1. General provisions
This personal data processing policy (the "Policy") has been prepared in accordance with the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Their Protection" and sets out how the personal data of website users is processed and protected /.
The personal data operator is:
Individual Entrepreneur Maxim Olegovich Pribylov, INN 212402400967, OGRNIP 314212426600020, address: office 1, 75 Ts Promyshlennaya St., Novocheboksarsk, Chuvash Republic, 429965, Russia.
2. Personal data collected on the website
The operator processes the following:
full name
email address
phone number
delivery address
information about orders, payments and requests
other data voluntarily provided through forms on the website
3. Purposes of processing personal data
Personal data is processed for the purposes of:
accepting and fulfilling user orders
delivering goods
providing feedback and handling requests
marketing and informing about promotions, news and services (with consent)
accounting and tax records
compliance with the legislation of the Republic of Kazakhstan
4. Grounds and methods of data processing
Personal data is processed on the basis of the data subject's consent given when filling in forms on the website, entering into a contract or otherwise using the website.
Processing is carried out using automated and/or non-automated means.
5. Processing and storage periods
Personal data is stored until the purposes of processing are achieved or consent is withdrawn.
Upon the data subject's written request, the data is deleted within 30 calendar days.
6. Conditions of processing and transfer of personal data
The operator does not transfer personal data to third parties, except in cases directly provided for by the legislation of the Republic of Kazakhstan or necessary to fulfill an order (delivery services, payment systems, etc.).
To fulfil an order, personal data is passed to the official GESTORE partner in Kazakhstan, i.e. the showroom through which the order is placed.
Personal data may be transferred only with appropriate protection measures in place.
7. Personal data protection measures
The operator takes the necessary legal, organizational and technical measures to prevent unauthorized access, destruction, modification, blocking, copying, distribution and other unlawful actions.
Only authorized employees and contractors have access to the data.
8. User rights
The user has the right to:
receive information about their personal data and how it is processed
request clarification, blocking or deletion of their data
withdraw consent to data processing
send requests regarding data processing by email: info@gestore.kz or to the company's address
file complaints with the authorized personal data protection body
9. Cookies and analytics
The website uses cookies and analytics services to improve the quality of service. The user may restrict or block cookies in their browser settings.
10. Cross-border data transfer
Personal data is stored on a server in the Republic of Kazakhstan. Requests submitted on the website are, with the user's consent, transferred for processing to a CRM system hosted in the Russian Federation; website visit data is processed by the Yandex Metrica service. By submitting a form on the website, the user consents to such cross-border transfer.
11. Changes to the policy
The operator may change this Policy without prior notice to users. The current version is published at: gestore.kz/politika-konfidencialnosti