PRIVACY POLICY FOR THE INFORMATION PROVIDED

This Data Privacy Policy (hereinafter referred to as the “Privacy Policy”) applies to the data that JSC “Bank CenterCredit” (BIN 980 640 000 093, Almaty, Al-Farabi Ave. 38) may obtain through the website located on the Internet under the domain name: https://dnk-test.kz/ The Company processes users’ data exclusively within the framework of the requirements of the legislation of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection”, as well as international treaties ratified by the Republic of Kazakhstan. The Privacy Policy (hereinafter referred to as the “Policy”) has been developed in accordance with these regulations.

Use of the Website by the User signifies agreement with this Privacy Policy and the terms of data processing. If the User does not agree with the terms of the Privacy Policy, the User must discontinue using the Website.

This Policy is intended to ensure proper protection of information about Users, including their personal data, from unauthorized access and disclosure.

This Policy, as well as other official documentation of the Website and the current legislation of the Republic of Kazakhstan, governs relations related to the collection, storage, distribution, and protection of information about Website users. In the event of any contradictions between this Policy and other official documents of the Website, this Policy shall prevail.

Users should be aware that when following certain links posted on the Website, they may be redirected to websites (applications, etc.) of other companies outside the hosting space of JSC “Bank CenterCredit” (“Facebook”, “Google+”, “VKontakte”), where information about Users is collected beyond the direct control of JSC “Bank CenterCredit” and the Website Administration. In such cases, the privacy policies of third-party websites and/or applications will govern the processing of information received from users by these third parties. JSC “Bank CenterCredit” and the Website Administration are not responsible for information provided by the User to such third parties.

If the User chooses to log in to the Website using a third-party authentication service, for example Facebook, the Company may receive an additional profile or other information to which the User has granted access in the third-party account for provision to third parties.

DEFINITION OF TERMS

1.1. The following terms are used in this Privacy Policy:

1.1.1. “Website Administration” — authorized employees acting on behalf of JSC “Bank CenterCredit” who organize and/or carry out the processing of confidential data, as well as determine the purposes of processing confidential data, the composition of confidential data subject to processing, and the actions (operations) performed with confidential data.
1.1.2. Confidential data — data left by the Website User in feedback forms and service connection application forms, Cookies, as well as data automatically transmitted during use of the Website, including but not limited to: IP address, information about the device used for access, etc.
1.1.3. “Personal data” — information relating to an identified or identifiable subject of personal data, recorded on electronic, paper, and/or other tangible media.
1.1.4. “Processing of personal data” — any action (operation) or set of actions (operations) performed using automation tools or without such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, and destruction of personal data.
1.1.5. “Confidentiality of personal data” — a mandatory requirement for the Operator or any other person who has gained access to personal data to prevent their disclosure without the consent of the personal data subject or the presence of another lawful basis.
1.1.6. “User” of the website https://dnk-test.kz/ — a person who has access to the Website via the Internet and uses the Website.
1.1.7. “Website” — a website located on the Internet at the domain address https://dnk-test.kz/
1.1.8. “Cookies” — a small piece of data sent by a web server and stored on the User’s computer, which the web client or web browser sends to the web server in each HTTP request when attempting to open a page of the relevant website.
1.1.9. “IP address” — a unique network address of a node in a computer network built using the IP protocol.

SUBJECT OF THE PRIVACY POLICY

2.1. Use of the Website by the User signifies agreement with this Privacy Policy and the terms of processing the User’s personal data.
2.2. If the User does not agree with the terms of the Privacy Policy, the User must discontinue using the website dnk-test.kz.
2.3. This Privacy Policy applies only to the website dnk-test.kz. The online store does not control and is not responsible for third-party websites to which the User may be redirected via links available on the Website.
2.4. The Website Administration does not verify the accuracy of personal data provided by the Website User.

