Chapter 1. General provisions
- The Privacy Policy (hereinafter – the Policy) is based on the Law of the Republic of Kazakhstan “On Personal Data and their Protection”. The Policy regulates the procedure for collection, processing and storage of personal data of personal data subjects in the process of external interaction with individuals and provision of services to users of services of Joint Stock Company “National Payment Corporation of the National Bank of the Republic of Kazakhstan” (hereinafter – JSC “NPC”) in the systems of JSC “NPC”.
Chapter 2. Key terms and definitions
2. The following terms and definitions are used in the Policy:
1) official Internet resource – the Internet resource of JSC “NPC”, located on the Internet at https://npck.kz.;
2) Service user – a legal entity using the services of JSC “NPC”;
3) subject of personal data (hereinafter referred to as “subject”) – a natural person to whom the personal data refer to;
4) personal data – information related to a certain or determined on their basis personal data subject, recorded on electronic, paper and (or) other tangible media;
5) identification – a set of measures to establish information about the subject as defined by the legislation of the Republic of Kazakhstan and to confirm the reliability of this information.
Chapter 3. Collection, processing and storage of personal data
3. By submitting the subject’s personal data to JSC “NPC”, the subject of personal data, service user confirms the consent of the subject of personal data to the collection, use, processing, storage of the said data during the interaction between JSC “NPC” and the service user on the terms and conditions set out in the Policy.
4. At the request of JSC “NPC”, the Service User shall provide documentary evidence of the existence of the consents collected from the subjects of personal data to the collection and processing of personal data and to the transfer of personal data to third parties.
5. In the course of providing services, JSC “NPC” collects, processes and stores only those personal data of the subjects that are necessary for the provision of services by JSC “NPC”.
6. Personal data may be used for the following purposes:
- providing services to users (including identification of personal data subject, issuance of registration certificates, etc.);
- interaction between JSC “NPC” and subjects of personal data, including receiving and sending information and requests to the subject.
7. The list of personal data collected, processed and stored by JSC “NPC” depends on the specifics of the services provided and (or) the nature of interaction with the subject of personal data and is limited to a sufficient and necessary amount.
8.The subject’s personal data shall be kept confidential, except for cases when the said data is publicly available.
9. JSC “NPC” has the right to transfer personal data without the consent of the subject of personal data in cases stipulated by the current legislation of the Republic of Kazakhstan.
10. JSC “NPC” ensures that production processes and procedures are checked prior to their use for the collection, processing and storage of personal data.
11. JSC “NPC” shall protect personal data in accordance with the legislation of the Republic of Kazakhstan.
12. Employees of JSC “NPC” who become aware of personal data in connection with the performance of their job duties shall ensure their confidentiality.
13. Cross-border transfer of personal data to the territory of foreign states is carried out in cases provided for by the current legislation of the Republic of Kazakhstan.
14. If the fact of personal data leakage is detected, JSC “NPC” shall notify the service users by sending a message within 24 hours.
Chapter 4. Final provisions
15. All disputes arising in relation to the collection, processing and storage of personal data at JSC “NPC” shall be resolved in accordance with the applicable laws of the Republic of Kazakhstan.
16. JSC “NPC” has the right to independently amend the Policy (in full or in part) unilaterally without prior approval. All amendments to the Policy shall not contradict the legislation of the Republic of Kazakhstan and shall come into force from the moment of its placement on the official Internet resource.
17. Any provisions of the Policy that become prohibited or invalid under the laws of the Republic of Kazakhstan and other applicable laws shall not affect the validity or enforceability of its remaining provisions.
18. The Policy is a publicly available document and is posted on the official Internet resource of JSC “NPC”.