Personal data processing policy

This Policy sets out how personal data of users of the Scicom LLP website (the “Operator”) is collected, processed, stored and protected. It has been drawn up in accordance with the Law of the Republic of Kazakhstan on Personal Data and its Protection No. 94-V of 21 May 2013.

By using the contact forms on the website, the user confirms acceptance of this Policy. Consent is given voluntarily and may be withdrawn at any time in the manner described in section 8.

The Operator collects data the user provides directly: full name, organisation, email address, telephone number, subject of the enquiry and the message itself.

Technical information needed to guard against automated submissions and to investigate incidents is recorded automatically: IP address, browser details (User-Agent), date and time of the enquiry, and the page from which the form was submitted.

The Operator does not collect special categories of personal data and does not request information unrelated to the subject of the enquiry.

Personal data is processed solely for the following purposes: handling the enquiry and preparing a reply; clarifying the subject of a request for research or expert review; maintaining a record of enquiries; concluding and performing a contract where the enquiry leads to contractual relations; and protecting the website against automated submissions.

Data is not used for marketing mailings without separate consent and is not transferred to third parties for marketing purposes.

Personal data of citizens of the Republic of Kazakhstan is held on servers physically located within the Republic of Kazakhstan, as required by personal data legislation and the Law on Informatisation.

Enquiry data is retained for three years from the last interaction unless a different period is set by contract or by law. Once that period expires, the data is destroyed or anonymised.

The Operator does not sell or disclose personal data to third parties, except where this is necessary for the website to function (hosting provider, mail service, Google reCAPTCHA anti-spam service) or where required by the legislation of the Republic of Kazakhstan.

Any service providers engaged process the data solely on the Operator's instructions and only to the extent needed to deliver the relevant service.

Data is transmitted between the user's browser and the website over HTTPS using a valid SSL certificate.

Access to enquiries is granted to a limited group of staff on a need-to-know basis. Backups are taken weekly and an access log is maintained.

The website uses technical cookies needed to remember the selected interface language and to make the forms work. These cookies contain no personal data and are not used for profiling.

Third-party services (Google reCAPTCHA, the interactive map) may set their own cookies. The interactive map loads only after an explicit action by the user.

The user is entitled to learn whether the Operator holds their personal data, to request its correction, blocking or destruction, and to withdraw consent previously given for processing.

To exercise these rights, send a request to a.tlepov@vegalegal.kz setting out what is required. A reply will be provided within the period established by the legislation of the Republic of Kazakhstan.

The Operator may amend this Policy. The current version is always available at this address, and the version date is shown at the top of the document.

Material changes affecting the scope of data processed or the purposes of processing take effect no earlier than ten calendar days after the new version is published.