Privacy Policy Regarding the Collection, Processing, and Protection of Personal Data

1. General Provisions
1.1. This Privacy Policy Regarding the Collection, Processing, and Protection of Personal Data (hereinafter referred to as the Policy) has been drawn up in accordance with the requirements of the Law of the Republic of Kazakhstan No. 94-V "On Personal Data and Protection Thereof" dated May 21, 2013 (hereinafter referred to as the Law) and determines the procedure for personal data processing and measures to ensure the security of personal data undertaken by LLP "UNIVERSAL TECH DECISIONS" (hereinafter referred to as the Operator). 1.2. The Operator sets compliance with human and civil rights and freedoms when processing personal data, including the protection of the rights to privacy, personal and family secrets, as its most important goal and condition for carrying out its activities. 1.3. This Policy applies to all information that the Operator may obtain about visitors to the website https://utd.kz/.

2. Basic Concepts Used in the Policy
2.1. Website means a set of graphic and informational materials, as well as computer programs and databases ensuring their availability on the Internet at the network address https://utd.kz/. 2.2. Personal Data means information relating to a specific or determined on their basis subject of personal data, recorded on electronic, paper and (or) other physical media. 2.3. Processing of Personal Data means actions aimed at accumulation, storage, modification, addition, use, dissemination, depersonalization, blocking, and destruction of personal data. 2.4. Operator means an individual and (or) legal entity that collects, processes, and protects personal data. 2.5. User means any visitor to the website https://utd.kz/. Other concepts are interpreted in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Protection Thereof".

3. Main Rights and Obligations of the Operator
3.1. The Operator has the right to:

• Receive reliable information and/or documents containing personal data from the personal data subject;
• Independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations stipulated by the legislation of the Republic of Kazakhstan.

3.2. The Operator is obliged to:

• Provide the personal data subject with information regarding the processing of their personal data upon request;
• Organize the processing of personal data in the manner established by the current legislation of the Republic of Kazakhstan;
• Take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, dissemination, as well as from other illegal actions.

4. Main Rights and Obligations of Personal Data Subjects (Users)
4.1. Personal data subjects have the right to:

• Know about the presence of their personal data at the Operator, as well as receive information containing: confirmation of the fact, purposes, sources, methods of collection and processing of personal data; list of personal data; terms of processing and storage;
• Demand from the Operator the modification and addition of their personal data if there are grounds confirmed by relevant documents;
• Demand from the Operator the blocking of their personal data if there is information about a violation of the conditions for collection and processing of personal data;
• Demand from the Operator the destruction of their personal data, the collection and processing of which were carried out in violation of the legislation of the Republic of Kazakhstan, as well as in other cases established by regulatory legal acts of the Republic of Kazakhstan;
• Withdraw consent to the collection and processing of personal data;
• Exercise other rights provided for by the legislation of the Republic of Kazakhstan.

4.2. Personal data subjects are obliged to provide the Operator with reliable data about themselves.

5. Principles of Personal Data Processing
5.1. Personal data processing is carried out on a legal and fair basis. 5.2. Processing is limited to the achievement of specific, predetermined, and legitimate goals. 5.3. The content and volume of processed personal data correspond to the stated processing purposes. 5.4. During personal data processing, their accuracy, sufficiency, and relevance are ensured. 5.5. The storage of personal data is carried out in a form that allows identifying the subject of personal data for no longer than the purposes of processing require, unless the storage period is established by the legislation of the Republic of Kazakhstan or a contract.

6. Purposes of Collecting and Processing Personal Data
6.1. Purpose of processing: processing incoming requests from the User from the website, providing access to services, information and/or materials contained on the website, as well as informing the User by sending emails (informative and promotional newsletters). 6.2. Personal data:

• Full name (Surname, Name, Patronymic);
• Email address;
• Phone numbers;
• Year, month, date, and place of birth (if necessary).

6.3. Types of processing: Collection, recording, systematization, accumulation, storage, destruction, and depersonalization of personal data. Sending informational emails.

7. Conditions for Personal Data Processing
7.1. Personal data processing is carried out with the consent of the personal data subject. 7.2. Processing is necessary for the execution of a contract to which the personal data subject is a party, beneficiary, or guarantor. 7.3. The security of personal data is ensured by implementing legal, organizational, and technical measures necessary to meet the requirements of the legislation of the Republic of Kazakhstan. 7.4. The User's personal data will never, under any circumstances, be transferred to third parties, except for cases related to the implementation of current legislation, as well as cases necessary to fulfill obligations to the User (e.g., transferring data to newsletter service providers, CRM systems, or hosting to ensure the correct operation of the website).

8. Procedure for Collection, Storage, and Protection
8.1. The Operator ensures the safety of personal data and takes all possible measures to exclude access to personal data by unauthorized persons. 8.2. Databases containing personal data of citizens of the Republic of Kazakhstan are stored on the territory of the Republic of Kazakhstan. 8.3. In case of detecting inaccuracies in personal data, the User can update them independently by sending a notification to the Operator's email address office@utd.kz with the subject line "Personal Data Update". 8.4. The User may at any time withdraw their consent to the processing of personal data by sending a notification to the Operator's email address office@utd.kz with the subject line "Withdrawal of Consent to Personal Data Processing".
9. Cross-Border Transfer of Personal Data
9.1. Cross-border transfer of personal data to the territory of foreign states is carried out only if these states ensure the protection of personal data. 9.2. Cross-border transfer of personal data to the territory of foreign states that do not ensure the protection of personal data can be carried out only if there is the consent of the personal data subject or in other cases provided for by Article 16 of the Law of the Republic of Kazakhstan "On Personal Data and Protection Thereof".

10. Final Provisions
10.1. The User can receive any clarifications on issues of interest regarding the processing of their personal data by contacting the Operator via email at office@utd.kz. 10.2. Any changes to the personal data processing policy by the Operator will be reflected in this document. The Policy is valid indefinitely until replaced by a new version. 10.3. The current version of the Policy is freely available on the Internet at https://utd.kz/policy (modify the link to where the document is actually hosted, if necessary).

11. Operator Details

• LLP "UNIVERSAL TECH DECISIONS"
• BIN: 231040042103
• Legal and actual address: Republic of Kazakhstan, Astana, Nura District, Kabanbay Batyr Avenue, Building 53/42
• Phone: +7 701 667 85 39
• Email: office@utd.kz