ASPEX Personal Data Processing Policy

Eng
1. General Provisions

This Personal Data Processing Policy (hereinafter referred to as the “Policy”) has been drafted in accordance with the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection”.

The Policy defines the procedure for processing and the measures to ensure the security of personal data received by Aspex Group LLP (hereinafter referred to as the “Operator”) when using the website https://aspex.cloud

The main purpose of the Operator is to observe the rights and freedoms of citizens when processing their personal data, including the protection of the right to privacy and personal and family confidentiality.


2. Basic Terms
• Personal data means any information relating directly or indirectly to a User of the website.
• Processing of personal data means any action (operation) involving personal data, including collection, storage, use, transfer, and deletion.
• User means any visitor to the website https://aspex.cloud
• Operator means Aspex Group LLP, independently or jointly with other persons organizing and carrying out the processing of personal data.

3. Personal Data That May Be Processed by the Operator
• Last name, first name, patronymic (if any);
• Email address;
• Contact phone number;
• Organization name and position (if specified);
• Anonymized visitor data (including “cookie” files and analytics service data).

All the above data are collectively referred to as “Personal Data”.

4. Purposes of Personal Data Processing
Personal data are processed for:
• providing feedback to the User;
• informing about the Operator’s products, services, and events;
• concluding and performing contracts;
• improving the operation of the website and the quality of services;
• sending notifications and offers (with the User’s consent).

5. Legal Grounds for Processing
• the User’s consent expressed when filling out forms on the website;
• performance of contractual obligations;
• requirements of the legislation of the Republic of Kazakhstan.

6. Procedure for Processing and Storing Data
• Processing is carried out using legal, organizational, and technical protection measures.
• Only authorized employees have access to personal data.
• Personal data are not transferred to third parties, except in cases established by law or with the User’s consent.
• The retention period for personal data is determined by the purposes of processing and ends once those purposes are achieved or upon withdrawal of the User’s consent.

7. User Rights
The User has the right to:
• receive information about their personal data processed by the Operator;
• request their clarification, blocking, or destruction;
• withdraw consent to processing by sending a request to the Operator’s email address;
• appeal the actions of the Operator to authorized bodies or to the court.

8. Cross-Border Data Transfer
The transfer of personal data outside the Republic of Kazakhstan is carried out only if the foreign state ensures adequate protection of the rights of personal data subjects or if the User’s written consent is available.

9. Links
The website https://aspex.cloud/ may contain links to other websites that are not related to our company and belong to third parties. We are not responsible for the accuracy, completeness, or reliability of information posted on third-party websites and do not assume any obligations to maintain the confidentiality of information you provide on such websites.

10. Limitation of Liability
We make every effort to comply with this privacy policy; however, we cannot guarantee the security of information in the event of factors beyond our control, the result of which may be the disclosure of information. The website https://aspex.cloud/ and all information posted on it are provided on an “as is” basis without any warranties. We are not liable for any adverse consequences, as well as for any losses caused by restricted access to the website URL or resulting from visiting the website and using the information posted on it.

11. Final Provisions
• All questions related to the processing of personal data may be sent to the following email address: info@aspex.kz
• This Policy remains in effect indefinitely until it is replaced by a new version.