Confidentiality Policy
1. General Provisions
This personal data processing policy has been compiled in accordance with the requirements of Law of the Republic of Kazakhstan No. 94-V dated 21 May 2013 "On Personal Data and Their Protection". It defines the procedure for processing personal data and measures to ensure the security of ABC-RAIL KZ LLP’s data (Operator).
The Operator sets as its main goal and condition for its activities the respect for human and civil rights and liberties in the processing of its personal data, including the protection of privacy rights, and personal and family secrets. This operator’s policy on processing personal information (hereafter referred to as Policy) applies to all information the Operator may receive about visitors of the website abc-rail.kz.
2. Key concepts used in Policy
Automated processing of personal data — processing of personal information using computer technology. Blocking personal data — temporary suspension of processing personal information (except in cases when processing is necessary for clarifying personal data). Website — a collection of graphic and informational materials, as well as computer programs and databases that provide access to them on the internet at the address abc-rail.kz. Personal data information system — a set of information about personal information contained in databases and information technologies and technical tools that ensure their handling. Depersonalizing personal data — actions that make it impossible to determine without additional information whether personal information belongs to a specific user or another personal subject.; Personal data processing is any action or set of actions performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, updating, modification, extraction, use, transfer, depersonalization, blocking, deletion and destruction of personal information. The operator is a state body, municipal body, legal entity, or individual who independently or jointly with others organizes and/or processes personal data and determines the purposes for processing, the scope of data to be processed and the actions taken with the data. Personal data refers to any information directly or indirectly related to an identifiable user of the website. A user is any visitor to the website who interacts with it.; Provision of personal data — actions aimed at revealing personal information to a specific person or a group of people; dissemination of personal information — any action aimed at making personal information available to an undefined group of people (transfer of personal details) or familiarizing with personal information of an unlimited number of individuals, including publication of personal info in the media, posting on information and telecommunications networks or providing access to personal information in any other manner; cross-border transfer of personal information is the transfer of private information to the territory of another country for the authority of that country, an individual or legal entity abroad; destruction of personal information — any action that results in the irreversible destruction of personal data such that it can no longer be recovered from the personal information system and/or the physical media that contain personal information are destroyed.
3. The Operator may process the following personal data of the User:
Surname, name, patronymic, email address, phone numbers. Also, on the website, there is the collection and processing of anonymous data about visitors, including cookies, using Internet statistics (Yandex Metrics and Google Analytics, among others). This data is further combined into the text of the policy under the general concept of personal data.
4. The purposes of personal data processing are:
The purpose of processing User’s personal data is to provide access to services, information, and/or materials on the website. The operator also has the right to send notifications about new products, services, special offers, and various events to the User. The User may always refuse to receive these notifications by sending an email to office@abc-rail.kz with the subject "Opt-out of Notifications of New Products and Services and Special Offers". Personal data collected through internet statistics services is used to gather information about User activity on the site and improve the quality of the website and its content.
5. Legal grounds for processing personal data
The Operator processes the User’s personal data only if they are filled in and/or sent by the User independently through special forms located on the website abc-rail.kz. By filling out the appropriate forms and/or sending their personal information to the Operator, the user agrees to this policy. The operator processes depersonalized user data if this is allowed in the user’s browser settings (cookie saving and JavaScript use are enabled).
6. Procedure for collecting, storing, transferring and other types of processing of personal data
The security of the personal data processed by the operator is ensured through implementation of legal, organizational, and technical measures necessary for full compliance with the requirements of current legislation on personal data protection.
The operator ensures the safety of personal data and takes all possible measures to exclude access to personal data by unauthorized persons. The personal data of the user will never, under any circumstances, be transferred to third parties except in cases related to implementation of current legislation. If there are inaccuracies in the personal data, the user can update them by sending a notification to the operator at the operator’s e-mail address marked "Updating personal data". The processing period for personal data is unlimited. The user can withdraw their consent to the processing at any time by sending an email to the operator marked "Withdrawing consent to personal data processing".
7. Cross-border transfer of personal data
Prior to the start of the cross-border transfer of personal data, the operator must ensure that the foreign state to whose territory the transfer is supposed to be carried out provides reliable protection for the rights of data subjects. Cross-border transfers of personal data to territories that do not comply with the above requirements may only be carried out if the data subject consents in writing to such a transfer and/or execution of a contract to which they are a party.
8. Final provisions
The User can receive any clarifications on issues related to processing their personal data by contacting the Operator via email office@abc-rail.kz. This document will reflect any changes to the operator’s personal data policy. The policy is valid indefinitely until replaced by a new version. A current version of this policy can be found freely on the internet at https://abc-rail.kz/privacy.
