PRIVACY POLICYThis personal data processing policy has been drawn up in accordance with the requirements of the Law of the Republic of Kazakhstan No. 94-V dated May 21, 2013, "On Personal Data and Their Protection," and defines the procedure for processing personal data and the measures taken to ensure the security of personal data by IE Voyage Curated (hereinafter — the "Operator").
The Operator considers respect for human and civil rights and freedoms in the processing of personal data — including protection of the rights to privacy, personal and family confidentiality — to be the most important goal and condition of its activities.
This Operator policy regarding the processing of personal data (hereinafter — the "Policy") applies to all information the Operator may obtain about visitors to the website voyagecurated.com.
2. Basic Terms Used in the Policy
Automated processing of personal data — processing of personal data using computer technology;
Blocking of personal data — temporary suspension of the processing of personal data (except where processing is necessary to clarify the data);
Website — the collection of graphic and informational materials, as well as computer programs and databases, that ensure their availability on the internet at the network address
http://voyagecurated.com;
Personal data information system — a collection of personal data contained in databases, together with the information technologies and technical means that ensure their processing;
De-identification of personal data — actions as a result of which it becomes impossible, without the use of additional information, to determine that particular personal data belongs to a specific User or other data subject;
Processing of personal data — any action (operation) or set of actions (operations) performed with personal data, whether or not using automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), de-identification, blocking, deletion, and destruction of personal data;
Operator — a state body, municipal body, legal entity, or individual that independently or jointly with other persons organizes and/or carries out the processing of personal data, and that determines the purposes of processing personal data, the composition of personal data subject to processing, and the actions (operations) performed with personal data;
Personal data — any information relating directly or indirectly to a specific or identifiable User of the website
http://voyagecurated.com;
User — any visitor to the website
http://voyagecurated.com;
Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons;
Distribution of personal data — any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or at allowing an unlimited group of persons to become acquainted with personal data, including publication of personal data in mass media, posting on information and telecommunications networks, or providing access to personal data by any other means;
Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state, to a foreign government authority, foreign individual, or foreign legal entity;
Destruction of personal data — any actions as a result of which personal data are irretrievably destroyed, with the content of the personal data becoming impossible to restore in the personal data information system, and/or as a result of which the physical media containing the personal data are destroyed.
- 3. Personal Data the Operator May ProcessLast name, first name, patronymic;
- Email address;
- Phone numbers;
- The site also collects and processes de-identified data about visitors (including "cookie" files) using internet statistics services (Yandex Metrica, Google Analytics, and others).
The data listed above are collectively referred to in this Policy as "Personal Data."
The Operator does not store Users' payment card data and is not responsible for unauthorized third-party access to Users' payment cards. The User assumes full responsibility for the security of their payment card data on the website voyagecurated.com.
The Operator carries out the collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), de-identification, blocking, deletion, and destruction of personal data.
The Operator carries out automated processing of personal data, whether or not the information obtained is transmitted over information and telecommunications networks.
4. Purposes of Processing Personal DataThe purpose of processing a User's personal data is to inform the User by sending emails and SMS notifications.
The Operator also has the right to send the User notifications about new products and services, special offers, and various events.
De-identified User data collected through internet statistics services is used to gather information about User actions on the site, in order to improve the quality of the site and its content.
5. Legal Grounds for Processing Personal DataThe Operator processes a User's personal data only if the User has entered and/or submitted it independently through the special forms located on the website
http://voyagecurated.com. By filling out the relevant forms and/or submitting their personal data to the Operator, the User expresses their consent to this Policy.
The Operator processes de-identified data about the User if this is permitted by the User's browser settings (storage of "cookie" files and use of JavaScript technology is enabled).
6. Procedure for the Collection, Storage, Transfer, and Other Types of Processing of Personal DataThe security of the personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.
The Operator ensures the safekeeping of personal data and takes all possible measures to prevent access to personal data by unauthorized persons.
The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with current legislation.
If inaccuracies in the personal data are identified, the User may update them independently by sending the Operator a notice marked "Update of Personal Data."
The period for processing personal data is unlimited.
7. Cross-Border Transfer of Personal DataBefore beginning a cross-border transfer of personal data, the Operator must ensure that the foreign state to whose territory the personal data transfer is intended provides reliable protection of the rights of personal data subjects.
Cross-border transfer of personal data to the territory of foreign states that do not meet the above requirements may only be carried out if there is written consent from the personal data subject to the cross-border transfer of their personal data, and/or in connection with the performance of a contract to which the data subject is a party.
8. Final ProvisionsThe User may obtain any clarifications on questions of interest concerning the processing of their personal data by contacting the Operator.
Any changes to the Operator's personal data processing policy will be reflected in this document. The Policy is valid indefinitely until replaced by a new version.