Privacy Policy
PRIVACY POLICY AGREEMENT
(for inbound and domestic tourism activities)
City: ____
«» _____ 20__
- General Provisions
This Privacy Policy Agreement (hereinafter referred to as the “Agreement”) is developed in accordance with the Constitution of the Republic of Kazakhstan, the Law of the Republic of Kazakhstan “On Personal Data Protection” dated May 21, 2013, No. 94-V, the Law of the Republic of Kazakhstan “On Tourist Activities” dated June 13, 2001, No. 211-II, and other regulatory legal acts of the Republic of Kazakhstan.
The purpose of the Agreement is to regulate relations between the Operator and the Data Subject within the framework of providing inbound and domestic tourism services.
- Terms and Definitions
The following terms are used in this Agreement:
Operator – a legal entity or individual entrepreneur providing tourism services and processing personal data.
Data Subject – an individual who provides their personal data for processing.
Personal Data – information related to an identified or identifiable Data Subject.
Processing of Personal Data – actions performed by the Operator with personal data, including collection, storage, use, transfer, and destruction.
- Legal Grounds for Personal Data Processing
3.1. The Operator processes personal data based on:
The Constitution of the Republic of Kazakhstan, particularly Article 18, which guarantees the right to privacy and confidentiality of correspondence.
The Law of the Republic of Kazakhstan “On Personal Data Protection.”
The Data Subject’s consent, expressed in written or electronic form.
- Principles of Personal Data Processing
4.1. The Operator processes personal data based on the following principles:
Legality and fairness: Personal data processing is strictly in accordance with the laws of the Republic of Kazakhstan.
Purpose limitation: Data is collected exclusively for providing tourism services, fulfilling contractual obligations, and ensuring security.
Accuracy of data: The Operator takes measures to ensure the accuracy and relevance of processed data.
Confidentiality and protection: The Operator undertakes to prevent data leakage, unauthorized access, and other breaches of confidentiality.
- Obligations of the Parties
5.1. The Operator undertakes to:
Ensure the protection of personal data in accordance with the laws of the Republic of Kazakhstan.
Use personal data solely for the purposes specified in this Agreement.
Provide access to personal data only to authorized persons who have signed a non-disclosure agreement.
5.2. The Data Subject undertakes to:
Provide accurate data necessary for the provision of tourism services.
Timely notify the Operator of any changes in the provided data.
- Rights of the Parties
6.1. Rights of the Data Subject:
Request information about the nature of their personal data processing.
Request clarification, blocking, or deletion of personal data in case of inaccuracy or illegal processing.
Withdraw consent for personal data processing, except in cases provided by the laws of the Republic of Kazakhstan.
6.2. Rights of the Operator:
Process personal data within the limits established by this Agreement and the laws of the Republic of Kazakhstan.
Continue processing personal data in cases stipulated by law, even if the Data Subject withdraws consent.
- Storage and Destruction of Personal Data
7.1. Personal data is stored for the period necessary to achieve the processing purposes but not less than the period established by the laws of the Republic of Kazakhstan.
7.2. Upon achieving the processing purposes or withdrawal of consent, personal data is destroyed in accordance with the internal regulations of the Operator.
- Liability of the Parties
8.1. The Operator is responsible for ensuring the security of personal data and compliance with this Agreement in accordance with the laws of the Republic of Kazakhstan.
8.2. The Data Subject is responsible for providing accurate data.
8.3. Violations of personal data protection requirements are subject to liability under the Administrative and Criminal Codes of the Republic of Kazakhstan.
- Dispute Resolution
9.1. Disputes arising from the execution of this Agreement are resolved through negotiations.
9.2. If an agreement is not reached, disputes shall be settled in court in accordance with the laws of the Republic of Kazakhstan.
- Final Provisions
10.1. This Agreement comes into force upon signing and remains in effect until all obligations are fulfilled.
10.2. Any amendments and additions to this Agreement must be in writing and signed by both parties.
- Tour Booking Terms
11.1. Booking Process: Reservations are made through the website, by phone, or via other means. To confirm a booking, the client must provide their contact details (full name, phone number, email). Payment: A 50% prepayment is required to secure the booking. The remaining balance must be paid no later than _5_ days before the start of the tour. Cancellations and Changes: Cancellations made 1 day or more before the tour start will receive a 100% refund of the prepayment. Cancellations made less than 1 day before the tour start will result in a 50% non-refundable prepayment. Company Liability: The company reserves the right to change the itinerary or tour schedule due to unforeseen circumstances (weather conditions, road situations, etc.). If the tour is fully canceled by the company, the client will receive a full refund. Client Responsibility: The client must follow the rules set by the guide and is responsible for their personal safety.
Signatures of the Parties:
Operator: _____
(Name, Signature)
Data Subject: _____
(Full Name, Signature)
