Privacy Policy

General Provisions

1.1. This Privacy Policy (hereinafter, the “Policy”) of Private Institution “Arbitration Center of the National Chamber of Entrepreneurs of the Republic of Kazakhstan “Atameken””, BIN 140740017384, sets out the scope, purposes and methods of processing the personal data of users (visitors) of the website https://aca.kz/. Terms and definitions used in the Policy have the meanings established by Law of the Republic of Kazakhstan No. 94-V “On Personal Data and Their Protection” dated 21.05.2013 (hereinafter, the “Law”) and the relevant regulations; the Policy is published in open access in accordance with the requirements of the Law.

Legal Grounds for Processing Personal Data

The legal grounds for processing personal data are: the consent of the data subject; processing of personal data solely for predetermined and lawful purposes; and exclusion of any processing of personal data incompatible with the original purposes of collection. The Company does not collect or process personal data in excess of the stated purposes of processing.

User Consent to the Processing of Personal Data

By sending a message through the feedback forms available on the website, the website user gives consent to the processing of personal data for the purposes and to the extent defined by this Policy. The user may subscribe to an e-mail newsletter if the website offers this option. The newsletter may contain news, analytical materials, information on events held by the Website Administrator, and the like. By filling in the “e-mail” field, the user consents to receiving such newsletters. The user may withdraw consent to receiving the newsletter at any time.

Purposes of Processing Personal Data

The purposes of processing the personal data of website users are to provide the user with information about the services rendered and the terms of conclusion and performance of civil-law contracts, as well as to provide consultations and to send information about services and/or events. If a website user merely browses the website, no personal data is processed.

Scope and Category of Personal Data Processed

The personal data that a user may provide on the website comprises: first name, last name, telephone number, e-mail address and company. For the purposes of processing such personal data, the User gives Consent to the processing of personal data in accordance with the legislation of the Republic of Kazakhstan and this Policy. Such personal data belongs to the general category. The website uses cookie technologies; cookies are small text files in which the browser records data from websites visited by the user. This data is used to collect information on visitors’ actions on the website and to improve the quality of its content and functionality. The use of cookie technology is anonymised and does not allow the Website Administrator to identify a specific website user or to access their personal data. At any time, the user may change the settings of their browser so that the browser stops saving all cookies and notifies the user when cookies are sent. In this case, some services and functions of the website may stop working or work incorrectly.

Methods of Processing, Storing and Destroying Personal Data

Users’ personal data is stored exclusively on electronic media and processed using automated systems, except where non-automated processing of personal data is required in order to comply with legal requirements. Upon expiry of the processing period, or if the website user withdraws consent to the processing of personal data, the user’s personal data shall be destroyed by erasure.

Confidentiality of Personal Data

The Website Administrator does not disclose to third parties or disseminate the personal data of website users without their consent, except in cases provided for by the Law.

Period of Processing Personal Data

Data provided by the user is processed until the purposes of its collection are achieved, or until the user withdraws consent to the processing of personal data, deletes their account, or unsubscribes from information mailings.

Cross-Border Data Transfer

In the course of using the website and cookies, anonymised user data (IP address, session parameters, cookie data) may be transferred to the servers of third-party web analytics services located outside the Republic of Kazakhstan (including Google Analytics: the data is processed by Google and may be transferred to and stored on Google servers in the United States)

Rights of the Personal Data Subject

The personal data subject has the right to send a request to the Website Administrator to obtain information concerning the processing of their personal data in accordance with the requirements of the Law. Such a request may be sent to the addresses specified in the “Contacts” section. The personal data subject has the right to withdraw previously given Consent to the processing of personal data by sending a written application to the Website Administrator at the addresses specified in the “Contacts” section.

Protection of Personal Data

The Website Administrator takes measures necessary and sufficient to ensure fulfilment of the obligations provided for by the Law and the regulatory legal acts adopted in accordance therewith. The Website Administrator independently determines the composition and list of measures necessary and sufficient to ensure fulfilment of such obligations. Only authorised employees of the Website Administrator have access to personal data. All employees of the Website Administrator who have access to personal data must adhere to the policy on ensuring the confidentiality and protection of personal data and comply with the prohibitions and restrictions on the processing and dissemination of personal data established by the legislation of the Republic of Kazakhstan.

Appendix 1 to the Policy on Processing Personal Data of Users of the Website of the Arbitration Center of the NCE “Atameken”

Consent of a User of the Website of the Arbitration Center of the NCE “Atameken”

I, a user of the website of the Arbitration Center of the NCE “Atameken”, hereby freely and knowingly consent to the collection, processing, storage and transfer of my personal data by Private Institution “Arbitration Center of the National Chamber of Entrepreneurs of the Republic of Kazakhstan “Atameken”” (hereinafter, the “Company”). I, the Website User, consent to receiving information by e-mail or telephone from the Website Administrator. The purposes of processing personal data are: providing the user with information about the Company, including the services rendered and the terms of conclusion and performance of civil-law contracts, as well as providing consultations and sending information about the services and/or events of the Website Administrator. Scope of personal data processed: first name, last name, e-mail address, telephone number and company of the Website User. I give this consent to the performance of actions in respect of my personal data that are necessary to achieve the above purposes, including (without limitation) collection, systematisation, accumulation, storage, clarification (updating, modification), use, anonymisation and blocking of personal data, as well as any other actions provided for by the current legislation of the Republic of Kazakhstan. Personal data is not transferred to third parties, except in cases provided for by the current legislation of the Republic of Kazakhstan and cases of cross-border transfer of anonymised data (including cookies and web analytics data) to the servers of third-party analytics services. This consent to the processing of personal data remains in effect until the Website Administrator or the website ceases its activities. I may withdraw this consent to the processing of personal data by sending a written application to the Website Administrator at the addresses specified in the “Contacts” section. The Policy on Processing Personal Data is publicly available at the link. Users’ personal data is stored exclusively on electronic media and processed using automated systems, except where non-automated processing of personal data is required in order to comply with legal requirements.