1. General Provisions
This Personal Data Processing Policy is prepared in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection” and defines the procedure for processing personal data, as well as measures taken by LLP “BILIM QAZYNASY” (Kemel Bilim International School) (hereinafter – the Operator) to ensure the security of personal data.
1.1. The Operator considers the observance of human and civil rights and freedoms when processing personal data— including the protection of the right to privacy, personal and family secrets— as one of its key goals and conditions for conducting its activities.
1.2. This Privacy Policy (hereinafter – the Policy) applies to all information that the Operator may receive regarding visitors of the website:
http://kemelbilim.edu.kz/.

2. Key Terms Used in the Policy
2.1. Automated processing of personal data — processing using computer technology.
2.2. Blocking of personal data — temporary suspension of processing (except when processing is required to clarify the data).
2.3. Website — a collection of graphic and informational materials, software, and databases accessible at http://kemelbilim.edu.kz/.
2.4. Information system of personal data — databases containing personal data and the technologies ensuring their processing.
2.5. Depersonalization of personal data — actions that make it impossible to identify a specific user without additional information.
2.6. Processing of personal data — any operation or set of operations performed with or without automation: collection, recording, systematization, storage, updating, extraction, use, transfer, depersonalization, blocking, deletion, destruction.
2.7. Operator — a legal or natural person organizing and/or performing personal data processing.
2.8. Personal data — any information related directly or indirectly to a specific or identifiable User of http://kemelbilim.edu.kz/.
2.9. Personal data allowed for distribution — personal data made publicly accessible by the data subject.
2.10. User — any visitor of the website.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific entity or group of entities.
2.12. Distribution of personal data — actions aimed at making personal data available to an unlimited number of persons.
2.13. Cross-border transfer of personal data — transfer to foreign authorities, foreign natural or legal persons.
2.14. Destruction of personal data — irreversible destruction making recovery impossible.

3. Rights and Obligations of the Operator
3.1. The Operator has the right to:
— The Operator has the right to send the User notifications about new products and services, special offers, and various events. The User may unsubscribe from such informational messages at any time by sending an email to the Operator at (insert your email address) with the subject line “Unsubscribe from notifications about new products, services, and special offers.”
— obtain accurate information/documents containing personal data from the data subject;
— continue processing personal data without consent if legally justified;
— independently determine the necessary measures for compliance with the law. 3.2. The Operator must:
— provide the data subject with information about the processing of their data;
— process data in accordance with Kazakhstan’s legislation;
— respond to requests and inquiries from data subjects;
— provide necessary information to the authorized state body;
— publish or otherwise grant access to this Policy;
— ensure legal, organizational, and technical protection of personal data;
— stop processing and destroy data when required by law.

4. Rights and Obligations of Personal Data Subjects
4.1. Subjects have the right to:
— obtain information on the processing of their personal data;
— request correction, blocking, or deletion of inaccurate or unlawfully obtained data; — require prior consent for marketing use;
— withdraw consent to processing;
— file complaints with the authorized state body or the court.
4.2. Subjects must:
— provide accurate personal data;
— notify the Operator about updates/changes to their data.

5. Principles of Personal Data Processing
— Lawfulness and fairness
— Specific and legitimate purposes
— Prohibition of incompatible data combinations
— Data relevance and adequacy
— Accuracy and up-to-date status
— Storage no longer than necessary
— Destruction or depersonalization upon achieving the purpose

6. Purposes of Personal Data Processing
Purpose: providing the User with access to services, information, and materials contained on the website.
Processed personal data:
— full name
— email address
— phone number
— photographs
Processing actions: collection, recording, systematization, accumulation, storage, destruction, depersonalization.

7. Conditions of Personal Data Processing
Personal data is processed when:
— the data subject has provided consent;
— required by international agreements or national legislation;
— necessary for justice or enforcement of legal acts;
— needed to perform a contract involving the data subject;
— required to protect the Operator’s or third parties’ lawful interests;
— the data is publicly available;
— mandatory disclosure is required by law.

8. Collection, Storage, Transfer, and Other Processing Procedures
The Operator ensures security through legal, organizational, and technical measures. 8.1. The Operator ensures the safekeeping of personal data and prevents unauthorized access.
8.2. Personal data is never transferred to third parties unless required by law or provided with consent.
8.3. Users may update their data by sending an email to: info@kemelbilim.edu.kz with the subject “Personal Data Update”.
8.4. The processing period is determined by the achievement of the processing goals unless otherwise defined by law or contract.
Users may withdraw consent at any time by sending an email to: info@kemelbilim.edu.kz titled “Withdrawal of Consent”.
8.5. Data processed by third-party services (payment systems, communications providers, etc.) is processed according to their own policies.
8.6. Restrictions imposed by the data subject do not apply in cases of processing for public or state purposes.
8.7. The Operator ensures the confidentiality of personal data.
8.8. Data is stored only as long as necessary for processing purposes.
8.9. Processing is terminated upon achieving the goal, expiration of consent, or identification of unlawful processing.

9. Actions Performed by the Operator
9.1. The Operator performs collection, recording, systematization, accumulation, storage, updating, extraction, use, transfer, depersonalization, blocking, deletion, and destruction.
9.2. Automated processing may be used.

10. Cross-Border Transfer of Personal Data
The Operator must notify the authorized state body before initiating cross-border transfer and obtain necessary confirmations from foreign recipients.

11. Confidentiality
The Operator and any third parties with access to personal data must not disclose or distribute it without the subject’s consent unless required by law.

12. Final Provisions
Users may obtain clarifications regarding their personal data via: info@kemelbilim.edu.kz.
Any amendments to the Policy will be reflected in this document.
The Policy is effective indefinitely until replaced.
The current version is available online at:
http://kemelbilim.edu.kz/privacy-en/.