2.1. This Privacy Policy establishes the obligations of the Website Administration to maintain confidentiality and ensure protection of confidential data provided by the User when using the Website, including when submitting a service connection application.
2.2. Confidential data permitted for processing within the framework of this Privacy Policy is provided by the User by completing the registration form (an example is provided below), feedback forms, and includes the User’s name (at the User’s discretion), phone number, and email address of a legal entity. If, instead of contact details of a legal entity, the User provides their personal data in the application form, the Company ensures their protection in accordance with the legislation of the Republic of Kazakhstan on personal data.
2.3. In addition to the registration form, various web analytics systems may be used on the Website. The Website protects data that is automatically transmitted during viewing of advertising blocks and when visiting Website pages, including:

IP address;
information from Cookies;
browser information (or other program used to access advertising display);
operating system;
access time, time zone/region;
Website page address.

2.3.1. Disabling Cookies may result in the inability to access certain sections of the Website.

2.3.2. The Website Administration may collect statistics regarding the data specified in clause 2.3 of this Privacy Policy. This information is used to identify and resolve technical issues and to prevent fraud.

2.3.3. Information is subject to secure storage and non-disclosure, except in cases provided for by this Privacy Policy and the legislation of the Republic of Kazakhstan.

2.3.4. The Company and the Website Administration have the right to provide User information to their affiliates (including those operating outside the territory of the Republic of Kazakhstan), as well as to other companies associated with the Company for the purposes specified above. At the same time, affiliates and related companies are required to comply with the provisions of this Policy.

2.3.5. The Company does not provide User information to companies and individuals not affiliated with the Company, except in the following cases:

- The User has given their consent;
- On the grounds and in the manner established by the legislation of the Republic of Kazakhstan, including for the purpose of:
  - execution of court decisions or fulfillment of lawful requirements of government authorities;
  - elimination of technical failures or security issues;
  - protection of the rights, property, or safety of the Company and users of the Company’s services within the limits permitted by applicable law.

PROCEDURE FOR THE PRIVACY POLICY AND AMENDMENTS THERETO

3.1. This Policy enters into force for an indefinite period from the moment it is approved by the Company. The current Policy becomes invalid after it is replaced by a new Policy. Replacement of the Policy is carried out by publishing its new version on the Website.
3.2. The current version of the Policy, which is a public document, is available to any Internet user at https://dnk-test.kz/politika-konfidentsialnosti/

TERMS AND PURPOSES OF PROCESSING CONFIDENTIAL DATA

4.1. The Website Administration processes the User’s confidential data for the following purposes:

— consideration of the User’s application for connecting services provided by JSC “Bank CenterCredit” to a legal entity/individual entrepreneur, as well as interaction for the purpose of collecting the necessary documents and information to conclude the relevant agreement with JSC “Bank CenterCredit” and/or its partners, consulting on the services provided, informing about current and new products of JSC “Bank CenterCredit” and its partners;
— technical management of the Website, as well as analysis and improvement of its performance;
— the Company has the right to send the User notifications about new products and services, special offers, and various events. The User may opt out of receiving messages by sending an email to info@dnk-test.kz with the subject “Unsubscribe from notifications”.

METHODS AND TERMS OF PROCESSING CONFIDENTIAL DATA

5.1. Processing of the User’s data is carried out without time limitation by any lawful means, including in personal data information systems using automation tools or without such tools.
5.2. The User gives consent to the processing of confidential data without time limitation.
5.3. The User’s data may be transferred to authorized state authorities of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan.
5.4. The Website Administration is obliged to take the necessary organizational and technical measures to ensure confidentiality, integrity, safety, and availability of Users’ confidential data, as well as to comply with other data processing requirements established by the legislation of the Republic of Kazakhstan.
5.5. In the event of loss or disclosure of confidential data, the Website Administration informs the User about the loss or disclosure of their data.
5.6. The Website Administration, together with the User, takes all necessary measures to prevent losses or other adverse consequences caused by the loss or disclosure of the User’s confidential data.

