DRAFT. Prepared under Law of the Republic of Kazakhstan No. 94-V and subject to review by the group's legal practice before publication.
1. General
This policy sets out how personal data is processed at Kreston Kazakhstan LLP (the Operator) and has been prepared under the Law of the Republic of Kazakhstan of 21 May 2013 No. 94-V on personal data and its protection.
Operator: Kreston Kazakhstan LLP, 13 Al-Farabi Ave., Nurly Tau Business Centre, Block 1B, Office 505, Almaty, Republic of Kazakhstan. Email: info@kreston.kz. Telephone: +7 (727) 327 68 06.
The policy covers personal data the Operator receives through the website enquiry form, by email and in the course of providing professional services.
2. Data processed
Through the website form: full name; telephone number; email address; company name; service of interest; the content of the enquiry.
Automatically on visiting the site: IP address, browser type and version, operating system, pages viewed, referral source, date and time of the visit.
The Operator does not collect special categories of personal data through the website — health data, biometric data, criminal record data, or data relating to minors.
3. Purposes
Handling an enquiry received through the website and preparing a response.
Preparing a commercial proposal for the service requested.
Sending information materials — only where separate consent has been given.
Analysing website traffic on an anonymised basis.
4. Legal basis
Processing is carried out on the basis of the data subject's consent, obtained under Article 8 of Law No. 94-V by an affirmative action — ticking the box in the form before submission.
Consent is voluntary. Declining means the enquiry cannot be processed through the website form; the Operator can still be contacted by telephone or email.
5. Processing and retention period
Personal data is processed for one year from the date of the enquiry or until consent is withdrawn, whichever comes first.
On expiry of that period or following withdrawal of consent the data is destroyed, unless a different retention period is required by the legislation of the Republic of Kazakhstan on accounting, audit activity or anti-money laundering.
6. Place of storage
In accordance with Article 12(2) of Law No. 94-V, personal data is stored in a database located in the territory of the Republic of Kazakhstan.
The website and the form handler are hosted on the servers of a hosting provider in the Republic of Kazakhstan.
7. Transfer to third parties
The Operator does not sell or transfer personal data to third parties for commercial purposes.
Data may be shared with group companies — Kreston Qazaqstan LLP, Kreston Kazakhstan Advisory LLP, Kreston Kazakhstan Legal LLP — only to the extent needed to prepare a response to the enquiry.
Data may be provided to state authorities in the cases and in the manner prescribed by the legislation of the Republic of Kazakhstan.
8. Cross-border transfer
Personal data received through the website is not transferred across borders.
If a client engagement requires involving an independent member firm of the Kreston Global network in another jurisdiction, such transfer is carried out under Article 16 of Law No. 94-V on the basis of separately obtained consent.
9. Security measures
Data transmitted between the browser and the website is protected by HTTPS.
Access to enquiries is limited to the employees involved in handling them.
The Operator applies the organisational and technical measures required by Article 25 of Law No. 94-V and by the rules of the authorised body.
The Operator notifies the authorised body of any personal data security breach within the period prescribed by law.
10. Rights of the data subject
To know whether the Operator holds their personal data and to receive information on the conditions of access to it.
To require amendment and supplementation of the personal data where there are grounds to do so.
To require blocking of the personal data where there is evidence that the processing conditions have been breached.
To require destruction of personal data processed in breach of the law.
To withdraw consent to the processing of personal data.
Requests should be sent to info@kreston.kz and are considered within the period prescribed by the legislation of the Republic of Kazakhstan.
11. Cookies
The website uses technical cookies necessary for its operation and stores the interface language chosen by the visitor in the browser.
Visitors may disable cookies in their browser settings; some website functions may then not work correctly.
12. Changes to this policy
The Operator may amend this policy. The current version is published on this page together with its date.