PRIVACY POLICY
This Privacy Policy (hereinafter – the “Policy”) applies to the data that JSC Bank CenterCredit (Business Identification Number 980 640 000 093, Almaty, 38 Al-Farabi Ave.) may obtain through the use of the website located on the Internet at the domain name: https://abeats.net
The Company processes data of the Website users exclusively in accordance with the requirements of the legislation of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection,” as well as international treaties ratified by the Republic of Kazakhstan.
The Privacy Policy (hereinafter – the “Policy”) has been developed in accordance with these regulations.
By using the Website, the User agrees to the Privacy Policy and to the terms of data processing. If the User does not agree with the terms of the Privacy Policy, they must stop using the Website.
This Policy is intended to ensure proper protection of information about Users, including their personal data, from unauthorized access and disclosure.
The Policy, as well as other official documentation of the Website and the applicable legislation of the Republic of Kazakhstan, govern relations related to the collection, storage, distribution, and protection of information about Website users. In the event of discrepancies between this Policy and other official documents of the Website, this Policy shall prevail.
Users should be aware that when following some links posted on the Website, they may be redirected to websites (applications, etc.) of other companies beyond the hosting space of JSC Bank CenterCredit (“Facebook,” “Google+,” “VKontakte”), where information about Users is collected outside the direct control of JSC Bank CenterCredit and the Website Administration. In such cases, the privacy policies of the third-party websites and/or applications will govern the processing of information obtained from users by those third parties. JSC Bank CenterCredit and the Website Administration are not responsible for the information provided by the User to such third parties.
If the User decides to log in to the Website using a third-party authentication service, such as Facebook information, the Company may obtain additional profile or other information to which the User has granted access in the account of the third-party operator for sharing with third parties.
DEFINITIONS
The following terms are used in this Privacy Policy:
- “Website Administration” — authorized employees acting on behalf of JSC Bank CenterCredit, who organize and/or carry out the Processing of confidential data, as well as determine the purposes of processing confidential data, the scope of confidential data to be processed, and the actions (operations) performed with confidential data.
- Confidential data — data submitted by the User of the Website in feedback forms and service connection requests, Cookies, as well as data automatically transmitted in the course of using the Website, including but not limited to: IP address, information about the device used to access the Website, etc.
- Personal data — information relating to an identified or identifiable subject of personal data, recorded on electronic, paper, and/or other tangible media.
- Processing of personal data — any action (operation) or set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), depersonalization, blocking, deletion, or destruction of personal data.
- Confidentiality of personal data — a requirement, mandatory for the Operator or any other person who has gained access to personal data, to prevent its dissemination without the consent of the subject of personal data or the existence of another lawful basis.
- User of the website https://abeats.net— a person who has access to the Website via the Internet and uses the Website.
- Website — the web resource located on the Internet at the domain address https://abeats.net.
- Cookies — a small fragment of data sent by a web server and stored on the User’s computer, which the web client or web browser sends back to the web server in an HTTP request each time it attempts to open a page of the corresponding website.
- IP address — a unique network address of a node in a computer network built using the IP protocol
SUBJECT OF THE PRIVACY POLICY
The Privacy Policy establishes the obligations of the Website Administration regarding the non-disclosure and protection of the confidentiality of data that the User provides to the Website Administration when using the Website, including when submitting an application for connection.
- Confidential data permitted for Processing under this Privacy Policy is provided by the User by completing the registration form (an example is shown below), feedback forms, and includes: the User’s name (provided at the User’s discretion), telephone number, email address of a legal entity. If, instead of the contact details of a legal entity, the User provides their personal data in the application form, the Company ensures its protection in accordance with the requirements of the legislation of the Republic of Kazakhstan on personal data.
- In addition to the registration form, the Website may use various web analytics systems. The Website protects data that is automatically transmitted during the viewing of advertising blocks and when visiting pages of the Website, including:
- IP address;
- information from Cookies;
- information about the browser (or other program used to access advertising display);
- operating system;
- access time, time zone/region;
- address of the Website page.
- Disabling Cookies may result in the inability to access certain sections of the Website.
- The Website Administration may collect statistics regarding the data specified in Clause 2.3 of the Privacy Policy. This information is used to identify and resolve technical problems and to prevent fraud.
- Information is subject to secure storage and non-distribution, except in cases provided for by the Privacy Policy and the legislation of the Republic of Kazakhstan.
2.3.5. The Company and the Website Administration have the right to provide Users’ information to their affiliates (including those operating outside the territory of the Republic of Kazakhstan), as well as to other companies associated with the Company for the purposes mentioned above. In this case, affiliates and associated companies are required to comply with the provisions of this Policy.
2.3.6. The Company does not provide Users’ information to companies and individuals not related to the Company, except in the following cases:
The User has given their consent;
On the grounds and in the manner established by the legislation of the Republic of Kazakhstan, including for the purposes of:
- fulfilling court decisions or complying with lawful requirements of state authorities;
- eliminating technical failures or security problems;
- protecting the rights, property, or safety of the Company or the Users of the Company’s Services, to the extent permitted by applicable law.
PROCEDURE FOR THE APPLICATION OF THE PRIVACY POLICY AND AMENDMENTS
- The Policy comes into effect for an indefinite period from the moment it is approved by the Company. The current Policy becomes invalid once it is replaced by a new Policy. Replacement of the Policy is carried out by publishing its new version on the Website.
- The current version of the Policy, which is a public document, is available to any Internet user via the https://abeats.net.
