Privacy Policy
(in accordance with the legislation of the Republic of Kazakhstan)
This Privacy Policy (hereinafter referred to as the “Policy”) regulates the collection, storage, processing, and protection of personal data of users of the website www.erkinwork.kz (hereinafter — the “Website”) and establishes the rights and obligations of ErkinWork, BIN/IIN 620917402780, registered address: Auezova 163A (hereinafter — the “Website Administration”) and the Users in this field.
1. Terms and Definitions
1.1. Terms are used as defined by the legislation of the Republic of Kazakhstan and the Glossary of the User Agreement, including the following:
• Personal data — information related to a specific individual or one that can be identified based on such data (Article 1, paragraph 1 of Law No. 94-V).
• Processing of personal data — actions involving personal data, including collection, storage, modification, use, distribution, depersonalization, blocking, and destruction, whether automated or not.
• Data subject — an individual whose personal data is processed.
• Operator — the Website Administration that collects, processes, and stores personal data.
2. General Provisions
2.1. This Policy is developed in accordance with:
• the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” No. 94-V of May 21, 2013;
• the Law “On Information” No. 418-V of November 24, 2015;
• and other regulatory legal acts of the Republic of Kazakhstan.
2.2. The purpose of this Policy is to ensure the proper protection of the rights and freedoms of individuals during the processing of their personal data and to establish mechanisms for their protection.
2.3. By using the Website, the User consents to the processing of their personal data under this Policy and the legislation of the Republic of Kazakhstan.
2.4. This Policy applies to all personal data collected through the Website, mobile versions, feedback forms, registration processes, and other forms of interaction.
3. Collection of Personal Data
3.1. The Website Administration may collect the following data categories:
• Full name;
• Contact details (phone, email, address);
• Identification data (IIN for residents, passport details for non-residents if needed for invoicing or contracts);
• IP address, cookies, session and activity data;
• Any other data voluntarily provided by the User.
3.2. Data collection is carried out only with the consent of the data subject, unless otherwise provided by law.
3.3. The User is responsible for the accuracy of the provided data.
4. Purpose of Processing
Personal data are processed to:
1. Register the User and provide Website functionality;
2. Fulfill contractual obligations and provide services;
3. Communicate and send notifications;
4. Improve services and Website analytics;
5. Comply with the laws of Kazakhstan.
5. Legal Grounds
5.1. Legal grounds for processing include:
• The User’s consent;
• Fulfillment of a contract involving the User;
• Compliance with the laws of the Republic of Kazakhstan.
5.2. Processing follows the principles of legality, fairness, proportionality, and confidentiality (Articles 7–9 of the Law “On Personal Data and Their Protection”).
6. Transfer and Storage
6.1. Personal data may be shared only in the following cases:
• With the User’s consent;
• To fulfill contractual obligations (e.g., delivery, payment systems, partners);
• To comply with legal requirements or court orders from authorized government bodies.
6.2. Data are stored only as long as necessary to fulfill their purpose.
6.3. Storage is carried out on secure servers with appropriate technical and organizational safeguards.
7. Data Protection
7.1. The Administration takes all necessary legal and technical measures to prevent unauthorized access, destruction, alteration, or disclosure of personal data.
7.2. Protection measures include:
• Antivirus and access control systems;
• Limited access for employees;
• Encryption during data transmission;
• Regular backups.
7.3. Data processing complies with Articles 22–25 of Law No. 94-V.
8. User Rights
The User has the right to:
• Obtain information on data processing;
• Request correction, blocking, or deletion of incomplete or outdated data;
• Withdraw consent at any time as permitted by law;
• File complaints to the authorized data protection body or court.
9. Amendments to the Policy
9.1. The Administration reserves the right to amend this Policy unilaterally.
9.2. The current version is available at www.erkinwork.kz.
9.3. Continued use of the Website signifies acceptance of the updated Policy.
10. Liability
10.1. The Administration is responsible for maintaining the confidentiality and protection of personal data as required by law.
10.2. In the event of a violation, illegal data processing, or disclosure, the Administration bears:
• Administrative liability (Articles 79–80 of the Administrative Code);
• Civil liability for material or moral damages (Articles 9, 917 of the Civil Code);
• Criminal liability (Article 147 of the Criminal Code of Kazakhstan).
10.3. The User is responsible for providing false data or illegal actions regarding others’ data.
10.4. In case of a data breach by third parties, the Administration will immediately notify the authorized body and affected Users.
10.5. If the breach occurred due to the Administration’s fault, it shall fully compensate the User’s losses and moral damages.