PRIVACY AND PERSONAL DATA PROCESSING POLICY
Limited Liability Company “Aurega”
This Privacy and Personal Data Processing Policy (hereinafter, the “Policy”) applies to all information that the website of Aurega LLC (hereinafter, the “Company”) may obtain about a User while the User uses the website, its services, programs and products.
This Policy has been developed in strict accordance with the Constitution of the Republic of Uzbekistan, the Law of the Republic of Uzbekistan “On Personal Data” (No. ZRU-547), the Law “On Informatization” and other regulatory legal acts of the Republic of Uzbekistan governing the protection of information.
1. GENERAL PROVISIONS
1.1. Use of the Company’s website constitutes the User’s unconditional consent to this Policy and to the terms of processing of his or her personal data set out in it. If the User does not agree with these terms, the User must refrain from using the website.
1.2. The personal data operator is Aurega LLC, registered and operating in accordance with the legislation of the Republic of Uzbekistan.
1.3. The Operator processes personal data solely on a lawful and fair basis, limiting processing to the achievement of specific, predetermined and lawful purposes.
2. TERMS AND DEFINITIONS
The following terms are used in this Policy:
Personal data — any information recorded on an electronic, paper and (or) other tangible medium that relates to a specific individual or makes it possible to identify him or her.
Personal data subject (User) — an individual to whom the relevant personal data relates.
Personal data processing — any action (operation) or set of actions performed with personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion and destruction of personal data.
Confidentiality of personal data — a requirement, mandatory for the Operator or any other person who has gained access to personal data, not to disclose such data without the consent of the data subject or another lawful basis.
3. CATEGORIES OF PERSONAL DATA COLLECTED
3.1. The Company collects and processes only the personal data that is necessary to provide services, perform obligations and interact with the User:
- Surname, first name and patronymic (if any);
- Telephone number;
- E-mail address;
- Other information voluntarily provided by the User through feedback forms, requests or contracts on the website.
3.2. The website also automatically collects depersonalized data about visitors (including cookies, IP address, browser data and access time) using web analytics systems in order to improve the operation of the website.
4. PURPOSES OF PERSONAL DATA PROCESSING
The User’s personal data is processed for the following purposes:
- Identification of the User in the course of interaction with Aurega LLC;
- Processing of the User’s inquiries, requests and appeals;
- Conclusion and performance of contracts to which the User is a party or beneficiary;
- Informing the User about the Company’s services, promotions and news (only with separate consent);
- Improving the quality of the website and carrying out statistical and marketing research.
5. LEGAL BASES AND PROCEDURE OF PROCESSING
5.1. The basis for processing personal data is the consent of the personal data subject, expressed by ticking the relevant box in a form on the website, by clicking the form submission button, or by concluding a contract with Aurega LLC.
5.2. Personal data is stored on electronic media in the territory of the Republic of Uzbekistan, in databases that comply with the requirements of the current legislation on the localization of databases.
5.3. The Company takes the necessary organizational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying and dissemination, as well as against other unlawful actions by third parties.
6. RIGHTS OF THE PERSONAL DATA SUBJECT
In accordance with the Law of the Republic of Uzbekistan “On Personal Data”, the User has the right to:
- Obtain from the Company information concerning the processing of his or her personal data (confirmation of processing, purposes, methods and storage periods);
- Demand that the Company clarify his or her personal data, or block or destroy it, if the data is incomplete, outdated, inaccurate or unlawfully obtained;
- Withdraw consent to the processing of personal data at any time by sending written notice to Aurega LLC;
- Appeal against the actions or inaction of the Company to the authorized state body for the protection of the rights of personal data subjects or in court.
7. TRANSFER OF PERSONAL DATA TO THIRD PARTIES
7.1. Aurega LLC does not transfer Users’ personal data to third parties without the consent of the data subject, except in cases expressly provided for by the legislation of the Republic of Uzbekistan (for example, upon an official request of authorized state bodies).
7.2. Cross-border transfer of personal data to the territory of foreign states is carried out by the Company in strict accordance with Article 28 of the Law of the Republic of Uzbekistan “On Personal Data”.
8. FINAL PROVISIONS
8.1. The User may obtain any clarification on questions concerning the processing of his or her personal data by contacting the Company through official communication channels or by e-mail of Aurega LLC.
8.2. This Policy is valid indefinitely until replaced by a new version. The current version of the Policy is always available on the Company’s website.