Processing of personal data is carried out with the consent of the subject of personal data undergoing processing of his personal data, unless otherwise provided by the legislation of the Kazakhstan republic in the field of personal data;
the processing of personal data is necessary for the implementation and performance of the functions, powers and responsibilities assigned to the Company by the legislation of the Kazakhstan republic;
processing of PD is necessary for the execution of an agreement to which the PD subject is a party or beneficiary or guarantor, including in the event that the operator exercises the right to assign rights (claims) under such an agreement, as well as for concluding an agreement on the initiative of the PD subject or an agreement under which the subject PD acts as a beneficiary or guarantor;
Processing of PD is necessary to implement the rights and legitimate interests of the operator or third parties or to achieve socially significant goals, provided that the rights and freedoms of the PD subject are not violated;
PD is processed, access to an unlimited number of persons is provided by the PD subject or at his request.
Employees of the Company and other persons with access to PD are required to comply with the confidentiality conditions in relation to them, namely not to disclose to third parties or distribute PD without the consent of the PD subject, unless otherwise provided by Kazakhstan republic.

The company takes the necessary organizational and technical measures to ensure the security of personal data from accidental or unauthorized access, destruction, modification, access blocking and other unauthorized actions.

In order to coordinate actions to ensure the security of personal data, the Company has appointed a person responsible for ensuring the security of personal data.

The Company has the right to entrust the processing of PD to another person with the consent of the PD subject, unless otherwise provided by republic Law, on the basis of an agreement concluded with this person. A person processing personal data on behalf of the Company is obliged to comply with the principles and rules for processing personal data provided for by the government.