PRIVACY POLICY
- GENERAL PROVISIONS
- The Privacy Policy applies to the processing of personal data that the Operator can receive from the Personal Data Subject using a Website located on the Internet on a domain name: https://qjl.kz/
- The Operator processes personal data of Personal Data Subjects solely within the framework of the requirements of the legislation of the Republic of Kazakhstan, including the Law on Personal Data, as well as international treaties ratified by the Republic of Kazakhstan.
- The use of the Website by the User means acceptance of the Policy and the terms of data processing. In case of disagreement with the terms of the Policy, the User must stop using the Website.
- The Policy is designed to ensure proper protection of personal data of the Personal Data Subject from unauthorized access and disclosure.
- DEFINITION OF TERMS
- The following terms are used in the Policy:
- The Law on Personal Data - The Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On personal data and their protection".
- Personal data - information related to a certain or determined on their basis subject of personal data, recorded on electronic, paper and (or) other material media.
- Processing of personal data - any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.
- Operator - Corporate Fund "Youth Football League of Kazakhstan - Freedom" (BIN 221040037600, legal address: Kazakhstan, Almaty city, Bostandyk district, Rozybakiev street, house 127, postal code 050060, actual address: Kazakhstan, 010016, Astana city, Yesil district, Dostyk Street, building 16, built-in non-residential premises 2.
- Personal Data Subject - an individual to whom personal data relates. In the Policy, the Personal Data Subject is understood to include the User.
- Policy - Privacy Policy;
- User - a person who has access to the Website via the Internet and uses the Website.
- Website - website located on the Internet at the domain address https://qjl.kz/
- Blocking of personal data - actions to temporarily stop the collection, accumulation, modification, addition, use, depersonalization and destruction of personal data.
- Accumulation of personal data - actions to systematize personal data by entering them into a database containing personal data.
- Collection of personal data - actions aimed at obtaining personal data.
- Destruction of personal data - actions as a result of which it is impossible to recover personal data.
- Depersonalization of personal data - actions, as a result of which it is impossible to determine the ownership of personal data to the subject of personal data.
- Use of personal data - actions with personal data aimed at achieving the goals of the activity of the owner, operator and third party.
- Storage of personal data - actions to ensure the integrity, confidentiality and availability of personal data.
- The following terms are used in the Policy:
- RIGHTS AND OBLIGATIONS OF THE PARTIES
- The operator has the right to:
- Independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations provided for by the Law on Personal Data and the regulatory legal acts adopted in accordance with it, unless otherwise provided by the Law on Personal Data or other laws of the Republic of Kazakhstan.
- To entrust the processing of personal data to another person with the consent of the Personal Data Subject, unless otherwise provided by the legislation of the Republic of Kazakhstan. The person who processes personal data on behalf of the Operator is obliged to comply with the principles and rules for the processing of personal data provided for by the Law on Personal Data.
- Carry out the processing of personal data of the Personal Data Subject.
- The operator is obliged to:
- Use the received confidential data solely for the purposes specified in Section 4 of the Policy.
- Ensure that confidential information is kept secret, not disclose it without the prior written permission of the Personal Data Subject, and also not sell, exchange, publish, or disclose confidential data in other possible ways, except as provided for by the Policy, concluded agreements with clients, the legislation of the Republic Kazakhstan.
- Take precautionary measures to protect the confidentiality of personal data of the Personal Data Subject in accordance with the procedure usually used to protect this kind of information in the existing business turnover, and in accordance with the requirements of the legislation of the Republic of Kazakhstan.
- Organize the processing of personal data in accordance with the requirements of the Law on Personal Data.
- Respond to requests from the Personal Data Subject and their legal representatives in accordance with the requirements of the Law on Personal Data.
- To carry out blocking of personal data related to the relevant Personal Data Subject, from the moment of the request or request of the Personal Data Subject or his legal representative or authorized body for the protection of the rights of the Personal Data Subject for the period of verification in case of revealing inaccurate personal data or illegal actions.
- The Personal Data Subject has the right to:
- Provide personal data.
