1. General Provisions
1. This privacy policy (hereinafter referred to as the Policy) has been developed in compliance with the requirements of Part 2 of Article 4 of the Law of the Kyrgyz Republic “On Personal Information” and defines the legal and organizational grounds for the processing of personal data by the Limited Liability Company “Zhi nekst” (hereinafter referred to as the Holder/Processor).
2. This Policy is aimed at ensuring the protection of the rights and freedoms of the subject of personal data when processing his personal data and applies to all operations with personal data performed by the Holder/Processor, both in automated mode and without it.
3. Basic rights and obligations of personal data subjects:
1) Subjects of personal data have the right to:
— to full information about their personal data processed by the Holder/Processor;
— to access their personal data, including the right to receive a copy of any record containing their personal data, except for cases provided for by the Law of the Kyrgyz Republic “On Personal Information”;
— to clarify their personal data, block it or destroy it in cases where the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
— to take measures provided by law to protect their rights, including contacting the authorized state body for personal data;
— to exercise other rights provided for by the legislation of the Kyrgyz Republic.
2) Subjects of personal data are obliged to:
— provide the Holder/Processor with only reliable information about yourself;
— provide documents containing personal data to the extent necessary for the purpose of processing;
— inform the Holder/Processor about clarification (updating, changing) of their personal data.
4. Basic rights and obligations of the Holder/Processor.
1) The Holder/Processor has the right:
— receive from the subject of personal data reliable information and/or documents containing personal data;
— clarify the personal data provided by the subject.
2) The Holder/Processor is obliged to:
— process personal data in accordance with the procedure established by the Law of the Kyrgyz Republic “On Personal Information”;
— consider requests from personal data subjects regarding the processing of personal data and provide responses within a period not exceeding 7 days from the date of submission of the application;
— provide the subject of personal data with the opportunity to access his personal data free of charge;
— take measures to update personal data in connection with the request of the personal data subject;
— organize the protection of personal data in accordance with the requirements of the legislation of the Kyrgyz Republic.
5. The Holder/Processor collects, uses and protects personal data provided by the subject of personal data during communication in any form, in accordance with this Policy and the legislation of the Kyrgyz Republic.
2. Volume and categories of personal data processed, categories of personal data subjects
6. The Holder/Processor processes personal data of the following personal data subjects:
— User
7. Personal data processed by the Holder/Processor include:
- full name
- birthday
- photo
— адрес
— passport data (series, passport number, by whom and when issued)
— cookies
- email
- phone number
8. The holder shall ensure that the content and volume of personal data processed correspond to the stated purposes of processing and, if necessary, shall take measures to eliminate their redundancy in relation to the stated purposes of processing.
9. The Holder/Processor does not process special categories of personal data that reveal racial or ethnic origin, nationality, political views, religious or philosophical beliefs, as well as those related to health and intimate life, in strict accordance with Article 8 of the Law of the Kyrgyz Republic “On Personal Information”.
11. The lists of personal data and categories of personal data subjects may be revised by the Holder with mandatory recording of changes in this Policy and notification of personal data subjects by any available means (official website, announcement, push notification, sending a message to e-mail, etc.)
3. Purposes of collecting personal data
12. Personal data is processed by the Holder/Processor for the following predetermined and legitimate purposes:
— informing the User by sending emails
— conclusion, execution and termination of civil law contracts
— providing the User with access to services, information and/or materials contained on the website
4. Legal grounds for processing personal data
13. The legal grounds for processing personal data by the Holder/Processor are:
— Constitution of the Kyrgyz Republic;
— Civil Code of the Kyrgyz Republic;
— Law of the Kyrgyz Republic “On personal information”;
— statutory documents of the Holder/Processor;
— agreements concluded between the Holder/Processor and personal data subjects;
— consent of personal data subjects to the processing of personal data;
— Law on Combating the Financing of Terrorist Activities and the Legalization (Laundering) of Criminal Proceeds
5. Procedure and conditions for processing personal data
14. The Holder/Processor processes personal data in the following ways:
- Mixed
15. The processing of personal data carried out by the Holder/Processor includes any operations or set of operations performed regardless of the methods, by automatic means or without them, for the purpose of collecting, recording, storing, updating, grouping, blocking, erasing and destroying personal data.
16. The processing of personal data is carried out by the Holder/Processor subject to the consent of the subject of personal data (hereinafter referred to as the Consent), except for cases established by law when the processing of personal data may be carried out without such Consent.
17. The subject of personal data makes a decision on the provision of his personal data and gives it in writing on paper or in the form of an electronic document signed in accordance with the legislation of the Kyrgyz Republic with an electronic signature.
18. The condition for termination of the processing of personal data may be the achievement of the purposes of processing personal data, updating of personal data, as well as the identification of illegal processing of personal data.
19. The Holder/Processor, in order to achieve the purposes of processing, with the consent of the subject of personal data, has the right to transfer personal data to third parties, provided that the recipient of the data is obliged to maintain the confidentiality of this data.
20. When processing personal data, the Holder/Processor shall take or ensure that the necessary legal, organizational and technical measures are taken to protect personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data.
21. Personal data shall not be stored longer than is necessary to fulfill the purposes for which they were collected. Storage periods may be extended only in the interests of the personal data subject or if this is provided for by the legislation of the Kyrgyz Republic.
6. Updating, correcting, deleting and destroying personal data, responding to requests from personal data subjects for access to personal data
22. In the event of confirmation of the fact that personal data are unreliable or that their processing is illegal, the personal data are subject to updating, blocking or destruction depending on the legality of their collection, storage and processing of such personal data by the Holder/Processor, or their processing must be terminated accordingly.
23. In the event of inaccuracy of personal data or illegality of their processing, the subject of personal data has the right to contact the Holder directly or the Authorized State Body for Personal Data.
24. Upon written request of the personal data subject, the Holder/Processor is obliged to provide information on the personal data processing carried out by him, reflecting the following information:
25. If the subject does not have the rights to access the requested information, then a reasoned refusal is sent to him.
26. Upon expiration of the storage period and achievement of the purposes of collecting personal data, they are subject to destruction within two weeks. Destruction is confirmed by a report, a copy of which may be given to the subject of personal data upon his written request.
7. Final Provisions
27. All relations concerning the processing of personal data that are not reflected in this Policy are regulated in accordance with the provisions of the Law of the Kyrgyz Republic “On Personal Information”.
28. The Holder/Processor has the right to make changes to this Policy. When making changes to the current version, the date of the last update is indicated. The new version of the Policy comes into force from the moment it is posted in the public domain for review, subject to the mandatory preliminary announcement of planned changes no less than 14 working days before the date of publication of the new version of the Policy.