Connect

Personal Data Processing Policy

General Provisions

  1. Zesta Limited Liability Partnership, BIN 231140019717 (hereinafter referred to as "Company", "we", "us", "our"), regularly collects and uses information that can identify an individual ("personal data"), in particular regarding the use of our services, mobile and software applications and websites.
  2. Every User is important to the Company, therefore, the protection of your personal data is very important to us, and we understand our responsibility to ensure the safety of personal data and compliance with the legislation of the Republic of Kazakhstan and other applicable jurisdictions.
  3. This Privacy Policy (hereinafter - the Policy) applies to all information that the Company and/or its affiliates may obtain about the User, client, partner (hereinafter - the User) while using the website, services, programs and products of the Company (hereinafter - Services).
  4. The user's consent to provide personal information, given by him/her in accordance with this Policy, extends to all persons using the Company's services. The Policy describes the procedure established by the Company for processing personal data collected through the website https://zesta.kz/ (hereinafter - the site), and related services and tools on the Site. In all these cases, the Company processes Users' personal data within the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and their Protection", as well as international treaties ratified by the Republic of Kazakhstan and other applicable jurisdictions. This Privacy Policy is developed in accordance with their norms. Data means any information relating directly or indirectly to a specific User. This may include: name, surname, patronymic (if any), email address, phone number, region of residence, residential address, information about User actions on the Site, IP address, data about devices used by the User (computer, browser type, operating system, etc.), messages (information contained in correspondence between the User and the Seller), other communication information provided by the User through the registration form, information provided when making payments and/or using any service provided by the Company.
  5. Data processing means any action with Data including, but not limited to: access, provision, distribution, collection, systematization, storage, accumulation, recording, transfer, blocking, deletion, clarification, updating and/or modification, depersonalization and other ways of using Data by the Company. The owner of the database containing personal data is the Company.
  6. By registering on the Site, entering their personal data and/or providing this data in another way, and/or performing any actions within the Site and/or using any part of the Site and/or expressing consent by clicking the "connect" and/or "submit application", and/or "check" button through the Site form, the User expresses their consent to the provisions of this Policy and grants the Company, as well as third parties that provide services to the Company related to the functionality of the Site (maintaining Site operability, etc.), permission to process their Data.
  7. The User has no right to use the Site if he/she does not agree with the terms of this Policy.

WHAT PERSONAL DATA MAY BE COLLECTED:

Data Type Description
Personal data Name, surname, patronymic (if any), passport data, individual identification number, date of birth, and/or age, gender, marital status, data of the company's authorized person, company name, company details, contact phones, email address, company location address, communication data at the User's request (for example, place and/or work address), payment card numbers, e-wallet login
Account information Login, phone number, email address, login and password, account processing data, other data necessary for servicing Site Users, communication with Users including during User requests to Site support
Data from concluded contracts Information that Users provide to the Company and other final executors when concluding service contracts by accepting the public offer posted on the Site
Survey results Data obtained as a result of various surveys conducted by the Company and/or third parties authorized by the Company, with the aim of improving services to Users
Data from marketing activities Information obtained by the Company as a result of marketing activities
Data from participation in programs and promotions Information posted or provided by Users during their participation in bonus programs, quizzes, promotions, special offers conducted on the Site organized by the Company
Data from completed questionnaires Information obtained from Users by filling out questionnaires or otherwise brought to the Company's attention (this may include information about: citizenship, place of birth, education, profession, specialization, experience, social status, family composition (surname, name, patronymic of such persons, their gender, age, place of registration and residence, contact details), photo, video image of the User (and/or authorized person of the User, etc.)
Data from partners and/or third parties Information obtained by the Company legally from partners and/or third parties
Cookie files Cookies are a small fragment of data that is sent to the user's computer when navigating to a web page and/or viewing an advertising module on a web page and stored on the user's computer

