PERSONAL DATA COLLECTION AND PROCESSING AGREEMENT

PERSONAL DATA COLLECTION AND PROCESSING
AGREEMENT

1. General:

1.1 The Personal
Data Processing Agreement (hereinafter referred to as the “Agreement”) shall be
aimed at protection of the rights and freedoms of the individuals whose
personal data are received by Public Association “Red Crescent Society of the
Republic of Kazakhstan” (hereinafter referred to as the “Information User”).

1.2 The
Agreement has been developed in accordance with the current laws of the
Republic of Kazakhstan.

1.3 The Agreement
shall be a public document.

 

2. Information
about the Information User

2.1 The
Information User shall be Public Association “Red Crescent Society of the
Republic of Kazakhstan”, Business Identification Number 9612400042.

2.2 Legal
address of the Information User shall be as follows: 86 KUNAEV STREET, MEDEU
DISTRICT, ALMATY, 050010, REPUBLIC OF KAZAKHSTAN.

The actual
address of the Information User shall be as follows: 86 KUNAEV STREET, MEDEU
DISTRICT, ALMATY, 050010, REPUBLIC OF KAZAKHSTAN.

 

3. Information
about personal data processing

3.1 The
Information User shall process personal data on a lawful and fair basis for
achieving the set goals, including provision of services and transfer of
information to the Personal Data Owners (hereinafter referred to as the
“Client”).

3.2 The
Information User shall receive personal data directly from the Clients.

3.3 The
Information User shall process personal data in automated and non-automated
ways, using computer equipment and without using such equipment.

3.4 Personal
data processing activities shall include receipt, collection, processing,
accumulation, storage and use of data.

 

4. Processing of
personal data of the Clients

4.1 The
Information User shall process the personal data of the Clients according to the
legal relations between the Information User and the Client and in accordance
with the laws of the Republic of Kazakhstan.

4.2 The
Information User shall process the personal data of the Clients in compliance
with the laws of the Republic of Kazakhstan in order to:

4.2.1 receive
requests and applications from the Clients;

4.2.2 inform
them about new projects, campaigns and services, opportunities of assistance to
be provided;

4.2.3 send
electronic notices/receipts;

4.2.4 mail out
newsletters;

4.2.5 accept
donations including using various tools and technologies (for example,
SalesForce, iRaiser, Cloud Payments), including cross-border transfer of
personal data to any third parties (provided that such third parties will
ensure confidentiality and protection of the personal data received).

4.3 The
Information User shall process the personal data of the Clients according to
their consent to be issued by the Clients and/or their legal representatives by
performing specific actions described on the Website at: https://redcrescent.kz
(hereinafter referred to as the “Website”) and on the web pages,
links to which are available on the Website, including, but not limited to,
subscribing to the newsletter mail out, as well as by checking the box of
consent, in accordance with this Agreement.

4.4 The
Information User shall process the personal data of the Clients no longer than
required for processing of personal data, unless otherwise set forth by the
laws of the Republic of Kazakhstan.

4.5 The
Information User may process the following personal data of the Clients:

4.5.1 last name,
first name, patronymic;

4.5.2 date of
birth;

4.5.3 contact
phone number;

4.5.4 email
address;

4.5.5 postal
address;

4.5.6 bank
details;

4.5.7 and other
personal data received from the Client.

 

5. Information
on ensuring the security of the personal data of the Clients

5.1 When
processing personal data, the User shall take the necessary legal,
organizational and technical measures, or shall ensure that such measures are
taken to protect personal data from unauthorized or accidental access,
destruction, modification, blocking, copying, provision, distribution, as well
as from any other illegal actions regarding personal data.

5.2 The measures
to be taken by the Information User to ensure the security of personal data
while they are processed shall be scheduled and implemented to ensure
compliance with the requirements of the laws of the Republic of Kazakhstan.

 

6. The Client’s
Rights

6.1 The Client
shall have the right:

6.1.1 to request
the personal data used;

6.1.2 to clarify
(amend) his/her personal data if they are incomplete, outdated, inaccurate;

6.1.3 to
withdraw his/her consent to the processing of personal data by sending a
written request to the postal address specified in clause 2.2. of this
Agreement, or an email to the email address: info@redcrescent.kz;

6.1.4 to protect
his/her rights and legitimate interests, including recovery of losses and
compensation for moral damage in court;

6.1.5 to appeal
against the actions or inaction of the Information User at the authorized body
for protection of consumer rights or in court.

6.2 to contact
the Information User in the manner prescribed by the laws of the Republic of
Kazakhstan for exercising his/her rights and legitimate interests.

 

7. Final
provisions

7.1 The
Agreement and relations between the Information User and the Client shall be
governed and interpreted in accordance with the laws of the Republic of
Kazakhstan. The issues not regulated by this Agreement shall be resolved in
accordance with the laws of the Republic of Kazakhstan.

7.2 This
Agreement shall be a public offer in accordance with clause 5 of Article 395 of
the Civil Code of the Republic of Kazakhstan. The fact that the Client checks
the box of acceptance of this Agreement on the Website or on the web pages
referred to on the Website, shall be considered his/her consent with the
content of this Agreement, and shall be a full and unconditional acceptance of
this Agreement (in accordance with clause 3 of Article 396 of the Civil Code of
the Republic of Kazakhstan). No ignorance of provisions of this Agreement shall
release the Client from liability for non-compliance with its terms and
conditions.

7.3 The
Information User shall reserve the right, at its sole discretion, to amend
and/or supplement the Agreement at any time without prior and/or subsequent
notice to the Client. The current version of the Agreement shall be available
on the Website.

7.4 In respect
of each Client, this Agreement shall come into force when the Client performs
the actions specified in clause 7.2 of the Agreement, and shall be valid until
the account is deleted by the Client.