top of page
Privacy Policy

 

 

Limited Liability Partnership "MYD Production" (hereinafter referred to as the "Company") publishes this policy regarding the collection, processing and protection of personal data of the service (hereinafter referred to as the "Policy").

This policy is an official document of the Company and determines the procedure for processing and protecting information about individuals

The purpose of this Policy is to ensure adequate protection of information about Users, including their personal data, from unauthorized access and disclosure, including to comply with the requirements of applicable Kazakhstan legislation and the provisions of the GDPR if such provisions apply to the Company.

The Company is engaged in providing various services in the field of marketing, advertising and promotion of products or services on behalf of clients who are legal entities (hereinafter referred to as the “Services”). These Services may include the development of advertising campaigns, the creation and placement of advertising materials, planning media costs, analytics of the effectiveness of advertising campaigns and other types of advertising services.

It is important to note that in the process of providing advertising services, the Company may gain access to customer data, including information about the target audience, consumer preferences, and other data that may be provided by the client company. This data may be processed in order to customize advertising campaigns and improve their effectiveness.

When processing such data, the Company undertakes to comply with all applicable data protection and privacy laws, ensuring its security and confidentiality.

​

1. Terms and definitions

 

1.The following terms and definitions are used in this Policy:

Administration of the service or (Company) or (Operator) is “MYD Production” LLP, BIN 130140024511, registered in accordance with the legislation of the Republic of Kazakhstan at the address: Republic of Kazakhstan, 010000, Astana city, Kabanbay Batyr Avenue, building 6/1.

Law “On Informatization” - Law of the Republic of Kazakhstan dated November 24, 2015 No. 418-V ZRK “On Informatization”.

Law “On Personal Data” - Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection”

User is any legally capable individual, including those intending to use or using the Company’s Services in their own or someone else’s interest (on behalf of and in the interests of the Client they represent).

Cookies - data from cookies.

Processing of personal data – actions (operations) performed using automation tools or without the use of such tools, aimed at accumulating, storing, changing, supplementing, using, distributing, depersonalizing, blocking and destroying personal data.

Blocking of personal data – actions to temporarily stop the collection, accumulation, modification, addition, use, distribution, depersonalization and destruction of personal data.

Protection of personal data is a set of measures, including legal, organizational and technical, carried out for the purpose of collecting, processing them or transferring them to third parties.

Information – information about persons, objects, facts, events, phenomena and processes recorded in any form.

Use of personal data – actions with personal data aimed at achieving the goals of the Operator and a third party.

Accumulation of personal data – actions to systematize personal data by entering them into a database containing personal data.

Processing of personal data – actions (operations) performed using automation tools or without the use of such tools, aimed at accumulating, storing, changing, supplementing, using, distributing, depersonalizing, blocking and destroying personal data.

Personal data – information relating to a specific subject of personal data or determined on their basis, recorded on electronic, paper and (or) other tangible media. Information about the User (last name, first name, individual identification number/business identification number, telephone numbers, email addresses, access credentials: password, login, etc.) related to a specific personal data subject or determined on their basis, recorded on electronic, paper and (or) other tangible media, classified by the legislation of the Republic of Kazakhstan as personal data of limited access.

Dissemination of personal data – actions that result in the transfer of personal data, including through the media or providing access to personal data in any other way.

Website (Web site) is an object of informatization, an electronic information resource that has an independent domain name and provides Users with information materials, tools, services, databases, sections, located at: https://www.myd.kz.

Collection of personal data – actions aimed at obtaining personal data.

Information – any materials and information provided by the User of the Site, Services in connection with the use of the Site, Services.

Subject of personal data (hereinafter referred to as the Subject) - individuals and/or representatives of legal entities, individual entrepreneurs, namely: User, to whom personal data relates, including those wishing to order the services of the Operator, leave a comment, register on the Site, Services or make other actions provided for by the functionality of the Site, Operator Services.

Third party - a person who is not the Subject of personal data, but is associated with them (him) by circumstances or legal relations regarding the collection, processing and protection of personal data.

Storage of personal data – actions to ensure the integrity, confidentiality and availability of personal data.

Cookies – data from “cookie” files.

