Privacy Policy

Legal address of IP «SAGYNTAY»:

KAZAKHSTAN, ALMATY, ABAY AVENUE, BUILDING 89, ground floor

Actual address of IP «SAGYNTAY»:

KAZAKHSTAN, ALMATY, ABAY AVENUE, BUILDING 89, ground floor

When processing personal data, we comply with the requirements of the legislation of the Republic of Kazakhstan, in particular the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On personal data and their protection”, as well as the norms and rules established in IP “SAGYNTAY”

Terms and Definitions

Personal data — information relating to a specific subject of personal data or determined on their basis, recorded on electronic, paper and (or) other tangible media;

Processing of personal data — actions aimed at accumulating, storing, changing, supplementing, using, distributing, depersonalizing, blocking and destroying personal data;

Use of personal data — actions with personal data aimed at achieving the goals of the owner, operator and third party;

Storage of personal data — actions to ensure the integrity, confidentiality and availability of personal data;

Dissemination of personal data — actions that result in the transfer of personal data, including through the media or providing access to personal data in any other way;

The subject of personal data (hereinafter referred to as the subject) is the individual to whom the personal data relates;

Third party — a person who is not the subject, owner and (or) operator, but is associated with them (him) by circumstances or legal relations regarding the collection, processing and protection of personal data;

Cookies are a small piece of data sent by a web server and stored on the subject’s computer, which a web client or web browser sends to the web server every time in an HTTP request when trying to open a page of the corresponding site;

IP address is a unique network address of a node in a computer network, built using the IP protocol.

Purpose and scope of the document

The Subject’s use of the website  www.experiencenomad.kz , purchasing a tourism product or receiving advice (including in Experience Nomad branded sales offices) indicates unconditional and full agreement with this Policy regarding the processing and protection of the Subject’s personal data, in accordance with the procedure for personal data and their protection of the Republic of Kazakhstan.

The policy of IP «SAGYNTAY» (experiencenomad.kz) (hereinafter also referred to as the Partnership) regarding the processing of personal data (hereinafter referred to as the Policy) determines the position and intentions of the Partnership in the field of processing and protection of personal data, in order to respect and protect the rights and freedoms of everyone human rights and, in particular, the right to privacy, personal and family secrets, protection of one’s honor and good name.

The policy is strictly observed by the managers and employees of all structural divisions and branches of IP «SAGYNTAY» .

This Policy applies to all personal data of subjects processed in the Partnership with and without the use of automation tools.

Any subject of personal data has access to this Policy.

This policy regarding the processing and protection of personal data applies only to the website www.experiencenomad.kz. The Partnership does not control and is not responsible for third party sites that the Subject can access via links available on the website www. experiencenomad.kz

Principles and conditions for processing personal data

By security of personal data, the Partnership understands the security of personal data from unauthorized or accidental access to it, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other unlawful actions in relation to personal data and takes the necessary legal, organizational and technical measures to protect personal data.

When processing personal data, the Partnership adheres to the following principles:

• legality and fairness;
• limiting the processing of personal data to the achievement of specific, predetermined and legitimate purposes;
• preventing the processing of personal data incompatible with the purposes of collecting personal data;
• preventing the merging of databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
• processing of personal data that meets the purposes of their processing;
• content compliance.

The Partnership processes personal data only if at least one of the following conditions exists:

• processing of personal data is carried out with the consent of the subject of personal data to the processing of his personal data;
• the processing of personal data is necessary to achieve the goals provided for by law, to implement and fulfill the powers and responsibilities assigned by the legislation of the Republic of Kazakhstan to the owner of the database containing personal data;
• processing of personal data is necessary for the execution of an agreement to which the subject of personal data is a party, as well as for concluding an agreement on the initiative of the subject of personal data;
• the processing of personal data is necessary to exercise the rights and legitimate interests of the Partnership or third parties or to achieve significant goals by the Partnership, provided that the rights and freedoms of the subject of personal data are not violated;
• processing of personal data is carried out, access to an unlimited number of persons is provided by the subject of personal data or at his request;
• personal data subject to publication or mandatory disclosure is carried out in accordance with the legislation of the Republic of Kazakhstan.

