Privacy Policy

1. General Provisions

1.1. The Privacy Policy and personal data processing of the electronic government portal (hereinafter – the Privacy Policy) defines the procedure and conditions for processing personal data of the portal users and establishes the requirements for ensuring the security of Users’ personal data.

1.2. The following terms and abbreviations are used in this Privacy Policy:

— Portal – a portal designed to provide government services and tools, a component of the Information System "Center for Science and Technology Initiatives 'Samgau' Foundation"
— Operator – JSC "Samruk-Kazyna", supporting the IS: "Center for Science and Technology Initiatives 'Samgau' Foundation"
— Owner of the Information System "Portal" (hereinafter - the Owner) – the authorized body in the field of informatization;
— User – an individual or legal entity registered in the Personal Account of the portal/e-government portal;
— All other terms and definitions used in this Policy are interpreted in accordance with the current legislation of the Republic of Kazakhstan.

1.3. Processing of personal data (including biometric) in the portal is carried out based on:

— Constitution of the Republic of Kazakhstan;
— Law of the Republic of Kazakhstan "On Personal Data and Their Protection";
— Law of the Republic of Kazakhstan "On Informatization";
— Law of the Republic of Kazakhstan "On Electronic Document and Electronic Digital Signature";
— Law of the Republic of Kazakhstan "On Public Services";
— Order of the Minister of Investments and Development of the Republic of Kazakhstan dated December 9, 2015 No. 1187 "On Approval of the Rules for Verifying the Authenticity of an Electronic Digital Signature";
— Order of the Acting Minister of Investments and Development of the Republic of Kazakhstan dated January 25, 2016 No. 58 "On Approval of the Rules for Registration and Connection of a Subscriber Number Provided by a Mobile Operator to the e-government Web Portal Account to Receive Government and Other Services in Electronic Form via a Mobile Device".

1.4. Use of the portal by the User implies agreement with this Privacy Policy and the conditions for processing the User’s personal data.

1.5. This Policy applies to all visitors and covers Personal Data provided by Users during registration and use of the portal.

1.6. If the User disagrees with the terms of the Privacy Policy, they must stop using the portal.

1.7. This Privacy Policy applies to the portal. The portal does not control and is not responsible for third-party websites that the User may access via links available on the portal.

1.8. The portal processes personal data, including but not limited to:

— BIN;
— organization name;
— surname, first name, patronymic (if available);
— gender;
— user’s email address;

2.1. Personal data of portal users are collected and processed for the following purposes:
2.1.1. to identify the user;
2.1.2. to automate the filling process;
2.1.3. to ensure correct entry of personal information;
2.1.4. to provide the user with access to data about them stored in government information systems and other systems;
2.1.5. to provide public services;
2.1.6. to provide other services and tools using the portal;
2.1.7. to obtain results of public services rendered;
2.1.8. for other purposes provided by the legislation of the Republic of Kazakhstan.

3.1. The Operator has the right to process personal data using automated means.

3.2. The User consents to the processing of personal data without time limitation.

3.3. The Operator is obliged to take necessary organizational and technical measures to ensure confidentiality, integrity, security, and availability of users' personal data.

3.4. The Operator must respect the legal rights of portal users in the field of personal data processing and comply with other requirements established by the legislation of the Republic of Kazakhstan.

4.1. The portal user has the right to:

4.1.1. possess all necessary rights allowing them to register and use the Portal;

4.1.2. use their personal data for any lawful purposes, including those provided in the Policy;

4.1.3. withdraw their consent to the collection and processing of data by submitting a corresponding written document to the Operator. In case of consent withdrawal, the Operator may continue processing if the data was made publicly available or on other grounds specified in Article 9 of the Law of the Republic of Kazakhstan "On Personal Data and Their Protection".

4.2. The portal user must:

4.2.1. provide accurate information about themselves in the amount necessary to use the portal;

4.2.2. be familiar with this Policy;

4.2.3. update personal data processed in the portal in case of changes, if automatic update is not possible;

4.2.4. fulfill other obligations in the field of personal data when such obligations arise in the process of data processing.

5.1. The user’s personal data may be transferred to a third party in the following cases:

5.1.1. if the transfer is necessary to provide a government service or tool;

5.1.2. if the user has consented to the transfer of their data to a third party;

5.1.3. if the transfer is required by applicable law.

6.1. This Privacy Policy and the relationship between the User and the Operator arising from its application are governed by the law of the Republic of Kazakhstan.

6.2. The Operator has the right to amend this Privacy Policy without the User’s consent.

6.3. The new version of the Privacy Policy comes into force from the moment it is published on the website https://portal.csti.kz/, unless otherwise specified by the new version.

6.4. The User undertakes to monitor changes to the Privacy Policy by reviewing the current version.

6.5. All suggestions or questions regarding this Privacy Policy should be sent to: info@csti.kz