Privacy Policy

01General provisions

1.1. This Privacy Policy (the "Policy") has been developed in accordance with the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Its Protection" (the "Law") and sets out how personal data is processed, as well as the measures to ensure its security, applied by Glavnaya Bukhgalteriya LLP (the "Aksenta" brand) when collecting personal data through the website located on the Internet at aksenta.kz (the "Website").

1.2. This Policy applies solely to personal data obtained by the Operator through the Website. The processing of personal data carried out in the performance of obligations under contracts for accounting, tax and other services is governed by the terms of the respective contracts concluded with each client and is not the subject of this Policy.

1.3. This Policy takes effect from the moment it is posted on the Website and remains in force indefinitely until replaced by a new version.

1.4. The Operator is a private commercial organization, is not a state body of the Republic of Kazakhstan, is not connected with or affiliated to them, does not act on their behalf and is not vested with state authority. The services provided by the Operator are advisory, supporting and representative in nature and do not replace services that the legislation of the Republic of Kazakhstan assigns to the exclusive competence of state bodies.

02Terms and definitions

2.1. For the purposes of this Policy, the following terms are used with the meanings established by the Law:

Personal data: information relating to a personal-data subject who is identified or identifiable on its basis, recorded on an electronic, paper and/or other tangible medium.
Personal-data subject (the "Subject"): a natural person to whom the personal data relates.
Operator: Glavnaya Bukhgalteriya LLP (the "Aksenta" brand) — a legal entity that is not a state body and that collects, processes and protects the Subject's personal data in connection with the use of the Website. The Operator's details are set out in Section 3 of this Policy.
Processing of personal data: actions aimed at accumulating, storing, modifying, supplementing, using, distributing, depersonalizing, blocking and destroying personal data.
Consent of the subject: an expression of the Subject's will, given freely and voluntarily, by which they permit the processing of their personal data.

03Operator details

3.1. The operator of personal data, as well as the owner and holder of the personal-data database, is:

Name: Glavnaya Bukhgalteriya LLP (the Aksenta brand)
BIN: 070740013346
Location: Almaty, 88 Aiteke Bi St., unit 98b
Contact phone: +7 701 085 44 22
Email: info@aksenta.kz
Website address: aksenta.kz

04Categories of personal data processed

4.1. The Operator processes the following categories of personal data provided by the Subject themselves through the feedback form on the Website:

surname, first name, patronymic;
contact phone number.

4.2. When the Subject contacts the Operator via the WhatsApp messenger or by email (through the corresponding contact buttons placed on the Website), the data that the Subject provides on their own initiative in the message sent is subject to processing.

4.3. When the Website is used, the Operator automatically collects the following data:

IP address;
information about the Subject's browser, device and operating system;
information about the Subject's actions on the Website (pages visited, referral source, date and time of access);
cookie data.

4.4. The Operator does not collect or process personal data belonging to special categories within the meaning of the Law.

05Purposes of processing personal data

5.1. The Operator processes personal data for the following purposes:

reviewing and handling requests and enquiries received through the Website;
maintaining feedback with the Subject and providing consultations and information about the Operator's services;
ensuring the operation, technical support and improvement of the Website;
conducting statistical and marketing analysis to improve the quality of the services provided;
fulfilling the obligations imposed on the Operator by the legislation of the Republic of Kazakhstan.

06Legal grounds and conditions of processing

6.1. The legal ground for processing personal data is the Subject's consent to the collection and processing of their personal data, given in the manner set out in clause 6.2 of this Policy, as well as other grounds provided for by the Law.

6.2. The Subject's consent is given by ticking the relevant box on the form when submitting it on the Website. Ticking this box means that the Subject has read this Policy and consents to the processing of their personal data on the terms set out in it.

6.3. Personal data is processed in compliance with the principles of lawfulness, limitation of processing to achieving the stated purposes, and correspondence of the volume and nature of the data processed to the stated purposes of processing.

07Transfer of personal data to third parties

7.1. The Operator does not sell or distribute Subjects' personal data for commercial purposes.

7.2. Personal data is transferred to third parties only in the following cases:

to service providers ensuring the operation of the Website (the hosting provider) — to the extent necessary to provide the relevant services;
to the operators of the web-analytics services listed in Section 9 of this Policy — in depersonalized form;
to state bodies — on the grounds and in the manner provided for by the legislation of the Republic of Kazakhstan;
to other third parties — where the Subject has given separate express consent.

08Storage and protection of personal data

8.1. In accordance with the requirements of the legislation of the Republic of Kazakhstan, the personal data of citizens of the Republic of Kazakhstan is stored using databases (servers) located within the territory of the Republic of Kazakhstan.

8.2. Personal data obtained through the Website forms is stored for the period necessary to achieve the purposes of its processing, but no longer than the term of the Subject's consent. Once the purposes of processing are achieved, or if the Subject withdraws consent, the relevant data is subject to destruction or depersonalization, except where its further storage is required by the legislation of the Republic of Kazakhstan.

8.3. The Operator takes the necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, distribution, and from other unlawful actions, including: restricting access to personal data, using secure servers and controlling employee access.

09Use of cookies and web-analytics services

9.1. The Website uses cookies to ensure its technical operation, save user settings and analyze user behavior. The Subject may disable the use of cookies in their browser settings, in which case certain features of the Website may become unavailable.

9.2. The Operator uses third-party web-analytics and advertising services, namely:

Google Analytics and Google Ads (Google LLC);
Yandex.Metrica and Yandex advertising services (Yandex LLC).

9.3. These services collect depersonalized information about users' actions on the Website using cookies and similar technologies. The processing of data by these services is governed by the privacy policies of their respective owners.

10Rights of the personal-data subject

10.1. The Subject has the right to:

obtain information concerning the processing of their personal data, except in the cases provided for by law;
require the Operator to modify and supplement personal data where there are grounds confirmed by the relevant information;
require the Operator to block or destroy personal data where it is incomplete, out of date, inaccurate, unlawfully obtained or no longer necessary for the purposes of processing;
withdraw consent previously given to the collection and processing of personal data;
appeal against the Operator's actions (or inaction) to the authorized body for personal-data protection — the Information Security Committee of the Ministry of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan — or through the courts.

10.2. To exercise the rights set out in this section, the Subject sends a corresponding request to the contact details specified in Section 3 of this Policy. The request is handled by the Operator within the timeframes established by the legislation of the Republic of Kazakhstan.

11Withdrawal of consent to processing of personal data

11.1. The Subject may withdraw consent to the processing of their personal data at any time by sending a corresponding request to the contact details specified in Section 3 of this Policy.

11.2. From the moment the withdrawal of consent is received, the Operator ceases processing the relevant personal data and ensures its destruction, except where processing must continue on the grounds provided for by the legislation of the Republic of Kazakhstan.

12Final provisions

12.1. The Operator may make changes to this Policy. The current version of the Policy is posted on the Website at aksenta.kz. The effective date of the current version is indicated at the beginning of the document.

12.2. By submitting data through the forms on the aksenta.kz Website and ticking the consent box, the Subject confirms that they have read this Policy and consents to the processing of their personal data on the terms it provides.