Personal Data Processing Policy
UboostRevision date: 08/11/2024
This Personal Data Processing Policy (hereinafter referred to as the Policy) defines the goals and general principles of processing personal data of Personal data Subjects, as well as the measures implemented to protect personal data during their use of any of the services of the Site located at: https://uboo.st (hereinafter referred to as the Website).
The Policy is a publicly available document of the Operator and provides for the possibility of third parties to review it.
This Policy applies to all personal data that the Operator may receive from the User while using the Site and its services.
The Policy is valid indefinitely after approval and until it is replaced by a new version.
If the User does not agree with the terms of this Policy, the use of the Site must be stopped immediately.
1. General provisions
1.1. The operator of personal data is Kirill Zamolotskikh IP (hereinafter referred to as the Operator).
1.2. The processing of the User's personal data is carried out to achieve the purposes of personal data processing in any lawful way, including in personal data information systems using automation tools or without the use of such tools (mixed processing of personal data). The processing of personal data of Users is carried out in accordance with the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and their protection".
1.3. Consent to the processing of personal data is valid from the moment it is submitted to the Operator until the date of loss of the Operator's legal status, or in case of withdrawal of such consent by the User.
1.4. The use of the Site's services means the User's unconditional consent to the Privacy Policy and the conditions for processing his personal information specified therein; in case of disagreement with these conditions, the User must refrain from using the Site and its services.
1.5. The Operator has the right to make changes to the Privacy Policy without the User's consent. The new version of the Privacy Policy comes into force from the moment it is posted on the Website, unless otherwise provided by the new version of the Privacy Policy.
Any changes to the Policy are implemented by the Operator independently and take effect on the day following the day of publication of such changes. The Operator notifies Users of changes to this Policy, including by publishing a new version of this Policy. The User undertakes to independently review the changes made to the Policy. The actual use by the User after making changes to the terms of this Policy means that the User agrees to the new terms.
1.6. The text of the Privacy Policy is available to Users on the Internet at: https://uboo.st/policy
1.7. The following terms and definitions are used in this Policy:
1.7.1. the operator is an individual entrepreneur who independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data;
1.7.2. personal data – any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data); personal data processing is any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
1.7.2. automated personal data processing – processing of personal data using computer technology;
1.7.3. dissemination of personal data - actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at familiarizing with personal data of an unlimited number of persons, including the publication of personal data in the media, posting in information and telecommunication networks or providing access to personal data in any other way;
1.7.4. provision of personal data – actions aimed at disclosure of personal data to a certain person or a certain circle of persons;
1.7.5. blocking of personal data - temporary termination of the processing of personal data (except in cases where the processing is necessary to clarify personal data);
1.7.6. destruction of personal data - actions as a result of which it is impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed;
1.7.7. personal data information system - a set of personal data contained in databases and information technologies and technical means providing their processing;
1.7.8. website (Website) – a set of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at the following network address: https://uboo.st/
1.7.9. personal data authorized by the personal data subject for dissemination - personal data to which an unlimited number of persons have access by the personal data subject by giving consent to the processing of personal data authorized by the personal data subject for dissemination in accordance with the procedure provided for by the Personal Data Act (hereinafter also referred to as personal data authorized for Dissemination);
1.7.10. user – any visitor to the website https://uboo.st who made a click/activity on it or the services hosted on it;
1.7.11. provision of personal data – actions aimed at disclosure of personal data to a certain person or a certain circle of persons;
1.7.12. dissemination of personal data – any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at familiarizing with personal data of an unlimited number of persons, including the publication of personal data in the media, posting in information and telecommunication networks or providing access to personal data in any other way;
1.7.13. IP address is a unique network address of a node in a computer network built using the IP protocol.
1.8. If the Policy uses terms not specified in clause 1.7, they are subject to use and interpretation in accordance with current legislation and business practices established on the Internet.
2. Principles and conditions of personal data processing
2.1. The processing of personal data is carried out by the Operator on the basis of the following principles:
2.2. legality and fair basis;
2.2.1. restrictions on the processing of personal data to achieve specific, predetermined and legitimate goals;
2.2.2. preventing the processing of personal data incompatible with the purposes of personal data collection;
2.2.3. preventing the consolidation of databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
2.2.4. processing only those personal data that meet the purposes of their processing;
2.2.5. compliance of the content and volume of personal data processed with the stated purposes of processing;
2.2.6. preventing the processing of excessive personal data in relation to the stated purposes of their processing;
2.2.7. ensuring the accuracy, sufficiency and relevance of personal data in relation to the purposes of personal data processing;
2.2.8. destruction of personal data upon achievement of the purposes of their processing or in case of loss of the need to achieve these goals, if it is impossible for the Operator to eliminate violations of personal data, unless otherwise provided by federal law.
