Personal Data Processing Policy

1. General Provisions

This policy on personal data processing is drawn up in accordance with Article 387 of the Civil Code of the Republic of Kazakhstan, based on the Law of the Republic of Kazakhstan "On Personal Data and Their Protection," and defines the procedure for processing personal data and measures to ensure the security of personal data by the Limited Liability Company "KazArStroy" (hereinafter referred to as the "Operator").

• The Operator sets compliance with the rights and freedoms of individuals as its primary goal and condition for carrying out its activities, including the protection of the right to privacy, personal and family secrets.
• This Operator's policy on the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors of the website https://www.yans.kz.

2. Key Terms Used in the Policy

• Automated processing of personal data - processing of personal data using computer technology;
• Blocking of personal data - temporary suspension of the processing of personal data (except in cases where processing is necessary to clarify personal data);
• Website - a combination of graphic and informational materials, as well as computer programs and databases that provide their accessibility on the Internet at the network address https://www.yans.kz;
• Information system of personal data - a combination of personal data contained in databases, as well as the information technologies and technical means that ensure their processing;
• De-identification of personal data - actions that make it impossible to determine the affiliation of personal data to a specific User or other subject of personal data without using additional information;
• Processing of personal data - any action (operation) or combination of actions (operations) performed with personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), de-identification, blocking, deletion, destruction of personal data;
• Operator - a government agency, municipal body, legal or natural person, independently or jointly with other persons, organizing and/or carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data subject to processing, and actions (operations) performed with personal data;
• Personal data - any information directly or indirectly related to a specific or identifiable User of the website https://www.yans.kz;
• User - any visitor of the website https://www.yans.kz;
• Provision of personal data - actions aimed at disclosing personal data to a specific person or a certain group of persons;
• Dissemination of personal data - any actions aimed at disclosing personal data to an indefinite circle of persons (transferring personal data) or making personal data available to an unlimited number of persons, including the publication of personal data in mass media, placement on information and telecommunication networks, or providing access to personal data in any other way;
• Cross-border transfer of personal data - the transfer of personal data to the territory of a foreign state to a foreign government authority, foreign individual, or foreign legal entity;
• Destruction of personal data - any actions that irreversibly destroy personal data with no possibility of further restoring the content of personal data in the information system of personal data and/or actions that destroy the material carriers of personal data.

3. The Operator may process the following User's personal data

• Surname, first name, patronymic;
• Email address;
• Phone numbers;
• Delivery address;
• Additionally, the website collects and processes de-identified data about visitors (including "cookie" files) using internet statistics services (Yandex.Metrica, Google Analytics, and others).
• The above-mentioned data, collectively referred to as Personal Data, are further described in this Policy.

Personal Data Processing Policy

1. General Provisions

This personal data processing policy is created in accordance with Article 387 of the Civil Code of the Republic of Kazakhstan and is based on the Law of the Republic of Kazakhstan "On Personal Data and Their Protection." It outlines the procedures for processing personal data and the measures taken to ensure the security of personal data by the Limited Liability Company "KazArStroy" (referred to as the "Operator" hereafter).

2. Key Terms Used in the Policy

• Automated processing of personal data - processing personal data using computer technology.
• Blocking of personal data - temporarily suspending the processing of personal data (except when processing is required to correct the personal data).
• Website - a combination of graphic and informational materials, computer programs, and databases accessible on the internet at the address https://www.yans.kz.
• Information system of personal data - a collection of personal data contained in databases, along with the information technologies and technical means used for their processing.
• De-identification of personal data - actions that make it impossible to determine the association of personal data with a specific user or subject without additional information.
• Processing of personal data - any action or combination of actions performed with personal data, including collection, recording, storage, use, transfer, de-identification, blocking, deletion, and destruction of personal data.
• Operator - a government agency, municipality, legal or natural person, or any entity organizing and/or carrying out personal data processing.
• Personal data - any information directly or indirectly related to a specific or identifiable user of the website https://www.yans.kz.
• User - any visitor of the website https://www.yans.kz.
• Provision of personal data - actions aimed at disclosing personal data to specific individuals or groups of individuals.
• Dissemination of personal data - actions aimed at disclosing personal data to an indefinite number of individuals or making it available to the public.
• Cross-border transfer of personal data - the transfer of personal data to a foreign country's territory or foreign individuals/entities.
• Destruction of personal data - actions that irreversibly destroy personal data, making it impossible to restore them.

3. The Operator may process the following personal data of Users

• Last name, first name, patronymic;
• Email address;
• Phone numbers;
• Delivery address;
• In addition, the website collects and processes de-identified data about visitors, including "cookie" files, using internet statistics services such as Yandex.Metrica and Google Analytics.
• The above-mentioned data, collectively referred to as Personal Data, are further described in this Policy.

4. Purposes of Personal Data Processing

• The purpose of processing User's personal data is to conclude, execute, and terminate civil contracts, provide Users with access to services, information, and/or materials available on the website.
• The Operator also has the right to send Users notifications about new products and services, special offers, and various events. Users can always opt out of receiving such notifications by sending a request to the Operator's email address sales@yans.kz with the subject "Unsubscribe from notifications about new products, services, and special offers."
• The de-identified data collected through internet statistics services is used to gather information about Users' actions on the website, improve the website's quality, and enhance its content.

5. Legal Basis for Personal Data Processing

• The Operator processes Users' personal data only if it is provided and/or submitted by Users themselves through special forms on the website https://www.yans.kz. By filling out the corresponding forms and/or submitting their personal data to the Operator, Users express their consent to this Policy.
• The Operator processes de-identified data about Users if it is permitted by the User's browser settings (e.g., enabling the storage of "cookie" files and the use of JavaScript technology).

6. Procedure for Collecting, Storing, Transferring, and Other Types of Personal Data Processing

The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of the current legislation on personal data protection.

• The Operator ensures the security of personal data and takes all possible measures to prevent unauthorized access to personal data.
• User's personal data will never be transferred to third parties under any circumstances, except cases related to the execution of applicable legislation.
• In case of inaccuracies in personal data, Users can update them independently by sending a notification to the Operator's email address sales@yans.kz with the subject "Updating personal data."
• The processing period for personal data is unlimited. Users can revoke their consent to the processing of personal data at any time by sending a notification to the Operator via email at the Operator's email address sales@yans.kz with the subject "Revoking consent to the processing of personal data."

7. Transborder Transfer of Personal Data

• Prior to the commencement of cross-border transfer of personal data, the Operator must ensure that the foreign country, to which the transfer of personal data is intended, provides reliable protection of the rights of personal data subjects.
• Cross-border transfer of personal data to foreign countries that do not meet the above-mentioned requirements can be carried out only if the personal data subject provides written consent for the cross-border transfer of their personal data and/or the execution of a contract to which the personal data subject is a party.

8. Final Provisions

• Users can obtain any clarifications on matters concerning the processing of their personal data by contacting the Operator via email at sales@yans.kz.
• Any changes to the Operator's personal data processing policy will be reflected in this document. The policy is valid indefinitely until it is replaced by a new version.
• The current version of the Policy is freely available on the internet at the address https://www.yans.kz/policy.