Privacy Policy

1.1. This Privacy Policy (the “Policy”) has been developed by the Operator in accordance with the Constitution of the Republic of Kazakhstan and the Law of the Republic of Kazakhstan No. 94-V “On Personal Data and Their Protection” dated 21 May 2013 (the “Law”) and sets out the procedure for processing personal data and the measures taken to ensure its security.

1.2. This Policy applies to personal data collected and processed by the Operator when the Data Subject uses the Website, completes feedback forms, submits enquiries, or interacts with the Operator through the communication channels provided on the Website in connection with its use.

1.3. By using the Website and/or sending an enquiry to the Operator, the Data Subject confirms that they have read this Policy.

1.4. By continuing to use the Website, the Data Subject confirms that their use of the Website does not and will not violate any applicable laws or regulations relating to the processing of their personal data, and that they have no claims against the Operator in this regard.

2.1. Law – the Law of the Republic of Kazakhstan No. 94-V dated 21 May 2013 “On Personal Data and Their Protection”, as amended from time to time.

2.2. Processing of personal data means actions aimed at the collection, accumulation, storage, alteration, supplementation, use, dissemination, depersonalisation, blocking and destruction of personal data.

2.3. Personal data means information relating to a Data Subject who is identified or identifiable on the basis of such information, recorded on an electronic, paper and/or other tangible medium.

2.4. Data Subject means the natural person to whom the personal data relate.

2.5. Consent means the Data Subject’s expression of will, given in any form that allows the fact of its receipt to be confirmed.

2.6. Cross-border transfer means the transfer of personal data to the territory of foreign states.

3.1. The Operator processes the following categories of personal data voluntarily provided by the Data Subject through the feedback form on the Website:

- surname, first name (and patronymic, if any);

- email address;

- telephone number;

- name of organisation and/or position;

- subject and content of the enquiry.

3.2. Where the Data Subject contacts the Operator via messaging applications or email, the Operator may process any personal data voluntarily provided by the Data Subject in their message.

3.3. The Operator does not collect or process personal data belonging to special categories as defined by the Law.

4.1. The Operator processes personal data for the following purposes, including but not limited to:

- reviewing and handling enquiries, requests and business proposals;

- providing feedback to the Data Subject;

- conducting business communications;

- complying with the requirements of the legislation of the Republic of Kazakhstan;

- conducting statistical analysis to improve the quality of services provided;

- ensuring the operation, technical support and improvement of the Website;

- other purposes in accordance with the legislation of the Republic of Kazakhstan.

5.1. The legal ground for the collection and processing of personal data is the consent of the Data Subject given in accordance with Clause 5.2 of this Policy, as well as other legal grounds provided for by the legislation of the Republic of Kazakhstan.

5.2. Where data is collected through a form on the Website, consent is given by ticking a separate checkbox before submitting the form. The Operator ensures that the fact and date of consent can be verified.

5.3. Personal data is collected and processed on lawful grounds and for specific, predetermined and legitimate purposes. The amount and types of personal data processed must not be excessive in relation to those purposes.

6.1. Processing is carried out with the consent of the Data Subject, except in cases provided for by the Law, using automated and/or non-automated means.

6.2. Personal data is collected and processed in compliance with the legislation of the Republic of Kazakhstan. Personal data is stored in a database located within the territory of the Republic of Kazakhstan.

6.3. Personal data is retained until the purposes for which it was collected and processed have been achieved, unless a different retention period is prescribed by the legislation of the Republic of Kazakhstan. Once the purposes of processing have been achieved, personal data must be deleted and/or destroyed in accordance with the procedure established by the legislation of the Republic of Kazakhstan, unless further retention is required on a lawful basis. Where consent is withdrawn, the Operator shall cease processing the personal data within the time limits prescribed by law, unless other lawful grounds for continued processing exist.

7.1. The Operator does not disclose or transfer personal data to third parties, except where this is necessary to achieve the purposes of processing, is carried out with the consent of the Data Subject, or is provided for by law. Cross-border transfer is carried out provided that the receiving party ensures the protection of personal data.

8.1. The Website may use cookies and similar technologies to ensure the functioning of the Website and to analyse its use. The Data Subject may disable cookies in their browser settings; certain features of the Website may then become unavailable.

9.1. The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful access, alteration, dissemination or destruction in accordance with Article 25 of the Law, and appoints a person responsible for organising the processing of personal data.

10.1. The Data Subject has the right to:

- obtain information concerning the processing of their personal data, except in cases provided for by law;

- request that the Operator amend or supplement their personal data;

- demand the blocking or destruction of the data where it is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the purposes of processing;

- withdraw previously given consent to the collection and processing of personal data;

- appeal the actions (inaction) of the Operator to the authorised body responsible for data protection and/or through the court.

11.1. The Data Subject may withdraw their consent to the processing of their personal data at any time by submitting a request to info@iconiccomplex.com or by post to the postal address specified in the Operator's details. The Operator shall consider the request within the time limits established by the legislation of the Republic of Kazakhstan.

12.1. The Operator has the right to amend this Policy. The current version is published on the Operator’s Website and takes effect upon publication.