2.3. Personal data authorized for processing under this Policy is provided by the User when using the Website.:
the user ID stored in the cookie;
IP address;
other information necessary for the execution of the User Agreement and concluded contracts for the provision of paid services.
2.3.1. The Operator may process other personal data of the User that is necessary for the use of the Site.
2.3.2. The Operator does not process special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, or intimate life.
2.3.3. Processing of personal data authorized for distribution from among the special categories of personal data specified in Part 1 of Article 10 of the Law on Personal Data is allowed if the prohibitions and conditions provided for in Article 10.1 of the Law on Personal Data are observed.
2.4. The purposes of personal data processing are:
fulfillment of obligations to the User provided by the functions of the Site;
sending information, including advertising, about promotions, events and special offers, receiving feedback, feedback and recommendations from the User, conducting surveys for effective communication with Users;
conclusion, execution and termination of civil law contracts;
providing User access to the services, information and/or materials contained on the Website and its services;
other necessary cases stipulated by the legislation.
2.5. The Operator and other persons who have obtained access to personal data are obliged not to disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by federal law.
2.6. The operator has the right to entrust the processing of personal data to another person with the consent of the personal data subject, unless otherwise provided by federal law, on the basis of a contract concluded with this person. The person who processes personal data on behalf of the Operator is obliged to comply with the principles and rules of personal data processing provided for by the Law of the Republic of Kazakhstan.
2.7. Depersonalized User data collected using Internet statistics services can be used to collect information about User actions on the site, improve the quality of the site and its content.
2.8. The legal basis for the processing of personal data are:
a set of legal acts, pursuant to which and in accordance with which the operator processes personal data: the Constitution of the Republic of Kazakhstan; laws and regulations adopted on their basis, regulating relations related to the operator's activities;
contracts concluded between the operator and the subject of personal data;
consent to the processing of personal data (in cases not directly provided for by the legislation of the Republic of Kazakhstan, but corresponding to the authority of the Operator).
2.9. Terms of personal data processing
The storage of personal data must be carried out in a form that makes it possible to identify the subject of personal data, no longer than the purposes of personal data processing require, unless the period of storage of personal data is established by federal law, an agreement to which the personal data subject is a party, beneficiary or guarantor. The personal data of the Subjects processed by the Operator is subject to destruction in the following cases::
achieving processing goals;
loss of the need to achieve the processing objectives;
termination of the Operator's activity.
3. Measures applied by the operator when processing personal data
3.1. When processing personal data, the Operator, at its discretion, takes the necessary legal, organizational and technical measures to protect them from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions with respect to personal data, including:
identifies threats security of personal data during their processing in personal data information systems;
applies organizational and technical measures to ensure the security of personal data, including when processing them in personal data information systems necessary to meet the requirements for personal data protection, the implementation of which ensures the levels of personal data security established by the Government of the Russian Federation.;
evaluates the effectiveness of measures taken to ensure the security of personal data prior to the commissioning of the personal data information system;
ensures timely detection of unauthorized access to personal data and takes necessary measures to prevent such cases and eliminate their consequences.;
restores personal data that has been modified or destroyed due to unauthorized access to it;
Establishes rules for access to personal data processed in the personal data information system, and also ensures registration and accounting of all actions performed with personal data in the personal data information system.;
ensures control over the measures taken to ensure the security of personal data and the level of security of personal data information systems;
publishes a Privacy Policy on the Website and provides unlimited access to it.;
performs internal control over the compliance of personal data processing with the legislation on personal data;
defines the places where personal data is stored.
3.2. Only persons whose official functions include working with such information and documents have access to the personal data processed by the Operator. The operator transfers personal data to its employees in accordance with the procedure established by law, and restricts this information to only those personal data that are necessary for the purposes of personal data processing.
3.3. The Operator has the right to provide access to users' personal data in the following cases::
this is provided for, allowed or required in accordance with the legislation of the Republic of Kazakhstan.;
the user has given his consent to transfer personal data to their recipient.
4. Rights and obligations of the parties
4.1. The personal data subject decides on the provision of his personal data and agrees to their processing freely, voluntarily and in his own interest. Consent to the processing of personal data can be given by the personal data subject or his representative in any form that allows confirming the fact of its receipt (installing the application, electronic consent in the form on the Website)
4.2. The personal data subject has the right to receive information regarding the processing of his personal data, if such right is not limited in accordance with the laws. The personal data subject has the right to require the Operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as to take legally prescribed measures to protect their rights.