The Website Administration has the right to make amendments to the Policy that do not contradict the legislation of the Republic of Kazakhstan. Posting a new version of the Policy on the Website after its approval shall serve as notification to Website users of the changes made to the Policy.
- The current version of the Policy, which is a public document, is available to any Internet user via the https://abeats.net.
CONDITIONS AND PURPOSES OF PROCESSING CONFIDENTIAL DATA
The Website Administration processes the User’s confidential data for the following purposes:
- Reviewing the User’s application for connection of services to a legal entity/individual entrepreneur provided by JSC Bank CenterCredit, as well as interacting to collect the necessary documents and information for concluding the relevant agreement with JSC Bank CenterCredit and/or its partners, providing consultations about the services offered, and informing about current and new products of JSC Bank CenterCredit and its partners.
- Carrying out technical management of the Website, as well as analyzing and improving its operation.
METHODS AND TERMS OF PROCESSING CONFIDENTIAL DATA
- The User’s data is processed for an unlimited period by any lawful means, including within personal data information systems, using automation tools or without the use of such tools.
- The User consents to the processing of confidential data for an unlimited period.
- The User’s data may be transferred to authorized state authorities of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan.
- The Website Administration is obliged to take the necessary organizational and technical measures to ensure the confidentiality, integrity, security, and availability of Users’ confidential data, as well as to comply with other data processing requirements established by the legislation of the Republic of Kazakhstan.
- In the event of loss or disclosure of confidential data, the Website Administration shall inform the User about the loss or disclosure of their data.
- The Website Administration, together with the User, shall take all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User’s confidential data.
OBLIGATIONS OF THE PARTIES
The User shall:
1.1.1. Provide up-to-date data requested by the Website at the time of its use.
1.1.2. Update or supplement the data provided in the event of any changes to such information.
1.1.3. Obtain all necessary consents from third parties in advance if providing their data to the Website Administration.
Obligations of the Website Administration
- Use the received confidential data exclusively for the purposes specified in Section 4 of the Privacy Policy.
- Ensure that confidential information is kept secret, not disclose it without the prior written consent of the User, and not sell, exchange, publish, or disclose confidential data in any other way, except in cases provided for by the Privacy Policy, agreements concluded with clients, or the legislation of the Republic of Kazakhstan.
- Take precautionary measures to protect the confidentiality of the User’s data in accordance with procedures customarily used to protect such information in current business practice and in compliance with the requirements of the legislation of the Republic of Kazakhstan.
LIABILITY OF THE PARTIES
- The Website Administration that has failed to fulfill its obligations shall be liable for losses incurred by the User in connection with the unlawful use of confidential data, in accordance with the legislation of the Republic of Kazakhstan, except as provided in Clause 7.2 of this Privacy Policy.
- In the event of loss or disclosure of Confidential Information, the Website Administration shall not be liable if such confidential information:
1.2.1. Became public property before its loss or disclosure.
1.2.2. Was received from a third party prior to its receipt by the Website Administration.
1.2.3. Was disclosed with the User’s consent.
- The User shall fully compensate JSC Bank CenterCredit for damages if third parties, including state authorities, submit claims or lawsuits against JSC Bank CenterCredit regarding the Processing of Personal Data transmitted by the User to the Website Administration without the consent of the personal data subject, or regarding the Processing of inaccurate/false/outdated Personal Data due to the User’s fault.
- In the event of loss or disclosure of Confidential Information, the Website Administration shall not be liable if such confidential information:
DISPUTE RESOLUTION
- Before filing a lawsuit on disputes arising from the relationship between the User of the website https://abeats.net and the Website Administration, it is mandatory to submit a claim (a written proposal for voluntary settlement of the dispute).
- The recipient of the claim shall, within thirty (30) calendar days from the date of receipt, notify the claimant in writing of the results of the claim’s consideration.
- If no agreement is reached, the dispute shall be submitted for consideration to a judicial body in accordance with the current legislation of the Republic of Kazakhstan.
- This Privacy Policy and the relations between the User and the Website Administration are governed by the current legislation of the Republic of Kazakhstan.
ADDITIONAL CONDITIONS
- The processing of personal data begins from the moment JSC Bank CenterCredit enters into agreements with clients and is governed by the terms of such agreements.
- The User/personal data subject may, at any time, withdraw their consent to the Processing of Personal Data by submitting a written request to JSC Bank CenterCredit at the address: 38 Al-Farabi Ave., Almaty. In such a case, the Website Administration may continue to process Personal Data without the User’s/personal data subject’s consent in cases established by the legislation of the Republic of Kazakhstan.
- The User/personal data subject has the right to exercise their rights provided in Chapter 4 of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection,” including the right to obtain information regarding the Processing of personal data, to request clarification, blocking, or destruction of Personal Data in cases provided by law, and to take measures to protect their rights. Interaction is carried out in writing at the address specified in Clause 9.2 of the Privacy Policy.
- This Privacy Policy and the relations between the User and the Website Administration arising from the application of the Privacy Policy are governed by the law of the Republic of Kazakhstan.
- The Operator has the right to make changes to this Privacy Policy without the User’s consent.
- The new Privacy Policy enters into force from the moment it is posted on the website https://abeats.net, unless otherwise provided by the new version of the Privacy Policy.
- The User undertakes to independently monitor changes to the Privacy Policy by reviewing its current version.
- All suggestions or questions regarding this Privacy Policy should be sent via the Website’s contact form.
- The Privacy Policy is published on the page at Privacy Policies – ABEATS
