Tarot of Truth

PRIVACY POLICY

This Data Privacy Policy (hereinafter referred to as the Privacy Policy) applies to the data JSC “Bank CenterCredit” (BIN 980 640 000 093, Almaty, Al-Farabi Ave. 38) may obtain using the Website located on the Internet at the domain name: https://tarolog.me. The Company processes the data of the Website users exclusively within the framework of the requirements of the Legislation of the Republic of Kazakhstan, including the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On personal data and its protection", as well as international treaties ratified by the Republic of Kazakhstan. This Privacy Policy (hereinafter referred to as the Privacy Policy) has been developed in accordance with their standards.

By using the Website the User agrees to comply with the Privacy Policy and the terms of data processing. In case of disagreement with the terms of the Privacy Policy, the User must stop using the Website. This Policy is intended to ensure proper data protection, including User`s personal data, from unauthorized access and disclosure.

The Policy, as well as other official documentation of the Website and the current legislation of the Republic of Kazakhstan, regulates collection, storage, distribution and protection of the User`s data. In the event of a contradiction between this Policy and other official documents of the Website, this Policy shall prevail.
The Users should be aware that clicking on certain links posted on the Website may redirect them to websites (applications, etc.) of other companies outside the hosting space of JSC “Bank CenterCredit” (like Facebook, Google+, VKontakte), where the Users` data is collected outside the direct control of JSC “Bank CenterCredit” and the Website Administration. In this case, the data received by such websites and/or applications will be subject to regulation under the Privacy Policies of the said third parties. JSC “Bank CenterCredit” and the Website Administration are not responsible for the data transferred by the User to third parties.
If the User decides to log in to the Website using the authentication service of a third-party operator, for example Facebook, the Company may receive their profile or other information, access to which is permitted by the User in the third-party operator's account for provision to third parties.

1. DEFINITIONS

1.1. The Privacy Policy is using the following definitions:

1.1.1. "Website Administration" — authorized employees acting on behalf of JSC “Bank CenterCredit”, who organize and (or) carry out the Processing of confidential data as well as determine the purposes of its processing, classification of such data and actions (operations) performed with confidential data.

1.1.2. Confidential data — data left by the User of the Website in the feedback and service request forms, Cookies, as well as data automatically transmitted during the use of the Website, including, but not limited to: IP address, information about the device from which access is carried out, etc.

1.1.3. "Personal data" — information belonging to an identified individual or an individual identifiable by means of the said data, recorded on electronic, paper and (or) other tangible media.

1.1.4. "Personal data processing" — any action (operation) or set of actions (operations) performed on personal data with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.

1.1.5. "Confidentiality of personal data" — a mandatory requirement for the Operator or other person with access to personal data not to allow its distribution without the consent of a data subject or the presence of another legal basis.

1.1.6. "User" of the website: https://tarolog.me — a person who has access to and uses the Website via the Internet.

1.1.7. "Website" — the website located on the Internet at the domain address https://tarolog.me.

1.1.8. "Cookies" — a small piece of data sent by the web server and stored on the User's computer, which the web client or web browser sends to the web server in an HTTP request each time an attempt is made to open a page of the corresponding website.

1.1.9. "IP address" — a unique network address of a device created using the Internet Protocol.

2. SUBJECT MATTER OF PRIVACY POLICY

2.1. This Privacy Policy sets forth the obligations of the Website Administration to ensure the non-disclosure and protection of the data provided by the User to the Website Administration when using the Website, including when an application for connection is being submitted.

2.2. Confidential data permitted for Processing within the framework of the Privacy Policy is provided by the User by filling out the registration form (an example is provided below), feedback forms and include - User Name (at the discretion of the User), phone number, mail (e-mail address) of the Legal Entity. If case of the User`s personal data being filled into in the application form instead of the contact details of the Legal Entity, the Company ensures the protection of said data in accordance with the requirements of the Legislation of the Republic of Kazakhstan on personal data.

2.3. In addition to the registration forms, the Website may use various web analytics systems. The data automatically transmitted when watching advertising blocks and visiting the pages of the Website is protected by the Website and includes:

IP address;
information from Cookies;
information about the browser (or other program that enables showing advertisements);
operating system;
access time, time zone/region;
Website page address.

2.3. 1. Disabling Cookies may result in the inability to access some sections of the Website.

2.3.2. The Website Administration may collect statistics regarding the data specified in paragraph 2.3. of the Privacy Policy. This information is used to identify and resolve technical problems and to combat fraud.

2.3.3. The data is subject to secure storage and non-disclosure, except for cases stipulated by the Privacy Policy and the legislation of the Republic of Kazakhstan.

2.3.5. The Company and the Website Administration have the right to provide the Users' information to their affiliated persons (including those operating outside the territory of the Republic of Kazakhstan), as well as other companies associated with the Company for the purposes specified above. At the same time, affiliated persons, as well as companies associated with it, are obliged to comply with the provisions of this Policy.

2.3.6. The Company does not provide the User's data to legal entities and individuals not associated with the Company, except for the cases listed below:

• The User has given their consent to it;

• On the grounds and in the procedure prescribed by the legislation of the Republic of Kazakhstan, including for the purpose of:

– abiding by court decisions or fulfilling the legal requests of governmental agencies;

– eliminating technical failures or security issues;

– protection rights, property or safety of the Company and the users of the Company Services within the limits permitted by the current legislation.

3. PROCEDURE OF PRIVACY POLICY AND AMENDMENTS TO IT

3.1. The Policy shall enter into force for an unlimited period from the moment of its approval by the Company. The current Policy shall be deemed invalid after its replacement by a new Policy. The Policy shall be replaced by publishing its new version on the Website.