4.4. The User has the right to:
4.4.1. to receive information about the processing of his personal data;
4.4.2. clarify their personal data, block or destroy them if they are incomplete, outdated, inaccurate, illegally obtained or cannot be considered necessary for the stated purpose of processing, as well as take measures provided by law to protect their rights.;
4.4.3. to defend their rights and legitimate interests in court;
4.4.4. at its discretion, provide the Operator with personal data for their processing under the conditions specified in the Privacy Policy.;
4.4.5. upon request, receive information from the Operator regarding the processing of his personal data.
4.4.6. The User's right to access his personal data may be restricted in accordance with federal laws, including if the User's access to his personal data violates the rights and legitimate interests of third parties.
4.5. The Operator is obliged to:
4.5.1. use the information received exclusively for the purposes specified in the Privacy Policy;
4.5.2. ensure that confidential information is kept confidential, not disclosed without the User's prior written permission, and not sold, exchanged, published, or otherwise disclosed by the User's personal data, except as provided in the Privacy Policy.;
4.5.3. take precautions to protect the User's personal data;
4.5.4. to block personal data related to the relevant User from the moment of the request or request of the User or his legal representative or the authorized body for the protection of the rights of personal data subjects for the verification period in case of identification of false personal data or illegal actions.
4.6. The Operator has the right to entrust the processing of personal data to another person on the basis of an agreement concluded with this person, including a state or municipal contract.
The person who processes personal data on behalf of the operator is obliged to comply with the principles and rules of personal data processing provided for by law.
In addition, if necessary, the operator has the right to transfer personal data to the bodies of inquiry and investigation and other authorized bodies on the grounds provided for by the current legislation of the Republic of Kazakhstan.
5. Scope and categories of personal data processed, categories of personal data subjects
5.1. The content and scope of the processed personal data correspond to the stated purposes of processing. The personal data being processed should not be redundant in relation to the stated purposes of their processing.
5.2. Personal data processing is allowed in the following cases::
the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
The processing of personal data is necessary for the performance of an agreement to which the personal data subject is a party or beneficiary or guarantor, as well as for the conclusion of an agreement on the initiative of the personal data subject or an agreement under which the personal data subject will be the beneficiary or guarantor.;
personal data is processed for statistical or other research purposes, subject to mandatory depersonalization of personal data.;
personal data is processed, and access to an unlimited number of persons is provided by the personal data subject or at his request (hereinafter referred to as personal data made publicly available by the personal data subject).
5.3. Categories of personal data subjects include:
5.3.1. Clients and counterparties of the operator (individuals) – Users of the Website;
In this category of subjects, the operator processes personal data received by the operator in connection with the conclusion of a contract to which the personal data subject is a party, and used by the operator solely for the performance of the specified contract and the conclusion of contracts with the personal data subject.:
the user ID stored in the cookie;
IP address;
other information necessary for the execution of the User Agreement and concluded contracts for the provision of paid services.
6. Procedure for destruction and blocking of personal data
6.1. In case of detection of unlawful processing of personal data when contacting Users, the Operator is obliged to block the unlawfully processed personal data related to these Users from the moment of such request for the verification period.
6.2. In case of detection of inaccurate personal data when contacting Users, the Operator is obliged to block personal data related to these Users from the moment of such request for the verification period, if blocking personal data does not violate the rights and legitimate interests of users or third parties.
6.3. In case of confirmation of the inaccuracy of personal data, the Operator, based on the information provided by Users or other necessary documents, is obliged to clarify the personal data within 7 (seven) business days from the date of submission of such information and to remove the blocking of personal data.
6.4. In case of detection of unlawful processing of personal data carried out by the website, the Operator is obliged to stop the unlawful processing of personal data within a period not exceeding 7 (seven) business days from the date of this detection.
6.5. If it is impossible to ensure the legality of the processing of personal data, the Operator is obliged to destroy such personal data within a period not exceeding 5 (five) business days from the date of detection of the unlawful processing of personal data.
6.6. The Operator is obliged to notify Users about the elimination of violations or the destruction of personal data.
6.7. In case of achievement of the purpose of personal data processing, the Operator is obliged to stop processing personal data and destroy personal data within a period not exceeding 5 (five) days from the date of achievement of the purpose of personal data processing.
6.8. If Users withdraw their consent to the processing of their personal data, the Operator is obliged to stop processing them and, if the storage of personal data is no longer required for the purposes of personal data processing, destroy the personal data within a period not exceeding 5 (five) days from the date of receipt of the said withdrawal.
6.9. If it is not possible to destroy personal data within the period specified in clauses 6.4-6.8 of this Policy, the Operator shall block such personal data and ensure the destruction of personal data within no more than 1 month, unless another period is established by federal laws.
7. Identification files
7.1. Identification files and other technologies (hereinafter referred to as cookies) may be used on the Website. Such technologies are used to analyze user behavior on the site and measure the effectiveness of advertising.
