Personal data processing

Operator

The operator and owner of the request records is CodeMastersPRO LLP, Kazakhstan. The BIN and legal address are blank in this draft: the company will provide them on request and does not replace them with a guess. Requests from a data subject: sagaydack@gmail.com, phone +7 777 332 36 76.

Purposes

The purposes are limited to the request: to reply about software development or a course, to clarify the task, and to correspond about that request. There are no other purposes, including third-party advertising.

Data list

Development: name, phone and/or email, company, service, task description, an optional file, and a project link if the form includes one.

Education: name, phone, track, an optional age, and a comment. That is enough to answer the request. The forms do not ask for an individual identification number, identity documents, or payment details.

Basis

Processing is based on the consent a person marks in the form. The mark confirms that they accepted the consent text, including disclosure to third parties and cross-border transfer. Consent can be withdrawn by email to sagaydack@gmail.com. After withdrawal, processing stops within 15 business days unless the law of the Republic of Kazakhstan requires the data to be kept longer. Withdrawal is not available only where it would contradict the laws of the Republic of Kazakhstan or where an obligation is still outstanding.

Retention

Data is kept until the purpose is met: the request is answered and the related correspondence ends. It is then deleted unless the law of the Republic of Kazakhstan requires another period. No certificate or licence number for processing is stated here, because the company has not provided one for publication.

Sharing

Third parties: staff who answer requests; WhatsApp (Meta Platforms) when a message is sent to +7 777 332 36 76; Resend, if the server is set to email sagaydack@gmail.com; the host of the site server, to the extent needed to run the site and limit spam. An optional webhook, if the company turns one on, receives the request text without the file.

There is a cross-border transfer. WhatsApp and Resend process the message outside Kazakhstan, including in the United States. Article 16 of the Law allows a transfer to a state that does not ensure protection of personal data when the subject consents. The mark in the form is also consent to that transfer. This draft does not claim that the United States ensures protection within the meaning of the Law: a lawyer has to check that.

The record on the site server remains the primary copy. The law requires the store to be located in the Republic of Kazakhstan. If the server is outside the country, storing the request files is also a cross-border transfer and must be moved to Kazakhstan. Requests are not disseminated in publicly available sources.

Rights

A person may know whether the operator holds their data and may receive confirmation of the fact, purpose, sources, and methods of collection and processing, the list of data, and the storage periods.

They may demand a change or addition where the grounds are confirmed by documents. They may demand blocking or anonymisation where there is information about a breach of the conditions of collection or processing, and destruction or deletion where the data was collected or is processed in breach of the law or in other cases the law sets out.

They may withdraw consent to collection, processing, disclosure to third parties, and cross-border transfer. There is no consent to dissemination in publicly available sources. A request goes to sagaydack@gmail.com or by phone at +7 777 332 36 76. In the cases Article 25 of the Law names directly, the operator changes, blocks, or deletes the data within one business day. Processing stops within 15 business days after withdrawal, unless the law requires the data to be kept longer.

Protection

Requests are stored on the site side, forms check required fields and consent, and repeated submissions are limited. These are basic organizational and technical measures, not a security certificate and not a quality guarantee from Astana Hub.