OBLIGATIONS OF THE PARTIES

6.1. The User is obliged to:

6.1.1. Provide up-to-date data requested by the Website at the time of its use.
6.1.2. Update and supplement the provided data in case of changes to this information.
6.1.3. Obtain all necessary consents from third parties in advance if providing their data to the Website Administration.

6.2. The Website Administration is obliged to:

6.2.1. Use the obtained confidential data exclusively for the purposes specified in Section 4 of this Privacy Policy.
6.2.2. Ensure storage of confidential information in secrecy, not disclose it without the User’s prior written permission, and not sell, exchange, publish, or otherwise disclose confidential data, except in cases provided for by this Privacy Policy, concluded client agreements, and the legislation of the Republic of Kazakhstan.
6.2.3. Take precautionary measures to protect the confidentiality of the User’s data in accordance with the procedure usually applied to protect such information in existing business practice and in accordance with the requirements of the legislation of the Republic of Kazakhstan.

7. LIABILITY OF THE PARTIES

7.1. The Website Administration that has failed to fulfill its obligations bears liability for losses incurred by the User in connection with unlawful use of confidential data in accordance with the legislation of the Republic of Kazakhstan, except for cases provided for in clause 7.2 of this Privacy Policy.

7.2. In the event of loss or disclosure of confidential information, the Website Administration shall not be liable if such confidential information:

7.2.1. Became publicly available prior to its loss or disclosure.

7.2.2. Was obtained from a third party before it was received by the Website Administration.

7.2.3. Was disclosed with the User’s consent.

7.3. The User shall fully compensate JSC “Bank CenterCredit” for damages in the event that third parties, including government authorities, file claims or lawsuits against JSC “Bank CenterCredit” related to the processing of personal data transferred by the User to the Website Administration without the consent of the personal data subject, or processing of inaccurate/false/outdated personal data due to the User’s fault.

DISPUTE RESOLUTION

8.1. Before filing a claim in court regarding disputes arising from relations between the User of the website https://dnk-test.kz/ and the Website Administration, submission of a claim (a written proposal for voluntary settlement of the dispute) is mandatory.
8.2. The recipient of the claim shall, within 30 (Thirty) calendar days from the date of receipt of the claim, notify the claimant in writing of the results of the claim review.
8.3. If no agreement is reached, the dispute shall be referred to a judicial authority in accordance with the current legislation of the Republic of Kazakhstan.
8.4. The current legislation of the Republic of Kazakhstan applies to this Privacy Policy and relations between the User and the Website Administration.

ADDITIONAL TERMS

9.1. Processing of personal data is carried out from the moment of concluding agreements between JSC “Bank CenterCredit” and clients and is regulated by their terms.
9.2. The User/personal data subject may withdraw consent to the processing of personal data at any time by sending a written request to JSC “Bank CenterCredit” at the address: Almaty, Al-Farabi Ave. 38. In this case, the Website Administration may continue processing personal data without the User’s/personal data subject’s consent in cases established by the legislation of the Republic of Kazakhstan.
9.3. The User/personal data subject has the right to exercise their rights provided for in Chapter 4 of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection”, including the right to obtain information regarding the processing of personal data, request clarification, blocking, or destruction of personal data in cases provided by law, and take measures to protect their rights. Interaction is carried out in writing at the address specified in clause 9.2 of this Privacy Policy.
9.4. The law of the Republic of Kazakhstan shall apply to this Privacy Policy and relations between the User and the Website Administration arising in connection with the application of this Privacy Policy.
9.5. The Operator has the right to make changes to this Privacy Policy without the User’s consent.
9.6. The new Privacy Policy enters into force from the moment it is posted on the website https://dnk-test.kz/, unless otherwise provided by the new version of the Privacy Policy.
9.7. The User undertakes to independently monitor changes to the Privacy Policy by reviewing the current version.
9.8. All suggestions or questions regarding this Privacy Policy should be submitted by sending an inquiry via the Website.
9.9. The Privacy Policy is posted on the page at https://dnk-test.kz/politika-konfidentsialnosti/