Pro-buket.kz personal data privacy policy

01Terms and definitions

In the present Regulation, terms and definitions are used as follows:

1. Internet Service — a combination of software and hardware tools for computers that provide publication of information and data for public viewing, united by a common purpose, through technical means used to connect computers in the Internet network. The Service is available to Users via a unique electronic address or its alphabetical designation. In this Policy, the term "Service" refers to the Internet Service located in the Internet at the address – pro-buket.kz.

1. The Service Administration — representatives of the Service authorized by the Service Owner to manage the Service and control its operation in accordance with this Policy, as well as other documents regulating the relations between the Service Administration and the Service Users.

1. The Service User is an individual who uses the Service exclusively in a manner regulated by this Policy and other documents that govern the relationship between the User and the Service (the Service Administration).

1. Registration in the Service – the procedure of entering personal data of the User into a special form on the pages of the Service. As a result, the User becomes registered.

1. User personal data – any information relating to an identified or identifiable natural person (data subject) who uses the Service.

1. Processing of Users' Personal Data by the Service – any action (operation) or a combination of actions (operations) performed by the Service Administration using automated systems or without such means with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, removal, destruction of personal data of individuals who use the Service.

1. Service Cookies - a small fragment of data sent by an internet server and stored on the user's computer (any other device used to access the Service) which the web client or web browser resends to the internet server in each HTTP request when attempting to open pages of the Service.

1. IP address - a unique network address of a node in a computer network built according to the IP protocol.

02General provisions

2. The provisions of this Policy apply to any information (personal data) that may become known to the Service Administration during the use of the Service by Users, including during the course of their registration process.

2. Using the Service (in any volume, form, etc.) means the User's full agreement with the terms of this Policy and the manner in which personal data of such User is processed during the provision of services by the Service.

2. Any actions of the User within the Service are recognized by the Service Administration as informational services.

2. Acceptance of this Privacy Policy is the use of the Service and filling out registration data.

2. In case the User does not agree with the norms contained in this Policy, he must stop using the Service. Any use of the Service by the User means his full agreement and acceptance of all conditions of this Policy.

2. This Policy applies only to the Service. The Service Administration does not control and is not responsible for third-party internet resources to which the User may navigate via links available on the Service pages.

2. The Service Administration does not verify the accuracy of personal data provided by the User to the Service Administration (at the time of registration), but reserves the right to monitor the accuracy of such personal data.

2. In the event that one or more provisions of this Regulation become invalid or cease to have legal effect, this shall not affect the validity or applicability of the remaining provisions of this Regulation.

2. The User bears personal responsibility for checking this Agreement for any changes in it. The Service Administration reserves the right to change or supplement this Agreement at its sole discretion at any time without prior or subsequent notice. The Service Administration will publish such changes and/or additions at pro-buket.kz. Further use of the Service by the User after any such changes implies full agreement by such User with those changes and additions.

2. By registering in the Service, the User agrees that:

• registration data (including personal data) is provided by them voluntarily;
• registration data (including personal data) has been transferred to the Site Administration for the purposes specified in this Agreement;
• registration data (including personal data) is truthful and up-to-date at the time of Registration in the Service;
• registration data (including personal data) may be used by the Service Administration for the purpose of promoting goods and services through direct contact with the User via communication channels (email and SMS newsletters, calls).

03Term of agreement

3. This Policy regulates the obligations of the Service Administrator to not disclose users' personal data and to establish a data protection regime for the data that the user provides to the Service Administrator during the use of the Service by users, including during the registration process.

3. This Policy is developed in accordance with the Law of Kazakhstan "On Personal Data" as well as other normative legal documents that regulate the procedure for processing personal data of Users on the Internet.

3. The Personal Data of Users, which is the subject of this Policy, includes:

3. Mandatory personal data that the User voluntarily and consciously provides about themselves upon Registration in the Service, primarily necessary for the Administration of the Service to fulfill its obligations.

3. Optional personal data that the User voluntarily and consciously provides about themselves during Registration on the Service and/or when using the Service.

3. Anonymous data automatically obtained by the Service Administration during the User's presence on any page of the Service, using software installed on the User's device: IP address, Cookie, information about the User's browser (or other program used to access the Service), time of access, addresses of requested pages, etc.

3. The Service Administration collects statistical data about the IP addresses of Users. This information is used to identify and resolve technical issues.

3. The Service Administration is not responsible for information that the User voluntarily disseminates in a public form.

