Privacy Policy Regarding the Processing of Personal Data1. General ProvisionsThis privacy policy for the processing of personal data has been prepared in accordance with the requirements of the Federal Law of July 27, 2006, No. 152-FZ "On Personal Data" (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and measures taken by LLP GEOTECHNIX (hereinafter referred to as the Operator) to ensure the security of personal data.
1.1. The Operator considers the observance of human and citizen rights and freedoms in the processing of personal data as its primary goal, including the right to privacy, personal and family secrets.
1.2. This Operator's policy on the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the website [https://geotechnix.kz](https://geotechnix.kz).
2. Key Terms Used in the Policy2.1. Automated processing of personal data: processing of personal data using computing technology.
2.2. Blocking of personal data: temporary cessation of the processing of personal data (except in cases where processing is required to clarify personal data).
2.3. Website: a collection of graphic and informational materials, as well as software and databases, ensuring their availability on the internet at the address [https://geotechnix.kz](https://geotechnix.kz).
2.4. Information system of personal data: a collection of personal data contained in databases and the use of information technologies and technical means to process them.
2.5. Anonymization of personal data: actions resulting in the inability to determine, without additional information, the affiliation of personal data to a specific User or other personal data subject.
2.6. Processing of personal data: any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.
2.7. Operator: a state body, municipal body, legal entity, or individual that organizes and/or carries out personal data processing, either alone or together with other entities, and determines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal data: any information directly or indirectly related to a specific or identifiable User of the website [https://geotechnix.kz](https://geotechnix.kz).
2.9. Personal data permitted for dissemination by the data subject: personal data that the subject has made available to an unlimited number of people by providing consent for its processing for dissemination purposes, as outlined in the Personal Data Law.
2.10. User: any visitor to the website [https://geotechnix.kz](https://geotechnix.kz).
2.11. Provision of personal data: actions aimed at disclosing personal data to a specific person or group of persons.
2.12. Distribution of personal data: any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or familiarizing an unlimited group of persons with personal data, including publication in mass media, placement in information and telecommunications networks, or providing access to personal data in any other way.
2.13. Cross-border transfer of personal data: the transfer of personal data to the territory of a foreign country, to a foreign governmental authority, a foreign individual, or a foreign legal entity.
2.14. Destruction of personal data: any actions that result in the irreversible destruction of personal data, making it impossible to restore the content of personal data in the personal data information system, and/or the destruction of physical media containing personal data.
3. Operator's Main Rights and Obligations3.1. The Operator has the right to:
- Obtain accurate information and/or documents from the data subject containing personal data;
- Continue processing personal data without the consent of the data subject if such processing is required by law;
- Independently determine the composition and list of measures necessary and sufficient to ensure compliance with obligations stipulated by the Personal Data Law, unless otherwise provided by the law or other federal laws.
3.2. The Operator is obligated to:
- Provide information regarding the processing of personal data at the request of the data subject;
- Organize the processing of personal data in accordance with current Russian legislation;
- Respond to requests and inquiries from data subjects in accordance with the Personal Data Law;
- Provide necessary information to the authorized body for the protection of personal data subjects within ten days of receiving a request;
- Publish and ensure unlimited access to this Policy regarding the processing of personal data;
- Take legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, modification, blocking, copying, provision, dissemination, and other unlawful actions;
- Terminate the transmission and/or processing of personal data and destroy it in accordance with the law.
4. Key Rights and Obligations of Personal Data Subjects4.1. Personal data subjects have the right to:
- Obtain information regarding the processing of their personal data, except as required by federal law;
- Demand the Operator to clarify, block, or destroy their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
- Withdraw consent for the processing of personal data at any time;
- Complain to the authorized body for the protection of personal data rights or to a court against unlawful actions or inactions by the Operator;
- Exercise other rights granted by Russian law.
4.2. Personal data subjects are obligated to:
- Provide accurate personal data;
- Notify the Operator of any updates or changes to their personal data.
5. Principles of Personal Data Processing5.1. Personal data processing is conducted legally and fairly.
5.2. The processing is limited to specific, predefined, and legitimate purposes. Personal data cannot be processed in ways incompatible with the purpose of collection.
6. Purposes of Personal Data ProcessingThe primary purpose of processing personal data is to provide Users with access to the services, information, and materials available on the website. Personal data includes names, email addresses, and phone numbers. Legal grounds for processing include the Law of Kazakhstan on Informatization No. 418-V ZRK. The types of personal data processing include collection, recording, organization, storage, anonymization, and destruction.
7. Conditions for Personal Data Processing7.1. Processing is based on the User's consent for processing personal data.
7.2. Processing is necessary to fulfill the obligations imposed by law.
8. Collection, Storage, and Transmission of Personal Data8.1. The Operator ensures the confidentiality and security of personal data and excludes unauthorized access to it.
8.2. Personal data will not be transferred to third parties, except as required by law or with the User's consent.
9. Actions Performed by the Operator with Personal DataThe Operator performs actions such as collection, recording, organization, accumulation, storage, updating, use, and deletion of personal data.
10. Cross-Border Data TransferBefore engaging in cross-border data transfers, the Operator must notify the relevant authorities and obtain information from the foreign recipients.
11. Confidentiality of Personal DataThe Operator and other persons who gain access to personal data are prohibited from disclosing it without the User's consent unless otherwise required by law.
12. Final ProvisionsUsers may contact the Operator via email at info@geotechnix.kz for any clarifications. The current version of the Policy is available online at [https://geotechnix.kz/privacyru](https://geotechnix.kz/privacyru).