USE AND PURPOSES OF DATA PROCESSING

  1. The Company uses and processes Data for the purposes of:
    • identifying the client as a Site User including for providing services, processing payments, sending settlement operations, providing reports, maintaining accounting and management records, creating and implementing bonus programs, loyalty programs;
    • analyzing User activity, searching by keywords, managing Site traffic, analyzing and forecasting User preferences and interests; conducting research and analytical activities, as well as ensuring compliance with the terms of the Offer and other agreements and policies posted on the site by Users;
    • sending newsletters, commercial offers, messages about promotions, loyalty programs, bonus programs and/or for sending messages about Site operation;
    • providing Internet services of the Site by the Company, information exchange;
    • Cookie files for transmitting information about User actions on the Site to Google partners: social networks and companies engaged in advertising and web analytics;
    • Our partners may combine this information with information provided by Users, as well as data they received when you use their services; The Company may exchange data with final executors providing Services on the Site, who may process and use Data for the purpose specified in section 3 of this Policy.
  2. The Company does not process Data concerning racial, national origin, political views, religious and other beliefs, membership in public associations. Information that characterizes the physiological characteristics of Users, on the basis of which their identity can be established, is not processed.
  3. The terms of Data processing and storage are determined based on the purposes of Data processing, as well as based on the conditions specified in contracts concluded with Users in accordance with the requirements of the current legislation of the Republic of Kazakhstan and other applicable jurisdictions.

CONDITIONS FOR PROCESSING USER PERSONAL INFORMATION AND ITS TRANSFER TO THIRD PARTIES

  1. The user's personal information remains confidential, except in cases when the User voluntarily provides information about themselves for public access to an unlimited number of persons.
  2. The Company has the right to transfer the User's personal information to third parties in the following cases:
    • The User has expressed consent to such actions;
    • Transfer is necessary for the User to use a specific Service or to provide a service to the User;
    • Transfer is provided by applicable legislation within the procedure established by legislation;
    • In order to ensure the possibility of protecting the rights and legitimate interests of the Company or third parties in cases where the user violates the Terms of use of the site, agreements, contracts, internal documents of the Company.

USER CHANGES TO PERSONAL INFORMATION, USER RIGHTS

  1. The User may at any time change (update, supplement) or delete the personal information provided by them or part of it by sending a request to change, update or delete personal information or part of it through the feedback form on the Company's website.
  2. User rights in connection with the Company processing their personal data:
    • to know about the Company's, as well as a third party's possession of their personal data, and also to receive information containing: confirmation of the fact, purposes, sources, methods of collecting and processing personal data; list of personal data; terms of personal data processing, including their storage terms;
    • to demand from the Company changes and additions to their personal data if there are grounds confirmed by relevant documents;
    • to demand from the Company, as well as a third party, destruction of their personal data, collection and processing of which were made in violation of the legislation of the Republic of Kazakhstan and other applicable jurisdictions, as well as in other cases established by regulatory legal acts of the Republic of Kazakhstan and other applicable jurisdictions;
    • to withdraw consent to the collection, processing of personal data, except for cases provided for in paragraph 2 of Article 8 of the Law of the Republic of Kazakhstan "On Personal Data and their Protection" and other applicable jurisdictions;
    • to protect their rights and legitimate interests, including compensation for moral and material damage;
    • to exercise other rights provided for by the laws of the Republic of Kazakhstan and other applicable jurisdictions.

MEASURES APPLIED TO PROTECT USER PERSONAL INFORMATION:

  1. The Company takes necessary and sufficient organizational and technical measures to protect the user's personal information from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions with it by third parties.
  2. All information collected by the Company is reasonably protected by technical means and security procedures to prevent unauthorized access or use of data.
  3. Persons affiliated with the Company, partners and third-party service providers undertake to use information received from the Company in accordance with our security requirements and this Policy.

CHANGES TO THE PRIVACY POLICY. APPLICABLE LEGISLATION

  1. If necessary, the Company may make changes to this Policy to keep the document up to date: in order to comply with legal requirements or for other reasons. The Company will inform you about significant changes to this Policy by sending a message to your email or posting a notice on our website, mobile application. We recommend regularly checking and reviewing the Policy to be aware of what information the Company collects, how personal data is used.
  2. Use of Services means the user's unconditional consent to this Policy and the conditions for processing their personal information specified in it; in case of disagreement with these conditions, the user must refrain from using the Services.
  3. The law of the Republic of Kazakhstan and other applicable jurisdictions shall apply to this Policy and the relationship between the user and the Company arising in connection with the application of the Privacy Policy.