Personal Data Processing Policy (Privacy Policy)
1. What This Document Regulates
1.1. This Personal Data Processing Policy has been drawn up in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V "On Personal Data and Their Protection" and determines the procedure for processing personal data and measures to ensure the security of personal data of the companies —
  • Individual Entrepreneur Gordiyuk Alexander Mikhailovich, address: Almaty, Almaly District, Shevchenko St., 127 (hereinafter referred to as the "Operator")
  • Individual Entrepreneur Trusov Vladimir Ivanovich, address: Almaty, Zheltoksan Ave., 115 (hereinafter referred to as the "Operator")
  • Individual Entrepreneur Tsoy Dmitry Lavrentievich, address: Almaty, Aksay-1a, 11/2 (hereinafter referred to as the "Operator")
  • LLP "B-4", address: Almaty, Aksay-1A microdistrict, bldg. 11/2.
1.2Regarding the processing of personal data collected using the website https://basilic.kz (hereinafter referred to as the "Website"), and contains information on the requirements for the protection of such personal data implemented by the Operator.
1.3. The legal grounds for processing personal data are regulatory legal acts of the Republic of Kazakhstan, local regulatory acts of the Operator, agreements with personal data subjects, and consents of personal data subjects to the processing of personal data.
1.4. The processing of personal data is carried out while maintaining confidentiality. The Operator does not disclose to third parties and does not distribute personal data of personal data subjects without the consent of the personal data subject, unless otherwise provided by the legislation of the Republic of Kazakhstan.
2. Rights and Obligations of the Personal Data Operator and Personal Data Subjects
2.1. The Operator of personal data subjects has the right to:
  • receive reliable information from the personal data subject regarding the personal data provided by them;
  • request timely clarification of the provided personal data from the personal data subject.
2.2. The Operator of personal data subjects undertakes to:
  • process personal data in the manner established by the current legislation of the Republic of Kazakhstan;
  • consider requests from the personal data subject (their legal representative) on issues of personal data processing and provide reasoned answers within ten working days from the date of receipt of the corresponding request;
  • provide the personal data subject (their legal representative) with the opportunity for free access to their personal data;
  • take measures to clarify and destroy the personal data of the personal data subject in connection with their (their legal representative's) request with legitimate and justified requirements, as well as upon achieving the purposes of personal data processing;
  • organize the protection of personal data in accordance with the requirements of the legislation of the Republic of Kazakhstan;
  • bear other obligations in accordance with the requirements of the legislation of the Republic of Kazakhstan.
2.3. Rights of personal data subjects:
  • receive information regarding their personal data processed by the Operator by sending a written request to the postal or email address indicated on the Website on the "Offer" page;
  • obtain access to their personal data, except in cases provided by law;
  • clarify their personal data, demand their blocking or destruction in cases where the personal data is incomplete, outdated, inaccurate, illegally obtained, or is not necessary for the stated purpose of processing by sending a written request to the postal or email address indicated on the Website on the "Offer" page;
  • withdraw consent to the processing of personal data by sending a written request to the postal or email address indicated on the Website on the "Offer" page;
  • exercise other rights provided by the legislation of the Republic of Kazakhstan.
2.4. Obligations of personal data subjects:
  • provide the Operator only with reliable data and information;
  • notify the Operator of the clarification (update, change) of their personal data.
3. Whose and What Personal Data is Processed
3.1. The Operator processes personal data of the following categories of subjects whose personal data may be collected by the Operator using the Website:
  • unregistered users;
  • registered users;
  • recipients of goods and services sold by the Operator (who are not registered users).
3.2. The processing by the Operator of personal data of other categories of personal data subjects is regulated by other local acts of the Operator. The processed personal data of unregistered and registered users of the Website, as well as recipients of goods and services sold by the Operator, includes all information provided to the Operator by users using the Website, including by filling out the corresponding data fields of the personal data subject on the Website, among which are:
  • surname, name, patronymic;
  • mobile phone number;
  • email address (e-mail);
  • delivery address of goods sold by the Operator;
  • history of orders sold by the Operator;
  • history of requests and views on the Website and its services;
  • other information (the given list may be shortened or expanded depending on the specific case and purposes of processing).
