Privacy and Personal Data Processing Policy

This Policy sets out the procedure for the collection, processing, storage and protection of personal data of users of the Art Still Corporation LLP website.

The Company respects the privacy of users and processes personal data in accordance with the applicable legislation of the Republic of Kazakhstan.

01. General provisions

The personal data operator is:

Art Still Corporation LLP
BIN: 241140003821
Registered address: Republic of Kazakhstan, Almaty, Almaly district, 119 Turkebayev St, postcode 050005
Actual address: Republic of Kazakhstan, Almaty, 90/1 Satpayev St, floor 2, office 208, postcode 050046
Email: office.artstillcorporation@gmail.com

This Policy applies to information that the Company receives through the Art Still Corporation website.

02. What data may be collected

The Company may receive data that the user provides on their own initiative:

• first name, last name (if provided), job title, company name;
• phone number, WhatsApp or another messenger, email;
• the text of the enquiry and details of the required equipment;
• technical specifications, drawings, specification sheets;
• documents attached to the enquiry.

The website may also technically receive: IP address, browser type, device type, operating system, date and time of the visit, pages viewed, referral source, technical identifiers and cookies.

03. Purposes of data processing

Personal data may be used to:

• handle incoming enquiries and communicate with the user;
• clarify technical requirements and select equipment;
• calculate costs and prepare commercial offers;
• prepare responses to technical specifications, contracts and other documents;
• arrange delivery and perform contractual obligations;
• provide service and warranty support and handle claims;
• improve the website and ensure information security;
• comply with the requirements of the legislation of the Republic of Kazakhstan.

04. Legal grounds for processing

Processing is carried out on the basis of: the user's consent; the need to handle the user's enquiry; the need to conclude and perform a contract; other grounds provided for by the legislation of the Republic of Kazakhstan.

05. Submitting technical documentation

The user may send technical specifications, drawings, specification sheets, photographs of equipment and other technical documentation through the website. The user must have the right to provide such materials to the Company.

Information constituting state secrets, restricted-access information or highly sensitive confidential information should not be sent through the website's open form unless a secure method of transfer has been agreed with Art Still Corporation in advance.

Submitting a file through the website form does not in itself mean that the Company assumes any obligation to design, manufacture or supply equipment.

06. Disclosure of data to third parties

Data may be disclosed only to the extent necessary to perform the relevant task, for example to:

• IT infrastructure providers and telecommunications operators;
• transport and logistics companies and customs representatives;
• insurance companies;
• contractors, service organisations and equipment manufacturers;
• government authorities, where required by law.

07. Cross-border transfer

Where fulfilling a user's request requires interaction with a foreign manufacturer or partner, certain information may be transferred outside the Republic of Kazakhstan, provided there are lawful grounds and the applicable personal data protection requirements are met.

The Company does not transfer excessive personal data. Where possible, technical requests are sent to foreign manufacturers without the personal data of the end contact person, unless such data is needed.

08. Data retention

Personal data is retained no longer than necessary for the stated purposes of processing and for the performance of contractual and statutory obligations. The technical infrastructure takes into account the requirements of the legislation of the Republic of Kazakhstan regarding the storage of personal data databases.

09. Information security

The Company applies reasonable organisational and technical measures: access segregation, secure HTTPS connections, control of employee access, backups, account protection, software updates, incident monitoring and restricted access to uploaded documents.

The Company takes necessary and reasonable measures to protect information; however, no method of data transmission or storage can guarantee absolute security.

10. User rights

In the cases provided for by law, the user may: request information about the processing of their data; require that it be corrected; withdraw consent; require that processing be stopped; require that the data be deleted if there are no lawful grounds for its further retention; contact the Company on data processing matters at office.artstillcorporation@gmail.com.

11. Cookies

The website may use cookies and similar technologies. For details, see the Policy on the Use of Cookies.

12. Changes to the Policy

The Company may update this Policy when the website, processing operations or legislation change. The current version is always published on this page.