Privacy and Personal Data Processing Policy

This privacy and personal data processing policy regulates processing and use of personal and other data at the website of Grand Construction LTD LLP (hereinafter - Operator). The current version of this Privacy Policy is constantly available for review and posted on the Internet at: https://gc-build.kz/privacy/en. Transferring personal and other data to the Operator via the Site, the User confirms its consent to the use of the specified data on the terms stated in this Privacy Policy. If the User does not agree with the terms of this Privacy Policy, it shall be obliged to stop use the Site. Unconditional acceptance of this Privacy Policy is start of use of the Site by the User.

1.1. Website - a website located in the Internet at https://gc-build.kz/en
All exclusive rights to the Site and its individual elements (including software, design) are owned by the Operator in full. Transfer of exclusive rights to the User is not the subject of this Privacy Policy.
1.2. User — an individual using the Site.
1.3. Legislation — the current legislation of the Republic of Kazakhstan.
1.4. Personal data — personal data of the User, which the User provides independently upon registration or during the use of the functionality of the Site.
1.5. Data — other data about the User (not included in the concept of Personal data).
1.6. Service(s) — services rendered by the Operator based on an agreement.

2.1. The Operator collects and stores only those Personal Data that are necessary for rendering of Services by the Operator and interaction with the User.
2.2. Personal Data may be used for the following purposes:
2.2.1 rendering of Services to the User;
2.2.2 the User identification;
2.2.3 interaction with the User;
2.2.4 sending advertising materials, information and requests to the User;
2.2.5 conduction of statistical and other researches;
2.3. The Operator also processes the following data::
2.3.1 full name;
2.3.2 phone number (including mobile);
2.4. The User is prohibited to indicate personal data of third parties on the Site (except for representation of interests of these individuals, with documentary confirmation of third parties for such actions).

3.1. The Operator shall be obliged to use Personal Data in accordance with the Law «On Personal Data» of the Republic of Kazakhstan and internal documents of the Operator.
3.2. The Personal Data and other User Data are kept confidential, except for cases where the specified data are publicly available.
3.3. The Operator is entitled to keep an archive copy of the Personal Data.
The Operator is entitled to store the Personal Data and Data on servers outside the Republic of Kazakhstan.
3.4. The Operator is entitled to transfer Personal Data and User Data without the consent of the User to the following individuals:
3.4.1 state bodies, including inquiry and investigation bodies, and local government bodies upon their reasoned request;
3.4.2 in other cases expressly stipulated by the current legislation of the Republic of Kazakhstan.
3.5. The Operator is entitled to transfer Personal data and Data to third parties not specified in p. 3.4. of this Privacy Policy in following cases:
3.5.1 The User has expressed its consent to such actions;
3.5.2 transfer is necessary within the framework of the User's use of the Site or rendering of Services to the User;
3.6. The Operator automatically processes Personal data and Data.

4.1. The Operator shall ensure proper protection of Personal and other data in accordance with the Law and shall take necessary and sufficient arrangement and technical measures to protect Personal data.
4.2. The applied protection measures shall allow protecting of Personal data against unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions with them on the part of third parties.

5.1. This Privacy Policy and relationship between the User and the Operator arising due to application of the Privacy Policy shall be governed by the law of the Republic of Kazakhstan.
5.2. All possible disputes arising from this Agreement shall be settled in accordance with the current legislation at place of registration of the Operator.
Before initiation of legal action, the User should comply with the mandatory pre-trial procedure and send a corresponding claim in writing to the Operator. The period of response to the claim is 30 (thirty) business days.
5.3. If one or more provisions of the Privacy Policy are found to be invalid or unenforceable somehow, this shall not affect the validity or enforceability of the other provisions of the Privacy Policy.
5.4. The Operator is entitled to change the Privacy Policy (in whole or in part) unilaterally at any time without prior agreement with the User. All changes shall come into force from the moment they are posted on the Site.
5.5. The User shall be obliged to monitor changes to the Privacy Policy by means of review of the current version.
5.6. Any suggestions or questions regarding this Privacy Policy should be sent to email: webteam@starb.kz or by phone: +7 777 006 4127