Privacy Policy

1. General Provisions

This Privacy Policy regarding the processing of personal data has been developed in accordance with the Law of the Republic of Kazakhstan dated May 21, 2013 "On Personal Data and Its Protection" and defines the procedure for processing personal data of users of the internet resource located at https://qazaqitcom.kz/, conditions and principles of personal data processing, user rights, and information about measures implemented to protect processed personal data.

This Privacy Policy applies to all personal data that the "Almaty IT community club" community and its branches receive from users of the internet resource.

In case of disagreement with the terms of the Privacy Policy, the user must immediately cease any use of the Internet resource.

2. Terms and Definitions

The following terms are used in the Privacy Policy:

• Personal data – information relating to a specific or identifiable personal data subject, recorded on electronic, paper and (or) other material media
• Personal data subject – an individual to whom personal data relates
• User – a visitor to the internet resource, a personal data subject
• User account – a set of protected pages of the internet resource created as a result of user registration and accessible upon entering authentication data
• Provision of personal data – actions aimed at disclosing personal data to a specific person or a specific group of persons
• Blocking of personal data – actions to temporarily stop the collection, accumulation, modification, addition, use, distribution, depersonalization and destruction of personal data
• Accumulation of personal data – actions to systematize personal data by entering them into a database containing personal data
• Collection of personal data – actions aimed at obtaining personal data
• Destruction of personal data – actions as a result of which it is impossible to restore personal data
• Depersonalization of personal data – actions as a result of which it is impossible to determine the ownership of personal data to a personal data subject
• Personal data database – a set of ordered personal data
• Owner and operator of the personal data database – the "Almaty IT community club" Community, which collects, processes and protects personal data
• Protection of personal data – a set of measures, including legal, organizational and technical, carried out for the purposes established by the legislation of the Republic of Kazakhstan
• Processing of personal data – actions aimed at accumulation, storage, modification, addition, use, distribution, depersonalization, blocking and destruction of personal data
• Use of personal data – actions with personal data aimed at achieving the goals of the activities of the owner, operator and third party
• Storage of personal data – actions to ensure the integrity, confidentiality and availability of personal data
• Distribution of personal data – actions as a result of which the transfer of personal data occurs, including through mass media or providing access to personal data in any other way
• Internet resource – information (in text, graphic, audiovisual or other form) posted on a hardware and software complex that has a unique network address and (or) domain name and operates on the Internet

3. Legal Basis and Purposes of Personal Data Processing

The legal basis for processing personal data are:

• Civil Code of the Republic of Kazakhstan
• Law of the Republic of Kazakhstan dated May 21, 2013 "On Personal Data and Its Protection"
• Law of the Republic of Kazakhstan dated November 24, 2015 "On Informatization"
• Other applicable regulatory acts
• Internal regulatory documents of the "Almaty IT community club" community
• User's consent to the processing of personal data

The "Almaty IT community club" community and its branches process user personal data exclusively for the following purposes:

• Registration and identification of the user on the internet resource, providing the user with the opportunity to fully use the internet resource
• Establishing and maintaining communication (interaction) between the user and the "Almaty IT community club" community and its branches
• Providing services to users by processing requests and applications from users
• Statistical and other research based on anonymized information provided by users

4. Conditions and Procedure for Providing Consent to Personal Data Processing

The "Almaty IT community club" community and its branches do not verify the personal data provided by the user. In this regard, the community assumes that when providing personal data on the internet resource, the user:

• Is a legally capable person. If a person does not have legal capacity, consent to the processing of personal data is provided by the legal representative of the user (parent, guardian or trustee)
• Provides accurate information about themselves in the amounts necessary for using the internet resource. The user independently maintains the provided personal data in an up-to-date state

The user accepts the terms of this Privacy Policy and gives the "Almaty IT community club" community and its branches informed and conscious consent to the processing of their personal data under the conditions provided for by the Privacy Policy and the legislation of the Republic of Kazakhstan.

Consent is provided by clicking the "Register" button or by checking the "I agree to the Privacy Policy" box.

The user's consent to the processing of personal data is valid from the date of such consent and for the period necessary to achieve the purposes of personal data processing or until the user withdraws the said consent.

The user's consent to the processing of personal data may be withdrawn at any time by the user by sending a corresponding application to the community's email address.

5. Personal Data Processed by the Internet Resource

Processing of user personal data is carried out during registration on the internet resource:

• Full name (first name, last name, patronymic)
• Phone number
• Email address
• Telegram username
• Workplace
• Position/Specialization

6. Personal Data Processing

The "Almaty IT community club" community and its branches process personal data based on the following principles:

• Legality
• Limitation of personal data processing to achieving predetermined and legitimate purposes
• Prevention of personal data processing for purposes incompatible with the purposes of their collection
• Processing only those personal data that meet the purposes of their processing
• Ensuring accuracy, sufficiency and relevance of personal data
• Destruction or depersonalization of personal data upon achievement of the purposes of their processing or in case of loss of necessity in achieving these purposes

Processing of user personal data includes the following actions: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, depersonalization, blocking, deletion, destruction.

Storage of user personal data is carried out on electronic media. Storage of personal data is carried out until they are deleted by the user, until they are destroyed in case of receipt of the user's withdrawal of consent to the processing of personal data or a requirement for their destruction, or until the expiration of the user's consent.

7. Personal Data Protection Measures

The "Almaty IT community club" community and its branches take necessary and sufficient legal, organizational and technical measures to protect personal data provided by users from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties. Such actions include, in particular:

• Appointment of a person responsible for processing personal data
• Application of organizational and technical measures to ensure the security of personal data during their processing
• Monitoring of unauthorized access to personal data and taking measures to prevent such incidents in the future
• Control over measures taken to ensure the security of personal data

8. User Rights

The user makes a decision to provide their personal data and gives consent to their processing voluntarily and in their own interests.

The user has the right to receive information from the "Almaty IT community club" community and its branches regarding the processing of their personal data.

The user has the right to send requests and requirements to the "Almaty IT community club" community and its branches regarding the use of their personal data, as well as to withdraw consent to the processing of personal data.

9. Update, Correction, Deletion and Destruction of Personal Data

The "Almaty IT community club" community and its branches undertake to inform the user about the availability of personal data relating to this user, as well as to provide an opportunity to familiarize themselves with this personal data upon the user's request within 15 days from the date of receipt of the user's request.

Within no more than one business day from the date of the user providing information confirming that personal data is incomplete, inaccurate or outdated, the community undertakes to make the necessary changes.

Within no more than one business day from the date of the user providing information confirming that such personal data was obtained illegally or is not necessary for the stated purpose of processing, the community undertakes to destroy such personal data.

The "Almaty IT community club" community and its branches undertake to stop processing personal data in case of detection of unlawful processing of personal data within no more than 3 business days from the date of such detection, or in case of the user's withdrawal of consent to the processing of their personal data.

The "Almaty IT community club" community and its branches undertake to destroy the user's personal data within no more than 15 days from the date of achieving the purpose of personal data processing.

10. Policy Changes

The "Almaty IT community club" community reserves the right to make changes to the Privacy Policy. The user is obliged to familiarize themselves with the text of this Privacy Policy each time they use the internet resource.

The new version of the Privacy Policy comes into force from the moment of its publication on the internet resource. Continued use of the internet resource or its services after publication of the new version of the Policy means acceptance of the Policy and its terms by the user. In case of disagreement with the terms of the Privacy Policy, the user must immediately stop using the internet resource and its services.