PRIVACY POLICY

PRIVACY POLICY

This Privacy Policy (hereinafter – the Policy) defines the procedure for processing and protecting the User’s personal data that Joint Stock Company “National Center for Professional Development ‘Orleu’” (hereinafter – the Company) may obtain when the User uses the Company’s information systems (hereinafter – IS). All terms and definitions used in this Policy shall be interpreted in accordance with the current legislation of the Republic of Kazakhstan. The User expressly agrees to the processing of their personal data as described in this Policy.

1. General Provisions

1.1. Use of the IS by the User means acceptance of this Policy and the terms for processing the User’s personal data.

1.2. If the User does not agree with the terms of this Policy, they must stop using the IS.

1.3. This Policy applies only to the Company’s IS. The Company does not control and is not responsible for third-party websites that the User may access via links available in the Company’s IS.

2. Subject of the Privacy Policy

2.1. This Policy establishes the Company’s obligations to ensure non-disclosure and to maintain a confidentiality regime for personal data provided by the User during registration in the IS or when ordering services.

2.2. Personal data permitted for processing under this Policy are provided by the User by filling in registration forms in the IS and include, but are not limited to, the following information:

• last name, first name, patronymic (if indicated in the identity document);

• contact phone number (home, mobile, work);

• bank details;

• identity details of the Course Participant (Individual Identification Number (IIN), date of issue and validity period, series and number of the identity document (or substitute document), issuing authority);

• registered residential address;

• email address;

• employment details (position, degree, title, full legal name and type of organization);

• any other personal data required for registration and/or use of the IS.

3. Purposes of Collecting and Processing Personal Data

3.1. The Company may use the User’s personal data for the following purposes:

1. identification of the User, including registration in the IS and creation of a User account to ensure proper functioning of the IS;

2. providing the User with access to personalized IS resources;

3. communication with the User via any available channels, including sending notifications and requests related to the use of the IS and provision of services, and processing User inquiries and applications;

4. verification of the accuracy and completeness of personal data provided by the User;

5. providing the User with access to services, information, and/or materials contained in the IS;

6. providing effective customer and technical support in case of issues related to the use of the IS;

7. providing updates on services, special offers, pricing information, newsletters, and other information on behalf of the Company or its partners;

8. forming a unified database of participants of advanced training courses organized by the Company, for the purposes of organizing and conducting training, final assessment, and issuing relevant documents;

9. distribution of advertising and/or marketing materials, invitations to events, conferences, and exhibitions conducted and/or organized by the Company, and conducting marketing campaigns, surveys, and research;

10. other purposes that do not contradict the legislation of the Republic of Kazakhstan.

3.2. For the purposes specified in clause 3.1 of this Policy, the User’s personal data may be transferred to third parties (including cross-border transfer) in accordance with the procedure established by the legislation of the Republic of Kazakhstan.

4. Methods and Terms of Processing Personal Information

4.1. Processing of the User’s personal data is carried out without time limitation, by any lawful means, including in personal data information systems with or without the use of automation tools.

4.2. The User’s personal data may be transferred to authorized state authorities of the Republic of Kazakhstan only on the grounds and in the manner prescribed by law.

4.3. The Company takes necessary organizational and technical measures to protect the User’s personal information from unlawful or accidental access, destruction, modification, blocking, copying, distribution, and other unlawful actions by third parties.

4.4. The Company, together with the User, takes all necessary measures to prevent losses or other adverse consequences caused by the loss or disclosure of the User’s personal data.

5. Data Security

5.1. The Company takes necessary and sufficient organizational and technical measures to ensure the security of the User’s personal information against accidental loss, unauthorized access, use, modification, and disclosure.

5.2. The security and protection of the User’s information also depend on the User. The User must take all available measures to ensure data security (login, password, and other access credentials).

5.3. The Company is not responsible for actions of users aimed at bypassing privacy settings and/or violating security measures that the User is required to observe.

5.4. In the event of loss or disclosure of Confidential Information, the Company shall not be liable if such confidential information:

1. became publicly available prior to its loss or disclosure;

2. was obtained from a third party before it was received by the Company;

3. was disclosed with the User’s consent.

6. Dispute Resolution

6.1. Prior to filing a claim in court regarding disputes arising from relations between the User and the Company, submission of a claim (a written proposal for voluntary dispute resolution) is mandatory.

6.2. The recipient of the claim shall, within 30 (thirty) calendar days from the date of receipt, notify the claimant in writing of the results of the claim review.

6.3. If no agreement is reached, the dispute shall be referred to a court at the location of the Company in accordance with the legislation of the Republic of Kazakhstan.

Additional Terms

7.1. The Company has the right to amend this Policy without the User’s consent. All changes take effect from the moment they are published in the Company’s IS. By using the IS, the User expresses explicit consent to the terms of this Policy in accordance with Article 8 of the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.

7.2. The User undertakes to independently monitor changes to the Policy by reviewing the current version.

7.3. Continued use of the IS after changes to the Policy constitutes unconditional acceptance of those changes by the User.

7.4. All suggestions or questions regarding this Privacy Policy should be sent to the email address: kuzhat@orleu-edu.kz, or by phone: +7 (7172) 574-600.

7.5. The current version of this Privacy Policy is published in the Company’s information system.