Privacy policy

1. The personal data operator

The operator that determines the purposes and the content of the processing of personal data is the legal entity whose details are given below. The operator processes personal data within the territory of the Republic of Uzbekistan.

Personal data of citizens of the Republic of Uzbekistan is processed using the technical facilities of personal data databases located physically within the territory of the Republic of Uzbekistan, as required by article 27-1 of the Law “On Personal Data”.

2. What data we process

The operator processes only the data that the subject provides voluntarily or that is generated automatically when the site is visited.

• Data from the contact forms and demo requests: name, company name, telephone number, email address, the product of interest and the text of the comment.
• Correspondence data: the content of enquiries sent to the corporate email address or through the site’s forms, and the replies to them.
• Technical data: IP address, browser type and version, operating system, interface language, referring page, the date and time of the visit, cookie data and web analytics counters.

The operator does not request and does not deliberately collect special categories of personal data (information about racial or ethnic origin, political views, religious beliefs, state of health or private life), nor the biometric personal data of visitors to the site.

If such information is provided by the subject on their own initiative in the text of an enquiry, it is deleted once the enquiry has been dealt with.

3. Purposes of processing

• Handling enquiries, applications and requests sent through the site, and replying to the person who sent them.
• Preparing and running product demonstrations, calculating terms and preparing a commercial proposal.
• Concluding, performing and administering contracts with the organisations the subject represents.
• Sending informational and marketing messages — only where separate consent has been given, and with the option to opt out at any time.
• Analysing site traffic and availability, and improving its content and structure.
• Fulfilling the obligations placed on the operator by the legislation of the Republic of Uzbekistan.

4. Legal grounds for processing

Personal data is processed on the basis of the consent of the data subject, expressed through a specific action: completing and submitting a form on the site with confirmation that this Policy has been read, or sending an enquiry to the operator’s corporate email address.

Processing may also be carried out in order to conclude and perform a contract to which the subject is a party or a beneficiary, and to fulfil the operator’s obligations provided for by law.

Consent is specific, informed and conscious. The subject has the right to withdraw it at any time in the manner set out in section 9 of this Policy.

5. Methods of processing and disclosure to third parties

Processing is carried out both by automated and by non-automated means and includes the collection, organisation, storage, correction, use, anonymisation, blocking, deletion and destruction of data.

The operator does not sell personal data and does not pass it to third parties for marketing purposes.

• Data may be disclosed to providers of communications, hosting and email services — to the extent necessary for the operation of the site and the corporate email, under contracts that impose a duty of confidentiality.
• Data may be disclosed to state bodies of the Republic of Uzbekistan — on a reasoned request, in the cases and in the manner provided for by law.
• Cross-border transfer of personal data is carried out only to states that ensure an adequate level of protection of subjects’ rights, and only where there are grounds provided for by the Law “On Personal Data”.

6. Retention periods

• Data from enquiries and applications is kept until the purpose of processing has been achieved, but for no longer than three years from the date of the last interaction with the subject.
• Data relating to concluded contracts is kept for the term of the contract and thereafter for the periods set by accounting and archiving legislation.
• Data processed on the basis of consent to receive informational messages is kept until that consent is withdrawn.
• Technical web analytics data is kept in anonymised form for the periods set by the analytics services used.

Once the retention period expires or the purpose of processing has been achieved, the data is destroyed or anonymised.

7. Cookies and web analytics

The site uses cookies — small text files that the browser saves on the visitor’s device. Technically necessary cookies keep the site working: they remember the chosen language and the response to the cookie notice.

Web analytics services may be used to count visits and analyse visitor behaviour. These services process anonymised technical data and do not allow the operator to identify a visitor.

A visitor may block the storage of cookies in their browser settings or delete files saved earlier. Disabling technically necessary cookies may mean that some functions of the site do not work fully.

8. Protection measures

The operator takes legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, disclosure and distribution.

• Separation of access rights: only those employees who need personal data in order to perform their duties are given access to it.
• Encryption of the connection between the visitor’s browser and the site over HTTPS.
• Keeping access logs for information systems and reviewing those logs regularly.
• Backups and integrity checks on the data.
• Non-disclosure undertakings for employees and contractors who have access to personal data.

9. Rights of the data subject

Under the Law “On Personal Data” the subject has the right to:

• obtain information about which of their data is processed, by whom and for what purpose;
• require their personal data to be corrected, blocked or destroyed if it is incomplete, out of date, inaccurate, obtained unlawfully or not necessary for the stated purpose;
• withdraw consent to processing given earlier;
• object to the processing of data for the promotion of products and services;
• appeal against the operator’s acts or omissions to the authorised state body for the protection of personal data or to a court.

A request should be sent to the operator’s email address given below, stating the surname, the first name and information that makes it possible to identify the subject and their enquiry. A reply is provided within the period set by law, and in any case no later than thirty days from the day the request is received.

Withdrawal of consent does not extend to processing carried out on other lawful grounds, in particular to perform a concluded contract or the operator’s obligations established by law.

10. Data of minors

The site is intended for representatives of organisations and is not designed for minors. The operator does not knowingly collect the personal data of people under the age of eighteen.

If it becomes known that such data has been obtained without the consent of a legal representative, it will be deleted.

11. Changes to the Policy

The operator may amend this Policy. A new version takes effect from the moment it is published on the site, unless the version itself states a different date. The date of the latest version is given at the start of the document.

Material changes that affect subjects’ rights are additionally communicated to the people concerned — through the site or using the contact details the subject has provided.

12. Contacting the operator

Please send questions about the processing of personal data, requests and withdrawals of consent to the details below.