We use cookies and metric systems to collect and analyze information about site performance and usage, as well as to enhance information delivery. By selecting "Accept" or by continuing to use the site, you consent to the processing of cookies and metric system data. Learn more
PRIVACY POLICY
PERSONAL DATA PROCESSING POLICY
ON THE COLLECTION, PROCESSING AND PROTECTION OF PERSONAL DATA
Limited Liability Partnership “Kontakt Intersearch” (Kontakt Intersearch)
Version dated August 27, 2026
1.2. The Policy has been developed in accordance with the Constitution of the Republic of Kazakhstan, the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection”, the Rules for the Collection and Processing of Personal Data approved by Order No. 395/NQ of the Minister of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan dated October 21, 2020, the Rules for the Implementation by the Owner and/or Operator, as well as by a Third Party, of Measures for the Protection of Personal Data approved by Order No. 179/NQ dated June 12, 2023, the Rules for Notification of Personal Data Subjects of a Personal Data Security Breach approved by Order No. 481/NQ dated August 9, 2024, as well as other regulatory legal acts of the Republic of Kazakhstan.
1.3. The Policy applies to personal data of employees of the Partnership, candidates for employment with the Partnership, candidates and applicants in respect of whom the Partnership provides recruitment services and forms a talent pool, representatives of clients and counterparties, website visitors, subscribers to informational materials and other individuals whose personal data are processed by the Partnership.
1.4. Official Internet resource of the Partnership: https://kontaktintersearch.com.
1.5. Personal data of restricted access are confidential information. The Partnership ensures their protection against unlawful or accidental access, alteration, blocking, copying, dissemination, destruction and other unlawful actions.
1.6. The Partnership approves and keeps up to date a list of personal data necessary and sufficient for the performance of the tasks carried out, as well as internal documents determining the procedure for the collection, processing and protection of personal data.
3.3. Consent to the collection and processing of personal data may be provided in writing, through a state or non-state service, or by another method that makes it possible to confirm the fact of its receipt.
3.4. Consent is executed taking into account the requirements of the legislation of the Republic of Kazakhstan and, where applicable, contains information about the Partnership, the subject, the validity period of the consent, the possibility of transferring data to third parties, the presence or absence of cross-border transfer, dissemination of data in publicly accessible sources and the list of data collected.
3.5. The validity period of consent shall not exceed the period necessary to achieve the purposes of the collection and processing of personal data, unless another period is established by the legislation of the Republic of Kazakhstan or by contract. If no period is specified in the consent, the consent remains valid until the stated purposes of processing are achieved.
3.6. The Partnership does not collect or process paper copies of identity documents, except in cases permitted by the legislation of the Republic of Kazakhstan.
3.7. Personal data may be processed using automated means and without the use of such means.
Purposes of processing: formalization and performance of employment relations, personnel and military records, calculation and payment of wages, tax and accounting records, social and pension provision, occupational safety, training and development, internal communications, ensuring security and performance of other employer obligations.
Depending on the purpose, the following may be processed: last name, first name, patronymic; individual identification number; date and place of birth; citizenship; contact details; address; identity document information to the extent necessary; information on education, qualifications and employment history; position; military registration information; bank details; information required for tax, social and pension accounting; information on marital status and dependents in cases provided for by law or where necessary for the provision of guarantees and benefits; health information in cases expressly provided for by law; photograph and other data necessary for employment relations.
Grounds for processing: legislation of the Republic of Kazakhstan, employment contract, other contracts and documents, as well as the subject’s consent in cases where it is required.
4.2. Candidates for Employment with the Partnership
Purposes of processing: consideration of the candidacy, conducting interviews and assessments, making an employment decision, formation of an internal talent pool.
The following may be processed: last name, first name, patronymic; contact details; date of birth or age; citizenship; city of residence; information on education, qualifications and work experience; professional skills; desired position and remuneration level; information from the resume and other materials voluntarily provided by the candidate; interview and assessment results; references and photograph, if provided by the candidate.