The Partnership has the right to entrust the processing of personal data of citizens to third parties on the basis of an agreement concluded with these persons, in cases where this is necessary to provide services for booking a tourism product and fulfilling the Subject’s order — airlines; tourism operators, hotels; visa centers; consulates; courier services; postal organizations; Internet service providers; organizations that provide sending emails. Persons processing personal data on behalf of the Partnership undertake to comply with the principles and rules for the processing and protection of personal data provided for by the Law “On Personal Data and Their Protection”. For each person, a list of actions (operations) with personal data is determined, the purposes of processing are determined, the obligation of such a person to maintain confidentiality and ensure the security of personal data during their processing is established, and requirements for the protection of processed personal data are specified.

In cases established by the legislation of the Republic of Kazakhstan, the Partnership has the right to transfer personal data of citizens.

The Partnership destroys or depersonalizes personal data upon achieving the purposes of processing or in the event of the loss of the need to achieve the purpose of processing, as well as in the event that the subject withdraws consent to the processing of personal data.

The processing of personal data in the Partnership is carried out with the consent of the subject of personal data to the processing of his personal data, unless otherwise provided by the legislation of the Republic of Kazakhstan in the field of personal data.

Email addresses and telephone numbers received by the Partnership may be used by the Partnership to send messages to subjects, incl. and mailings with the right to inform the Personal Data Subject of any information of a commercial and (or) non-commercial, informational nature about the provision of tourism services and (or) promotion of a tourism product and (or) send advertising and information materials about third parties, incl. with the conditions for the provision of tourism services and (or) promotion of a tourism product by sending newsletters by email, SMS messages via communications, messages via messengers, WhatsApp, Telegram, Personal Data Subject. Subjects using the services of the Partnership can always unsubscribe from receiving such mailings in the future, through the form specified in the sent mailing and (or) by sending an email to  experience.nomad.qazaqstan@gmail.com

The Partnership is not obliged to verify the accuracy of the information provided by the Subject, and does not exercise control over the legal capacity of the Subject. In this case, the Partnership proceeds from the Subject providing reliable and sufficient personal information in the appropriate columns indicated in the registration form, and the Subject maintaining the specified information up to date. The risk of providing false information is borne by the Subject who provided it.

Rights of the subject of personal data

The subject whose personal data is processed by the Partnership has the right to receive from the Partnership:

• confirmation of the fact of processing of personal data by the Partnership;
• legal grounds and purposes of processing personal data;
• information about the methods of processing personal data used by the Partnership;
• name and location of the Partnership;
• information about persons who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Partnership or on the basis of the legislation of the Republic of Kazakhstan;
• a list of processed personal data related to the subject from which the request was received and the source of their receipt, unless a different procedure for providing such data is provided for by the legislation of the Republic of Kazakhstan;
• information about the terms of processing of personal data, including the periods of their storage;
• name and address of the person processing personal data on behalf of IP “SAGYNTAY”;
• other information provided for by the Law “On Personal Data and Their Protection”

The subject whose personal data is processed by the Partnership has the right:

• demand clarification of your personal data, their blocking or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
• withdraw your consent to the processing of personal data;
• demand elimination of unlawful actions of the Partnership in relation to his personal data;
• to protect their rights and legitimate interests, including compensation for losses and/or compensation for moral damage in court

Responsibility

In case of failure to comply with the provisions of this Policy, the Partnership shall be liable in accordance with the current legislation of the Republic of Kazakhstan.

Measures to ensure the security of personal data during their processing

When processing personal data, the Partnership takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other unlawful actions in relation to personal data.

Such measures include:

• identification of threats to the security of personal data during their processing in personal data information systems;
• application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems necessary to fulfill the requirements for the protection of personal data, the implementation of which ensures the levels of personal data security established by the legislation of the Republic of Kazakhstan;
• use of information security means that have passed the compliance assessment procedure in accordance with the established procedure;
• detecting facts of unauthorized access to personal data and taking measures;
• establishing rules for access to personal data processed in the personal data information system, as well as ensuring registration and accounting of all actions performed with personal data in the personal data information system;
• familiarization of employees of the Partnership, its branches and representative offices directly involved in the processing of personal data with the provisions of the legislation of the Republic of Kazakhstan and local regulations of the Partnership in the field of personal data, including requirements for the protection of personal data, and training of these employees;
• control over the measures taken to ensure the security of personal data and the level of security of personal data information systems.

Changes to the Privacy and Personal Data Protection Policy

The website www.experiencenomad.kz publishes the current version of the “Sagyntai IP Policy regarding the processing of personal data” on the Internet at the following address:  https://nomadexperience.kz/privacy-policy/

The Partnership may make changes to the “Privacy and Personal Data Protection Policy” unilaterally, incl. and without prior notice to the subjects.