​

The Policy may use terms and definitions not specified in this paragraph. In this case, the interpretation of such a term is made in accordance with the text of the Policy.

​

2. General provisions

​

 By using the Company’s Services, the User agrees that:

  • You have read the terms of this Policy in full.

  •  Processing of Information is necessary to fulfill the contractual obligations of the Service Administration to you or in connection with legal requirements.

  •  Starting to use the Company’s Services in any form means that you have read this policy, you understand the meaning of everything stated in it and you accept all the terms of this Policy.

  • The Policy may be changed by the Service Administration without prior notice. The new edition of the Policy comes into force from the moment it is posted on the Service Administration Website.

 By accepting the terms of this Policy, you agree to the receipt, storage and processing of Information by the Service Administration for the purposes provided for in this Policy, as well as to the transfer of Information to third parties in cases (in cases provided for by the legislation of the Republic of Kazakhstan).

 By using the Company's Services using a web browser that accepts data from cookies, you agree to the collection and processing of data from cookies by the Service Administration for the purposes provided for in this Policy, and the transfer by the Service Administration of data from cookies to third parties (in cases provided for by law Republic of Kazakhstan).

 Disabling and/or blocking your web browser option to receive data from cookies means a prohibition on the collection and processing of data from cookies by the Service Administration.

 When collecting, processing and storing Information, the Service Administration is guided by the Law “On Informatization”, the Law “On Personal Data” and other applicable legislation of the Republic of Kazakhstan.

 

​

3. The procedure for giving (revoking) the subject’s consent to the collection and processing of personal data

1. The subject of personal data decides to provide his personal data and consents to their processing freely, of his own free will and in his own interest. The inaction of the Personal Data Subject cannot be understood as consent. Consent to the processing of personal data must be specific, substantive, informational, conscious and unambiguous.

2. The subject or his legal representative gives (revokes) consent to the collection and processing of personal data in writing, through the Site, the Operator’s Services, or in any other way that allows confirmation of receipt of consent.

3. The subject or his legal representative cannot withdraw consent to the collection and processing of personal data in cases where this contradicts the legislation of the Republic of Kazakhstan, or if there is an unfulfilled obligation.

4. Consent to the collection and processing of personal data includes:

  • name (last name, first name, patronymic (if indicated in the identity document), business identification number (individual identification number) of the Personal Data Subject or other third party;

  • last name, first name, patronymic (if it is indicated in the identity document) of the Subject;

  •  the term or period during which the consent to the collection and processing of personal data is valid;

  • information about the Operator’s ability or lack thereof to transfer personal data to third parties;

  • information on the dissemination of personal data in publicly available sources;

  • list of collected data related to the Subject;

  • other information determined by the Operator or the requirements of the legislation of the Republic of Kazakhstan.

​

4. Composition of the Information that is collected, processed and stored by the Service Administration

​

The administration of the service collects, processes and stores the following types of Information:

  • Personal data posted by Users about themselves independently when using the Company’s Services. Personal data may include, in particular, first name, last name, patronymic, date of birth, image, identity document and its data, passport data, bank card information, telephone number and/or email address of the User, residential address, etc. .information provided by the User.

  • Personal data posted by Users in feedback forms.

  • Personal data, access to which the User provides to the Service Administration through websites or services of third parties, including as part of the collection of information in connection with advertising material posted by the Company.

  • The data below is collected without identifying the subject, and therefore, taking into account the provisions of Kazakhstani legislation, as well as the provisions of the GDPR, such data is not considered by the Company as personal data of a person:

             - automatically transferred to the Company during their use using software installed on the User’s device,                      incl. IP address, geolocation of the User (mobile application),

             - advertising identifiers (GAID, IDFA, OAID and others related to the User’s operating system),

             - data from cookies,

             - information about the browser, operating system, access time, search queries,

             - information about the location and movement of the User’s device (to adapt the Services to the User’s                          current location).

  • Data additionally provided by Users at the request of the Service Administration.

  • Other information about Users, the collection, processing and storage of which is necessary to provide the Services.

​

It is prohibited for the User to provide personal data of third parties without consent to such transfer received from third parties.

