Ссылка на старый сайт

Chapter 1. Basic provisions

1. The Privacy Policy (hereinafter referred to as the Policy) is based on the legislation of the Republic of Kazakhstan «On Personal data and their protection». The Policy regulates the procedure for collecting, processing and storing personal data of personal data subjects in the process of external interaction with individuals and providing services to users of the services of the RSE » National payment corporation of the National Bank of the Republic of Kazakhstan» (hereinafter – NPC) in the NPC systems. The current version of the Policy is posted on the official Internet resource of the NPC.

2. Any provisions of the Policy that become prohibited or invalid in accordance with the legislation of the Republic of Kazakhstan and other applicable legislation do not affect the validity or enforceability of the remaining provisions of the Policy.

Chapter 2. Basic terms and definitions

3. The following terms and definitions are used in the Policy:

3.1. Official Internet resource – the Internet resource of the NPC located on the Internet at https://paycorp.kz ;

3.2. Service user – a legal entity using the services of the NPC;

3.3. personal data subject (hereinafter referred to as the subject) – an individual to whom personal data relate;

3.4. personal data – information related to a certain or determined on their basis subject of personal data, recorded on electronic, paper and (or) other material media;

3.5. identification is a set of measures to establish information about the subject determined by the legislation of the Republic of Kazakhstan and confirm the reliability of this information.

Chapter 3. Collection, processing and storage of personal data

4. By transferring the personal data of the subject to the NPC, the subject of personal data, the user of the services confirms the consent of the personal data subject to the use of the specified data in the interaction of the NPC and the user of the services on the terms set out in the Policy.

5. The user of the services, at the request of the NPC, provides documentary confirmation of the existence of the consents collected from the subjects of personal data for the collection and processing of personal data, and for the transfer of personal data to third parties.

6, In the process of providing services, the NPC collects, processes and stores only those personal data of subjects that are necessary for the provision of services to the NPC.

7. Personal data may be used for the purposes of:

  • provision of services to users (including identification of the subject of personal data, issuance of registration certificates, etc.);
  • interaction of the NPC with the subjects of personal data, including receiving and sending information and requests to the subject.

8. The list of personal data collected, processed and stored by the NPC depends on the specifics of the services provided and (or) the nature of interaction with the subject of personal data and is limited to a sufficient and necessary volume.

9. With respect to the subject’s personal data, their confidentiality is maintained, except in cases when the specified data is publicly available.

10. NPC has the right to transfer personal data without the consent of the personal data subject in cases provided for by the current legislation of the Republic of Kazakhstan.

11. The NPC ensures the verification of production technological processes and procedures before their use for the collection, processing and storage of personal data.

12. NPC protects personal data in accordance with the legislation of the Republic of Kazakhstan.

13. Employees of the NPC who become aware of personal data in connection with the performance of official duties, ensure their confidentiality.

14. Cross-border transfer of personal data to the territory of foreign states is carried out only if these states ensure the protection of personal data.

15. In case of detection of the fact of leakage of personal data, the NPC notifies the users of the services by sending a message within 24 hours.

Chapter 4. Other provisions

16. All disputes arising in relation to the collection, processing and storage of personal data in the NPC are subject to resolution in accordance with the current legislation of the Republic of Kazakhstan.

17. The NPC has the right to change the Policy (in whole or in part) unilaterally without prior approval. All changes to the Policy should not contradict the legislation of the Republic of Kazakhstan and come into force from the moment it is posted on the official Internet resource.

18. Users and subjects of personal data interacting with the NPC can get acquainted with the current version of the Policy posted on the official Internet resource.

19. All suggestions and/or questions about the Policy should be reported by e-mail info@kisc.kz

Privacy policy