Personal Data Processing Policy
1. General Provisions
This personal data processing policy is drafted in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2012, No. 94-V "On Personal Data and Protection" and defines the procedure for processing personal data and measures to ensure the security of personal data by "Cyberphysics Kazakhstan" LLP (hereinafter referred to as the Operator).

The Operator considers the protection of human and civil rights and freedoms when processing personal data to be a primary goal and essential condition of its activities, including the protection of privacy, personal and family secrets.

This policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the website http://cyberphysics.kz.

2. Key Terms Used in the Policy
  1. Automated processing of personal data – processing of personal data using computer technology;
  2. Blocking of personal data – temporary suspension of the processing of personal data (except in cases where processing is required to clarify personal data);
  3. Website – a collection of graphical and informational materials, as well as software and databases, made available on the internet at the address http://cyberphysics.kz;
  4. Personal data information system – a collection of personal data contained in databases, along with information technologies and technical tools for their processing;
  5. Depersonalization of personal data – actions that make it impossible to determine, without additional information, whether personal data belongs to a specific User or another subject of personal data;
  6. Processing of personal data – any action (operation) or set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion, and destruction of personal data;
  7. Operator – a state body, municipal body, legal or natural person that, independently or jointly with other persons, organizes and (or) carries out the processing of personal data, as well as determines the purposes of processing, the composition of personal data to be processed, and the actions (operations) performed with personal data;
  8. Personal data – any information directly or indirectly related to an identified or identifiable User of the website http://cyberphysics.kz;
  9. User – any visitor to the website http://cyberphysics.kz;
  10. Provision of personal data – actions aimed at disclosing personal data to a specific person or a specific circle of persons;
  11. Dissemination of personal data – any actions aimed at disclosing personal data to an indefinite circle of persons (transferring personal data) or providing access to personal data to an unlimited circle of persons, including by making personal data public in mass media, placing it in information and telecommunication networks, or providing access to personal data in any other way;
  12. Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state to a government authority, foreign natural person, or foreign legal entity;
  13. Destruction of personal data – any actions resulting in the permanent destruction of personal data, making it impossible to restore the content of personal data in the personal data information system and (or) destroying physical media of personal data.

3. The Operator May Process the Following Personal Data of the User
- Last name, first name, patronymic;
- Email address;
- Phone numbers;

Additionally, the website collects and processes anonymized data about visitors (including "cookie" files) using web analytics services (such as Yandex.Metrica, Google Analytics, and others).

The above data is collectively referred to as Personal Data in this Policy.

4. Purposes of Processing Personal Data
  1. The purpose of processing the User's personal data is to clarify order details.
  2. Additionally, the Operator has the right to send notifications to the User about new products and services, special offers, and various events. The User can always opt out of receiving informational messages by sending an email to the Operator at info@cyberphysics.kz with the subject "Opt-out of notifications about new products, services, and special offers."
  3. Anonymized data collected from Users via web analytics services is used to gather information on Users' actions on the website, to improve the quality and content of the website.

5. Legal Basis for Processing Personal Data
  1. The Operator processes the User's personal data only when it is entered and/or submitted by the User through the special forms available on the website http://cyberphysics.kz. By completing the relevant forms and/or submitting their personal data to the Operator, the User consents to this Policy.
  2. The Operator processes anonymized data about the User if this is allowed in the User's browser settings (enabling the storage of "cookie" files and the use of JavaScript technology).

6. Procedure for Collection, Storage, Transfer, and Other Processing of Personal Data
The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with current legislation on the protection of personal data.

The Operator ensures the confidentiality of personal data and takes all possible measures to prevent unauthorized access to personal data.
The User's personal data will never, under any circumstances, be disclosed to third parties, except in cases required by applicable law.

If inaccuracies in personal data are detected, the User may update them independently by sending a notification to the Operator’s email address at info@cyberphysics.kz with the subject "Updating Personal Data."

The processing period for personal data is indefinite. The User may withdraw their consent to the processing of personal data at any time by sending a notification to the Operator via email at info@cyberphysics.kz with the subject "Withdrawal of Consent for Personal Data Processing."

7. Cross-Border Transfer of Personal Data
  1. Before commencing cross-border transfer of personal data, the Operator must ensure that the foreign country to which the personal data is to be transferred provides reliable protection of the rights of personal data subjects.
  2. Cross-border transfer of personal data to foreign countries that do not meet these requirements may only occur if there is written consent from the personal data subject for the cross-border transfer of their personal data and/or if it is necessary for the performance of a contract to which the personal data subject is a party.

8. Final Provisions
  1. The User may request any clarification on questions related to the processing of their personal data by contacting the Operator via email at info@cyberphysics.kz.
  2. Any changes to the Operator’s personal data processing policy will be reflected in this document. The Policy is valid indefinitely until replaced by a new version.
  3. The current version of the Policy is freely available on the internet at http://cyberphysics.kz/policy.