Data not necessary for assessing professional suitability are not requested or processed without a lawful basis.
4.3. Candidates and Applicants in Respect of Whom the Partnership Provides Recruitment Services and Forms a Talent Pool
Purposes of processing: search and selection of candidates for clients of the Partnership; assessment of professional experience and qualifications; organization of interviews and communication with clients; preparation and presentation of candidacies to clients; formation and maintenance of the candidate database and talent pool; support of employment; conducting candidate market research and other research in depersonalized form.
The following may be processed: last name, first name, patronymic; contact details; date of birth or age; citizenship and place of residence; information on education and qualifications; information on employment history and professional experience; current and desired position; information on remuneration level and expectations; professional competencies; language skills; information from resumes, professional profiles and other materials provided by the subject or lawfully obtained by the Partnership; interview results, professional assessment and references; photograph, if provided by the subject.
Transfer of a candidate’s personal data to a client or potential employer is carried out with the subject’s consent or on another basis provided for by the legislation of the Republic of Kazakhstan.
4.4. Clients, Counterparties and Their Representatives
Purposes of processing: preparation, conclusion and performance of contracts; business correspondence; accounting and tax records; execution of payments; protection of the rights and legitimate interests of the Partnership.
The following may be processed: last name, first name, patronymic; position; place of work; business contact details; information on authority; individual identification number and identity document information if necessary for the conclusion or performance of a contract with an individual; bank details and other information necessary for the performance of obligations.
4.5. Website Visitors and Persons Submitting Requests via the Website
Purposes of processing: ensuring operation of the website; processing requests; feedback; providing requested information; analyzing use of the website; ensuring information security; improving the quality of the website and services.
The following may be processed: first name; last name; email address; telephone number; position; company name; information voluntarily specified in web forms; IP address; device and browser information; technical logs; information on actions on the website; cookies; information obtained using web analytics services.
Processing of cookies and web analytics information is carried out in accordance with the website settings, applicable user consent and the requirements of the legislation of the Republic of Kazakhstan.
4.6. Recipients of Informational, Analytical and Marketing Materials
Purposes of processing: sending informational, analytical, research and other materials of the Partnership, invitations to events, news about services and other commercial information where the required consent has been obtained.
The following may be processed: last name, first name, patronymic; email address; telephone number; position; company name; information on professional interests and interaction with the Partnership’s materials.
5.2. Personal data may be obtained from other sources where there is the subject’s consent, another lawful basis, or where the relevant information has been lawfully placed in a publicly accessible source and its further use is permitted by the legislation of the Republic of Kazakhstan.
5.3. When collecting personal data, the Partnership ensures the possibility of confirming receipt of consent in cases where consent constitutes the basis for processing.
5.4. Collection and processing are carried out within the limits of the list of personal data approved by the Partnership that is necessary and sufficient for the performance of the relevant tasks.
6.2. The Partnership has the right to engage third parties to process personal data where there is an appropriate lawful basis, a contract and an obligation of such person to comply with the requirements of the legislation of the Republic of Kazakhstan on personal data and their protection.
6.3. When conducting statistical, sociological, scientific, marketing and other research, personal data are depersonalized in cases provided for by the legislation of the Republic of Kazakhstan.
6.4. If automated processing of personal data is applied in relation to a subject and is capable of affecting his/her rights, freedoms or legitimate interests, the Partnership complies with the requirements of the legislation of the Republic of Kazakhstan applicable to such processing, including informing the subject and considering his/her objections.
7.2. The storage period is determined by the period necessary to achieve the purposes of collection and processing, the validity period of the consent, the contract and mandatory storage periods established by the legislation of the Republic of Kazakhstan.
7.3. Personnel and other employee documents are stored for the periods provided for by the legislation of the Republic of Kazakhstan and the current list of standard documents. In particular, employee personal files and employee personal cards are classified as long-term retention documents.