4. For What Purposes Personal Data is Processed
4.1. The Operator will process the personal data of unregistered users for the following purposes:
  • their use of the Website, which includes:
    • providing users with reference information about goods and services sold by the Operator,
    • providing users with consultations on issues related to goods and services sold by the Operator, user support,
    • improving the usability of the Website;
  • promotion of goods and services sold by the Operator by demonstrating goods and services sold by the Operator on the Website.
To achieve the above purposes, the Operator processes the following personal data:
  • history of requests and views on the Website and its services;
  • other information that the user deems necessary to provide.
4.2. The Operator will process the personal data of registered users for the following purposes:
  1. their use of the Website, which includes:
    • communication with the Operator,
    • providing users with reference information about goods and services sold by the Operator,
    • providing users with consultations on issues related to goods and services sold by the Operator, user support,
    • improving железо/the usability of the Website;
  2. promotion of the Operator's goods and services by making direct contacts with users;
  3. delivery of goods sold by the Operator, which includes:
    • communication with the Operator,
    • providing users with information about the upcoming delivery of goods sold by the Operator,
    • providing recipients of goods and services sold by the Operator with consultations on issues related to the delivery of goods sold by the Operator, support for recipients of goods and services sold by the Operator.
To achieve the above purposes, the Operator processes the following personal data of registered users:
  • surname, name, patronymic;
  • mobile phone number;
  • email address (e-mail);
  • delivery address of goods sold by the Operator;
  • history of orders sold by the Operator;
  • history of requests and views on the Website and its services;
  • other information (the given list may be shortened or expanded depending on the specific case and purposes of processing).
4.3. The Operator will process the personal data of recipients of goods and services sold by the Operator for the purpose of the latter executing the delivery of goods sold by the Operator, which includes:
  • communication with the Operator,
  • providing users with information about the upcoming delivery of goods sold by the Operator,
  • providing recipients of goods and services sold by the Operator with consultations on issues related to the delivery of goods sold by the Operator, support for recipients of goods and services sold by the Operator.
To achieve the above purposes, the Operator processes the following personal data of recipients of goods and services sold by the Operator:
  • surname, name, patronymic;
  • mobile phone number;
  • email address (e-mail);
  • delivery address of goods sold by the Operator;
  • other information (the given list may be shortened or expanded depending on the specific case and purposes of processing).
5. How Personal Data is Processed
5.1. The Operator may process personal data with or without the use of automation tools by collecting, recording, systematizing, accumulating, storing, clarifying (updating, changing), extracting, using, transferring (providing, accessing), blocking, deleting, and destroying.
5.2. The Operator has the right to transfer personal data to third parties or entrust the processing of personal data to third parties if this is necessary to achieve the purpose of their processing in accordance with this Policy, as well as in cases provided for by the current legislation of the Republic of Kazakhstan on personal data.
5.3. The Operator will process personal data for no longer than required by the purposes of their processing, unless other terms are provided for by the current legislation of the Republic of Kazakhstan on personal data.
6. How Personal Data is Protected
6.1. The Operator takes a responsible approach to the issue of protecting collected personal data and implements requirements for their protection by adopting a set of measures necessary and sufficient to ensure the fulfillment of obligations provided for by the current legislation of the Republic of Kazakhstan on personal data.
6.2. At the same time, the Operator is not responsible for the acquisition by third parties of personal data by gaining access to the personal account of registered users. Registered users of the Website must independently ensure the safety of data for accessing their personal account.
7. Consent to the Processing of Personal Data and Applicable Clauses
7.1. The Website user freely, by their own will and in their own interest, provides the Operator with their personal data.