​

As a general rule, the Service Administration does not verify the accuracy of the personal data provided by Users, and does not have the ability to assess the User’s legal capacity. However, upon a separate request from the Service Administration, the User is obliged to provide confirmation of the accuracy of his personal data.

​

The service administration does not process personal data of Users who have not passed registration, authorization and/or have not posted personal data in the process of using the Services, in feedback forms and/or have not provided personal data to the service administration independently.

​

The administration of the service does not control and is not responsible for the processing of Information by third party sites, to which the User can follow links available as part of the use of the Company Services.

 

We and our service providers may collect Personal Data in a variety of ways, including the following:

  • Through the Sites: for example, when a user subscribes to a newsletter or makes a purchase.

  • Offline: for example, when a user contacts support.

  • From other sources: for example, public databases; partners for joint marketing activities; social platforms; friends of users or other persons connected with them through social platforms, as well as other third parties.

  • Via the user's browser or device: Certain information is collected by most browsers or automatically through the user's devices. We use such information for statistical purposes and to ensure the proper functioning of the Sites.

  • Through server syslogs: A user's IP address is a number automatically assigned to users' computers or devices by their Internet service provider. The IP address is identified and automatically entered into our server logs each time a user visits the Sites, along with information about the time of visit and the pages the user accessed.

  • Using cookies: Cookies allow the web server to send information to your computer or device for registration and other purposes. If you do not wish to allow the collection of information through the use of cookies, you may use the setting provided in most browsers to refuse the use of cookies. For information about the cookies we use and the purposes for which we use them, please refer to our Cookie Policy. Continued use of this website indicates the user's acceptance of these terms and conditions and consent to our use of cookies.

  • Through the use of Applications; When users download and use the Applications, we and our service organizations may track and collect information about the use of the Applications, such as the date and time the Application on the user's device accessed our servers, as well as what information and files

​

5. Rules for the collection, processing, storage and destruction of personal data

​

1.Collection, processing, storage and protection of personal data are carried out in accordance with the principles:

  • Compliance with constitutional rights and freedoms of man and citizen.

  • Legality.

  • Confidentiality of personal data.

  • Equality of rights of Personal Data Subjects, Operator.

  • Ensuring the security of the individual, society and state.

2. The purpose of collecting, processing and storing personal data: registration and authentication of the Personal Data Subject as a User of the Site, Services. The purpose is also to communicate with the Personal Data Subject, send and process messages, notifications, requests, responses, documents, and informational messages.

3. The User has the right to refuse to receive push notifications through the proposed feedback forms in the Mobile Application of the Services or to independently disable the ability to receive push notifications through the settings of mobile devices.

4. The operator of the Site and Services has the right to use notifications to inform the User about the capabilities of the Services and/or about changes in information resources and sections on the Site.

5. To use the User’s personal data for purposes not provided for in this Policy, the Website and Services Operator requests the User’s consent to such use.

6. The User understands and agrees that personal data posted by the User independently in the account/Personal profile, account, may be displayed when publishing materials (content) as a result of using the Services and will be available to an unlimited number of people. The User agrees that the Operator of the Site and Services has the right to display the User’s personal data in the Services.

7. The personal data specified by the User and other information downloaded by the User and available in the Services are subject to display to an unlimited number of persons solely for the purpose of providing the relevant Service and personalizing Users. This information is not intended for collection and further distribution by third parties, unless such purpose is expressly stated in the terms of the relevant Service.

8. By providing their personal data, the Personal Data Subject, third parties agree to their processing (up to the withdrawal by the Personal Data Subject, third parties of their consent to the processing of personal data), including collection, storage, depersonalization, transfer to third parties in cases provided for in the Policy, The Operator for the purpose of providing the Subject of personal data, third parties with advertising, reference information of the Site, Services in accordance with the functionality of the Site, Services and other purposes in accordance with the provisions of the Policy.

9. Methods of collecting information. We and our service providers may collect Personal Information in a variety of ways, including the following:

10. Through the Sites: for example, when a user subscribes to a newsletter or makes a purchase.

11. Offline: for example, when a user contacts the Help Desk.

12. From other sources: for example, public databases; partners for joint marketing activities; social platforms; friends of users or other persons connected with them through social platforms, as well as other third parties.