7.4. Documents of persons not hired, as well as information on candidates included in the talent pool, are stored no longer than the period necessary for the relevant purpose or the period established by legislation, internal documents and the subject’s consent.
7.5. Upon achievement of the purposes of processing or upon occurrence of other lawful grounds, personal data are destroyed, deleted or depersonalized in the prescribed manner unless further storage is required by law.
8.2. Depending on the purposes of processing, recipients of personal data may include:
8.4. The presence of cross-border transfer is specified in the subject’s consent in cases where such transfer is contemplated by the relevant processing process.
9.2. Dissemination of personal data beyond the purposes of their collection previously stated is permitted only with the consent of the subject or his/her legal representative or on another lawful basis.
9.3. The Partnership does not place personal data of candidates and applicants in open access without a separate lawful basis.
10.2. Where information is available concerning a violation of the conditions for the collection or processing of personal data, the Partnership blocks the relevant personal data for the period of verification.
10.3. If the fact of unlawful collection or processing is confirmed, the Partnership takes measures to destroy, delete or bring the processing into compliance with the legislation of the Republic of Kazakhstan.
10.4. In cases provided for by the legislation of the Republic of Kazakhstan, alteration, supplementation, blocking, destruction or deletion of personal data is carried out within one business day from the occurrence of the relevant ground or receipt of the necessary supporting documents.
10.5. Upon withdrawal of consent, the Partnership shall cease processing personal data within fifteen business days if their further storage or processing is not required by the legislation of the Republic of Kazakhstan, or shall send the subject a reasoned refusal.
10.6. Withdrawal of consent is not permitted if it contradicts the laws of the Republic of Kazakhstan or where there is an unfulfilled obligation.
11.2. The list of persons collecting and processing personal data or having access to them is determined and approved by the Partnership.
11.3. Persons who have obtained access to personal data of restricted access are obliged to maintain confidentiality and use the data only within the scope of the authority granted.
11.4. Access to third parties is provided only where there is a lawful basis and provided that they take the necessary measures to protect personal data.
12.3. Information relating to the subject is provided within three business days from the date of receipt of the request, unless another period is provided for by the laws of the Republic of Kazakhstan. In case of refusal, the Partnership provides a reasoned response within the same period.
12.4. Requests and inquiries regarding personal data may be sent to the address of the Partnership or to the email address info@intersearch.kz.
14.2. Measures applied may include differentiation of access rights, logging of user actions, protection of user accounts, backup, antivirus protection, software updates, control of external storage media, encryption and other measures corresponding to the nature and risks of processing.
14.3. Upon detection of a personal data security breach, the Partnership immediately takes measures to localize and eliminate the consequences of the breach.
14.4. Within one business day from the detection of a personal data security breach, the Partnership notifies the authorized body in the manner provided for by the legislation of the Republic of Kazakhstan and ensures subsequent notification of subjects in the prescribed manner.
15.2. Persons guilty of unlawful collection, processing, dissemination, loss or another violation of the personal data protection regime may be subject to disciplinary, civil, administrative or criminal liability in cases provided for by law.
16.2. The Policy enters into force from the moment of its approval and remains in effect until replaced by a new version.
16.3. The Partnership has the right to amend the Policy in connection with changes in the legislation of the Republic of Kazakhstan, personal data processing processes, information systems used and organizational structure.
