Privacy policy
This Privacy Policy explains how Astana Tazalyq LLP collects, processes, stores, discloses and protects personal data when users access its official online resource. Please read this document before using the Website or submitting data through an electronic form.
1. General provisions
1.1. This Policy has been prepared in accordance with the Constitution of the Republic of Kazakhstan, Law No. 94-V of the Republic of Kazakhstan dated 21 May 2013 On Personal Data and Their Protection, Law No. 418-V of the Republic of Kazakhstan dated 24 November 2015 On Informatization, and other applicable laws and regulations governing the collection, processing and protection of personal data.
1.2. This Policy applies to the Partnership's official website, its language versions, subdomains and embedded electronic services. Third-party websites are governed by their own privacy terms.
1.3. Terms are used with the meanings assigned by the personal data laws of the Republic of Kazakhstan. A data subject is an individual to whom personal data relates; processing means any operation or set of operations performed on personal data.
2. Personal data owner and operator
Legal name | Astana Tazalyq Limited Liability Partnership |
Business ID (BIN) | 080940019334 |
Address | 49/2 Aqzhol Avenue, Baikonyr District, Astana 010000, Republic of Kazakhstan |
Telephone | +7 (7172) 54-60-78 |
2.1. Requests concerning personal data processing may be sent using the contact details above or the feedback form on the Website. The Partnership may request information reasonably necessary to verify the applicant's identity and authority.
3. Processing principles
· lawfulness, fairness and transparency;
· collection for specific and predetermined purposes;
· data minimisation and proportionality to the stated purposes;
· accuracy and keeping data up to date;
· retention no longer than necessary for the stated purposes;
· confidentiality, integrity and availability.
4. Personal data that may be collected
Depending on the Website function used, the Partnership may process:
· identity and contact details: surname, first name, patronymic where applicable, telephone number, email address, residential address or district;
· request data: subject, text, category, address or location of the relevant site, preferred response language, request status and correspondence history;
· materials submitted voluntarily: photographs, video, documents and other files, including their technical metadata;
· information about a legal entity or representative: organisation name, position and evidence of authority;
· technical data: IP address, request date and time, browser and device type, operating system, language, viewed pages, referral source, session identifiers and security logs;
· preferences collected through cookies or similar technologies, where used on the Website.
Individual identification numbers, copies of identity documents, medical information and other sensitive information should be submitted through the Website only where strictly required by law to consider a specific request. If such data is not required, do not include it in the request text or attachments.
5. Sources of personal data
· the data subject or the subject's lawful representative;
· technical logs generated automatically by the Website and information systems;
· where permitted by law, state information systems, public authorities or other lawful sources.
6. Purposes and legal grounds
6.1. Personal data is processed to:
· receive, register, review and respond to requests, complaints, proposals and feedback messages;
· identify a site or incident relating to municipal sanitation, route a task to the responsible unit and monitor completion;
· operate the Website, maintain information security, diagnose failures and prevent unlawful activity;
· analyse usage statistics and improve usability;
· meet obligations under the laws of the Republic of Kazakhstan, retain records and evidence, and protect legal rights.
6.2. Processing is based on the consent of the data subject or lawful representative and, where applicable, on circumstances in which the laws of the Republic of Kazakhstan permit processing without consent. Before an electronic form is submitted, the user is provided with a link to this Policy and, where required, a separate consent statement.
6.3. Fields marked as mandatory are required to process the request. If the required data is not provided, the Partnership may be unable to accept the electronic request or provide a substantive response.
7. Cookies and web analytics
7.1. The Website may use strictly necessary cookies to maintain sessions, remember language preferences, provide security and support technical operation.
7.2. Where functional or analytics cookies are used, they are enabled following the user's choice to the extent required by law. The Partnership does not use cookies for advertising profiling or personalised advertising unless this is separately disclosed on the Website and appropriate consent is obtained.
7.3. Users may disable or delete cookies in their browser settings. Blocking strictly necessary cookies may impair certain Website functions.
8. Processing operations and automation
The Partnership may collect, record, organise, accumulate, store, update, use, disclose, anonymise, block and destroy data by automated or non-automated means. The Website does not make decisions based solely on automated processing that produce legal effects for the user.
9. Disclosure to third parties
9.1. To the extent necessary for the stated purposes, data may be disclosed to:
· authorised employees and departments of the Partnership;
· contracted processors providing hosting, technical support, communications, information security or other services;
· municipal services, contractors or other organisations competent to address a request;
· public authorities, courts and law-enforcement bodies on the grounds and in the manner prescribed by law.
9.2. Third-party access is limited by confidentiality, security and purpose-limitation requirements.
9.3. Cross-border transfers of personal data are carried out only in compliance with the laws of the Republic of Kazakhstan, on an appropriate legal basis and with the necessary safeguards. If a specific Website service requires such a transfer, the user will be provided with appropriate information.
10. Storage and deletion
10.1. Personal data is stored in a database located in the Republic of Kazakhstan, except where legislation expressly provides otherwise.
10.2. Retention periods are determined by the processing purpose, the period required to consider a request, the Partnership's records retention schedule, limitation periods and mandatory legal requirements. Once the purpose has been achieved and no other lawful retention basis remains, data is destroyed or anonymised.
10.3. Withdrawal of consent does not affect the lawfulness of processing already performed and does not necessarily require the immediate destruction of records that the Partnership must retain by law.
11. Security measures
The Partnership applies legal, organisational and technical measures to protect personal data against unlawful or accidental access, alteration, blocking, copying, disclosure, destruction and other unlawful acts. In particular, it restricts access by role, manages employee permissions, logs events, performs backups, protects communication channels and applies incident response procedures.
12. Data subject rights
Within the limits established by the laws of the Republic of Kazakhstan, a data subject may:
· find out whether the Partnership holds their personal data and obtain information about its processing;
· access their data and request its correction, supplementation, blocking or destruction;
· object to processing where the data has been collected or processed unlawfully;
· withdraw consent in the manner prescribed by law;
· complain to the competent public authority or apply to a court if their rights are infringed.
A rights request must contain enough information to identify the data subject, understand the request and deliver a response. The Partnership will respond in the manner and within the time limits established by law.
13. Children's data
Personal data of minors is processed with the consent of their lawful representative or on another basis provided by law. If it is established that a child submitted data without the proper involvement of a lawful representative, the Partnership will review the circumstances and take measures to block or destroy the data in accordance with law.
14. External links
The Website may contain links to third-party online resources. The Partnership does not control their data practices and is not responsible for their privacy policies. Users should review the relevant third party's terms before submitting personal data.
15. Changes to this Policy
The Partnership may update this Policy when laws, Website functions or processing activities change. The current version is published on the Website with its version number and effective review date. A separate notice may be posted for material changes.
16. Languages and final provisions
This Policy is published in Kazakh, Russian and English. The versions are intended to be equivalent in substance. In the event of inconsistency, the version approved by the Partnership in the state language prevails unless mandatory laws of the Republic of Kazakhstan require otherwise.