7.2. By accepting the terms of this Policy, the Website user hereby confirms that the personal data provided by them is reliable. The Operator proceeds from the fact that the Website user provides reliable personal data and keeps it up to date.
7.3. By filling out the data fields provided on the Website, the Website user accepts this Policy and gives their consent to the processing of their personal data in the manner and under the conditions specified in this Policy.
7.4. By filling out data fields regarding recipients of goods and services sold with the Operator, the Website user guarantees the existence of consent of such recipients of goods and services to the processing of their personal data in the manner and under the conditions specified in this Policy. In this case, the Website user also undertakes to notify such recipients of goods and services sold by the Operator about the transfer of their personal data to the Operator and guarantees such notification.
7.5. By accepting the terms of this Policy, the Website user confirms that they are aware of their rights and obligations provided for by the current legislation of the Republic of Kazakhstan on personal data, in particular, the right to access their personal data and to withdraw their consent.
7.6. The condition for terminating the processing of personal data is the achievement of the purposes of personal data processing, the expiration of the consent validity period or the withdrawal of consent by the personal data subject to the processing of their personal data, as well as the identification of unlawful processing of personal data. The personal data subject can withdraw consent to the processing of their personal data by sending a written notification to the email address indicated on the Website on the "Offer" page.
7.7. If the Website user does not intend to provide personal data or does not accept this Policy, they must stop using the Website; in this case, the Operator will not be able to ensure the user's use of the Website.
8. What Other Data May Be Processed
8.1. The Operator may collect information about visits to the Website by users without the corresponding information being provided by the users themselves. Such information can be obtained using various methods, means, and tools of Internet statistics and settings (in particular, Cookies, Yandex.Metrica, Google Analytics). The Operator may use such methods, means, and tools to promote goods and services sold by the Operator, provide information about goods and services sold by providing targeted advertising, and improve the usability of the Website by creating profiles of registered users. At the same time, such methods, means, and tools are not used to identify unregistered users.
8.2. If the Website user does not agree that Cookies are stored on their device, they can independently disable this option in their browser settings. Saved Cookies can also be deleted at any time in the browser system settings. The Website user can change browser settings to accept or reject by default all Cookies or Cookies from certain sites, including the Website.
8.3. Disabling certain Cookies may result in the inability to use certain sections or functions of the Website.
8.4. If the Website user does not agree with the use of methods, means, and tools of Internet statistics and settings, they must stop using the Website; in this case, the Operator will not be able to ensure the user's use of the Website.
9. Destruction of Personal Data
9.1. Upon achieving the purposes of personal data processing, the expiration of the validity period of consent to the processing of personal data, as well as in the event of withdrawal of consent to processing by the personal data subject, personal data is subject to destruction, unless:
  • otherwise provided by an agreement to which the personal data subject is a party, beneficiary, or guarantor;
  • otherwise provided by another agreement between the operator and the personal data subject.
9.2. If the processing of personal data is carried out by the Operator without the use of automation tools, the document confirming the destruction of personal data of personal data subjects is the act of destroying personal data.
9.3. If the processing of personal data is carried out by the Operator using automation tools, the documents confirming the destruction of personal data of personal data subjects are the act of destroying personal data and the export from the event log in the personal data information system.
9.4. If the processing of personal data is carried out by the Operator simultaneously with and without the use of automation tools, the documents confirming the destruction of personal data of personal data subjects are the act of destroying personal data and the export from the event log in the personal data information system.
9.5. The act of destroying personal data and the export from the log are subject to storage for 3 years from the date of destruction of personal data.
10. Final Provisions
10.1. This Policy is subject to change or supplementation in cases of corresponding changes or additions to the current legislation of the Republic of Kazakhstan on personal data, and may also be changed at any time at the discretion of the Operator. The current edition of the Operator's Policy is always available for viewing by an unlimited number of persons on the Website.
10.2. All relations involving the Operator concerning the processing and protection of personal data that are not directly reflected in this Policy are regulated in accordance with the provisions of the current legislation of the Republic of Kazakhstan on personal data.