16.4. The current version of the Policy is posted on the website https://kontaktintersearch.com.
Abbreviated name: LLP “Kontakt Intersearch” (Kontakt Intersearch)
BIN: 230740019855
Legal address: Republic of Kazakhstan, Almaty, Medeu District, Sarsenbaeva A Street, Building 113, postal code A26D6H4
Postal address: Republic of Kazakhstan, Almaty, Medeu District, Sarsenbaeva A Street, Building 113, postal code A26D6H4
Website: https://kontaktintersearch.com
Email: info@intersearch.kz
Limited Liability Partnership “Kontakt Intersearch” (Kontakt Intersearch)
Version dated August 27, 2026
- General Provisions
1.2. The Policy has been developed in accordance with the Constitution of the Republic of Kazakhstan, the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection”, the Rules for the Collection and Processing of Personal Data approved by Order No. 395/NQ of the Minister of Digital Development, Innovation and Aerospace Industry of the Republic of Kazakhstan dated October 21, 2020, the Rules for the Implementation by the Owner and/or Operator, as well as by a Third Party, of Measures for the Protection of Personal Data approved by Order No. 179/NQ dated June 12, 2023, the Rules for Notification of Personal Data Subjects of a Personal Data Security Breach approved by Order No. 481/NQ dated August 9, 2024, as well as other regulatory legal acts of the Republic of Kazakhstan.
1.3. The Policy applies to personal data of employees of the Partnership, candidates for employment with the Partnership, candidates and applicants in respect of whom the Partnership provides recruitment services and forms a talent pool, representatives of clients and counterparties, website visitors, subscribers to informational materials and other individuals whose personal data are processed by the Partnership.
1.4. Official Internet resource of the Partnership: https://kontaktintersearch.com.
1.5. Personal data of restricted access are confidential information. The Partnership ensures their protection against unlawful or accidental access, alteration, blocking, copying, dissemination, destruction and other unlawful actions.
1.6. The Partnership approves and keeps up to date a list of personal data necessary and sufficient for the performance of the tasks carried out, as well as internal documents determining the procedure for the collection, processing and protection of personal data.
- Basic Concepts
- personal data – information or a set of information about a personal data subject defined by the legislation of the Republic of Kazakhstan as personal data;
- personal data subject – an individual to whom the personal data relate;
- collection of personal data – actions aimed at obtaining personal data;
- processing of personal data – actions aimed at accumulation, storage, alteration, supplementation, use, dissemination, depersonalization, blocking and destruction of personal data;
- owner of a database containing personal data – a person exercising the right of possession, use and disposal of the relevant personal data database;
- operator of a database containing personal data – a person carrying out the collection, processing and protection of personal data;
- third party – a person who is not the subject, owner and/or operator, but is related to them by circumstances or legal relations concerning the collection, processing and protection of personal data;
- dissemination of personal data – actions resulting in the transfer of personal data or provision of access to them;
- blocking of personal data – temporary suspension of the collection, accumulation, alteration, supplementation, use, dissemination, depersonalization and destruction of personal data;
- destruction of personal data – actions resulting in personal data ceasing to exist and being impossible to restore in their previous form;
- depersonalization of personal data – actions excluding the possibility of attributing personal data to a specific subject without the use of additional information;
- cross-border transfer of personal data – transfer of personal data to the territory of a foreign state;
- personal data security breach – a breach of personal data protection resulting in unlawful access, dissemination, alteration, destruction or another unlawful action in relation to personal data.
- Principles and Conditions for the Collection and Processing of Personal Data
- legality of the purposes and methods of collection and processing of personal data;
- limitation of collection and processing to specific, predetermined and lawful purposes;
- inadmissibility of processing personal data incompatible with the purposes of their collection;
- processing only those personal data that are necessary and sufficient to achieve the stated purposes;
- prevention of redundancy in the composition and volume of personal data processed;
- ensuring the accuracy, sufficiency and, where necessary, relevance of personal data;
- storage of personal data for no longer than the period necessary to achieve the purposes of their collection and processing, unless another period is established by the legislation of the Republic of Kazakhstan or by contract;
- ensuring the confidentiality and security of personal data throughout their processing.
3.3. Consent to the collection and processing of personal data may be provided in writing, through a state or non-state service, or by another method that makes it possible to confirm the fact of its receipt.
3.4. Consent is executed taking into account the requirements of the legislation of the Republic of Kazakhstan and, where applicable, contains information about the Partnership, the subject, the validity period of the consent, the possibility of transferring data to third parties, the presence or absence of cross-border transfer, dissemination of data in publicly accessible sources and the list of data collected.
