This Personal Data Privacy Policy of TOLT CJSC (hereinafter - the Policy) shall apply to all information on or linked to the website of TOLT CJSC (hereinafter - the Company) located on the domain name https://www.tolt.kg, and which the Company can get about the User while using the Company’s website.
CHAPTER 1. TERMS AND DEFINITIONS
1.1. The following terms are used in this Policy:
1.1.1. "Website Administration" - employees authorized to manage the Website, acting on behalf of the Company, who organize and (or) process personal data and determine the purposes of processing personal data, composition of personal data to be processed, actions (operations) performed with personal data.
1.1.2. "Personal data" - any information related directly or indirectly to a specific or identifiable individual (subject of personal data).
1.1.3. "Processing of personal data" - any action (operation) or a set of actions (operations) performed with personal data using automation tools or without using such tools, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
1.1.4. "Confidentiality of personal data" - a mandatory requirement for the operator or other person who has gained access to personal data to prevent its dissemination without consent of the subject of personal data or other legal grounds.
1.1.5. "Website User (hereinafter – the User)" - a person who has access to the Website via the Internet and uses the Company's Website.
1.1.6. "Cookies" - a small piece of data sent by a web server and stored on the user's computer, which the web client or web browser sends to the web server each time in an HTTP request when trying to open the page of the corresponding website.
1.1.7. "IP-address" - a unique network address of a node in a computer network created using the IP protocol.
CHAPTER 2. GENERAL PROVISIONS
2.1. Usage of the Company's Website by the User shall mean acceptance of this Policy and the terms of processing the User's personal data.
2.2. The User shall stop using the Company's Website in case of disagreement with the terms of the Policy.
2.3. This Policy shall apply only to the Company’s Website. The Company does not control and is not responsible for Websites of third parties which the User can follow by links available on the Company's Website.
2.4. The Website Administration shall not verify the accuracy of personal data provided by the User of the Company's Website, however the Website Administration assumes that the User provides reliable and sufficient personal data and keeps it up to date.
CHAPTER 3. SUBJECT OF REGULATION
3.1. This Policy shall establish the obligations of the Website Administration of the Company for non-disclosure and ensuring the regime for protecting the confidentiality of personal data that the User provides at the request of the Website Administration when registering on the Company's Website.
3.2. Personal data permitted for processing under this Policy shall be provided by the User by filling out the registration form on the Company's Website. The User consents to processing of his personal data that is not special or biometric, including, but not limited to, the following data:
-
Full name of User;
-
User's contact phone number;
-
E-mail address;
-
User data (location information, operating system type and version, browser type and version, device type and screen resolution, source of referral to the website, operating system and browser language, list of pages visited and actions performed on them, IP address, information from cookies);
-
Name of company, title, industry;
-
Details.
3.3. The Company shall protect data that is automatically transmitted during the viewing of ad units and when visiting pages on which the statistical system script (pixel) is installed:
-
IP address;
-
information from cookies;
-
information about browser (or other program that provides access to display of advertising);
-
access time;
-
address of page on which ad unit is located;
-
referrer (address of previous page).
3.3.1. Disabling cookies may result in inability to access parts of the Company's Website that require authorization.
CHAPTER 4. PURPOSES OF COLLECTING PERSONAL DATA
4.1. The User's personal data may be used by the Website Administration of the Company for the following purposes:
-
Identification of the User registered on the Company's Website;
-
Providing the User with access to information on the Company's Website;
-
Establishing feedback with the User, including sending notifications, requests regarding the use of the Company's Website, processing requests and applications from the User;
-
Determining the location of the User to ensure security, prevent fraud;
-
Confirmation of accuracy and completeness of personal data provided by the User;
-
Notification of the User about measures taken;
-
Providing the User with effective customer and technical support in case of problems related to the use of the Company's Website;
-
Implementation of advertising activities with the consent of the User;
-
Providing the User with access to websites or services of the Company’s partners in order to receive updates and services;
-
Publication of aggregated information about the User without depersonalizing his data.