13. Through “data import” by the user: the user can share data by importing it into the Site, Services.

14. Via User's Browser or Device: Certain information is collected by most browsers or automatically through Users' devices. We use such information for statistical purposes and to ensure the proper functioning of the Sites.

15. Via Server System Logs: A user's IP address is a number automatically assigned to users' computers or devices by their Internet service provider. The IP address is identified and automatically entered into our server logs each time a user visits the Sites, along with information about the time of visit and the pages the user accessed.

16. Using cookies: Cookies allow the web server to transmit information to your computer or device for registration and other purposes. If you do not wish to allow the collection of information through the use of cookies, you may use the setting provided in most browsers to refuse the use of cookies. For information about the cookies we use and the purposes for which we use them, please refer to our Cookie Policy. Continued use of this website indicates the user's acceptance of these terms and conditions and consent to our use of cookies.

17. Through the use of Applications; When users download and use the Applications, we and our service providers may track and collect Application usage data, such as the date and time the Application on the user's device accesses our servers, and what information and files are downloaded to the Application by device number specific user.

18. From the User: date of birth, gender, postal code, as well as other information such as the user's preferred means of communication; such information may be collected if it is voluntarily provided by the User.

19. Physical Location: We may collect information about the physical location of users' devices.

20. In some cases, we may use third parties to process payments for purchases and/or collect donations made through the Sites. However, User Personal Information may be collected by these organizations and not by us, and will be subject to the privacy policies of such organizations and not this Privacy Policy. We have no control over, and assume no responsibility for, any such third parties' use or disclosure of our users' Personal Data.

21. Processing of information, personal data.

  •  Information is processed in accordance with the legislation of the Republic of Kazakhstan.

  • Information is not transferred to third parties, except for the following cases:

  • The user has consented to such transfer.

  • The transfer is provided for by the legislation of the Republic of Kazakhstan.

  • The transfer is carried out in order to ensure the possibility of protecting the rights and legitimate interests of the Site Operator, Services and/or third parties in cases where the User violates the terms of separate agreements on the use of the Site, Services.

  • Transfer of an impersonal identifier (IDFA (IDentifier For Advertisers) or GAID (Google Advertiser ID)) of the User’s device.

  • The user can disable further collection, storage and transfer of the device ID at any time by changing the settings of the mobile device.

  • Transfer of Information that forms the User’s profile for access to other Users of the Site, Services for the full functioning of the Site, Services.

  • The User’s personal data, including first name, last name, telephone number, and email address, become available to persons with whom the User will interact within the Services.

  • The user can at any time disable further collection, storage and transmission of location information to the Service Administration, incl. collected in the background (when the User is not using the Services and when they are closed) by changing the settings of the mobile device.

22. The User is notified and agrees that the Operator of the Site, Services may use and transfer personal data of third parties that is provided by the User when using the Site, Services to implement certain functions of the Site, Services, provided that the User guarantees to the Operator of the Site, Services the consent of third parties persons for such use and transfer.

23. The User is hereby notified and agrees that the Operator of the Site, Services may receive statistical anonymized (without reference to the User) data about the User’s actions when using the Site, Services and about the settings of the Site, Services installed by the User.

24. The operator of the Site, Services collects, records, systematizes, accumulates, stores, refines (updates, changes), extracts, uses, transfers (distribution, provision, access), depersonalizes, blocks, deletes, destroys personal data of citizens of the Republic of Kazakhstan from using databases. Personal data of Users is stored throughout the use of the account/Personal profile, cabinet by the User and after its deletion for a period determined in accordance with the Law of the Republic of Kazakhstan “On Informatization”, as well as until the goals of processing Personal data are achieved or until consent to the processing of Personal data is withdrawn by the user and within the period determined in accordance with the Law “On Personal Data and Their Protection”.

25. Personal data is processed both using automated means and without the use of automation tools.

26. Personal data is deleted by the Website and Services Operator in accordance with the legislation of the Republic of Kazakhstan.

