Personal Data Collection & Processing Policy

APPROVED
By Order of the Director of Altay NTR LLP

1. General Provisions

Altay NTR Limited Liability Partnership (hereinafter referred to as the Partnership), located at: Office 120-124, building 15/109, 42 Timiryazev str, Almaty, 050013, Republic of Kazakhstan, prioritizes the security of personal data in its activities. All business processes in the Partnership are designed to ensure the safety of personal data.

This Personal Data Processing Policy (hereinafter referred to as the Policy) is developed in accordance with the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and Their Protection" (hereinafter referred to as the Law on Personal Data) and other regulatory acts of the Republic of Kazakhstan, defining the procedure for collecting and processing personal data and measures to ensure its security.

2. Subjects of Personal Data and List of Personal Data

The Partnership collects and processes personal data of the following categories of subjects:

2.1. Personal data of managers, employees, and representatives of legal entities and individual entrepreneurs:

  • last name, first name, patronymic;
  • email address;
  • mobile phone number.

2.2. Information about website visitors:

  • Technical data: operating system type, device type, browser type, geographical location.
  • Anonymized data collected via analytics tools (cookies, Google Analytics, etc.).

3. Purposes of Personal Data Processing

3.1. The Partnership processes personal data of counterparties for the following purposes:

  • execution of obligations to counterparties, feedback, sending notifications, requests, information messages to render services, and processing inquiries;
  • providing technical support on Partnership products and services;
  • evaluating and improving the quality of services and operation of the Partnership.

4. Periods of Personal Data Processing

4.1. Personal data processing is performed until the processing objectives are achieved or the consent period expires.

4.2. Personal data must be destroyed upon expiration of processing periods or termination of legal relationships, unless otherwise provided by law.

5. Principles of Collection, Processing, and Storage

5.1. Personal data collection and processing are carried out strictly with the consent of the subjects.

5.2. Personal data storage of citizens of the Republic of Kazakhstan is performed on servers physically located within the territory of the Republic of Kazakhstan.

Consent to Collection & Processing of Personal Data

I (hereinafter – the Subject), acting freely, of my own will and in my interest, give concrete, informed, and conscious consent to Altay NTR Limited Liability Partnership (hereinafter – the Partnership), located at: Office 120-124, building 15/109, 42 Timiryazev str, Almaty, 050013, Republic of Kazakhstan, to the collection and processing of my personal data, and confirm my acquaintance with the Personal Data Collection and Processing Policy.

This Consent applies to the following personal data:

  • last name, first name, patronymic;
  • email address;
  • mobile phone.

This Consent is granted for any actions regarding my personal data necessary to achieve the goals listed below, including: collection, storage, modification, use, distribution, and deletion, compliance with the requirements of the legislation of the Republic of Kazakhstan.

Consent to the processing of Personal Data is given by me for:

  • execution of Partnership obligations, feedback, queries, and technical support;
  • evaluation and improvement of service quality, stats and marketing analysis.

The consent can be revoked at any time by sending a written request to the postal address of the Partnership or an email to altayntr@altayntr.kz.