CHAPTER 5. PROCEDURE FOR PROCESSING PERSONAL DATA
5.1. Processing of the User's personal data shall be carried out without any time limit, in any legal way, including in personal data information systems using automation tools or without using such tools.
5.2. The User's personal data can be transferred to the authorized bodies of the Kyrgyz Republic only on the grounds and in the manner established by the legislation of the Kyrgyz Republic.
5.3. In case of loss or disclosure of personal data, the Website Administration shall inform the User about the loss or disclosure of personal data.
5.4. The Website Administration shall take necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties.
5.5. The Website Administration, jointly with the User, shall take all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.
5.6. The User or his legal representative may at any time change (update, supplement) personal data provided by him or part of it, using the function of editing personal data in the personal section of the Website, or by sending a corresponding request by email specified in Section 9 of this Policy.
5.7. Consent to the processing of personal data can be withdrawn by the User by submitting an application to the Website Administration indicating the grounds in accordance with the legislation of the Kyrgyz Republic. Withdrawal of consent to the processing of personal data can be executed by sending a corresponding application by the User in free written form to the email address specified in Section 9 of this Policy.
CHAPTER 6. OBLIGATIONS OF PARTIES
6.1. The User shall be obliged to:
-
Provide information about personal data required to use the Company’s Website;
-
Update, supplement the provided information about personal data in case of changes in this information by way of sending such information to the Website Administration.
6.2. The Website Administration shall be obliged to:
-
Use the information received solely for the purposes specified in clause 4 of this Policy;
-
Ensure the storage of confidential information in secret, not disclose without the prior written permission of the User, as well as not sell, exchange, publish, or disclose the transferred personal data of the User in other possible ways, with the exception of clause 5.2. of this Policy;
-
Take precautions to protect the confidentiality of the User's personal data in accordance with the procedure usually used to protect this type of information in the existing business practice;
-
Block personal data related to the relevant User from the moment of application or request of the User or his legal representative or an authorized body for protection of rights of subjects of personal data for the period of verification, in case of revealing inaccurate personal data or illegal actions.
CHAPTER 7. LIABILITY OF PARTIES
7.1. The Website Administration, which has not fulfilled its obligations, shall be liable for losses incurred by the User in connection with unlawful use of personal data, in accordance with the legislation of the Kyrgyz Republic, with the exception of cases provided for in clauses 5.2. and 7.2. of this Policy.
7.2. In case of loss or disclosure of confidential information, the Website Administration shall not be responsible if this confidential information:
-
became public domain before its loss or disclosure;
-
had been received from a third party before it was received by the Website Administration;
-
was disclosed with the consent of the User.
CHAPTER 8. DISPUTE SETTLEMENT
8.1. Before filing a lawsuit with a claim for disputes arising from the relationship between the User of the Company’s Website and the Website Administration, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute).
8.2. The recipient of the claim shall notify the applicant of the claim in writing about outcomes of considering the claim within 30 calendar days from the date of the claim’s receipt.
8.3. If compromise is not reached, the dispute shall be referred to a judicial authority in accordance with the current legislation of the Kyrgyz Republic.
8.4. The current legislation of the Kyrgyz Republic shall apply to this Policy and the relationship between the User and the Website Administration.
CHAPTER 9. ADDITIONAL TERMS
9.1. The Website Administration shall have the right to make changes to this Policy without the consent of the User. If the User does not agree with the changes made, or with the terms of use of the materials and services of the Website, he shall refuse access to the Website, stop using materials and services of the Website from the date the changes made come into force.
9.2. The new Policy comes into force from the moment it is posted on the Company's Website, unless otherwise provided by a new edition of the Policy.
9.3. The User can receive any clarifications on issues of interest regarding the processing of his personal data by contacting the Website Administration via email: office@tolt.kg.
9.4. Recognition by a court of any provision of this Policy as invalid does not entail the invalidity of other provisions of this Policy.
9.5. Issues not regulated by this Policy are regulated by the legislation of the Kyrgyz Republic and internal regulatory documents of the Company.
9.6. In case of any conflict between the Russian and English texts of this Policy, the Russian version shall prevail.