04Purpose of personal data collection

4. The Service Administration reserves the right to use any personal data of the User that he provided during the use of the Service for the following purposes:

4. for identifying registered Users in the Service, to provide further access to the functional capabilities of the Service;

4. to determine the user's location for security purposes, to prevent hacking and fraud;

4. to provide the User with informational materials that contain a description of how to use the Service;

4. to provide feedback from the User, through which the User is given the opportunity to communicate with the Service Administration by submitting questions via established feedback channels;

4. to provide the User with service advertising materials through communication channels with the User's mandatory consent;

4. to provide the User, through established feedback channels, news regarding the Service and its updates;

4. to create a user account through which the User is provided with the ability to use the functionality of the Service;

4. for using by the Administration of anonymized data in statistical studies;

4. for verifying the accuracy of personal data previously provided by the User and to check the relevance of such data on the day of verification;

4. to provide the User with necessary technical support during the use of the Service's functionality;

4. to obtain user feedback on the operation of the Service in order to improve the Service, its elements, etc.;

4. to provide search and/or offer services for products and/or related services to Users of the Service;

4. to provide other services and fulfill other obligations undertaken by the Service Administrator in this Policy and service contracts (public offers) for providing services through the Service.

05Order of processing personal data

5. Any processing of the User's personal data that he has transmitted to the Service Administration during the use of the Service is carried out without any limitation on time, by any means specified in this Policy and by Kazakh legislation, with or without the use of appropriate automation tools.

5. The User acknowledges and agrees that the Service Administration reserves the right to transfer the User's personal data, which were provided by them during the use of the Service, to third parties for the purpose of fulfilling obligations assumed within the framework of the relationship between the parties.

5. The User acknowledges and agrees that the Service Administration may transfer any personal data that was previously provided by the User during the use of the Service, in cases provided for by Kazakh law and on the grounds specified in Kazakh law to authorized state authorities for such actions.

5. The Service administration is obligated to inform the User about the loss or disclosure of the User's personal data, which were transmitted to it by the User during the use of the Service, in the shortest possible time.

5. The Service Administrator is responsible for protecting, securing, and blocking personal data transmitted by the User during the use of the Service.

06Obligations of the parties

6. The Service Administration is obligated to perform the following actions:

6. to process personal data transmitted by the User during the use of the Service strictly in accordance with the terms of this Policy, legal norms of RK, as well as in accordance with other documents that regulate the relationship between the User and the Administration of the Service and are posted on the pages of the Service;

6. to exert the necessary effort to protect and safeguard the User's personal data that has been transmitted during the use of the Service;

6. block the relevant User account in cases where such a User contacts the Service Administration with a report of losing their login or/and password or of their account being hacked, as well as in situations provided for by this Regulation and/or the legislation of Kazakhstan;

6. to use the User's personal data that he transmitted to the Service Administration during the use of the Service exclusively within the scope and in the manner regulated by this Provision;

6. cease processing, storing, and transmitting the User's personal data upon the User's corresponding request. In such a case, the User's account is subject to blocking by the Service Administration.

6. The User undertakes to perform the following actions:

6. provide the Service Administration with all necessary accurate information, including personal data that is necessary or may be necessary for the Service Administration;

6. provide the Service Administration information, including personal data, in case of changes, so that the Service Administration can fulfill its obligations imposed by this Regulation.

07Liability of the parties

7. In no event shall the Service Administration be liable for losses caused by the disclosure of the User's personal data, including but not limited to the following cases:

7. The User's personal data became public before the User's personal information was disclosed by the Service Administration.

7. Personal information was disclosed with the User's permission.

7. Entry of data by third parties into the Service for data which do not belong to them.

7. Personal information was obtained from a third party prior to its receipt by the Service Administration from the User.

08Resolution of disputes

8. Before filing a lawsuit with the court due to disputes arising from relations between the User and the Service Administration, it is mandatory to present a written proposal for voluntary dispute resolution.

8.2. The recipient of the claim, within 30 (thirty) calendar days from the date of receipt of the claim, shall notify the claimant in writing of the results of the consideration of the claim.

8. Claim letters are sent by the parties via courier or registered mail with notification of delivery to the location of the parties.

8. The parties are not permitted to send claim letters by other means.

8. In case of failure to reach an agreement, the dispute will be referred for consideration to the judicial authority at the location of the Service Administration.

09Force majeure

9. The Service Administration and the User are released from liability for full or partial non-performance of obligations in case non-performance of obligations was a result of acts of force majeure, namely: fire, flood, earthquake, strike, war, actions of state authorities or other circumstances beyond the control of the Parties.

9.2. The party that is unable to fulfill its obligations must notify the other party in a timely manner, but no later than 5 (five) calendar days after the occurrence of force majeure circumstances.

10Other terms

10. The Service Administration may at any time, with or without the User's consent, make changes to this Policy, and such changes shall take effect upon their posting on the Service, unless otherwise provided for in the new version of the Policy.

10. The Service Administrator's email address for considering user inquiries is specified in the details of this Policy.

10. The User's consent to the processing of personal data is valid until the end of the use of services provided by the Service Administration through the Service functionality.

10. The Service Administration has the right to send the User notifications about new products and services, special offers, and various events. The User can always opt out of receiving informational messages by sending an email to mail (at) pro-buket.kz marked "Opt-out from notifications about new products and services and special offers".