1. general provisions
1.1. the policy regarding the processing of this personal data (hereinafter referred to as the policy) has been developed in accordance with:

Federal law of the Russian Federation dated 27.07.2006 No. 152‑FZ "on personal data";

By the law of the Republic of Kazakhstan dated May 21, 2013 No. 94‑V"on personal data and their protection".

1.2. the policy defines the procedure for processing personal data, measures to ensure their security, as well as the rights of subjects of personal data and the mechanism for their implementation.

1.3. the policy applies to all information that the operator may receive about users when using the site vlt-laser.kz.

1.4.the use of the site means the user’s unconditional consent to this policy and the terms of processing his personal data.

1.5.this policy is posted in free access on the global computer internet at the address of the operator’s website, which provides unlimited access to it to unknown groups of persons.

2. Basic Concepts
2.1. the following concepts are used in this policy:

A site is a set of web pages located on the Internet: vlt-laser.kz.

Operator-a legal entity located on the territory of the Russian Federation that independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of processing, the composition of personal data to be processed, actions (operations) performed with personal data.

User-an individual, site visitor, subject of personal data.

Personal data — data belonging to the subject of personal data registered on electronic, paper and (or) other material Media, determined or determined on their basis, including biometric data.

Personal data processing-actions aimed at the accumulation, storage, modification, addition, use, distribution, depersonalization, blocking and destruction of personal data.

Confidentiality of personal data is a mandatory requirement for storage by the operator to prevent the dissemination of personal data without the consent of the subject or other legal justification.

3. Composition of the processed personal data
3.1. the operator processes the following personal data of users:

name;

phone number;

email address (e‑mail).

3.2.the processing of personal data is limited to achieving specific, predefined and legal goals. The processed personal data is not superfluous in relation to the stated purposes of their processing.

3.3. the operator does not verify the accuracy of the personal data provided and does not control their relevance. However, the operator is based on the fact that the user provides reliable and sufficient personal data and updates it in a timely manner.

4. purposes of personal data processing
4.1. processing of personal data of users is carried out to achieve the following specific goals:

communication with the user for processing applications and applications;

sending information to the user regarding the use of the site and familiarization with the range of goods;

conclusion and execution of contracts with users;

informing users about the operator’s goods, services, promotions and Special Offers (if the user has personal consent to receive such notifications).

4.2.processing of personal data for other purposes not specified in this policy is not allowed.

5. legal basis for processing personal data
5.1. legal basis for processing personal data:

Federal law of the Russian Federation of 27.07.2006 No. 152‑FZ "on personal data";

Law of the Republic of Kazakhstan dated May 21, 2013 No. 94‑V" on personal data and their protection";

Consent to the processing of the user’s personal data.

5.2.processing of the user’s personal data is carried out only if he receives his voluntary, informed and conscious consent.

5.3. the agreement is considered received when the user fills out the relevant forms on the site (for example, feedback forms, application forms, subscription forms) and sends them to the operator.

6. principles of personal data processing
6.1. processing of personal data is carried out on the basis of the following principles:

legality and fair basis;

restriction of the processing of personal data by achieving specific, predetermined and legal goals;

compliance of the content and volume of processed personal data with the declared processing goals;

accuracy, adequacy and relevance of personal data in relation to the purposes of processing;

transparency of personal data processing;

destruction or depersonalization of personal data after achieving the goals of their processing or in case of loss of the need to achieve these goals.

7. procedure for processing and storage conditions of personal data
7.1. processing of personal data of users is carried out both using automation tools and without their use.

7.2. personal data of users is stored on the territory of the Russian Federation. The operator ensures the safety of personal data in a form that allows identifying the subject of personal data no more than is required by the purposes of their processing.

7.3.personal data of users is subject to destruction after the achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by law.

8. rights of users (subjects of personal data)
8.1. the user has the right:

obtaining information related to the processing of his personal data;

implementation of access to their personal data;

if personal data is incomplete, outdated, incorrect, illegally obtained or not necessary for the stated purpose of processing, require clarification of their personal data, their blocking or destruction;

revocation of consent to the processing of personal data at any time without explaining the reason;

appeal the actions or omissions of the operator to the authorized body for the protection of the rights of subjects of personal data (in the Republic of Kazakhstan — the authorized body in the field of personal data protection) or in court.

8.2.in order to exercise its rights, the user may send the operator a corresponding request at the contact details specified in Section 12 of this policy. The application (request) is submitted to the operator in writing or in the form of an electronic document.

9. cross-border transfer of personal data
9.1. the operator processes personal data on the territory of the Russian Federation.

9.2. if cross-border transfer of personal data (including to the Republic of Kazakhstan) is necessary, the operator undertakes to comply with the requirements of the legislation, including:

if required by law, obtain the user’s prior consent to such transportation;

ensure that the territory of a foreign state provides an appropriate level of protection of the rights of subjects of personal data.

9.3.cross-border transfer of personal data is prohibited if the territory of a foreign state does not ensure the proper level of protection of the rights of subjects of personal data, except in cases stipulated by law.

10. measures to ensure the security of personal data
10.1. the operator takes the necessary legal, organizational and technical measures to protect personal data from illegal or accidental access, destruction, modification, blocking, copying, distribution, as well as other illegal actions of third parties.

10.2. ensuring the security of personal data, in particular, is achieved:

appointment of a person responsible for organizing and internal control over the processing of personal data;

application of organizational and technical measures to ensure the security of personal data when processing them in Information Systems;

identification of threats to the security of personal data when processing them;

use of information protection tools.

11. internal control over the processing of personal data
11.1.in accordance with the requirements of the law of the Republic of Kazakhstan" on personal data and their protection", the operator is appointed a person responsible for exercising internal control over the processing of personal data.

11.2. the duties of this person include:

study and analysis of personal data processing processes;

identification of risks associated with the processing of personal data and development of proposals to minimize them;

development and up-to-date maintenance of documents that determine the operator’s policy regarding the processing of personal data;

keeping records of personal data;

advising employees on the processing and protection of personal data.

12. contact information
12.1. for all questions related to the processing of personal data, the user can contact the operator: IP Zatsarinny Andrey Alekseevich

Location: RF, Republic of Crimea, Simferopol, Evpatoria Highway, House 57, 295 014

Contact phone number: +79 790 037 001; +79 788 538 230

Email address: vlt.laser@mail.ru

12.2.requests related to the exercise of the rights of subjects of personal data are accepted in accordance with the procedure established by Article 10 of the law of the Republic of Kazakhstan "on personal data and their protection".

13. Final provisions
13.1.this policy is a local regulatory act of the operator, which defines the policy regarding the processing of personal data.

13.2.the operator has the right to make changes to this policy. The new version of the policy comes into force from the moment of its placement on the site, unless otherwise provided by the new version of the policy.