This personal data processing policy has been compiled in accordance with the requirements of Law of the Republic of Kazakhstan No. 94-V dated 21 May 2013 "On Personal Data and Their Protection". It defines the procedure for processing personal data and measures to ensure the security of ABC-RAIL KZ LLP’s data (Operator).
The Operator sets as its main goal and condition for its activities the respect for human and civil rights and liberties in the processing of its personal data, including the protection of privacy rights, and personal and family secrets. This operator’s policy on processing personal information (hereafter referred to as Policy) applies to all information the Operator may receive about visitors of the website abc-rail.kz.
2. Key concepts used in Policy
Automated processing of personal data — processing of personal information using computer technology. Blocking personal data — temporary suspension of processing personal information (except in cases when processing is necessary for clarifying personal data). Website — a collection of graphic and informational materials, as well as computer programs and databases that provide access to them on the internet at the address abc-rail.kz. Personal data information system — a set of information about personal information contained in databases and information technologies and technical tools that ensure their handling. Depersonalizing personal data — actions that make it impossible to determine without additional information whether personal information belongs to a specific user or another personal subject.; Personal data processing is any action or set of actions performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, updating, modification, extraction, use, transfer, depersonalization, blocking, deletion and destruction of personal information. The operator is a state body, municipal body, legal entity, or individual who independently or jointly with others organizes and/or processes personal data and determines the purposes for processing, the scope of data to be processed and the actions taken with the data. Personal data refers to any information directly or indirectly related to an identifiable user of the website. A user is any visitor to the website who interacts with it.; Provision of personal data — actions aimed at revealing personal information to a specific person or a group of people; dissemination of personal information — any action aimed at making personal information available to an undefined group of people (transfer of personal details) or familiarizing with personal information of an unlimited number of individuals, including publication of personal info in the media, posting on information and telecommunications networks or providing access to personal information in any other manner; cross-border transfer of personal information is the transfer of private information to the territory of another country for the authority of that country, an individual or legal entity abroad; destruction of personal information — any action that results in the irreversible destruction of personal data such that it can no longer be recovered from the personal information system and/or the physical media that contain personal information are destroyed.
3. The Operator may process the following personal data of the User:
Surname, name, patronymic, email address, phone numbers. Also, on the website, there is the collection and processing of anonymous data about visitors, including cookies, using Internet statistics (Yandex Metrics and Google Analytics, among others). This data is further combined into the text of the policy under the general concept of personal data.
4. The purposes of personal data processing are:
The purpose of processing User’s personal data is to provide access to services, information, and/or materials on the website. The operator also has the right to send notifications about new products, services, special offers, and various events to the User. The User may always refuse to receive these notifications by sending an email to office@abc-rail.kz with the subject "Opt-out of Notifications of New Products and Services and Special Offers". Personal data collected through internet statistics services is used to gather information about User activity on the site and improve the quality of the website and its content.
5. Legal grounds for processing personal data
The Operator processes the User’s personal data only if they are filled in and/or sent by the User independently through special forms located on the website abc-rail.kz. By filling out the appropriate forms and/or sending their personal information to the Operator, the user agrees to this policy. The operator processes depersonalized user data if this is allowed in the user’s browser settings (cookie saving and JavaScript use are enabled).
6. Procedure for collecting, storing, transferring and other types of processing of personal data
The security of the personal data processed by the operator is ensured through implementation of legal, organizational, and technical measures necessary for full compliance with the requirements of current legislation on personal data protection.
The operator ensures the safety of personal data and takes all possible measures to exclude access to personal data by unauthorized persons. The personal data of the user will never, under any circumstances, be transferred to third parties except in cases related to implementation of current legislation. If there are inaccuracies in the personal data, the user can update them by sending a notification to the operator at the operator’s e-mail address marked "Updating personal data". The processing period for personal data is unlimited. The user can withdraw their consent to the processing at any time by sending an email to the operator marked "Withdrawing consent to personal data processing".
7. Cross-border transfer of personal data
Prior to the start of the cross-border transfer of personal data, the operator must ensure that the foreign state to whose territory the transfer is supposed to be carried out provides reliable protection for the rights of data subjects. Cross-border transfers of personal data to territories that do not comply with the above requirements may only be carried out if the data subject consents in writing to such a transfer and/or execution of a contract to which they are a party.
8. Final provisions
The User can receive any clarifications on issues related to processing their personal data by contacting the Operator via email office@abc-rail.kz. This document will reflect any changes to the operator’s personal data policy. The policy is valid indefinitely until replaced by a new version. A current version of this policy can be found freely on the internet at https://abc-rail.kz/privacy.