3.5. The validity period of consent shall not exceed the period necessary to achieve the purposes of the collection and processing of personal data, unless another period is established by the legislation of the Republic of Kazakhstan or by contract. If no period is specified in the consent, the consent remains valid until the stated purposes of processing are achieved.
3.6. The Partnership does not collect or process paper copies of identity documents, except in cases permitted by the legislation of the Republic of Kazakhstan.
3.7. Personal data may be processed using automated means and without the use of such means.
- Categories of Subjects, Purposes and Composition of Personal Data Processed
Purposes of processing: formalization and performance of employment relations, personnel and military records, calculation and payment of wages, tax and accounting records, social and pension provision, occupational safety, training and development, internal communications, ensuring security and performance of other employer obligations.
Depending on the purpose, the following may be processed: last name, first name, patronymic; individual identification number; date and place of birth; citizenship; contact details; address; identity document information to the extent necessary; information on education, qualifications and employment history; position; military registration information; bank details; information required for tax, social and pension accounting; information on marital status and dependents in cases provided for by law or where necessary for the provision of guarantees and benefits; health information in cases expressly provided for by law; photograph and other data necessary for employment relations.
Grounds for processing: legislation of the Republic of Kazakhstan, employment contract, other contracts and documents, as well as the subject’s consent in cases where it is required.
4.2. Candidates for Employment with the Partnership
Purposes of processing: consideration of the candidacy, conducting interviews and assessments, making an employment decision, formation of an internal talent pool.
The following may be processed: last name, first name, patronymic; contact details; date of birth or age; citizenship; city of residence; information on education, qualifications and work experience; professional skills; desired position and remuneration level; information from the resume and other materials voluntarily provided by the candidate; interview and assessment results; references and photograph, if provided by the candidate.
Data not necessary for assessing professional suitability are not requested or processed without a lawful basis.
4.3. Candidates and Applicants in Respect of Whom the Partnership Provides Recruitment Services and Forms a Talent Pool
Purposes of processing: search and selection of candidates for clients of the Partnership; assessment of professional experience and qualifications; organization of interviews and communication with clients; preparation and presentation of candidacies to clients; formation and maintenance of the candidate database and talent pool; support of employment; conducting candidate market research and other research in depersonalized form.
The following may be processed: last name, first name, patronymic; contact details; date of birth or age; citizenship and place of residence; information on education and qualifications; information on employment history and professional experience; current and desired position; information on remuneration level and expectations; professional competencies; language skills; information from resumes, professional profiles and other materials provided by the subject or lawfully obtained by the Partnership; interview results, professional assessment and references; photograph, if provided by the subject.
Transfer of a candidate’s personal data to a client or potential employer is carried out with the subject’s consent or on another basis provided for by the legislation of the Republic of Kazakhstan.
4.4. Clients, Counterparties and Their Representatives
Purposes of processing: preparation, conclusion and performance of contracts; business correspondence; accounting and tax records; execution of payments; protection of the rights and legitimate interests of the Partnership.
The following may be processed: last name, first name, patronymic; position; place of work; business contact details; information on authority; individual identification number and identity document information if necessary for the conclusion or performance of a contract with an individual; bank details and other information necessary for the performance of obligations.
4.5. Website Visitors and Persons Submitting Requests via the Website
Purposes of processing: ensuring operation of the website; processing requests; feedback; providing requested information; analyzing use of the website; ensuring information security; improving the quality of the website and services.
The following may be processed: first name; last name; email address; telephone number; position; company name; information voluntarily specified in web forms; IP address; device and browser information; technical logs; information on actions on the website; cookies; information obtained using web analytics services.
Processing of cookies and web analytics information is carried out in accordance with the website settings, applicable user consent and the requirements of the legislation of the Republic of Kazakhstan.
