or without the transmission or receipt of information via telecommunication networks.

12.1 The Operator ensures that the recipient country provides reliable protection for data subjects before transferring data abroad.

12.2 Transfers to countries without such protection are permitted only with explicit consent of the subject.

13.1 The Operator and other persons with access to personal data must not disclose or distribute it to third parties without consent, unless otherwise required by law.

14.1 Users may request clarification regarding the collection and processing of their personal data by contacting the Operator at info@kazfeltec.com.

14.2 Amendments to this Policy will be reflected in this document. The Policy remains effective until replaced by a new version.

14.3 The current version is available online at http://kazfeltec.com.