- Update, supplement personal data in case of their change.
- Exercise their rights under Chapter 4 of the Law on Personal Data, including obtaining information regarding the processing of personal data, request clarification or blocking or destruction of personal data in cases provided for by the Law on Personal Data, take measures to protect their rights. The interaction is carried out in writing at the address specified in clause 6.3. of the Policy.
- Require the Operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take measures provided for by the legislation of the Republic of Kazakhstan to protect their rights.
- Appeal against illegal actions or inaction of the Operator when processing his personal data.
- The operator has the right to:
- VOLUME AND CATEGORIES OF PROCESSED PERSONAL DATA, PURPOSE OF PROCESSING PERSONAL DATA
- The purpose of processing personal data is the following:
- establishing feedback with the Personal Data Subject, including sending notifications, requests regarding the use of the Website;
- processing requests and applications from the Personal Data Subject, sending proposals and information on further cooperation to the Personal Data Subject, as well as interaction in order to collect the necessary documents and information for entering into civil law relations (conclusion of contracts, etc.).
- The purpose of processing personal data is the following:
- The personal data authorized for processing under this Policy is provided by the User by filling out forms on the Website and includes the following information:
- Full name;
- Phone number (mobile, home);
- E-mail address;
- other data specified in the forms on the Website.
- With regard to the User, the Policy establishes the obligations of the Operator for non-disclosure and protection of personal data that the User provides to the Operator when working with the Webite.
- In addition to forms, the Website may use various web analytics systems. The Website protects the data that is automatically transmitted during the viewing of ad blocks and when visiting the pages of the Website, including:
- IP address;
- information from Cookies;
- information about the browser (or other program that provides access to the display of ads);
- operating system;
- access time, timezone/region;
- Website page address.
- Disabling Cookies may result in the inability to access some sections of the Website.
- Information is subject to secure storage and non-distribution, except as provided by the Policy and legislation of the Republic of Kazakhstan.
- The Operator does not provide the personal data of the Personal Data Subject to third parties, except for the cases listed below:
- The Personal Data Subject has given his consent to this;
- On the grounds and in accordance with the procedure established by the legislation of the Republic of Kazakhstan, including for the purpose of:
- execution of court decisions or execution of legal requirements of state bodies;
- troubleshooting technical failures or security issues;
- protection of the rights or safety of the Operator permitted by the current legislation of the Republic of Kazakhstan.
- PROCEDURE, CONDITIONS AND TERMS OF PERSONAL DATA PROCESSING
- The processing of personal data of the Personal Data Subject is carried out without time limit in any legal way, including in personal data information systems using automation tools or without the use of such tools.
- Personal data of a Personal Data Subject may be transferred to the authorized state authorities of the Republic of Kazakhstan only on the grounds and in accordance with the procedure established by the legislation of the Republic of Kazakhstan.
- The Operator is obliged to take the necessary organizational and technical measures to ensure the confidentiality, integrity, safety and availability of personal data of the Personal Data Subject, as well as comply with other data processing requirements established by the legislation of the Republic of Kazakhstan, including:
- prevent unauthorized access to personal data;
- timely detect the facts of unauthorized access to personal data, if such unauthorized access could not be prevented;
- minimize the adverse consequences of unauthorized access to personal data;
- carry out other actions provided for by the internal regulations of the Operator.
- In case of loss or disclosure of personal data, the Operator informs the Personal Data Subject about the loss or disclosure of his data.
- UPDATING, CORRECTION, DELETION AND DESTRUCTION OF PERSONAL DATA, RESPONSES TO REQUESTS OF PERSONAL DATA SUBJECTS, WITHDRAWAL OF CONSENT TO THEIR PROCESSING BY THE PERSONAL DATA SUBJECT
- At the request of the Personal Data Subject, the Operator informs him of information related to the processing of his personal data, including confirmation of the fact of processing personal data by the Operator, sources, methods of collection and processing, legal grounds and purposes of processing personal data, a list of personal data, terms of processing personal data, as well as other information.