4.6. Recipients of Informational, Analytical and Marketing Materials
Purposes of processing: sending informational, analytical, research and other materials of the Partnership, invitations to events, news about services and other commercial information where the required consent has been obtained.
The following may be processed: last name, first name, patronymic; email address; telephone number; position; company name; information on professional interests and interaction with the Partnership’s materials.
- Collection of Personal Data
5.2. Personal data may be obtained from other sources where there is the subject’s consent, another lawful basis, or where the relevant information has been lawfully placed in a publicly accessible source and its further use is permitted by the legislation of the Republic of Kazakhstan.
5.3. When collecting personal data, the Partnership ensures the possibility of confirming receipt of consent in cases where consent constitutes the basis for processing.
5.4. Collection and processing are carried out within the limits of the list of personal data approved by the Partnership that is necessary and sufficient for the performance of the relevant tasks.
- Processing of Personal Data
6.2. The Partnership has the right to engage third parties to process personal data where there is an appropriate lawful basis, a contract and an obligation of such person to comply with the requirements of the legislation of the Republic of Kazakhstan on personal data and their protection.
6.3. When conducting statistical, sociological, scientific, marketing and other research, personal data are depersonalized in cases provided for by the legislation of the Republic of Kazakhstan.
6.4. If automated processing of personal data is applied in relation to a subject and is capable of affecting his/her rights, freedoms or legitimate interests, the Partnership complies with the requirements of the legislation of the Republic of Kazakhstan applicable to such processing, including informing the subject and considering his/her objections.
- Accumulation and Storage of Personal Data
7.2. The storage period is determined by the period necessary to achieve the purposes of collection and processing, the validity period of the consent, the contract and mandatory storage periods established by the legislation of the Republic of Kazakhstan.
7.3. Personnel and other employee documents are stored for the periods provided for by the legislation of the Republic of Kazakhstan and the current list of standard documents. In particular, employee personal files and employee personal cards are classified as long-term retention documents.
7.4. Documents of persons not hired, as well as information on candidates included in the talent pool, are stored no longer than the period necessary for the relevant purpose or the period established by legislation, internal documents and the subject’s consent.
7.5. Upon achievement of the purposes of processing or upon occurrence of other lawful grounds, personal data are destroyed, deleted or depersonalized in the prescribed manner unless further storage is required by law.
- Transfer of Personal Data to Third Parties and Cross-Border Transfer
8.2. Depending on the purposes of processing, recipients of personal data may include:
- clients and potential employers – within the framework of recruitment services and only to the extent necessary for consideration of the candidacy;
- providers of information systems, cloud, hosting, communication, postal and other technological services – to the extent necessary to ensure the relevant services;
- banks, payment organizations, auditors, accounting, legal and other professional advisers – to the extent necessary for the performance of contracts and compliance with legislation;
- state authorities, courts, law enforcement and other authorized bodies – in the cases and manner established by the legislation of the Republic of Kazakhstan;
- other persons – where there is the subject’s consent or another lawful basis.
8.4. The presence of cross-border transfer is specified in the subject’s consent in cases where such transfer is contemplated by the relevant processing process.
- Dissemination of Personal Data and Publicly Accessible Sources
9.2. Dissemination of personal data beyond the purposes of their collection previously stated is permitted only with the consent of the subject or his/her legal representative or on another lawful basis.
9.3. The Partnership does not place personal data of candidates and applicants in open access without a separate lawful basis.
- Alteration, Blocking, Termination of Processing and Destruction of Personal Data
10.2. Where information is available concerning a violation of the conditions for the collection or processing of personal data, the Partnership blocks the relevant personal data for the period of verification.
10.3. If the fact of unlawful collection or processing is confirmed, the Partnership takes measures to destroy, delete or bring the processing into compliance with the legislation of the Republic of Kazakhstan.
10.4. In cases provided for by the legislation of the Republic of Kazakhstan, alteration, supplementation, blocking, destruction or deletion of personal data is carried out within one business day from the occurrence of the relevant ground or receipt of the necessary supporting documents.
