PRIVACY AND PERSONAL DATA PROCESSING POLICY
This Privacy and Personal Data Processing Policy governs the collection, processing, storage and use of personal and other data of users of the website https://aymn.kz/, owned by Individual Entrepreneur “Svetlana”, IIN 810426401634, hereinafter referred to as the “Operator”.
The current version of this Privacy Policy is permanently available at https://aymn.kz/ (hereinafter referred to as the “Website”).
By providing personal data to the Operator through the Website, including when registering, placing an Order, making a payment, using feedback forms or other Website functionality, the User confirms that they have reviewed this Privacy Policy and consent to the processing of data to the extent necessary for the relevant interaction with the Operator.
Where the laws of the Republic of Kazakhstan require separate consent from the User, such consent shall be obtained separately.
Consent to receive advertising and marketing communications is not a mandatory condition for purchasing Goods and shall be provided separately by the User.
1. TERMS
1.1. Website means the website available at https://aymn.kz/.
Exclusive rights to the Website and its individual elements, including software, design, texts, images and other materials, belong to their lawful rights holders.
1.2. Operator means Individual Entrepreneur “Svetlana”, IIN 810426401634, operating the AYMN Shop online store.
1.3. User means an individual using the Website and its functionality.
1.4. Buyer means an individual or legal entity placing an Order and purchasing Goods through the Website.
1.5. Personal Data means information relating to an identified or identifiable personal data subject recorded on electronic, paper and/or other material media.
1.6. Data means other information about the User that does not directly fall within the definition of Personal Data, including technical information about use of the Website.
1.7. Order means a request placed by the Buyer to purchase Goods through the AYMN Shop online store.
1.8. Goods means clothing, accessories and other products offered on the Website.
1.9. Processing of Personal Data means actions performed by the Operator in relation to Personal Data, including collection, recording, systematization, accumulation, storage, clarification, modification, use, transfer where permitted, anonymization, blocking and destruction.
2. COLLECTION AND PROCESSING OF PERSONAL DATA
2.1. The Operator collects and processes only the Personal Data necessary for operation of the Website, placement and fulfilment of Orders, delivery of Goods, processing of payments, refunds, communication with Users and fulfilment of obligations under the laws of the Republic of Kazakhstan.
2.2. Personal Data may be processed for the following purposes:
-
registration and identification of the User;
-
placement, processing and fulfilment of Orders;
-
confirmation and processing of payments;
-
organization of delivery or self-pickup of Goods;
-
processing of returns and exchanges;
-
communication with the User regarding an Order;
-
sending notifications related to fulfilment of an Order;
-
consideration of requests, claims and inquiries;
-
prevention of fraudulent and other unlawful activities;
-
accounting, tax and other mandatory record keeping;
-
compliance with the laws of the Republic of Kazakhstan;
-
statistical and analytical research based on anonymized data;
-
sending advertising and marketing materials only where the User has provided separate consent.
2.3. The Operator may process, including but not limited to, the following data:
-
surname, first name and patronymic;
-
telephone number;
-
email address;
-
delivery address;
-
information about the recipient of the Order;
-
information about the Order and Goods purchased;
-
information required to arrange delivery, return or exchange;
-
information regarding the fact and status of payment;
-
other data voluntarily provided by the User and necessary to fulfil an Order or consider a request.
2.4. The Operator does not collect or store full bank card details of Users, including the full card number, expiry date and CVV/CVC code.
Payment details are processed directly by the relevant payment organization or Payment Service.
2.5. The User must provide accurate and up-to-date information.
2.6. The User must not provide Personal Data of third parties without proper authority or another lawful basis.
Where an Order is placed for another Recipient, the User confirms that they have a lawful basis to provide such Recipient's data to the Operator to the extent necessary to fulfil the Order.
3. PROCESSING AND TRANSFER OF DATA
3.1. The Operator processes Personal Data in accordance with the laws of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.
3.2. Personal Data shall be kept confidential except where:
-
such data is publicly available under applicable law;
-
the User has independently made the data publicly available;
-
disclosure is necessary in cases provided for by the laws of the Republic of Kazakhstan;
-
the User has consented to the relevant transfer.
3.3. The Operator may retain data for the period necessary to achieve the purposes of processing, fulfil obligations related to an Order, resolve potential disputes, comply with legal requirements and maintain mandatory records.
Once the purposes of processing have been achieved, the data shall be deleted, destroyed, anonymized or retained further where there is a lawful basis for doing so.
