Privacy and Personal Data Processing Policy

This privacy and personal data processing policy (hereinafter – “Privacy Policy”) governs the processing and use of personal and other data of the Tumar.one Platform (hereinafter – “the Platform”). The current version of this Privacy Policy is constantly available for review and posted on the Internet at: https://bugbounty.kz/.

By transferring personal and other data to the Platform Operator through the Platform, the User confirms his consent to the use of the specified data on the policy and conditions set forth in this Privacy Policy.

If the User does not agree with the policy of this Privacy Policy, he is obliged to stop using the Platform.

• 1. COLLECTION AND PROCESSING OF PERSONAL DATA

  • 1.1. The Operator collects and stores only those Personal Data that are necessary for the provision of Services by the Operator and interaction with the User.
  • 1.2. Personal data may be used for the following purposes:
  • 1.2.1 provision of Services to the User;
  • 1.2.2 identification of the User;
  • 1.2.3 interaction with the User;
  • 1.2.4 sending advertising materials, information and requests to the User;
  • 1.2.5 carrying out statistical and other studies;
  • 1.3. The Operator among other things, processes the following data:
  • 1.3.1 last name, first name and patronymic;
  • 1.3.2 email address;
  • 1.3.3 Telegram account and/or phone number (including mobile number);
  • 1.3.4 biometric data for verification;
  • 1.3.5 bank details;
  • 1.3.6 identity documents;
  • 1.3.4 other personal data (if necessary);
  • 1.4. The User is prohibited from indicating personal data of third parties on the Platform (with the exception of the condition of representing the interests of these persons, having documentary evidence of third parties for the implementation of such actions).

• 2. PROCEDURE FOR PROCESSING PERSONAL AND OTHER DATA

  • 2.1. The Operator undertakes to use Personal Data in accordance with the Law On "Personal Data" of the Republic of Kazakhstan and the internal documents of the Operator.
  • 2.2. With regard to Personal Data and other User Data, their confidentiality is maintained, except when the specified data is publicly available.
  • 2.3. The Operator has the right to keep an archive copy of Personal Data. The Operator has the right to store Personal Data and Data on servers outside the territory of the Republic of Kazakhstan.
  • 2.4. The Operator has the right to transfer Personal Data and User Data without the consent of the User to the following persons:
  • 2.4.1 to state bodies, including bodies of inquiry and investigation, and local governments upon their reasoned request;
  • 2.4.2 in other cases expressly provided for by the current legislation of the Republic of Kazakhstan.
  • 2.5. The Operator has the right to transfer Personal Data and Data to third parties not specified in clause 3.4. of this Privacy Policy in the following cases:
  • 2.5.1 The user has agreed to such actions;
  • 2.5.2 the transfer is necessary as part of the User's use of the Platform or the provision of the Services to the User;
  • 2.6. The Operator carries out automated processing of Personal Data and Data.

• 3. PROTECTION OF PERSONAL DATA

  • 3.1. The Operator carries out appropriate protection of Personal and other data in accordance with the Law and takes the necessary and sufficient organizational and technical measures to protect Personal data.
  • 3.2. The applied protection measures, among other things, allow protecting Personal Data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties with them.

• 4. OTHER PROVISIONS

  • 4.1. This Privacy Policy and the relationship between the User and the Operator arising in connection with the application of the Privacy Policy shall be subject to the law of the Republic of Kazakhstan.
  • 4.2. All possible disputes arising from this Privacy Policy are subject to resolution in accordance with applicable law at the place of registration of the Operator.
    Before applying to the court, the User must comply with the mandatory pre-trial procedure and send the Operator a corresponding claim in writing. The term for responding to a claim is 30 (thirty) working days.
  • 4.3. If, for one reason or another, one or more provisions of the Privacy Policy are declared invalid or unenforceable, this does not affect the validity or applicability of the remaining provisions of the Privacy Policy.
  • 4.4. The Operator has the right at any time to change the Privacy Policy (in whole or in part) unilaterally without prior agreement with the User. All changes come into force from the moment it is posted on the Platform.
  • 4.5. The User undertakes to independently monitor changes to the Privacy Policy by reviewing the current version.
  • 4.6. All suggestions or questions regarding this Privacy Policy should be reported by email: info@tumar.one