7.2. Cookies are necessary for the use of the Website, navigation on the Website and the proper operation of its services. The user can disable cookies in the settings of their web browser or mobile device. At the same time, it is possible to limit some functions of the website related to the use of cookies.
7.3. Cookies may contain information about the User's actions on the Site, including information entered by him, and are used in accordance with the provisions of the Privacy Policy. The data stored in these cookies is accessible only to the Site and cannot be used in any way when the User visits other sites.
7.4. By using the Website, the User agrees to the storage of cookies by the Website using the appropriate standard mechanism in the Internet browser on his computer /smartphone.
7.5. Pop-up notifications about the collection and processing of cookie data may be displayed to users of the Site with a link to the Policy and buttons for accepting the processing conditions or closing the pop-up notification. The user's acceptance of the cookie processing conditions or closing of the pop-up notification in accordance with the Policy is regarded as consent to the processing of these cookies.
8. Dispute resolution
8.1. Before filing a claim with the court for disputes arising from the relationship between the User and the Operator, a claim is submitted (a written proposal for a voluntary settlement of the dispute).
8.2. The recipient of the claim shall notify the claimant in writing of the results of the claim review within 10 (ten) business days from the date of receipt of the claim.
8.3. If an agreement is not reached, the dispute will be referred to the court in accordance with the current legislation of the Republic of Kazakhstan.
8.4. The current legislation of the Republic of Kazakhstan applies to the Privacy Policy and the relationship between the User and the Operator.
9. Final provisions
9.1. Other rights and obligations of the Personal data Operator are determined by the legislation of the Republic of Kazakhstan in the field of personal data. Operator officials (if any) who are guilty of violating the rules governing the processing and protection of personal data bear material, disciplinary, administrative, civil or criminal liability in accordance with the procedure established by laws.
9.2. All information collected by third-party services, including payment systems, communication facilities and other service providers, is stored and processed by the specified persons (Operators) in accordance with their User Agreement and Privacy Policy. The subject of personal data and/or the User is obliged to familiarize themselves with the specified documents in a timely manner. The Operator is not responsible for the actions of third parties, including the service providers specified in this paragraph.
10. Details of the contractor
Sole Proprietor Kirill Zamolotskikh
IIN: 770930350577
E-mail: team@uboo.st
Consent to the processing of personal data
I hereby give my consent to IP Kirill Zamolotskikh, IIN: 770930350577 (hereinafter referred to as the Operator) to process my personal data on the website at https://uboo.st (hereinafter referred to as the Site), its subdomains and services (applications, extensions, etc.) in accordance with the requirements of the law "On Personal Data" for the purposes of conducting a survey and providing services.
1. I accept all the terms of the Privacy Policy posted at: https://uboo.st/policy , and I give my consent to the Operator for processing, including automated (mixed method of processing personal data), personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, distribution, access), blocking, depersonalization, deletion, destruction of personal data.
2. When filling out electronic forms, I guarantee that my personal data is reliable and belongs specifically to me.
3. Consent to the processing of personal data is given consciously and is unambiguous.
4. I am notified that I can revoke this consent by submitting a simple written statement to the Operator.
5. I undertake to take measures to ensure the security and safety of personal data, including those necessary for using the Site, such as using antiviruses, taking care of passwords and making them inaccessible to a third party.
6. I undertake not to use other people's personal data when filling out electronic forms.
7. I give my consent to the processing of my personal data:
the user ID stored in the cookie;
IP address;
other information necessary for the execution of the User Agreement and concluded contracts for the provision of paid services.
8. The purposes of personal data processing are:
fulfillment of obligations to the User provided for by the functions of the Website;
sending information, including advertising, about promotions, events and special offers, receiving feedback, feedback and recommendations from the User, conducting surveys for effective communication with Users;
conclusion, execution and termination of civil law contracts;
providing User access to the services, information and/or materials contained on the Website;
other necessary cases provided for by Russian legislation.
9. By using the Website, I consent to the storage of cookies in accordance with the Privacy Policy using the appropriate standard mechanism in the Internet browser on the computer / smartphone.
10. In accordance with the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On personal data and their protection", I freely, voluntarily and in my own interest express my consent to the collection, analysis, processing, storage and use, clarification, destruction of my personal data for purposes related to the use of the site, execution contracts, participation in promotions.
11. I express my full and unconditional consent to the use of my data to keep in touch with me in any way, including sending emails to the specified email address in order to inform about the arrival of new goods /services, notifications about promotions, events, discounts, their results, to conduct correspondence surveys in order to study opinions about the goods/services.services, trade organizations, sending news, etc.
12. This consent is valid from the date of its signing until the date of revocation in writing.