Privacy Policy

1. GENERAL PROVISIONS
1.1. Limited Liability Partnership NEFTEK Operating, as a legal entity with the NEFTEK brand (hereinafter referred to as the "Service Provider"), recognizing the importance of maintaining the confidentiality of Users' personal data and expressing its commitment to respecting human rights, has developed this Privacy Policy (hereinafter referred to as the "Policy").

1.2. The policy for the use of applications, Internet resources, websites, products and services of the Service Provider and/or its affiliates (hereinafter referred to as the “Service” or “Services”) is an integral part of the User Agreement and applies to all Users. have joined the User Agreement. The Service Provider may make changes and/or additions to this Policy by posting on the Service Provider's website and/or publishing a modified version of the Policy in the media. Such changes and additions are considered accepted by the User after clicking the appropriate button to accept them within the functionality of the Service, or if, after 7 (seven) calendar days from the date of their publication, the User continues to use the Service. The current version of this Policy is posted on the Company’s website at the following link: https://neftek.kz/en/politika-obrabotki-personalnykh-dannykh.

1.3. The terms and definitions used in this Policy have the same meaning as in the User Agreement, unless otherwise provided in the Policy.

1.4. The purpose of this Policy is to inform the Service Provider about the purposes of collecting and processing Users’ personal data, what Users’ personal data is collected and processed as part of the use of the Services, as well as about the measures taken. Service provider for the protection of personal data. User data.

1.5. This Policy applies only to the Services and information collected through them. It does not apply to any other applications or resources, or to web applications or other third party applications.

2. COLLECTION AND PROCESSING OF PERSONAL DATA

2.1. The collection and processing of Users’ Personal Data can be carried out by both the Service Provider and its Partners. At the same time, the collection and processing of Users’ Personal Data is carried out for the purpose of fulfilling the User Agreement, providing Services to the User, including sending him notifications, information about the use of the Services, as well as processing requests. . from the User, informing the User about changes and/or additions to the User Agreement, improving the quality of the Services provided, conducting marketing events, advertising campaigns and marketing research, developing and offering new Services, including the provision of personalized services and targeted advertising materials and content to the User, participation of Users in competitions, as well as the implementation by the Service Provider of rights and obligations in accordance with current legislation. Additional purposes for collecting and processing Personal Data may be specified as part of the use of certain Services.

2.2. When using the Services, the Service Provider or Partner may collect and process data provided by the User, including mobile phone number, email address, IP address, geolocation information, search history, date and time of visits, as well as available cookies, browser information and operating system, data provided by the user, such as: Avatar (image posted by the User), user name, gender, date of birth, consent and confirmation of the User's access rights, as well as other necessary data to achieve the purposes of collection and processing mentioned in paragraph 2.1 above.

2.3. Personal data can be supplemented by the User. In addition, the Service Provider may supplement or clarify the User’s Personal Data through open sources or from third parties based on contractual relations with the Service Provider.

2.4. The storage of Personal Data is carried out by the Service Provider in the territory of the Republic of Kazakhstan for the period necessary to achieve the purpose of their collection and processing under the User Agreement, and three years after termination of the specified User Agreement, except in cases where a shorter period is established by applicable law.

2.6. The user may withdraw his consent to the collection and processing of Personal Data. Withdrawal of consent may result in suspension or termination of the User Agreement. To revoke consent, the User must submit a written application to the Company's address neftek@neftek.kz.


3. SAFETY MEASURES USED FOR MAINTAINING CONFIDENTIALITY

3.1. Personal data of Users is confidential information and is protected by the legislation of the Republic of Kazakhstan.

3.2. The service provider and its Partners use modern technologies and internal procedures and take all actions aimed at protecting Personal Data from external interference, unauthorized attempts to access information, change it, disclose it or destroy it. The service provider ensures that each of its Partners has an agreement in the form provided for by the legislation of the Republic of Kazakhstan, ensuring the confidentiality of information, including personal data of Users.

3.3. The Services provide protection for transmitted data between the User and the Services on the Internet via the secure HTTPS protocol using the TLS v1.2 cryptographic protocol.

3.4. Access to Personal Data of Users is provided to the Service Provider and its Partners who need this information to perform their official duties.

3.5. The service provider and its Partners, as well as other persons working with Personal data, sign an obligation not to disclose confidential information, and are also warned about possible disciplinary, administrative, civil and criminal liability in case of violation of the norms and requirements of the current legislation of the Republic of Kazakhstan in the field of processing personal data. data.


4. PROVIDING PERSONAL DATA TO THIRD PARTIES

4.1. The transfer of Personal Data to third parties is carried out in the manner and in cases provided for by the legislation of the Republic of Kazakhstan.

4.2. In order to fulfill the User Agreement and improve the user experience of using the Services, the Service Provider develops, improves, optimizes and implements new functionality of the Services (including services and products of information, advertising, educational, entertainment and other nature). , including with the involvement of affiliates and partners. To ensure the implementation of these goals, the User agrees and allows the Service Provider to process the User’s Personal Data in accordance with current legislation, including the results of automated processing of such data, including in the form of integer and/or text values and identifiers, their transfer to affiliates and/or Partners in pursuance of such consent to processing, including cross-border transfer.

4.3. If Personal Data is provided to third parties, the Service Provider takes all reasonable measures to protect it from unauthorized use and undertakes to use it in accordance with the provisions of this Policy and the legislation of the Republic of Kazakhstan. The service provider ensures the Users' right to confidentiality and, accordingly, no party, including Partners, receives information about the Users' correspondence.

4.4. Notwithstanding the provisions of paragraphs 4.1 – 4.3 above, the User understands that his data is transmitted via the Internet, and the Service Provider does not guarantee the safety of the data transmitted by the User, unauthorized access to which may be obtained by third parties. as a result of any illegal actions. In this case, any transfer of data is carried out by the User at his own peril and risk, and the Service Provider is not responsible for leakage of data or part thereof and causing corresponding damage to the User.