Privacy and Personal Data Processing Policy
This privacy and personal data processing policy (hereinafter – “Privacy Policy”) governs the processing and use of personal and other data of the Tumar.one Platform (hereinafter – “the Platform”). The current version of this Privacy Policy is constantly available for review and posted on the Internet at: https://bugbounty.kz/.
By transferring personal and other data to the Platform Owner through the Platform, the User confirms his consent to the use of the specified data on the policy and conditions set forth in this Privacy Policy.
If the User does not agree with the policy of this Privacy Policy, he is obliged to stop using the Platform.
1. POLICY
1.1. Owner - a legal entity that owns the Platform, and which independently and at its own discretion determines the procedure for using the Platform on the Internet, including the procedure for posting information on such a Platform.
- 1.2. Other applicable policy and conditions are the Privacy Policy and the Rules of Participation located on the Internet at the links: https://bugbounty.kz/privacy-policy and https://bugbounty.kz/rules
- 1.3. Platform - a web resource located on the Internet at https://bugbounty.kz/
The platform is a vulnerability reward program for information systems and information resources. All exclusive rights to the Platform and its individual elements (including software, design) belong to the Owner in full. The transfer of exclusive rights to the User is not the subject of this Privacy Policy.
policy.1.term.3.pt3 - 1.4. User - a person using the Platform
- 1.5. Legislation - the current legislation of the Republic of Kazakhstan.
- 1.6. Personal data - personal data of the User, which the User provides independently during registration or in the process of using the functionality of the Platform.
- 1.7. Data - other data about the User (not included in the concept of Personal data).
- 1.8. Service(s) - services provided by the Owner on the basis of an agreement.
- 2. COLLECTION AND PROCESSING OF PERSONAL DATA
- 2.1. The Owner collects and stores only those Personal Data that are necessary for the provision of Services by the Owner and interaction with the User.
- 2.2. Personal data may be used for the following purposes:
- 2.2.1 provision of Services to the User;
- 2.2.2 identification of the User;
- 2.2.3 interaction with the User;
- 2.2.4 sending advertising materials, information and requests to the User;
- 2.2.5 carrying out statistical and other studies;
- 2.3. The Owner among other things, processes the following data:
- 2.3.1 last name, first name and patronymic;
- 2.3.2 email address;
- 2.3.3 phone number (including mobile);
- 2.3.4 other personal data (if necessary);
- 2.4. The User is prohibited from indicating personal data of third parties on the Platform (with the exception of the condition of representing the interests of these persons, having documentary evidence of third parties for the implementation of such actions).
- 3. PROCEDURE FOR PROCESSING PERSONAL AND OTHER DATA
- 3.1. The Owner undertakes to use Personal Data in accordance with the Law On "Personal Data" of the Republic of Kazakhstan and the internal documents of the Owner.
- 3.2. With regard to Personal Data and other User Data, their confidentiality is maintained, except when the specified data is publicly available.
- 3.3. The Owner has the right to keep an archive copy of Personal Data. The Owner has the right to store Personal Data and Data on servers outside the territory of the Republic of Kazakhstan.
- 3.4. The Owner has the right to transfer Personal Data and User Data without the consent of the User to the following persons:
- 3.4.1 to state bodies, including bodies of inquiry and investigation, and local governments upon their reasoned request;
- 3.4.2 in other cases expressly provided for by the current legislation of the Republic of Kazakhstan.
- 3.5. The Owner has the right to transfer Personal Data and Data to third parties not specified in clause 3.4. of this Privacy Policy in the following cases:
- 3.5.1 The user has agreed to such actions;
- 3.5.2 the transfer is necessary as part of the User's use of the Platform or the provision of the Services to the User;
- 3.6. The Owner carries out automated processing of Personal Data and Data.
- 4. PROTECTION OF PERSONAL DATA
- 4.1. The Owner carries out appropriate protection of Personal and other data in accordance with the Law and takes the necessary and sufficient organizational and technical measures to protect Personal data.
- 4.2. The applied protection measures, among other things, allow protecting Personal Data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties with them.
- 5. OTHER PROVISIONS
- 5.1. This Privacy Policy and the relationship between the User and the Owner arising in connection with the application of the Privacy Policy shall be subject to the law of the Republic of Kazakhstan.
- 5.2. All possible disputes arising from this Privacy Policy are subject to resolution in accordance with applicable law at the place of registration of the Owner.
Before applying to the court, the User must comply with the mandatory pre-trial procedure and send the Owner a corresponding claim in writing. The term for responding to a claim is 30 (thirty) working days. - 5.3. If, for one reason or another, one or more provisions of the Privacy Policy are declared invalid or unenforceable, this does not affect the validity or applicability of the remaining provisions of the Privacy Policy.
- 5.4. The Owner has the right at any time to change the Privacy Policy (in whole or in part) unilaterally without prior agreement with the User. All changes come into force from the moment it is posted on the Platform.
- 5.5. The User undertakes to independently monitor changes to the Privacy Policy by reviewing the current version.
- 5.6. All suggestions or questions regarding this Privacy Policy should be reported by email: info@tumar.one