PERSONAL DATA COLLECTION AND PROCESSING
AGREEMENT
- General:
1.1. The Personal Data Collection and Processing Agreement (hereinafter referred to as the “Agreement”) shall be aimed at protection of the rights and freedoms of the individuals whose personal data are received by Public Association “Red Crescent Society of the Republic of Kazakhstan” (hereinafter referred to as the “Information User”).
1.2. The Agreement has been developed in accordance with the current laws of the Republic of Kazakhstan.
1.3. The Agreement shall be a public document.
- Information about the Information User
2.1. The Information User shall be Public Association “Red Crescent Society of the Republic of Kazakhstan”, Business Identification Number (BIN): 961240004229.
2.2. Legal and operating address of the Information User shall be as follows: 86 Kunaev Street, Medeu District, Almaty, 050010, Republic of Kazakhstan.
- Information about personal data processing
3.1. The Information User shall process personal data on a lawful and fair basis for achieving the set goals, including provision of services and transfer of information to the Personal Data Owners (hereinafter referred to as the “Client”).
3.2. The Information User shall receive personal data directly from the Clients and/or from any third parties.
3.3. The Information User shall process personal data in automated and non-automated ways, using computer equipment and without using such equipment.
3.4. The Client agrees to the Information User’s actions with respect to his (related to him) personal data, which include receiving, collecting, recording, processing, systematizing, accumulating, storing, destroying, changing, clarifying, depersonalizing, blocking, extracting, using, sharing, transferring to third parties, cross-border transfer.
3.5. If necessary to achieve the goals specified in paragraph 4.2. of Article 4 of this Agreement, the Client agrees to provide his (related to him) personal data (subject to confidentiality and protection of personal data received) to third parties (including international and foreign persons/organizations), for involvement of third parties in the provision of services for the specified purposes and to provide such persons with relevant documents containing information about the Client. Such consent of the Client shall be considered as consent given by the Client to the third parties specified above, and such third parties shall have the right to process the personal data of the Clients on the basis of this Agreement.
- Processing of personal data of the Clients
4.1. The Information User shall process the personal data of the Clients according to the legal relations between the Information User and the Client and in accordance with the laws of the Republic of Kazakhstan.
4.2. The Information User shall process the personal data of the Clients in compliance with the laws of the Republic of Kazakhstan for the following purposes, including, but not limited to:
4.2.1. acceptance and processing of any requests and applications from Clients, which include requests and applications for adding the Client (his (related to him) personal data) to the list to receive services and assistance from third parties, including international and foreign persons/organizations, associated with the Information User;
4.2.2. making reports for local, foreign and international donor and partnership organizations, legal entities and individuals on the work performed, the campaigns, meetings and actions held, the assistance and services provided and other activities with the Client’s participation;
4.2.3 inform about new projects, campaigns and services, opportunities of assistance to be provided;
4.2.4 send electronic notices/receipts;
4.2.5 mail out newsletters;
4.2.6. accept donations including using various tools and technologies (for example, SalesForce, iRaiser, Cloud Payments), including cross-border transfer of personal data to any third parties (provided that such third parties will ensure confidentiality and protection of the personal data received);
4.2.7. organize volunteering activities of the Client, including mobilization, training, encouraging, if possible, insurance, including through international organizations, which are the partners of the Information User;
4.2.8. interaction with members of Information User, which includes admission and termination of membership, acceptance of membership fees, creation of a membership database and other types of interaction with members in accordance with the statutory documents of the Information User.
4.3. The Information User shall process the personal data of the Clients according to their consent to be issued by the Clients and/or their legal representatives by signing consent to join this Agreement in a hard copy form and/or by performing specific actions described on the Website at: https://redcrescent.kz (hereinafter referred to as the “Website”) and on the web pages, links to which are available on the Website, including, but not limited to, subscribing to the newsletter mail out, as well as by checking the box of consent, in accordance with this Agreement.
4.4. The Information User shall process the personal data of the Clients no longer than required for processing of personal data, unless otherwise set forth by the laws of the Republic of Kazakhstan.
4.5. The Information User may process the following personal data of the Clients:
4.5.1. last name, first name, patronymic (if any);
4.5.2. date of birth;
4.5.3. gender;
4.5.4. Identity Card information, Individual Identification Number (IIN);
4.5.5. contact phone number;
4.5.6. email address;
4.5.7. postal and residence address;
4.5.8. bank details;
4.5.9. citizenship;
4.5.10. information about marital status, composition and family members;
4.5.11. information about education, work experience, employment records, language skills and special professional skills;
4.5.12. data on the status and group of disability, social benefits and social status;
4.5.13. images (photo and video), including in a digital form;
4.5.14 other biographical details and any personal data received from the Client.
- Information on ensuring the security of the personal data of the Clients
5.1. When processing personal data, the User shall take the necessary legal, organizational and technical measures, or shall ensure that such measures are taken to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, sharing, as well as from any other illegal actions regarding personal data.
5.2. The measures to be taken by the Information User to ensure the security of personal data while they are processed shall be scheduled and implemented to ensure compliance with the requirements of the laws of the Republic of Kazakhstan.
- The Client’s Rights
6.1. The Client shall have the right:
6.1.1 to request to provide the personal data used;
6.1.2. to clarify (change) his personal data if it is incomplete, outdated, inaccurate, after the Cient notified in writing the Information User about the changes and/or additions to his personal data;
6.1.3 to withdraw his consent to the processing of personal data by sending a written request to the postal address specified in clause 2.2. of this Agreement, or an email to the email address: info@redcrescent.kz;
6.1.4. to protect his rights and legitimate interests, as well as to appeal against actions or omissions of the Information User to an authorized body in accordance with the laws of the Republic of Kazakhstan.
6.2. To contact the Information User in the manner prescribed by the laws of the Republic of Kazakhstan for exercising his rights and legitimate interests.
- Final provisions
7.1. The Agreement and relations between the Information User and the Client shall be governed and interpreted in accordance with the laws of the Republic of Kazakhstan. The issues not regulated by this Agreement shall be resolved in accordance with the laws of the Republic of Kazakhstan.
7.2. This Agreement shall be a public offer in accordance with clause 5 of Article 395 of the Civil Code of the Republic of Kazakhstan. The fact of signing the accession to this Agreement and consent to processing of personal data in a hard copy or the fact that the Client checks the box of acceptance of this Agreement on the Website or on the web pages, links to which are available on the Website, shall be considered as his consent with the content of this Agreement, and shall be a full and unconditional acceptance of this Agreement (in accordance with clause 3 of Article 396 of the Civil Code of the Republic of Kazakhstan). No ignorance of provisions of this Agreement shall release the Client from liability for non-compliance with its terms and conditions.
7.3. The Information User shall reserve the right, at its sole discretion, to amend and/or supplement the Agreement at any time without prior and/or subsequent notice to the Client. The current version of the Agreement shall be available on the Website.
7.4. In respect of each Client, this Agreement shall come into force when the Client performs the actions specified in clause 7.2 of the Agreement, and shall be valid until the termination of data processing, or until the termination of the Information User’s activity, or until the Client withdraws his consent to the processing of personal data.