Privacy Policy

Private Limited Company «Trading company «Parallel» (hereinafter referred to as the "Seller") uses your personal data for providing access to the Website (hereinafter referred to as the "Website" or the "Store") and the provision of services in accordance with the Public Offer, posted on the website https://elfieshop.com/politic. Unless otherwise specified in this Policy, the terms used in this Policy have the same meanings as in the Public Offer.

TERMS AND DEFINITIONS

Personal data – any information related directly or indirectly to an identified or identifiable individual (personal data subject).
Personal data processing – any action (operation) or a series of actions (operations) conducted with personal data with or without the use of automation facilities, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion, destruction of personal data.

User data – data that is automatically collected or generated using the Website, for example, the duration of visits to the pages of the Website.

HTTP cookies – small blocks of data placed on the User's computer.
Data operator – a person who determines the purposes and means of processing personal data. For the purposes of this Policy, we are the Operator of your data.
Personal data subject – an individual, who is directly or indirectly identified or identifiable through personal data.

User – a person who uses our Website, including for ordering. The User is the Personal data subject.

INTRODUCTION

1.1. This Policy defines personal data processing policy of Private Limited Company "Trading company "Parallel" about personal data processing and applies to all information that the Store can receive during the User's use of the Website, registration and execution of the order. The registration of the order means the User's full and unconditional consent to the User Agreement and to this Policy and the conditions for personal data processing specified therein. In case of disagreement with these terms, the User undertakes not to use the Website and refrain from placing an order. This policy shall apply to all processes on collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion, destruction of personal data, with or without the use of automation facilities.

1.2. This Policy has been developed in accordance with the current legislation of the Republic of Kazakhstan, as well as the requirements of the General Data Protection Regulation of the European Union.

PERSONAL DATA OF USERS

2.1. Personal data of Users means:

2.1.1. Data, including personal data, that the User provided about himself/herself when placing an order, or during its execution, as well as during the use of the Website.

2.1.2. Data that is automatically transmitted to the Seller during the use of the Website, including IP address, HTTP cookies, information about the User's browser (or other program that accesses the Site), technical characteristics of the hardware and software used by the User, date and time of access to the Website, addresses of the requested pages and other information.

2.1.3. Other information about the User, the processing of which is provided by the terms of the services provided by the Seller.

2.1.4. Personal data may include, but is not limited to:

Last name, First name, Patronymic;

Contact phone number;

Address for order delivery;

Email address;

HTTP cookies and user data.

2.2. The Seller assumes that the User provides reliable and sufficient personal data.

2.3. The Seller has the right to make changes to this Policy. The new version of the Policy takes effect from the moment it is posted. The current version of the Policy is available on the page: https://elfieshop.com/politic. The Seller recommends to review this Policy to inform about any changes. Changes to this Policy takes effect at the time of publication on this page.

2.4. The Seller uses HTTP cookies and similar activity tracking technologies. HTTP cookies are sent to the User's browser from the Website and stored on the User's device. Activity tracking technologies that are also used are web beacons, tags and scripts to collect and track information, as well as to improve the performance of the Website.

You can set your browser settings and refuse all HTTP cookies or specify when HTTP cookies are sent. However, if you refused to accept HTTP cookies, the Website may not be available to you.

2.5. Examples of HTTP cookies used by the Seller:

2.5.1 Session HTTP cookies that we use to manage the Website;

2.5.2. Personal HTTP cookies that are used to remember preferences and various settings;

2.5.3. Security HTTP cookies that are used to ensure the security of the use of the Website.

PURPOSE OF PERSONAL DATA PROCESSING

3.1. The Seller stores only those personal data that are necessary to provide services to the User, according to the terms of the Public Offer posted on the Internet at: https://elfieshop.com/politic.

3.2. The list of actions with personal data, to which the User gives consent:

Receipt and Storage of personal data (in electronic form and on paper);

Clarification (update, change) personal data;

Use of personal data for the performance of this Agreement;

Transfer of the User's personal data in accordance with the procedure provided for by the legislation of the Republic of Kazakhstan;

For the purposes of mailing catalogs, for marketing and other commercial purposes. The User has the right to refuse to receive such messages by following the unsubscribe link or the instructions provided by the Seller upon receipt of the relevant request;

To communicate with the User, including sending notifications, requests, and information regarding the use of the Website, the execution of agreements and contracts, as well as processing orders and User requests;

For the transfer of personal data to any third parties on the territory of the Republic of Kazakhstan and the third countries for the purpose of fulfilling this Agreement;

Conducting statistical and other research based on depersonalized data;

Improving the quality of the Website and services provided by the Seller.

