PERSONAL DATA PRIVACY POLICY

This personal data privacy policy (hereinafter referred to as the Privacy Policy) shall apply to full information becoming available to the web-site of “BMH EAST” LLP (hereinafter, BMH EAST LLP), located at the domain name of bmh-east.kz (including all its sub-domains), in relation to the User during their use of web-site bmh-east.kz (including its sub-domains), its programs and products.
1. TERMS AND DEFINITIONS
1.1. This Privacy Policy shall include the following terms:
1.1.1. “Web-Site Administration” (hereinafter, the Administration) shall mean persons authorised for administration of the web-site of BMH EAST LLP, and engaged in personal data management and/or processing, as well as establishment of purposes of personal data processing, contents of personal data subject for processing, and actions/operations to be performed in relation to the personal data.
1.1.2. “Personal Data” shall mean any information in relation to an individual (personal data subject), directly or indirectly identified or to be identified.
1.1.3. “Personal Data Processing” shall mean any action/operation or cumulative actions/operations performed in relation to personal data with or without any automation means, including their collection, recording, systematisation, accumulation, storage, update (renewal, change), extraction, use, delivery (distribution, provision, granting of access), depersonalisation, blockage, removal, and disposal.
1.1.4. “Personal Data Privacy” shall mean a requirement to avoid personal data distribution without the personal data subject consent thereto or any legal reason therefor, which is mandatory for the Operator or any other person granted with access to personal data to comply with.
1.1.5. “Web-Site” or “Site” shall mean a set of inter-related web-pages located in the Internet network under the unique address (URL) bmh-east.kz and its sub-domains.
1.1.6. “Sub-Domains” shall be pages or a set of pages located at third-level domains, belonging to the web-site of BMH EAST LLP, as well as any other temporary pages having contact details of the Administration in the bottom.
1.1.7. “User of BMH EAST web-site” (hereinafter, the User) shall be a person, granted with access to the Web-Site of BMH EAST LLP via the Internet network and using information, materials and products of the Web-Site of BMH EAST LLP.
1.1.8. “Cookies” shall mean a small data fragment, sent by the web-server and stored at the User's computer for further sending by the web-client or the web-browser to the web-server in the HTTP-request at each attempt of the relevant web-site opening.
1.1.9. “IP-Address” shall be a unique network address of a network site, the User is trying to get access to BMH EAST LLP through.

2. GENERAL
2.1. This Policy shall establish a procedure for processing personal data of the Web-Site Users, conditions and guidelines for personal data processing, rights of Users and obligations of the Administration, and details of applied personal data protection measures.
2.2. This Policy shall apply to all personal data, the Administration receives from Users during their use of the Web-Site.
2.3. Use of BMH EAST Web-Site by the User shall mean their consent with this Privacy Policy and conditions of the User's personal data processing.
2.4. If the User disagrees with conditions of this Privacy Policy, they shall stop using BMH EAST Web-Site.
2.5. This Privacy Policy shall apply to the Web-Site of BMH EAST LLP. BMH EAST LLP does not control or bear any responsibility for web-sites of third parties, the User may go to using any links available at BMH EAST web-site.
2.6. The Administration shall not check accuracy of personal data provided by the User.
2.7. The User shall acknowledge that responsibility for any information (including but not limited to data files, texts, etc.) is born by the person provided such information. The User shall be fully responsible for compliance with the requirements of the laws of the Republic of Kazakhstan with regard to personal data.

3. SUBJECT OF PRIVACY POLICY
3.1. This Privacy Policy shall establish obligations of the Administration on non-disclosure and ensuring protection of personal data, the User provides at the request of the Administration during registration at BMH EAST Web-Site or subscribing for e-mail newsletters.
3.2. Personal data authorised for processing under this Privacy Policy shall be delivered by the User by filling of forms available at BMH EAST Web-Site, and shall involve the following information:
3.2.1 User's surname, name and patronymic name;
3.2.2 User's contact phone number;
3.2.3 E-mail address;
3.2.4 User's residence address (if necessary);
3.2.5 Photo image (if necessary).
3.3. BMH EAST LLP shall protect all data, automatically sent during visit of pages:
- IP-address;
- data from cookies;
- details of the browser;
- access time;
- referrer (address of the previous page).
3.3.1. Deactivation of Cookies may result in inability to access Web-Site parts requiring authorization.
3.3.2. BMH EAST LLP shall collect statistics of IP-addresses of its visitors. This information shall be used to avoid, detect and solve technical issues.
3.4. Any other personal data, not mentioned above (browsing history, used browsers, operating systems, etc.), shall be subject for safe keeping and non-disclosure, except for the cases provided in sub-clause 5.2 of this Privacy Policy.
3.5. Cookie-files contain no private information. Cookie-files are used to keep details of the User's preferences and settings, as well as to collect analytics of the Web-Site visits. Use of the Web-Site shall mean that the User agrees for all cookie-files and analytics of their visit of the Web-Site to be used, as well as to be delivered to third parties.