3.2. The current version of the Policy is available to any Internet user by clicking on the link https://tarolog.me/privacy.
The Website Administration has the right to make changes to the Policy that do not contradict the legislation of the Republic of Kazakhstan. Posting a new version of the Policy on the Website after its approval shall amount to notification to the Users of the changes made to the Policy.

4. TERMS AND PURPOSES OF PROCESSING CONFIDENTIAL DATA

4.1. The Website Administration processes the User's confidential data for the following purposes:

- reviewing the User's application for providing a legal entity/individual entrepreneur with the services offered by JSC “Bank CenterCredit”, as well as communication in order to collect the necessary documents and data to conclude a relevant agreement with JSC “Bank CenterCredit” and (or) its partners, consulting on the provided services, informing about current and new products of JSC “Bank CenterCredit” and its partners.

- technical management of the Website, as well as for analyzing and improving its operation.

5. METHODS AND TERMS OF PROCESSING CONFIDENTIAL DATA

5.1. The User's data is processed for an unlimited duration by any legal means, including within personal data information systems with or without the use of automation tools.

5.2. The User agrees to the processing of confidential data for an unlimited duration.

5.3. The User's data may be transferred to authorized state authorities of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan.

5.4. The Website Administration is obliged to take the necessary organizational and technical measures to ensure the confidentiality, integrity, safety and availability of the Users' confidential data, as well as to comply with other data processing requirements established by the legislation of the Republic of Kazakhstan.

5.5. In the event of loss or disclosure of confidential data, the Website Administration informs the User of the loss or disclosure of their data.

5.6. The Website Administration, along with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's confidential data.

6. OBLIGATIONS OF THE PARTIES

6.1. The User is obliged to:

6.1.1. Provide up-to-date data requested by the Website at the time of its use.

6.1.2. Update the provided data in case any changes take place.

6.1.3. Obtain in advance all necessary consents from third parties in case of providing their data to the Website Administration.

6.2. The Site Administration is obliged to:

6.2.1. Use the received confidential data exclusively for the purposes specified in Section 4 of the Privacy Policy.

6.2.2. Ensure the safe storage of confidential information, disclose it only with the User`s written permission, obtained in advance, and never sell, exchange, publish, or disclose confidential data in any other possible way, except for cases stipulated by the Privacy Policy, concluded agreements with clients, and the legislation of the Republic of Kazakhstan.

6.2.3. Take precautions to protect the confidentiality of the User's data in accordance with the procedure usually used to protect such information within the existing business practices and in accordance with the requirements of the legislation of the Republic of Kazakhstan.

7. LIABILITY OF THE PARTIES

7.1. The Website Administration, shall it fail to fulfill its obligations, is liable for damages incurred by the User in connection with the illegal use of confidential data, in accordance with the legislation of the Republic of Kazakhstan, except for the cases stipulated in paragraph 7.2. of this Privacy Policy.

7.2. In the event of loss or disclosure of Confidential information, the Website Administration shall not be liable for it in the following cases when this confidential information:

7.2.1. Became publicly known prior to its loss or disclosure.

7.2.2. Was received from a third party prior to its receipt by the Website Administration.

7.2.3. Was disclosed with the consent of the User.

7.3. The User shall fully compensate JSC “Bank CenterCredit” for damages shall third parties, including government agencies, bring claims or lawsuits against JSC “Bank CenterCredit” regarding the Processing of Personal Data transferred by the User to the Website Administration without the consent of the personal data subject, the Processing of inaccurate/distorted/outdated Personal Data due to the fault of the User.

8. DISPUTE RESOLUTION

8.1. Shall any dispute arise from the relationship between the User of the https://tarolog.me Website and the Website Administration, it is mandatory for the User to file a claim (a written proposal for voluntary settlement of the dispute) prior to taking a legal action.

8.2. The recipient of the claim, within 30 (Thirty) calendar days from the date of the claim receipt, shall notify the claimant in writing of the results of the claim consideration.

8.3. If no agreement is reached, the dispute will be referred to a judicial authority in accordance with the current legislation of the Republic of Kazakhstan.

8.4. The current legislation of the Republic of Kazakhstan shall apply to this Privacy Policy and the relationship between the User and the website Administration.

9. OTHER CONDITIONS

9.1. The processing of personal data is carried out from the moment of conclusion of contracts between JSC “Bank CenterCredit” and clients and is regulated by the terms of these contracts.

9.2. The User/subject of personal data may at any time revoke consent to the Processing of Personal Data by sending a written application to JSC “Bank CenterCredit” at the address: Almaty, Al-Farabi Ave. 38. In this case, the Website Administration may continue to process Personal Data without the consent of the User/subject of Personal Data in cases established by the legislation of the Republic of Kazakhstan.

9.3. The User/subject of personal data has the right to exercise their rights stipulated by Chapter 4 of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On personal data and their protection", including receiving information regarding the Processing of personal data, requesting clarification, blocking or destruction of their Personal data in cases stipulated by law, and taking measures to protect their rights. Shall such a necessity arise, the User is to contact the Company in writing at the address specified in paragraph 9.2. of the Privacy Policy.

9.4. This Privacy Policy and the relationship between the User and the Website Administration arising in connection with the application of the Privacy Policy are subject to the law of the Republic of Kazakhstan.

9.5. The Operator has the right to make changes to this Privacy Policy without the consent of the User.

9.6. The new Privacy Policy comes into force from the moment it is posted on the website https://tarolog.me, unless otherwise provided by the new version of the Privacy Policy.

9.7. The User undertakes to independently monitor changes to the Privacy Policy by reviewing the current version.

9.8. All suggestions or questions regarding this Privacy Policy should be communicated by sending an application using the Website.

9.9. The Privacy Policy is posted at https://tarolog.me/privacy.