Agreement on the Protection of Users’ Personal Data
LLP “Ernst & Young Kazakhstan” (“Operator”), operating the website at https://eyacademycca.com/ (the “Website”), processes and stores personal data there. By using the Website, you (the “User”) agree to provide your personal data under the terms of this Agreement. If you do not agree, you must cease all use of the Website’s services.
1. SUBJECT OF THE AGREEMENT1.1. This Agreement governs the collection and use of personal data by the Operator when Users register on the Website and/or use the Website’s paid services.
1.2. Personal data are collected only after the User’s accession to this Agreement. The User provides personal data voluntarily.
1.3. Confidentiality of personal data is ensured from the moment the data are submitted by the data subject.
1.4. The User’s personal data must not be used for purposes inconsistent with the provision of the Website’s services, nor to cause property or moral harm, nor to restrict rights and freedoms guaranteed by the laws of the Republic of Kazakhstan.
2. DEFINITION AND SCOPE OF PERSONAL DATA2.1. “Personal Data” means any information about an individual or legal entity necessary for the provision of paid services on the Website.
2.2. Categories of Personal Data:
This document, pursuant to Article 389, ¶ 1 and Article 395, ¶ 5 of the Civil Code of the Republic of Kazakhstan, constitutes a public offer and a contract of adhesion. By registering on the Website https://eyacademycca.com/, you accept these terms in full.
1. SUBJECT OF THE AGREEMENT1.1. This Agreement governs the collection and use of personal data by the Operator when Users register on the Website and/or use the Website’s paid services.
1.2. Personal data are collected only after the User’s accession to this Agreement. The User provides personal data voluntarily.
1.3. Confidentiality of personal data is ensured from the moment the data are submitted by the data subject.
1.4. The User’s personal data must not be used for purposes inconsistent with the provision of the Website’s services, nor to cause property or moral harm, nor to restrict rights and freedoms guaranteed by the laws of the Republic of Kazakhstan.
2. DEFINITION AND SCOPE OF PERSONAL DATA2.1. “Personal Data” means any information about an individual or legal entity necessary for the provision of paid services on the Website.
2.2. Categories of Personal Data:
- For individuals: surname, first name, patronymic (if any), Individual Identification Number (IIN), identity document details, bank details (IBAN, BIC, bank name), registered address, landline or mobile phone number, e-mail address.
- For legal entities: company name, Business Identification Number (BIN), registration details, bank details (IBAN, BIC, bank name), legal address, landline or mobile phone number, e-mail address, information on participants (founders, shareholders) and executives, including their personal data as listed above.
- Collect only those personal data necessary for provision of the Website’s services.
- Not transfer personal data to third parties without the User’s consent, except as required by law.
- Not publish personal data unless the User has expressly consented to such publication.
- Ensure protection of personal data against unauthorized use or loss in accordance with applicable law.
- Provide only accurate and truthful personal data.
- Not provide or use personal data of third parties without their consent; if uploading data of several persons, the User must have the authority to do so.
- Notify the Operator of any changes to their personal data that may affect service provision.
- Use strong, non-trivial passwords for their Website account.
- Keep their account password confidential.
- 4.2. The User is entitled to:
- Request correction or deletion of their personal data.
- Access their personal data freely.
- Refuse to provide personal data—but thereby forfeit access to certain paid services.
- Appoints authorized personnel and establishes rules for accessing personal data.
- Prohibits transfer of personal data to third parties without the User’s consent.
- It resulted from the User’s negligence—e.g., choosing a weak password or sharing it.
- The Operator took all reasonable protective measures, yet unauthorized access occurred due to illegal acts of third parties (e.g., hacking) or software vulnerabilities.
- 6.2. In all other cases, liability shall be determined in accordance with the laws of the Republic of Kazakhstan.
This document, pursuant to Article 389, ¶ 1 and Article 395, ¶ 5 of the Civil Code of the Republic of Kazakhstan, constitutes a public offer and a contract of adhesion. By registering on the Website https://eyacademycca.com/, you accept these terms in full.