1. General provisions
This personal data processing policy describes the procedure for processing personal data and
the measures used to protect personal data on https://www.prostobox.com/kz (LLC Pochtoy), hereinafter
referred to as the Operator.
The Operator's main goal and condition for its activities is respect for human and civil rights
and freedoms when processing personal data, including protection of privacy, personal, and family
secrets.
This policy applies to all information that the Operator may receive about visitors of
https://www.prostobox.com/kz.
2. Key terms
Automated personal data processing means processing personal data using computing equipment.
Blocking personal data means temporarily stopping personal data processing, except when processing is needed to clarify personal data.
Website means a collection of graphic and information materials, software, and databases available
on the internet at https://www.prostobox.com/kz.
Personal data information system means databases containing personal data and the technologies and technical means used to process them.
Depersonalization of personal data means actions that make it impossible to identify a specific user or data subject without additional information.
Personal data processing means any action or set of actions performed with or without automation,
including collection, recording, systematization, accumulation, storage, clarification, retrieval,
use, transfer, depersonalization, blocking, deletion, and destruction of personal data.
Operator means a person or organization that arranges or performs personal data processing and determines processing purposes, data scope, and actions performed with personal data.
Personal data means any information relating directly or indirectly to an identified or identifiable
user of https://www.prostobox.com/kz.
User means any visitor of https://www.prostobox.com/kz.
Provision of personal data means actions aimed at disclosing personal data to a specific person or group of persons.
Distribution of personal data means actions aimed at disclosing personal data to an indefinite group of persons or making personal data available to the public.
Cross-border transfer of personal data means transfer of personal data to a foreign state, foreign authority, foreign individual, or foreign legal entity.
Destruction of personal data means actions after which personal data cannot be restored in the personal data information system or on physical media.
3. Personal data that may be processed
Last name, first name, and middle name.
Email address.
Phone numbers.
Year, month, date, and place of birth.
Identity document details.
Taxpayer identification number, registration date, and tax registration certificate details.
Residential and registration address.
The website also collects and processes depersonalized visitor data, including cookie files, using
web analytics services such as Yandex Metrica, Google Analytics, and others.
The data listed above is referred to in this Policy as Personal Data.
4. Purposes of personal data processing
The purposes of processing the User's personal data are sending email notifications, concluding,
performing, and terminating civil-law agreements, and providing the User with access to services,
information, and materials available on https://www.prostobox.com/kz.
The Operator may also send notifications about new products and services, special offers, and
events. The User may unsubscribe using the unsubscribe button in each email or by sending a message
to info@prostobox.com with an unsubscribe request.
Depersonalized user data collected through analytics services is used to gather information about
user actions on the website and to improve website quality and content.
5. Legal grounds for personal data processing
The Operator processes the User's personal data only if the User fills it in and sends it through
special forms on https://www.prostobox.com/kz. By filling in forms or
sending personal data to the Operator, the User agrees to this Policy.
The Operator processes depersonalized user data if the User's browser settings allow cookies and
JavaScript technology.
6. Collection, storage, transfer, and other processing of personal data
Personal data security is ensured by legal, organizational, and technical measures required for
compliance with applicable personal data protection requirements.
The Operator protects personal data and takes all possible measures to prevent access by unauthorized
persons.
The User's personal data is not transferred to third parties except in cases connected with compliance
with applicable law.
If inaccuracies are found in personal data, the User may update it by sending a notice to
info@prostobox.com with the subject "Personal data update".
The processing period is not limited. The User may withdraw consent to personal data processing at
any time by sending a notice to info@prostobox.com with
the subject "Withdrawal of consent to personal data processing".
7. Cross-border transfer of personal data
Before performing a cross-border transfer of personal data, the Operator must make sure that the
foreign state receiving the data provides reliable protection of personal data subjects' rights.
Cross-border transfer to foreign states that do not meet those requirements may be carried out only
with written consent of the personal data subject or for performance of an agreement to which the
personal data subject is a party.
8. Final provisions
The User may receive clarification on personal data processing questions by contacting the Operator
at info@prostobox.com.
Any changes to this personal data processing policy will be reflected in this document. The Policy
remains valid until replaced by a new version.
The current version of the Policy is freely available on the internet at
https://www.prostobox.com/kz/policy.