3.4. The Operator may transfer Personal Data to government authorities and other authorized persons in the cases and manner provided for by the laws of the Republic of Kazakhstan.
3.5. The Operator may transfer Personal Data to third parties to the extent necessary to fulfil Orders and operate the Website.
Such third parties may include:
-
delivery and courier services;
-
payment organizations and Payment Services;
-
banks and payment infrastructure participants;
-
information system operators;
-
hosting and technical support providers;
-
accounting, legal and other contractors of the Operator;
-
other persons engaged by the Operator to fulfil obligations to the User.
Data shall only be transferred to the extent necessary for the relevant purpose.
3.6. The Operator may process Personal Data using automated and non-automated means.
3.7. Technical information about use of the Website may be processed automatically, including browser information, device type, IP address, date and time of visit, actions performed on the Website and other technical data necessary for operation, security and improvement of the Website.
4. ADVERTISING AND MARKETING COMMUNICATIONS
4.1. Advertising and marketing materials may only be sent to the User where the relevant consent has been provided.
4.2. Consent to receive advertising communications is not a mandatory condition for placing an Order or purchasing Goods.
4.3. The User may withdraw from receiving advertising and marketing communications at any time using the method provided by the relevant communication channel or Website functionality.
Withdrawal from advertising communications does not affect service notifications necessary to fulfil an Order.
5. PROTECTION OF PERSONAL DATA
5.1. The Operator takes necessary organizational and technical measures to protect Personal Data against unlawful or accidental access, alteration, blocking, copying, distribution, destruction and other unlawful actions.
5.2. Access to Personal Data is granted only to persons who require such access to perform their relevant duties.
5.3. The Operator takes reasonable measures to ensure the security of the information systems used and to restrict unauthorized access to data.
5.4. At the same time, the User understands that transmission of information over the Internet cannot be guaranteed to be completely protected against all possible risks.
6. USER RIGHTS
6.1. The User has the right to:
-
obtain information about the processing of their Personal Data;
-
request clarification or correction of inaccurate or outdated data;
-
request blocking or destruction of data in cases provided by law;
-
withdraw previously provided consent to processing in the cases and manner provided by law;
-
opt out of advertising and marketing communications;
-
exercise other rights provided by the laws of the Republic of Kazakhstan.
6.2. Withdrawal of consent to processing Personal Data does not affect the lawfulness of processing carried out before such withdrawal.
The Operator may also continue processing certain data after withdrawal of consent where such processing is necessary to comply with legal requirements, fulfil obligations under a previously concluded agreement, maintain accounting and tax records, protect the Operator's rights and legitimate interests or for other purposes permitted by law.
7. COOKIES AND TECHNICAL DATA
7.1. The Website may use cookies and similar technologies to ensure proper operation of the Website, save User preferences, analyze traffic and improve the online store.
7.2. The User may restrict or disable cookies in their browser settings.
Disabling certain cookies may result in some Website functionality operating incorrectly.
7.3. Where certain cookies or similar technologies are used for advertising or marketing purposes and separate consent is required under applicable law, such consent shall be requested separately.
8. LINKS TO THIRD-PARTY RESOURCES
8.1. The Website may contain links to third-party websites and services.
8.2. The Operator does not control the data processing practices of third-party resources and is not responsible for their content or actions.
Users are advised to review the privacy policy of the relevant third-party resource independently.
9. OTHER PROVISIONS
9.1. This Privacy Policy and the relationship between the User and the Operator shall be governed by the laws of the Republic of Kazakhstan.
9.2. Disputes and disagreements relating to the processing of Personal Data and application of this Policy shall be resolved in accordance with the procedure established by the laws of the Republic of Kazakhstan.
9.3. If any provision of this Policy is found to be invalid or unenforceable, this shall not affect the validity of the remaining provisions.
9.4. The Operator may amend this Privacy Policy by publishing a new version on the Website.
9.5. The new version shall enter into force upon publication on the Website unless another effective date is expressly stated in the new version.
9.6. Users are encouraged to review the current version of the Privacy Policy periodically.
10. OPERATOR
Individual Entrepreneur “Svetlana”
IIN: 810426401634
Address:
Republic of Kazakhstan, Almaty, 050042, Taugul-1 Microdistrict, Building 89, 13
Website:
https://aymn.kz/
Contact details for User inquiries are published on the Website.