Agreement on the confidentiality of personal data according to the legislation of the Republic of Kazakhstan

(Consent to the collection, processing and storage of personal data)

This agreement on the confidentiality of personal data is the Buyer's consent to the collection, processing, storage and cross-border transfer of his personal data in accordance with the Law of the Republic of Kazakhstan "On personal data and their protection" on the terms specified in this Agreement and governs the relationship between the Buyer and the Company related to with the personal data of the buyer.

1. Definition of terms
1.1. Personal data - information related to a certain or determined on the basis of the Buyer, recorded on electronic, paper and (or) other tangible media, including information specified in clause 2.3. Agreements
1.2. Collection of personal data - actions aimed at obtaining personal data.
1.3. Processing of personal data - actions aimed at the accumulation, storage, modification, addition, use, distribution, depersonalization, blocking and destruction of personal data.
1.4. Buyer - a person who has made or plans to make a purchase in offline stores or the Company's online store (hereinafter referred to as the stores) and provided his personal data to the Company, including by transferring them personally, via the Internet, by registering in the bonus program or when ordering any - or services from the Company, as well as in other ways.
1.5. The company is Eve & Esther LLP (Eve Esther), contact phone 8 985 266 02 76.

2. Subject of the agreement
2.1. This agreement defines the rights and obligations of the Buyer and the Company for the provision, collection, processing, storage and protection of personal data and the purpose of using personal data.
2.2. Personal data is provided by the Buyer when contacting the Company in writing or orally in offline stores or an online store (hereinafter referred to as stores), the call center of the Company, by sending written, electronic or SMS messages, filling in information about himself on the web resources of the Company or their Partners, when registration of services in stores, including the delivery of goods, when registering in the Company's bonus system.
2.3. The Buyer hereby consents to the collection, processing and storage of the following personal data: last name, first name, patronymic, gender, date of birth, mobile and / or home phone numbers, email address, postal address, information about the history of purchases, including names purchased goods/services and their cost, accumulated Bonuses, as well as information about interests based on data about the Buyer's behavior on the Internet, in the networks of telecommunications and Internet operators, network and / or coalition (with the participation of partner companies) loyalty programs, as well as biometric data, including his photo and video images received as a result of CCTV camera recordings on the territory of stores, voice (hereinafter referred to as personal data), cookies, Geolocation data, IP address, MAC address, Social network accounts, as well as other information provided by the Buyer.
2.4. By participating in the bonus program, by issuing a delivery service, by registering in the online store, by contacting the Company's contact center, as well as in other cases specified in this agreement, when the buyer provides the Company with his personal data, the Buyer gives his consent to the Company for the right to use (collect , processing, storage, cross-border transfer, etc.) of their personal data for the purposes specified in this agreement.
2.5. This agreement is considered concluded from the date of the Buyer's request, in accordance with clause 2.3. Agreement and is valid until the Buyer revokes his consent to the collection and processing of personal data.
2.6. The Buyer hereby confirms that if it is necessary to provide personal data to achieve the goals specified in clause 3.1 of this Agreement to third parties (counterparties, courier and postal services, delivery services, banks, etc.), the Company has the right, at its own discretion (without additional approval) to the extent necessary to provide for the performance specified in clause 3.1. Agreement of action personal data, as well as provide such persons with relevant documents/information containing this information.
2.7. The Buyer acknowledges, agrees and confirms that this consent expressed in this Agreement is considered to be given to any third parties specified above and any such third parties have the right to collect, process the received personal data to achieve the specified goals in any specified way in accordance with this Agreement .

3. Purposes of collecting and processing personal data of Buyers
3.1. The Buyer's personal data is used for the following purposes: 1) identification of the Buyer for placing an order and / or concluding a contract for the sale of goods; 2) processing and receiving payments from the Buyer; 3) for the possibility of selling goods on credit or in installments; 4) delivery of advertising and / or informational messages, service, congratulatory messages, distribution of information about ongoing promotions, drawings, events, etc. both from the Company and from third parties acting on behalf of the Company (both verbally and using any means of communication) through any communication channels, including SMS, E-mail, telegram bot, telephone, other means of communication (including through open communication channels) - by any means at the choice of the Company); 5) conducting marketing and/or statistical research; 5) conducting marketing and/or statistical research; 6) judicial/out-of-court protection of the Company's rights (in case of violation of obligations/disputes, including with the participation of third parties); 7) delivery of goods to the Buyer; 8) providing the Buyer with effective customer support; 9) providing the Buyer with personalized services (discounts, bonuses, gifts, etc.) based on customer data; 10) holding drawings and competitions; 11) communication with the Buyer, including sending notifications, requests and information regarding the use of the Services, the provision of services, as well as processing requests and applications from the Buyer; 12) improving the quality of the Services, the convenience of their use, the development of new Services and services; 13) protection of their rights and interests, including in the judiciary or pre-trial procedure; 14) audit, examination, analytics and other actions carried out by lawyers, auditors and other persons; 15) Development and proposal of new products and services; 16) provision of fiscal reporting to state bodies, collection of receivables; 17) for other purposes that are established (may be established) by the legislation of the Republic of Kazakhstan, foreign states, international legislation, internal documents of the Company, and for the achievement of which the processing and collection of personal data is necessary.

4. Rights and obligations of the parties
4.1. The company has the right to collect, record, systematize, accumulate, store, clarify, update, modify, retrieve, use, transfer, including cross-border transfer to its counterparties, auditors, lawyers, experts, agents and other persons, including entrusting the processing of personal data to third parties , depersonalize, block, delete, destroy personal data. The Company has the right to record telephone calls in order to update information.
4.2. The Company guarantees the use of the Buyer's personal data only for the purposes specified in this Agreement.
4.3. In the event that the Buyer provides and / or indicates in any documents the Buyer of the Company personal data of third parties, the Buyer declares and guarantees that he has received from them duly executed consents to the disclosure / transfer of their personal data to the Company and to the collection and processing of this personal data by the Company / third parties in accordance with the provisions of the current legislation of the Republic of Kazakhstan for the purposes and methods specified in this Agreement, and also undertakes to notify such persons of the right of the Company / third parties to collect and process their personal data in the manner and on the terms in accordance with the current legislation of the Republic of Kazakhstan and this Agreement.
4.4. The Buyer hereby confirms that he has been notified by the Company that the processing of personal data is carried out using the following main methods (but not limited to them): using automation tools, including the use of information technology and technical means, including computer equipment, information - technical complexes and networks, means and systems for transmitting, receiving and processing personal data, software tools (operating systems, database management systems, etc.), information security tools used in information systems, as well as without the use of automation tools ( including on paper).
4.5. The buyer has the right to change, supplement his personal data in the ways specified in clause 2.4. Agreements.
4.6. The Company is obliged to take measures to ensure the safety and confidentiality of personal data.
4.7. The Company does not check the accuracy and relevance of the personal data provided by the Buyer and is not responsible for their invalidity and irrelevance.
4.8. The buyer has the right to withdraw his consent to the collection, processing of personal data in cases where this is contrary to the laws of the Republic of Kazakhstan or in the presence of an unfulfilled obligation by sending a written request.
4.9. The buyer is responsible for the accuracy of the information provided by him. The Company is not obliged to verify the information about buyers provided under the Agreement. The Company is responsible for the collection, processing and storage of personal data in accordance with the current legislation of the Republic of Kazakhstan.