PRINCIPLES OF PERSONAL DATA PROCESSING

4.1. Personal data shall be processed according to the following principles:

4.1.1. Personal data shall be processed on legitimate and equitable basis;

4.1.2. Personal data processing shall be limited to achievement of specific predefined legitimate objectives. No personal data processing shall be allowed, which is inconsistent with objectives of personal data collection;

4.1.3. No integration of databases shall be allowed, which contain personal data processed for the purposes, which are inconsistent with each other;

4.1.4. Only that personal data shall be subject to processing, which meets the purposes of processing;

4.1.5. Content and volume of personal data processed shall meet the declared purposes of processing. The processed personal data shall not be redundant in relation to the declared purposes of processing;

4.1.6. While personal data processing accuracy and sufficiency of personal data shall be ensured, as well as its relevancy, as necessary, with regard to the declared purposes of processing;

4.1.7. Personal data shall be stored in the form allowing to identify a personal data subject.

CONDITIONS FOR THE PROCESSING OF PERSONAL DATA

5.1. Personal data shall be processed in compliance with the guidelines and rules established by the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V «On Personal Data and their Protection». Personal data processing shall be allowed if there is at least one of the following cases:

Personal data shall be processed with consent of the personal data subject to his personal data processing;

Personal data processing is necessary for achievement of purposes provided for by international treaties to which the Republic of Kazakhstan is a signatory, or by law, for exercise and fulfilment of functions, authorities and responsibilities imposed on the operator by legislation of the Republic of Kazakhstan;

Personal data processing is necessary for administration of justice, enforcement of judicial acts, acts of any other government agency or officials, which are subject to enforcement in accordance with legislation of the Republic of Kazakhstan on enforcement proceedings;

Personal data processing is necessary for performance of an agreement a party, a beneficiary or a surety to which the personal data subject is, and for execution of an agreement at the initiative of the personal data subject or an agreement under which the personal data subject shall be a beneficiary or a surety;

Personal data processing is necessary for protection of life, health or other vital interests of the personal data subject, if it is impossible to secure consent of the personal data subject;

Personal data processing is necessary to implement rights and legitimate interests of the operator or third parties, or to achieve socially significant objectives, provided that no rights or freedoms of the personal data subject are violated;

Personal data shall be processed for statistical or other research purposes, subject to obligatory depersonalization of personal data. An exception is personal data processing for market promotion of products, works, services through direct contacts with potential consumers by use of communications facilities, and for political agitation;

Personal data shall be processed, access to which is granted to the general public by the personal data subject or at his request (hereinafter referred to as the “personal data made public by the personal data subject”);

Personal data shall be processed, which is subject to publication or compelling disclosure in accordance with the law of the Republic of Kazakhstan.

5.2. Biometric personal data is not processed by the Seller.

5.3. The adoption of decisions based solely on automated processing of personal data that generate legal consequences with respect to the subject of personal data or otherwise affect his rights and legitimate interests is not carried out.

5.4. If there is no necessity to obtain consent of the personal data subject to personal data processing in written form, the fact of free will provision of such data by the subject or his representative is recognized by the parties as the fact of providing personal data with the consent of the subject.

5.5. The Seller shall be entitled to assign personal data processing to any other person with consent of the personal data subject, unless otherwise provided for by the federal law, on the terms of an agreement concluded with such person (hereinafter referred to as the “operator’s assignment”). In this case, the Seller imposes an obligation on the person to comply with the personal data processing policies and guidelines provided for federal law. In the event that the Seller assigns personal data processing to any other person, the Seller shall be liable to the personal data subject for any actions of such person. A person processing personal data on behalf of the Seller shall be liable to the Seller. The Seller undertakes and obliges other persons who have gained access to personal data not to disclose to third parties and not to distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.

OBLIGATIONS OF THE PARTIES

6.1. Personal data shall be processed in compliance with the guidelines and rules established by the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and their Protection”. Personal data processing shall be allowed if there is at least one of the following cases:

Personal data shall be processed with consent of the personal data subject to his personal data processing;

Personal data processing is necessary for achievement of purposes provided for by international treaties to which the Republic of Kazakhstan is a signatory, or by law, for exercise and fulfilment of functions, authorities and responsibilities imposed on the operator by legislation of the Republic of Kazakhstan;

Personal data processing is necessary for administration of justice, enforcement of judicial acts, acts of any other government agency or officials, which are subject to enforcement in accordance with legislation of the Republic of Kazakhstan on enforcement proceedings;