- The information provided does not include personal data relating to other Personal Data Subjects, unless there are legal grounds for disclosing such personal data.
- The appeal may be sent to: Kazakhstan, Almaty city, Bostandyk district, Rozybakiev street, house 127, postal code 050060 or Kazakhstan, 010016, Astana city, Yesil district, Dostyk Street, building 16, built-in non-residential premises 2 or by email address info@qjl.kz.
- In case of refusal to provide information to the Personal Data Subject or his legal representative, the Operator provides a reasoned response within 10 (ten) working days.
- In case of detection of inaccurate personal data when contacting the Personal Data Subject, the Operator undertakes within one working day:
- Change and (or) supplement the personal data of the Personal Data Subject on the basis of relevant documents confirming their authenticity, or destroy personal data if it is impossible to change and (or) supplement them;
- Block personal data related to the Personal Data Subject, if there is information about a violation of the terms of their collection or processing;
- Destroy the personal data of the Personal Data Subject in case of confirmation of the fact of their collection, processing in violation of the legislation of the Republic of Kazakhstan, as well as in other cases established by the Law on Personal Data and other regulatory legal acts of the Republic of Kazakhstan;
- Remove the blocking of personal data of the Personal Data Subject in case of non-confirmation of the fact of violation of the conditions for the collection, processing of personal data.
- Personal data is subject to destruction within 30 (thirty) days from the date of:
- achieving the goals of personal data processing;
- receiving an application from the Personal Data Subject to withdraw consent to the processing of personal data.
- Personal data is subject to destruction in other cases established by the Law on Personal Data and other regulatory legal acts of the Republic of Kazakhstan.
- The subject of personal data may at any time withdraw consent to the processing of personal data by sending a written application to the Operator at: Kazakhstan, Almaty city, Bostandyk district, Rozybakiev street, house 127, postal code 050060 or Kazakhstan, 010016, Astana city, Yesil district, Dostyk Street, building 16, built-in non-residential premises 2 or by email address info@qjl.kz.
- RESPONSIBILITIES OF THE PARTIES
- The Operator who has not fulfilled its obligations is liable for losses incurred by the Personal Data Subject in connection with the misuse of personal data, in accordance with the legislation of the Republic of Kazakhstan.
- The Personal Data Subject reimburses the Operator in full for damages in the event that third parties, including government agencies, present claims against the Operator, claims relating to the processing of personal data transferred by the Personal Data Subject to the Operator without the consent of the Personal Data Subject, processing inaccurate/distorted/outdated personal data through the fault of the Personal Data Subject.
- DISPUTES RESOLUTION
- Before going to court with a claim on disputes arising from the relationship between the Personal Data Subject and the Operator, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute).
- The recipient of the claim within 30 (thirty) calendar days from the date of receipt of the claim, notifies the applicant of the claim in writing about the results of the consideration of the claim.
- If an agreement is not reached, the dispute will be referred to the judicial authority in accordance with the current legislation of the Republic of Kazakhstan.
- THE PROCEDURE FOR THE OPERATION OF THE POLICY AND MAKING CHANGES TO IT
- The Policy comes into force for an unlimited period from the moment of its approval by the Operator. The current Policy is invalidated after it is replaced by a new Policy. The Policy is replaced by publishing its new version on the Website.
- The current version of the Policy, which is a public document, is available on the Website to any Internet user. The Operator has the right to make changes to the Policy that do not contradict the legislation of the Republic of Kazakhstan. Posting a new version of the Policy on the Website after its approval is a notification to the Website Users of the changes made to the Policy.
- ADDITIONAL TERMS
- The Policy and relations between the Personal Data Subject and the Operator arising in connection with the application of the Policy shall be subject to the law of the Republic of Kazakhstan.
- The Operator has the right to make changes to the Policy without the consent of the Personal Data Subject.
- The new Policy comes into force from the moment it is posted on the Website, unless otherwise provided by the new version of the Policy.
- The Personal Data Subject undertakes to independently monitor changes to the Policy by reviewing the current version.