Personal Data Processing Policy

Personal data means any information relating to an identified or identifiable individual.

Processing of personal data means any action or set of actions: collection, recording, systematization, storage, clarification, use, transfer, anonymization, blocking, deletion, destruction.

Operator — SevEsilZerno LLP, which independently or jointly with other persons organizes and (or) carries out the processing of personal data.

Consent — voluntary, specific, informed and unambiguous expression of the data subject's will.

2.1. Data voluntarily provided by the subject:

• name and surname, contact phone number, email address;
• organization name (for corporate requests), position (when specified);
• text of the message, request or application;
• IP address, browser type and version, operating system;
• site pages visited by the user, date and duration of the visit;
• referrer source, cookie data.

Personal data is processed exclusively for the following purposes:

• receiving, registering and processing requests submitted through Site forms;
• feedback with potential partners, suppliers and buyers of products;
• providing commercial information on delivery terms, prices and assortment;
• sending notifications about the status of the request to company managers;
• analysis of Site traffic and improvement of user experience;
• compliance with the requirements of the legislation of the Republic of Kazakhstan.

Personal data is collected at the moment the user submits a completed form on the Site. The fact of submitting the form is an expression of the subject's consent to the processing of their data for the specified purposes.

Requests and related personal data are stored in the Operator's CMS; notifications are sent to authorized employees by email and to a Telegram bot.

Personal data retention periods:

• request data — 3 years from the date of receipt, unless otherwise provided by the contract or legislation;
• analytical (anonymized) data — in accordance with the settings of the analytical services used;
• data required for the execution of the contract — during the validity period of the contract and 5 years after its termination.
• Upon expiration of the retention period or at the request of the subject, the data is deleted from the CMS and related systems.

The Operator does not transfer personal data to third parties for commercial purposes. Transfer is permitted only in the following cases:

• Google Analytics (Google LLC) — anonymized data on Site traffic;
• Meta Pixel (Meta Platforms, Inc.) — anonymized data on actions on the Site;
• Google Search Console (Google LLC) — technical data on indexing;
• Email and Telegram bot — for notifications about new requests to authorized employees;
• Transfer of data to authorized state bodies of the Republic of Kazakhstan upon their legal request.

6.1. Organizational measures:

6.2. Technical measures:

• determining the list of employees with access to personal data;
• familiarizing employees with the requirements of personal data protection legislation;
• establishing a confidentiality regime and monitoring compliance with the Policy;
• use of secure HTTPS connection on the Site;
• differentiation of access rights in the CMS, regular software updates;
• use of strong passwords and two-factor authentication, backup of data.

The personal data subject has the right to:

• receive information about the fact of processing of their personal data, the purposes and methods of processing;
• have access to their personal data and request its clarification;
• request blocking or deletion of their personal data;
• withdraw consent to the processing of personal data;
• appeal the actions or inaction of the Operator to the authorized body.
• The period for considering a written request sent to info@esilzerno.kz is no more than 10 business days.

The Site uses technical (necessary) and analytical cookies. The user can disable them in browser settings; disabling analytical cookies does not affect the main functionality.

Due to the use of Google Analytics, Google Search Console and Meta Pixel, some anonymized data may be processed on servers located outside the Republic of Kazakhstan. The Operator takes measures to ensure that cross-border data transfer is carried out only to countries that provide adequate protection of the rights of personal data subjects.

Operator: SevEsilZerno LLP, BIN 090740003967, director: Dadashov Rasul Mutallim Ogly.

Address: Republic of Kazakhstan, North Kazakhstan Region, Petropavlovsk, 116A Leningradskaya Street. Email: info@esilzerno.kz. Phone: +7 (777) 082-77-13. Website: esilzerno.kz.