1. General provisions

This Personal Data Confidentiality and Processing Policy regulates the procedure of processing and usage of personal and other data of the website “Kazakhstan Fund of Economic Initiatives” Corporate Fund (hereinafter – the Operator). The current version of this Confidentiality Policy is constantly available for viewing and is placed on the Internet at https://www.sdgs-summit.kz.

All rights belong to the Operator.  

1.1. For the Operator, the critical goal and condition for conducting its activity is the observance of rights and freedoms of a human and citizen during the processing of his/her personal data, including protection of rights to privacy, personal and family secrets.  

1.2. This Operator’s Personal Data Processing Policy (hereinafter – the Policy) is applicable to all information that the Operator may receive about the visitors of the https://www.sdgs-summit.kz website.

2.1. Automated personal data processing – processing of personal data with the help of computer aids;

2.2. Personal data blocking – temporary termination of personal data processing (except for cases when processing is needed to clarify personal data);

2.3. Website – a totality of graphic and information materials, as well as computer programs and databases, which ensure their accessibility on the Internet at the network address https://www.sdgs-summit.kz. 

2.4. Personal Data Information System – a totality of personal data contained in the databases, and information technology and technical means that provide their processing;

2.5. Anonymization of personal data – actions that make it impossible to determine, without the use of additional information, whether the personal data belongs to a particular User or another subject of personal data;

2.6. Personal data processing – any action (operation) or totality of actions (operations) carried out with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data;

2.7. Operator – a government agency, municipal authority, a legal or natural person, which independently or jointly with other persons arranges and/or carries out processing of personal data, as well as determines the purposes of the processing of personal data, the scope of personal data due for processing, actions (operations) executed with personal data;

2.8. Personal data – any information related, directly or indirectly, to a defined or definable User of the https://www.sdgs-summit.kz website.

2.9. User – any visitors of the https://www.sdgs-summit.kz website.

2.10. Provision of personal data – actions meant to disclose personal data to a certain person or a certain group of persons;

2.11. Distribution of personal data – any actions meant to disclose personal data to any number of unspecified persons (transfer of personal data) or to familiarize an unlimited range of persons with personal data, including disclosure of personal data in mass media, posting in information and telecommunication networks or granting access to personal data by any other means;

2.12. The Operator shall use Personal Data in accordance with the Law of the Republic of Kazakhstan “On Personal Data” and the internal documents of the Operator.

2.13. The User’s Personal Data and other Data shall be kept confidential, except for cases when the specified data is publicly available.
2.14. The Operator is entitled to keep an archive copy of the Personal Data.
The Operator may store Personal Data and Data on servers outside the territory of the Republic of Kazakhstan.

2.15. The Operator is entitled to transfer Personal Data and Data of the User without the User’s consent to the following persons:

– government agencies, including inquiry and investigation bodies, and local self-government bodies at their reasoned request;  

– in other cases, as expressly provided by the current legislation of the Republic of Kazakhstan.
2.16. The Operator is entitled to transfer the Personal Data and Data to third parties under this Confidentiality Policy in the following cases:
– the User has signified his/her consent to such actions;
– the transfer is necessary as part of the use by the User of the Website or provision of the Services to the User;
2.17.  The Operator carries out automated processing of Personal Data and Data.

2.18. Destruction of personal data – any action resulting in the irretrievable destruction of personal data with the inability to further restore the content of personal data in the personal data information system and/or the destruction of physical media on which personal data are stored.

3. The Operator may process the following personal data of the User:

3.1. Surname, first name and patronymic;

3.2. E-mail address;

3.3. Telephone numbers;

3.4. Year, month, date and place of birth;

3.5. Photographs;

3.6. Links to social networks;

3.7. Also, the website is collecting and processing anonymized data about visitors (including cookie files) using Internet statistic services (Yandex Metrika and Google Analytics, etc.).

3.8. The aforementioned data are hereinafter united in the text of this Policy by the general concept of Personal Data. 

4. Purposes of personal data processing

4.1. The purpose of processing the User’s personal data is to inform the User by sending emails; provide access to the User to services, information, and/or materials contained on the website. 

4.2. The Operator also may send the User notifications about new products and services, special offers, and various events. The User may always reject the receipt of information messages by sending a letter to the Operator to the e-mail address info@sdgs-summit.kz/.  

4.3. The anonymized data of the Users, collected through the Internet statistics services, serves to collect information about the User’s actions on the website and improve the quality of the website and its content. 

5. Legal grounds for personal data processing

5.1. The Operator processes the User’s personal data only in case if they are filled in and/or sent by the User himself/herself through special forms located on the https://www.sdgs-summit.kz website. By filling in the relevant forms and/or sending his/her personal data to the Operator, the User expresses his/her consent to this Policy.  

5.2. The Operator processes anonymized data about the User in the case if it is allowed in the settings of the User’s browser (cookie files saving and the use of JavaScript technology are on).

6. The procedure for collecting, storing, transferring, and other types of processing of personal data

The security of personal data, which are processed by the Operator, is ensured through the implementation of legal, organizational and technical measures necessary for the full execution of requirements of the applicable legislation on the protection of personal data.

6.1. The Operator ensures the safety of personal data and takes all possible measures that exclude access to personal data by unauthorized persons.

6.2. The User’s personal data shall never, under no circumstances, be transferred to third parties, except in cases related to the implementation of the current legislation.

6.3. If there are any inaccuracies in the personal data, the User may update them on his/her own by sending a notification to the Operator’s e-mail address info@sdgs-summit.kz, with a note “Personal Data Update”.

6.4. The period of personal data processing is not limited. The User may withdraw his/her consent to the processing of personal data at any time by sending a notification to the Operator’s e-mail address info@sdgs-summit.kz with a note “Withdrawal of consent to the processing of personal data”.

7. Final provisions

7.1. The User can ask for any clarifications regarding issues of interest related to the processing of his/her personal data by contacting the Operator by e-mail at info@sdgs-summit.kz. 

7.2. This document will reflect any modifications to the personal data processing policy of the Operator. The policy remains in force indefinitely until replaced by a new version.

7.3. The most up-to-date version of the Policy is publicly available on the Internet at https://www.sdgs-summit.kz. 

7.4. Please send any suggestions or questions about this Confidentiality Policy by e-mail: info@sdgs-summit.kz or by phone: +7 747 1234 127.