Personal data processing is necessary for performance of an agreement a party, a beneficiary or a surety to which the personal data subject is, and for execution of an agreement at the initiative of the personal data subject or an agreement under which the personal data subject shall be a beneficiary or a surety;

Personal data processing is necessary for protection of life, health or other vital interests of the personal data subject, if it is impossible to secure consent of the personal data subject;

Personal data processing is necessary to implement rights and legitimate interests of the operator or third parties, or to achieve socially significant objectives, provided that no rights or freedoms of the personal data subject are violated;

Personal data shall be processed for statistical or other research purposes, subject to obligatory depersonalization of personal data. An exception is personal data processing for market promotion of products, works, services through direct contacts with potential consumers by use of communications facilities, and for political agitation;

Personal data shall be processed, access to which is granted to the general public by the personal data subject or at his request (hereinafter referred to as the “personal data made public by the personal data subject”);

Personal data shall be processed, which is subject to publication or compelling disclosure in accordance with the law of the Republic of Kazakhstan.

6.2. Biometric personal data is not processed by the Seller.

6.3. The adoption of decisions based solely on automated processing of personal data that generate legal consequences with respect to the subject of personal data or otherwise affect his rights and legitimate interests is not carried out.

6.4. If there is no necessity to obtain consent of the personal data subject to personal data processing in written form, the fact of free will provision of such data by the subject or his representative is recognized by the parties as the fact of providing personal data with the consent of the subject.

6.5. The Seller shall be entitled to assign personal data processing to any other person with consent of the personal data subject, unless otherwise provided for by the federal law, on the terms of an agreement concluded with such person (hereinafter referred to as the “operator’s assignment”). In this case, the Seller imposes an obligation on the person to comply with the personal data processing policies and guidelines provided for federal law. In the event that the Seller assigns personal data processing to any other person, the Seller shall be liable to the personal data subject for any actions of such person. A person processing personal data on behalf of the Seller shall be liable to the Seller. The Seller undertakes and obliges other persons who have gained access to personal data not to disclose to third parties and not to distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.

MEASURES TO ENSURE THE SECURITY OF PERSONAL DATA DURING THEIR PROCESSING

7.1. While processing personal data, the Seller shall assume required legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, disclosure, distribution, and from any other inappropriate actions in relation to personal data.

7.2. Personal data security shall be achieved in particular by the following means:

identification of security threats in relation to personal data while processing it in personal data information systems;

taking organizational and technical measures to ensure personal data security while processing it in personal data information systems required to meet the requirements to personal data protection, whose application provides the personal data protection levels established by the Government of the Republic of Kazakhstan;

use of information security tools that have passed the compliance assessment procedure in accordance with the established procedure;

evaluation of efficiency of the measures taken to ensure personal data security prior to putting the personal data information system into operation;

detection of facts of unauthorized access to personal data and taking measures;

saving all necessary evidence and data in case of unauthorized access to personal data;

recovery of personal data modified or deleted due to unauthorized access;

control over the employed personal data security measures and facilities and over the level of personal data information system security.

DATA PROCESSORS AND OTHER WEBSITES

8.1. The Seller may use third-party services and individuals to promote the Website (“Service Providers"), provide related services, or assist in analyzing the use of the Website. Such third parties may have access to the data only for the purpose of performing the specified tasks on our behalf and are obliged not to disclose or use the data for any other purposes.

8.2. The Seller may use remarketing services to advertise on the websites of third-party contractors after visiting our Website. In this way, HTTP cookies can be used to inform, optimize and serve advertisements based on past visits to the Website.

8.3. The Seller may use the services of third-party services to process payments. The Seller will not store or collect your payment card data. Such information is provided directly by a third-party payment service, and the use of such information is governed by the Policy of the relevant payment service.

8.4. The Seller can use the services of the mailing list service to send emails to users.

8.5. The Website may contain links to other sites that are not operated by the Seller and do not belong to the Seller. If the user clicks on a such link, then he gets to the site of a third party.

8.6. The Seller recommends that you always familiarize yourself with the Data Processing Policy of each site that you visit.

8.7. The Seller does not control and is not responsible for the content, data processing policy or actions of third-party sites or services.

SELLER'S REQUISITES

NAME: Limited Liability Company «Trading Company «Parallel»

LEGAL ADRESS: Republic of Kazakhstan, 010000, Nur-Sultan, Kabanbay Batyr avenue 13, apt. 1

BIN: 220640015946

BANK: JSC «Freedom Finance Kazakhstan»

BANK ACCOUNT: KZ58551Z127017107KZT

BIK: KSNVKZA

EMAIL: elfieshop@paralleltrade.ru