Privacy policy

Privacy policy

Privacy policy
for the Information System "Educational Space NIS Ustaz"

This Privacy Policy (hereinafter referred to as the "Policy") defines the procedures for the collection, processing, storage, and transfer of the User’s personal data within the information system "Educational Environment NIS Ustaz’" (hereinafter referred to as the "Platform") by the Autonomous Educational Organisation "Nazarbayev Intellectual Schools" (hereinafter referred to as the "Rights Holder").

 

This Policy has been developed in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection", as well as other regulatory legal acts of the Republic of Kazakhstan governing the processing and protection of personal data.

 

All terms and definitions used in this Policy shall be interpreted in accordance with the current legislation of the Republic of Kazakhstan. The User acknowledges and agrees that their personal data may be collected, processed, stored, and transferred in accordance with this Policy.

 

1. General provisions

1.1. The use of the Platform by the User signifies their agreement with this Privacy Policy and their consent to the collection, processing, storage, and transfer of personal data.

1.2. In case of disagreement with the terms of this Policy, the User must cease using the Platform.

1.3. This Policy applies solely to the Rights Holder’s Platform. The Rights Holder does not control and bears no responsibility for third-party websites that the User may access via links available on the Platform.

 

2. Subject of the Privacy Policy

2.1. This Policy establishes the Rights Holder’s obligations to maintain confidentiality and ensure the protection of personal data provided by the User during authorization on the Platform. 

2.2. Personal data permitted to be collected, processed, stored, and transferred under this Policy includes, but is not limited to, the following information:

  1. last name, first name, and middle name (if indicated in the identity document);
  2. contact telephone number (home, cell, work);
  3. email address;
  4. information about the place of employment (position, level of teaching proficiency, school name);
  5. any other personal data required for the use of the Platform.

 

3. Purposes of Collecting and Processing Personal Data

3.1. The Rights Рolder may use the User’s personal data for the following purposes: 

  1. identification of the User, including when logging in to the Platform and creating the User’s account, to ensure the proper functioning of the Platform;
  2. providing the User with access to personalised Platform resources;
  3. establishing communication with the User through any available channels, including sending notifications and requests regarding the use of the Platform, provision of services, and processing of requests and applications from the User;
  4. providing the User with access to services, information, and/or materials contained on the Platform;
  5. Providing the User with effective customer and technical support in case of issues related to the use of the Platform;
  6. sending materials, invitations to events, conferences, and exhibitions held and/or organised by the Rights Holder, as well as conducting marketing campaigns, surveys, and research;
  7. and for other purposes not contrary to the requirements of the legislation of the Republic of Kazakhstan.

3.2. For the purposes stipulated in clause 3.1 of this Policy, the User’s personal data may be transferred to third parties (including cross-border transfer) in accordance with the procedures established by the legislation of the Republic of Kazakhstan.

 

4. Methods and Terms of Processing, Storage, and Transfer of Personal Data

4.1. The processing of the User’s personal data shall be carried out without limitation as to time, by any legal means, including within personal data information systems, using automated tools or without such tools. 

4.2. The User’s personal data may be transferred to authorised state bodies of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan.

4.3. The Rights Holder takes necessary organisational and technical measures to protect the User’s personal information from unauthorised or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions by third parties.

4.4. The Rights Holder, together with the User, takes all necessary measures to prevent losses or other adverse consequences caused by the loss or disclosure of the User’s personal data. 

 

5. Data Security

5.1. The Rights Holder takes necessary and sufficient organisational and technical measures aimed at ensuring the security of the User’s personal information from accidental loss, unauthorised access, use, alteration, and disclosure.  

5.2. The security and protection of the User’s information also depends on the User. The User shall take all available measures to ensure data security (login, password, and other information that the User has access to). 

5.3. The Rights Holder is not liable for any User actions aimed at bypassing privacy settings and/or breaching security measures that the User is required to comply with.

5.4. In case of loss or disclosure of Confidential Information, the Rights Holder shall not be held liable if such Confidential Information:

  1. became publicly available prior to its loss or disclosure;
  2. was received from a third party before being obtained by the Rights Holder.

5.5. The Rights Holder shall not be held liable for any unauthorised use of the User’s personal data by third parties if it resulted from the User’s failure to maintain confidentiality.

 

6. Dispute Resolution

6.1. Before filing a lawsuit on disputes arising between the User and the Rights Holder, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute).

6.2. The recipient of the claim shall, within 30 (thirty) calendar days from the date of receipt of the claim, provide the claimant with a written notification of the results of the claim’s review.

6.3. If no agreement is reached, the dispute shall be referred for consideration to the court at the location of the Rights Holder in accordance with the current legislation of the Republic of Kazakhstan.

 

7. Additional Terms

7.1. The Rights Holder has the right to make changes to this Policy without the User’s consent. All amendments shall come into effect upon their publication on the Platform.

7.2. The User undertakes to independently monitor any changes to the Policy by reviewing the current version.

7.3. Continued use of the Platform by the User following any amendments to the Policy shall be deemed to constitute the User's unconditional acceptance of such amendments.

7.3. All suggestions or questions regarding this Privacy Policy should be directed to the email address: info-it@cep.nis.edu.kz, or by phone number +7 7172 23 57 57. 

7.4. The current Privacy Policy is posted on the Rights Holder’s Platform.