27. Processing of personal data that is incompatible with the purpose of processing is not permitted.

28. The operator will process personal data for as long as necessary to achieve the specific purpose of processing.

29. The use of personal data should be carried out by the Operator only for the previously stated purposes of their collection.

30. Legal regulation. Features of the collection, processing and protection of personal data are regulated by this Policy, the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”, and the norms of other legal acts of the Republic of Kazakhstan.

31. The accumulation of personal data is carried out by collecting personal data necessary and sufficient to perform the tasks carried out by the Operator.

32. Personal data is stored by the Operator in a database located on the territory of the Republic of Kazakhstan. The storage period of personal data is determined by the date of achievement of the purposes of their collection and processing, unless otherwise provided by the legislation of the Republic of Kazakhstan.

33. Distribution of personal data is permitted subject to the consent of the subject or his legal representative, if this does not affect the legitimate interests of other individuals and (or) legal entities. Distribution of personal data in cases beyond the previously stated purposes of their collection is carried out with the consent of the Personal Data Subject or his legal representative.

34. Access to personal data is determined by the terms of the consent of the Subject or his legal representative provided by the Operator for their collection and processing, unless otherwise provided by the legislation of the Republic of Kazakhstan.

35. Changes and additions to personal data are carried out by the Operator on the basis of an application (request) from the Subject or his legal representative or in other cases provided for by the legislation of the Republic of Kazakhstan.

36.Integration with government services is carried out in compliance with the legislation of the Republic of Kazakhstan on the provision of information classified as state secrets, personal, family, banking, commercial secrets, secrets of a medical worker and other secrets protected by law, as well as other confidential information.

37.In other cases, integration with government services is carried out on a voluntary basis.

38. The procedure for integration with government services is determined by the authorized body and the rules for the integration of electronic government informatization objects.

39.Personal data is subject to destruction by the Operator in the following cases:

  •  Upon expiration of the storage period in accordance with the legislation of the Republic of Kazakhstan.

  •  Upon termination of legal relations between the Personal Data Subject, the Operator, as well as a third party.

  • In other cases established by the legislation of the Republic of Kazakhstan.

​

6.Purposes of collecting, processing and storing Information

​

1. The service administration collects, processes and stores only that Information that is necessary to fulfill the obligations of the service administration to provide the Services.

2.The administration of the service can use the Information for:

  •  identification of the party to the agreement between the User and the Service Administration;

  • User authentication during registration;

  • providing services to Users using the Services and further improving the Services, developing new functionality and sections based on feedback/information from Users;

  • marketing;

  • perform statistical and other studies based on anonymized data;

  • providing data from cookies to third parties with whom the Service Administration has concluded agreements, in the manner established by the legislation of the Republic of Kazakhstan;

  • forming a User profile based on the information received;

  • communications with the User for the purpose of establishing partnerships, negotiating to agree on the terms of agreements with the User and/or the Client in whose interests he acts, concluding and executing such agreements;

 

7.Information Protection

​

The administration of the service takes all necessary and sufficient legal, organizational and technical measures to protect the personal data of Users and third parties from unauthorized or accidental access to them, destruction, modification, blocking, distribution, as well as from other unlawful actions with them. These measures include, but are not limited to, internal review of personal data collection, storage and processing processes and security measures, including appropriate encryption and physical security measures for personal data to prevent unauthorized access to systems in which personal data is stored.

 

8.Final provisions

​

1. Issues not regulated by this Policy are regulated by the current legislation of the Republic of Kazakhstan.

2. Please send all questions regarding this Policy using the feedback form on the Site.

3. If a fact of unlawful processing of personal data is revealed, the subject of personal data whose data is illegally used is obliged to send a written application to the Service Administration to delete such personal data. The application must indicate the surname, name, patronymic of the subject of personal data, the number of the identity document, information about the date of issue of the specified document and the issuing authority, a list of personal data that is illegally used in information materials posted without the consent of the subject of personal data, User data , who posted information materials. These conditions for sending an application apply if a different procedure for sending an application by the subject of personal data is not provided for by the norms of the current legislation of the Republic of Kazakhstan.

 

Document details:

Date of publication of this version of the document: January 1, 2024.

© MYD Production, 2024

bottom of page