OF CODESMITH LIMITED LIABILITY PARTNERSHIP (hereinafter – CODESMITH)
1.1. The Privacy and Personal Data Processing Policy of CodeSmith Limited Liability Partnership (hereinafter – the Policy) sets out CodeSmith's obligations not to disclose and to ensure the protection of the confidentiality of the personal data that the User provides on request when registering on the CodeSmith Website at https://expresso.one, when ordering the service of conducting surveys and questionnaires of the User's partners and clients using the "Expresso Business Suite" software (hereinafter – the Services), or in any other use of the Website involving the User's personal data. CodeSmith may amend or supplement this Policy unilaterally by publishing the amendments or supplements, or a new version of the Policy, on the CodeSmith Website at: https://expresso.one (hereinafter – the Website).
1.2. The personal data permitted for processing under this Policy are provided by the User by registering on the Website and include the following information:
1.2.1. the User's last name, first name and patronymic;
1.2.2. the User's contact telephone numbers;
1.2.3. email address (e-mail);
1.2.4. masked card data;
1.2.5. account password.
1.3. CodeSmith protects Non-personal data:
1.4. Disabling cookies may make it impossible to access parts of the Website that require authorization, including making it impossible to submit a request on the Website.
1.5. CodeSmith collects statistics on the IP addresses of its Users. This information is used to identify and resolve technical problems.
1.6. Any other personal information not specified above (history of services received, browsers and operating systems used, etc.) shall be securely stored and shall not be disclosed, except in cases provided for by the legislation of the Republic of Kazakhstan.
1.7. CodeSmith protects data that is automatically transmitted in the course of remote services via the Website.
1.8. The User's use of the Website constitutes the User's consent to this Policy and to the terms of processing of the User's personal data.
1.9. If the User does not agree with the terms of the Policy, the User must stop using the Website.
1.10. This Policy applies only to the Website. CodeSmith does not control and is not responsible for third-party websites that the User may access via links available on the Website.
2.1. CodeSmith may use the User's personal data for the purposes of:
2.1.1. identifying the User registered on the Website in the course of providing its Services;
2.1.2. providing the User with access to personalized resources;
2.1.3. establishing feedback with the User, including sending notifications, requests and operations via the Website, providing services, and processing requests and applications from the User;
2.1.4. creating an account to receive CodeSmith Services. By creating a personal account on the Website, the User consents to the creation of the account;
2.1.5. notifying the User of the status of the arrangement of CodeSmith Services;
2.1.6. notifying the User in accordance with the CodeSmith Services provided;
2.1.7. processing and receiving CodeSmith Services;
2.1.8. rendering CodeSmith Services;
2.1.9. providing the User with effective customer and technical support in the event of problems related to the use of the Website;
2.1.10. improving the quality of the Services and their usability, and developing new services;
2.1.11. informing the User about updates to the range of offerings, special offers, prices, events, promotions and other information on behalf of CodeSmith or on behalf of CodeSmith's partners;
2.1.12. conducting statistical and other research based on non-personal data, as well as optimizing advertising messages;
2.1.13. determining the User's location to ensure security and prevent fraud;
2.1.14. confirming the accuracy and completeness of the personal data provided by the User;
2.1.15. the User's personal data are processed without time limitation, by any lawful means, including in personal data information systems with or without the use of automation tools;
2.2. The User agrees that CodeSmith may transfer personal data to third parties, in particular courier services and postal organizations, solely for the purpose of providing the Services to the User;
2.3. The User's personal data may be transferred to authorized state authorities of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan.
2.4. In the event of loss or disclosure of personal data, CodeSmith shall inform the User of the loss or disclosure of the personal data.
2.5. CodeSmith takes the necessary organizational and technical measures to protect the User's personal information from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties.
2.6. CodeSmith, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.
3.1. The User shall:
3.1.1. provide the personal data necessary to use the Website;
3.1.2. update and supplement the personal data provided if this information changes.
3.1.3. obtain in advance from the User's partners and/or clients their consent to the storage and processing of their personal data in accordance with the legislation of the Republic of Kazakhstan.
3.1.4. comply with CodeSmith's prohibition on storing the following data of the User's partners and/or clients on the Website:
1) bank payment card numbers;
2) bank account numbers;
3) identifiers of electronic money and/or cryptocurrency wallets;
4) accounts (logins and passwords) for banking, financial, cryptocurrency and payment systems;
5) other third-party data that violates the legislation of the Republic of Kazakhstan, including Law of the Republic of Kazakhstan No. 44-VIII dated 11.12.23 "On Personal Data and Their Protection".
3.2. CodeSmith shall:
3.2.1. use the information received solely for the purposes specified in Section 2 "Purposes of collecting the User's personal information" of this Policy.
3.2.2. keep confidential information secret, not disclose it without the User's prior written consent, and not sell, exchange, publish or otherwise disclose the User's personal data transferred to it;
3.2.3. take precautions to protect the confidentiality of the User's personal data in accordance with the procedure customarily used to protect this type of information in existing business practice;
3.2.4. block the personal data relating to the relevant User from the moment of an appeal or request by the User, the User's legal representative or the authorized body for the protection of the rights of personal data subjects, for the period of verification, if inaccurate personal data or unlawful actions are identified;
3.3. Any other personal information not specified above shall be securely stored and shall not be disclosed.
4.1. Before filing a lawsuit in court over disputes arising from the relations between the User and CodeSmith, submitting a claim (a written proposal for the voluntary settlement of the dispute) is mandatory.
4.2. If the User has a claim regarding a violation of the terms of this Policy, the User submits a written claim via the Website or to CodeSmith's email/postal address for consideration.
4.3. CodeSmith notifies the User in writing of the results of the consideration of the claim within the time limits established by the current legislation of the Republic of Kazakhstan.
4.4. If the parties fail to reach an agreement, the dispute shall be referred to a judicial authority in accordance with the current legislation of the Republic of Kazakhstan.
4.5. This Policy and the relations between the User and CodeSmith are governed by the current legislation of the Republic of Kazakhstan.