PRIVACY POLICY

The Personal Data Processing Policy (hereinafter referred to as the Policy) governs the legal relationships related to the processing of personal data between the sole proprietor Sartbaeva Talaygul Keneshbekovna, Tax ID 13105198801527, address: 53 G Kozhomberdieva St., Kara-Balta, Kyrgyz Republic (hereinafter referred to as the Company), and the User of the website Ak-tilek.kg (hereinafter referred to as the User).

The term "User" refers to a legally competent individual who is at least 18 years of age and wishes to order the services of the Company, leave a comment, register on the website, or perform other actions provided by the functionality of the Company's web resource.

The term "Website" or "Company's Internet resource" refers to the Ak-tilek.kg website, including all domain levels, owned by the Company.

The term "personal data" refers to any information related to an identified or identifiable individual (citizen), directly or indirectly.

The term "processing of personal data" refers to any action (operation) or set of actions (operations) performed with personal data, whether by automated means or without such means. These actions (operations) include: collection, receipt, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.

This Policy defines the procedure for processing personal data of users of the Ak-tilek.kg website (hereinafter referred to as the Website), the conditions and principles of personal data processing, the rights of Users, the obligations of the Company, and information about the measures implemented to protect the personal data being processed. 

This Policy applies to all personal data that the Company receives from Users. 

By entering their name, phone number, and, if necessary, email address in a special field on the Website, submitting a request for consultation, booking an appointment, placing an order, or performing other actions as provided by the functionality of the Website, and subsequently clicking the "Submit", "Request Consultation" buttons or other similar buttons, the User agrees to this Policy. 

If the User disagrees with the terms of the Policy, they must immediately cease any use of the Website.

When using the Website's functionality, the User may provide the Company with the following personal data (the list and types of personal data depend on the specific functionality of the website used by the User): surname, first name, email address, contact phone number, user identification data (user ID).

By providing their personal data, the User consents to their processing (until the User withdraws their consent for the processing of personal data), including collection, storage, anonymization, transfer to third parties in cases provided for by the Policy, by the Company in order to provide the User with advertising, reference information, services in accordance with the Website's functionality, and for other purposes specified in section 8 of this Policy. In processing personal data, the Company follows the Law of the Kyrgyz Republic dated April 14, 2008, No. 58 "On Personal Information" and takes into account the provisions of the General Data Protection Regulation (GDPR) of the European Union dated April 27, 2016, as well as other legislative acts of the Kyrgyz Republic and internal regulations.

The consent provided by the User for the processing of personal data is valid from the day the consent is given until the purpose of the processing is achieved or the consent is revoked by the User, unless otherwise provided by applicable law.

The User may revoke the consent provided to the Company at any time in the manner specified in this Policy.

If the User wishes to clarify personal data in cases where the personal data is incomplete, inaccurate, or outdated, or if the User wishes to revoke their consent for the processing of personal data, the User must send an official request to the Company with the subject "Clarify Personal Data" or "Stop Processing Personal Data" to the email address: talaigulsartbaeva88@gmail.com.

The email must specify the User's email address and the corresponding request. 

The Company uses the personal data provided by the User for the following purposes:
- Registration and identification of the User on the Website, providing the User with the opportunity to fully use the Website;
- Further communication regarding the User's request, including third-party partners of the Company for fulfilling obligations under the User's request;
- Consultation regarding the Company's services;
- Creating an account and providing access to the account on partner websites;
- Sending informational messages;
- Advertising, promoting products, works (services), including based on information about the User's personal preferences and settings;
- Evaluating and analyzing the performance of the Company's Website;
- Analyzing the effectiveness of advertising placement, conducting statistical research based on anonymized information provided by the User;
- Informing the User about promotions, discounts, and special offers via email or phone communication;
- Conducting marketing research, including involving third parties as contractors (performers, consultants);
- Communicating with partner banks regarding the provision of loans and/or agreeing on loan terms for the User.

The Company does not verify the information provided by the User. Therefore, the Company assumes that when providing personal data, the User:
- Is a legally capable individual. In the case of an incapacitated individual using the Website, the consent to process personal data is provided by the legal representative;
- Provides accurate information about themselves (or the incapacitated individual they represent). The User independently maintains the accuracy and relevance of the personal data provided;
- Understands that information posted on the Website by the User may become accessible to others and may be copied or distributed by other users in cases provided for by the Policy.

The Company processes personal data based on the following principles:
- Legality;
- Limiting the processing of personal data to achieving specific, pre-defined lawful purposes;
- Prohibiting the processing of personal data incompatible with the purposes of collection and/or storage of the data provided by the User;
- Ensuring the content and scope of the processed personal data correspond to the purposes of their processing;
- Prohibiting the processing of excessive data in relation to the purposes of processing;
- Ensuring accuracy, sufficiency, and relevance of personal data in relation to the purposes of their processing;
- Destroying or anonymizing personal data to prevent disclosure once the purposes of processing are achieved, the necessity for processing is lost, or a request for destruction or revocation of consent is received from the User.

The Company takes necessary and sufficient organizational and technical measures to protect personal data from unauthorized access, as well as other unlawful actions regarding personal data.

Personal data processing takes into account the following:

- Personal data processing is carried out using databases located in the Kyrgyz Republic;
- Personal data processing is carried out both with and without automated tools;
- The Company undertakes not to transfer the information received from the User to third parties, except in cases specifically stipulated by this Policy;
- Transfer of personal data to third-party partners of the Company is carried out with the User's consent for fulfilling obligations to the User.

The Company and third-party partners, if necessary, are obligated to maintain the confidentiality of the personal data, not to disclose or distribute it without the User's consent unless otherwise provided by applicable law and/or this Policy.