10.5. Upon withdrawal of consent, the Partnership shall cease processing personal data within fifteen business days if their further storage or processing is not required by the legislation of the Republic of Kazakhstan, or shall send the subject a reasoned refusal.
10.6. Withdrawal of consent is not permitted if it contradicts the laws of the Republic of Kazakhstan or where there is an unfulfilled obligation.
- Access to Personal Data
11.2. The list of persons collecting and processing personal data or having access to them is determined and approved by the Partnership.
11.3. Persons who have obtained access to personal data of restricted access are obliged to maintain confidentiality and use the data only within the scope of the authority granted.
11.4. Access to third parties is provided only where there is a lawful basis and provided that they take the necessary measures to protect personal data.
- Rights of Subjects and Procedure for Considering Requests
- know whether the Partnership possesses his/her personal data;
- receive information about the purposes, sources and methods of collection and processing, the list of data processed and the periods of their processing and storage;
- require alteration and supplementation of personal data where there are appropriate grounds;
- require blocking of personal data where there is information regarding a violation of the conditions of their collection and processing;
- require destruction or deletion of personal data collected or processed in violation of the legislation of the Republic of Kazakhstan;
- withdraw consent to the collection and processing of personal data in cases where such withdrawal is permitted by law;
- object to automated processing in cases provided for by law;
- appeal the actions or inaction of the Partnership to the authorized body or court.
12.3. Information relating to the subject is provided within three business days from the date of receipt of the request, unless another period is provided for by the laws of the Republic of Kazakhstan. In case of refusal, the Partnership provides a reasoned response within the same period.
12.4. Requests and inquiries regarding personal data may be sent to the address of the Partnership or to the email address info@intersearch.kz.
- Organizational Obligations of the Partnership
- appoints a person responsible for organizing the processing of personal data;
- approves documents determining the procedure for the collection, processing and protection of personal data;
- approves the list of personal data necessary and sufficient for the performance of the tasks carried out;
- determines the list of persons collecting and processing personal data or having access to them;
- exercises internal control over compliance with the requirements of legislation and local acts;
- trains and informs employees regarding the requirements for the protection of personal data;
- ensures the receipt and consideration of requests from subjects;
- conducts risk assessment and takes legal, organizational and technical measures to protect personal data.
- Protection of Personal Data and Incident Response
14.2. Measures applied may include differentiation of access rights, logging of user actions, protection of user accounts, backup, antivirus protection, software updates, control of external storage media, encryption and other measures corresponding to the nature and risks of processing.
14.3. Upon detection of a personal data security breach, the Partnership immediately takes measures to localize and eliminate the consequences of the breach.
14.4. Within one business day from the detection of a personal data security breach, the Partnership notifies the authorized body in the manner provided for by the legislation of the Republic of Kazakhstan and ensures subsequent notification of subjects in the prescribed manner.
- Liability
15.2. Persons guilty of unlawful collection, processing, dissemination, loss or another violation of the personal data protection regime may be subject to disciplinary, civil, administrative or criminal liability in cases provided for by law.
- Final Provisions
16.2. The Policy enters into force from the moment of its approval and remains in effect until replaced by a new version.
16.3. The Partnership has the right to amend the Policy in connection with changes in the legislation of the Republic of Kazakhstan, personal data processing processes, information systems used and organizational structure.
16.4. The current version of the Policy is posted on the website https://kontaktintersearch.com.
- Details and Contact Information
Abbreviated name: LLP “Kontakt Intersearch” (Kontakt Intersearch)
BIN: 230740019855
Legal address: Republic of Kazakhstan, Almaty, Medeu District, Sarsenbaeva A Street, Building 113, postal code A26D6H4
Postal address: Republic of Kazakhstan, Almaty, Medeu District, Sarsenbaeva A Street, Building 113, postal code A26D6H4
Website: https://kontaktintersearch.com
Email: info@intersearch.kz