4. PURPOSES OF USER PERSONAL DATA COLLECTION
4.1. The Administration may use the User's personal data for the following purposes:
4.1.1. Identification of the User registered at BMH EAST Web-Site for their further authorization;
4.1.2. Granting the User with access to personalised data of BMH EAST Web-Site;
4.1.3. Getting feedback from the User, including notifications and requests with regard to use of BMH EAST Web-Site, and processing of the User's requests and orders;
4.1.4. Identification of the User's location to ensure safety and prevent frauds;
4.1.5. Verification of accuracy and completeness of personal data provided by the User;
4.1.6. Registration of an account for authorisation of use of BMH EAST Web-Site parts, if the User gives their consent for such account registration;
4.1.7. Notification of the User with e-mail messages;
4.1.8. Provision of adequate technical support to the User in case of any issues connected to the use of BMH EAST Web-Site;
4.1.9. Sending special proposals, newsletters and other information on behalf of BMH EAST Web-Site to the User upon their consent.

5. METHODS AND TIME OF PERSONAL DATA PROCESSING
5.1. The User's personal data shall be processed with no time restrictions, using all legal methods, including personal data information systems, with or without automation means.
5.2. The User's personal data may be delivered to competent state authorities of the Republic of Kazakhstan only on grounds and in a manner established by the laws of the Republic of Kazakhstan.
5.3. In case of personal data loss or disclosure, the Administration shall have the right not to notify the User on such personal data loss or disclosure.
5.4. The Administration shall take all necessary administrative and technical measures to protect the User's personal data from illegal or accidental access, disposal, change, blockage, duplication, distribution, and other illegal actions of third parties.
5.5. The Administration together with the User shall take their best efforts to prevent damages and other negative outcomes connected with the User's personal data loss or disclosure.

6. RIGHTS AND OBLIGATIONS OF PARTIES
6.1. The User shall have the rights to:
6.1.1. Take their free decision on provision of their personal data, necessary for use of BMH EAST Web-Site, and give their consent for their processing;
6.1.2. Update and supplement their personal data provided in case of their change;
6.1.3. The User shall have the right to obtain information from the Administration in relation to processing of their personal data, unless such right is restricted with any federal law. The User shall have the right to demand updating, blockage or disposal of their personal data from the Administration, if such personal data are incomplete, aged, inaccurate, illegally obtained or not necessary for the specified purpose of processing, as well as take any measures as provided by the law to protect their rights. For this purpose, the Administration shall be notified at the E-mail address stated at the Web-Site.
6.1.4. The personal data processing consent provided by the User shall become effective starting from the date of such consent and shall be valid till the date of all processing purposes fulfillment or the User's consent cancellation, unless otherwise is provided with current laws of the Republic of Kazakhstan.
6.1.5. The User shall have the right to withdraw their consent provided to the Company in a manner established with this Policy and the laws of the Republic of Kazakhstan.
6.2. The Administration shall be obliged to:
6.2.1. Use the provided information only for the purposes stated in clause 4 of this Privacy Policy.
6.2.2. Keep all private data confidential, not to disclose them without prior written consent of the User, as well as not to sell, exchange, publish, or otherwise disclose the User's personal data provided, except for provisions stated in clause 5.2 of this Privacy Policy.
6.2.3. Take all preventive measures to protect the User's personal data confidentiality, using the procedure generally used for protection of such information as established with the business practice.
6.2.4. Block personal data in relation to the relevant User starting from the date of a request or application of the User, or their legal representative, or an authorised body in the field of protection of personal data for the period of their verification, in case of identification of any inaccurate personal data or illegal actions.
6.2.5. The Administration shall undertake to comply with legal rights of Users of the Web-Site in the field of personal data processing, as well as to comply with any other requirements for personal data processing, as established by the laws of the Republic of Kazakhstan.
6.3. In case of Confidential information loss or disclosure, the Administration shall no be liable therefor, if such confidential information:
6.3.1. had become public prior to its loss or disclosure;
6.3.2. had been received from a third party before the Web-Site Administration received it;
6.3.3. has become public upon the User's consent.

7. DISPUTE SETTLEMENT
7.1. Prior to demand any legal actions in relation to disputes connected with relations between the User and the Administration, delivery of a claim (a written or a digital proposal on voluntary settlement of a dispute) shall be mandatory.
7.2. The claim receiver shall notify the applicant on results of the claim review in writing or via e-mail within 30 calendar days from the date of the claim receipt.
7.3. If no agreement on the dispute is reached, it shall be subject for delivery to the court for further settlement in compliance with the current legal procedure of the Republic of Kazakhstan, at the offices of BMH EAST LLP.
7.4. Current laws of the Republic of Kazakhstan shall apply to this Privacy Policy and relations between the User and the Administration.

8. ADDITIONAL PROVISIONS
8.1. The Administration shall have the right to make amendments to this Privacy Policy without the User's consent.
8.2. The new Privacy Policy shall become effective from the date of its publication at BMH EAST Web-Site, unless otherwise is provided with the new revision of the Privacy Policy.
8.3. All proposals and questions in relation to this Privacy Policy shall be forwarded to the e-mail address stated at the Web-Site.