Consent to the processing of personal data
This Privacy and Personal Data Processing Policy is a public Agreement concluded between the owner of the Site https://www.gorus.kz Gorus, hereinafter the “Operator”, and the “User”. This Privacy Policy is based on the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection” and applies to all information that the “Operator” may obtain about the “User” while using the site https://www.gorus.kz/.
1. Definitions
- “Site” – the website located on the Internet at https://www.gorus.kz/. All exclusive rights to the Site and its individual elements (including software and design) belong to the Operator in full. The transfer of exclusive rights to the User is not the subject of this Privacy Policy.
- “Site Administration” – employees authorized to manage the Site on behalf of Gorus who organize and/or carry out the processing of personal data and determine the purposes of processing, the composition of the personal data to be processed and the actions (operations) performed with personal data.
- “User” – a person using the Site.
- “Legislation” – the current legislation of the Republic of Kazakhstan.
- “Personal data” – the User's personal data that the User provides independently during registration or while using the Site's functionality.
- “Non-personal data” – information automatically transmitted while the User views advertising blocks and visits pages on which the system's statistical script (pixel) is installed.
- Processing of personal data – any action (operation) or set of actions (operations) performed with or without automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion and destruction of personal data.
- Site services – the set of services available for use on the Site.
- Registration – the User filling in the Registration form on the Site by providing the required information and sending scanned documents.
- Registration form – the form on the Site that the User must fill in to be able to use the site in full.
- Confidentiality of personal data is a requirement, binding on the Site Administration or any other person who has gained access to personal data, not to disclose such data without the consent of the data subject or another legal basis.
- “Operator” – the owner of the Site https://www.gorus.kz/ of Gorus.
- Cookies – a piece of data sent by a web server and stored on the User's computer, which the web client or web browser sends back to the web server in an HTTP request each time it tries to open a page of the Site.
- IP address – the unique network address of a node in a computer network built on the IP protocol.
2. General provisions
- By transferring personal and other data to the “Operator” via the “Site”, the “User” confirms their consent to the use of such data on the terms set out in this Privacy Policy.
- If the “User” does not agree with the terms of this Privacy Policy, they must stop using the “Site”.
- The “Operator's” “Site” may contain links to other websites. Please note that the “Operator” is not responsible for the privacy practices of websites not operated by the “Operator”. We recommend that you read the privacy policy of each website that collects any personal information. This Privacy Policy applies only to information collected by the “Operator”.
- The “Operator” does not verify the accuracy of personal data provided by the “User”. However, the “Operator” assumes that the “User” provides accurate personal data and keeps it up to date. The “User” bears full responsibility and any consequences for providing inaccurate or outdated personal data.
3. Subject of the Privacy Policy
- This Privacy Policy sets out the obligations of the “Operator” to keep confidential and protect the personal data that the “User” provides at the request of the “Operator” when registering on the “Site”, placing an order for Goods or Services, joining Gorus as a Member or using any Site services.
- “Personal data” permitted for processing under this Privacy Policy may include the following information:
- last name, first name and patronymic of the “User”;
- contact phone numbers of the “User”;
- email address;
- delivery address for Goods and documents;
- individual identification number of the “User”;
- date of birth of the “User”;
- The “Site” protects “Non-personal data”:
- IP address;
- information from cookies;
- browser information (or other software used to display advertising);
- access time;
- Disabling cookies may make parts of the “Site” that require authorization inaccessible.
- The “Site” collects statistics on the IP addresses of its Visitors. This information is used to identify and solve technical problems.
- Any other personal information not mentioned above (purchase history, browsers and operating systems used, etc.) is subject to secure storage and non-disclosure, except in the cases provided for in clauses 5.2 and 5.4 of this Privacy Policy.
4. Purposes of collecting “Personal data”
- The “Operator” collects and stores only the “Personal data” necessary for the “Operator” to provide Services and interact with the “User”.
- “Personal data” may be used for the following purposes:
- provision of Services to the “User”;
- identification of the “User”;
- interaction with the “User”;
- sending advertising materials, information and requests to the “User”;
- conducting statistical and other research.
- The “User” is prohibited from entering the personal data of third parties on the “Site” (except when representing the interests of such persons with documentary confirmation from them authorizing such actions).
5. Procedure and terms for processing “Personal data”
- The “User's” personal data is processed without time limit by any lawful means, including in personal data information systems with or without the use of automation tools.
- The “Operator” undertakes to use “Personal data” in accordance with the Law of the Republic of Kazakhstan “On Personal Data” and the internal documents of the “Operator”.
- The “Operator” has the right to transfer “Personal data” and “Non-personal data” without the consent of the “User” to the following persons:
- to government authorities, including inquiry and investigation bodies, and local government bodies upon their reasoned request;
- in other cases expressly provided for by the current legislation of the Republic of Kazakhstan.
- The “Operator” has the right to transfer “Personal data” to third parties not specified in clause 5.3 of this Privacy Policy in the following cases:
- the “User” has consented to such actions;
- the transfer is necessary for the “User” to use the “Site” or for Services to be provided to the “User”.
6. Protection of personal data
7. Other provisions
- This Privacy Policy and the relations between the “User” and the “Operator” arising in connection with its application are governed by the law of the Republic of Kazakhstan.
- All disputes arising from this Agreement shall be resolved in accordance with the current legislation at the place of registration of the “Operator”. Before going to court, the “User” must follow the mandatory pre-trial procedure and send the “Operator” a written claim. The response time to a claim is 30 (thirty) business days.
- If for any reason one or more provisions of the Privacy Policy are found invalid or unenforceable, this does not affect the validity or applicability of the remaining provisions of the Privacy Policy.
- The “Operator” has the right to change the Privacy Policy (in whole or in part) at any time unilaterally without prior agreement with the “User”. All changes take effect from the moment they are published on the “Site”.
- The “User” undertakes to monitor changes to the Privacy Policy independently by reviewing the current version.
- All suggestions or questions regarding this Privacy Policy should be sent to: Kazakhstan, Karaganda, 45G Komissarova St.