Privacy Policy
Address of IE "Redmaya":
130000, AKTAU CITY, AKZHELKEN SETTLEMENT, ASAR STREET, 28

When processing personal data, we comply with the requirements of the legislation of the Republic of Kazakhstan, in particular, the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V "On Personal Data and Their Protection," as well as the norms and rules established in the Individual Entrepreneurship (IE)
The User Agreement of IE "Redmaya" is an integral part of this Policy and is a part thereof

Terms and Definitions:

1. Personal Data: Information related to a specific or identifiable individual, recorded on electronic, paper, and/or other material media.
2. Processing of Personal Data: Actions aimed at accumulating, storing, changing, supplementing, using, disseminating, anonymizing, blocking, and destroying personal data.
3. Use of Personal Data: Actions with personal data aimed at achieving the goals of the owner, operator, and third party.
4. Storage of Personal Data: Actions to ensure the integrity, confidentiality, and availability of personal data.
5. Dissemination of Personal Data: Actions resulting in the transfer of personal data, including through mass media or providing access to personal data in any other way.
6. Data Subject (Subject): An individual to whom personal data belongs.
7. Third Party: A person not being the subject, owner, and/or operator but connected with them by circumstances or legal relations regarding the collection, processing, and protection of personal data.
8. IP Address: A unique network address of a node in a computer network built on the IP protocol.

Purpose and Scope of the Document:
The use of the www.redmaya-travel.kz website by the data subject, the purchase of a tourist product, or obtaining consultation (including in company sales offices) signifies the unequivocal and full agreement with this Policy regarding the processing and protection of the personal data of the data subject, in accordance with the Law of the Republic of Kazakhstan on Personal Data and their Protection.
The Policy of "Redmaya" (hereinafter referred to as the IE) regarding the processing of personal data (hereinafter referred to as the Policy) defines the position and intentions of the IE in the field of processing and protecting personal data, with the aim of complying with and protecting the rights and freedoms of every person, especially the right to privacy, personal and family secrets, protection of honor and dignity.
The Policy is strictly adhered to by the leaders and employees of all structural units and branches of the IE "Redmaya."
This Policy applies to all personal data of subjects processed by the IP, using automation means and without using such means.
Any data subject has access to this Policy.
This policy on the processing and protection of personal data applies only to the www.redmaya-travel.kz website. The IE does not control and is not responsible for third-party sites that the data subject may visit through links available on the www.redmaya-travel.kz website.
Principles and Conditions for Processing Personal Data:
The security of personal data is understood by the IE as the protection of personal data from unauthorized or accidental access to them, destruction, alteration, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions regarding personal data, and takes the necessary legal, organizational, and technical measures to protect personal data.
When processing personal data, the IE adheres to the following principles:

• Legality and fairness.
• Restriction of processing personal data to achieve specific, predetermined, and legal purposes.
• Avoiding processing personal data incompatible with the purposes of collecting personal data.
• Avoiding the combination of databases containing personal data, the processing of which is carried out for incompatible purposes.
• Processing personal data that meets the purposes of their processing.
• Compliance with the content.

The IE processes personal data only if at least one of the following conditions is met:

• The processing of personal data is carried out with the consent of the data subject to the processing of his personal data.
• The processing of personal data is necessary to achieve the goals provided for by law, to exercise and fulfill the powers and duties assigned by the legislation of the Republic of Kazakhstan to the owner of the database containing personal data.
• The processing of personal data is necessary to fulfill the contract, the party to which is the data subject, as well as to conclude a contract at the initiative of the data subject.
• The processing of personal data is necessary to protect the rights and legitimate interests of the IE or third parties or to achieve significant goals for the IP, provided that the rights and freedoms of the data subject are not violated.
• Processing personal data to which an unlimited circle of persons has access is carried out with the consent of the data subject or at his request.
• Processing personal data subject to publication or mandatory disclosure in accordance with the legislation of the Republic of Kazakhstan.

IE is entitled to delegate the processing of personal data of citizens to third parties based on contracts concluded with them. This is applicable in cases where it is necessary to provide services related to booking tourism products and fulfilling orders for the Subject, such as airlines, tour operators, hotels, visa centers, consulates, courier services, postal organizations, internet service providers, and organizations providing email services. Those processing personal data on behalf of the IE must adhere to the principles and rules of processing and protecting personal data as stipulated by the Law on Personal Data and their Protection. Each entity has defined actions (operations) with personal data, the purposes of processing, obligations to maintain confidentiality and ensure the security of personal data during processing, as well as requirements for the protection of processed personal data.

In cases stipulated by the legislation of the Republic of Kazakhstan, the IE has the right to transfer the personal data of citizens.

The IE destroys or anonymizes personal data upon achieving the processing goals or when the need to achieve the processing goal is lost, as well as in case the subject withdraws consent for the processing of personal data.

The processing of personal data by the IE requires the consent of the data subject unless otherwise provided by the legislation of the Republic of Kazakhstan in the field of personal data.

Email addresses and phone numbers obtained by the IE may be used for sending messages, including newsletters, to the subjects. These messages may contain commercial and/or non-commercial information about the provision of travel services and/or the promotion of travel products. Subjects using the services of the IE can always unsubscribe from such communications in the future through a form indicated in the sent newsletter or by contacting www.redmaya-travel.kz.

The IE is not obligated to verify the accuracy of the information provided by the subject and does not control the legal capacity of the subject. The IE assumes that the subject provides accurate and sufficient personal information in the relevant sections indicated in the registration form and keeps this information up to date. The risk of providing inaccurate information lies with the subject who provided it.

Rights of the data subject:
- The right to confirm the fact of processing personal data by the IE.
- Information about the legal grounds and purposes of processing personal data.
- Details on the methods of processing personal data used by the IE.
- The name and location of the IE.
- Information about persons who have access to personal data or to whom personal data may be disclosed based on a contract with the IE or according to the legislation of the Republic of Kazakhstan.
- A list of processed personal data related to the subject, the source of their receipt, unless another procedure for providing such data is provided by the legislation of the Republic of Kazakhstan.
- Information about the terms of processing personal data, including storage periods.
- The name and address of the entity processing personal data on behalf of the IE "Redmaya."
- Other information provided by the Law on Personal Data and their Protection.

The subject whose personal data is processed by IE has the right to:
• Demand clarification of their personal data, its blocking, or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained, or unnecessary for the stated processing purpose.
• Withdraw their consent for the processing of personal data.
• Demand the elimination of unlawful actions by the IE regarding their personal data.
• Seek protection of their rights and legitimate interests, including seeking compensation for damages and/or compensation for moral harm through legal proceedings.

Responsibility:
In case of non-compliance with the provisions of this Policy, the IE is held accountable in accordance with the existing legislation of the Republic of Kazakhstan.

Measures to Ensure the Security of Personal Data during Processing:
The IE, when processing personal data, takes necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution of personal data, and other unlawful actions regarding personal data.

Such measures include:
• Identifying threats to the security of personal data during their processing in information systems of personal data.
• Implementing organizational and technical measures to ensure the security of personal data during their processing in information systems of personal data, necessary to meet the requirements for the protection of personal data. Compliance with these requirements ensures the levels of protection of personal data established by the legislation of the Republic of Kazakhstan.
• Applying procedures for the assessment of the conformity of information protection means in the established order.
• Detecting instances of unauthorized access to personal data and taking appropriate measures.
• Establishing rules for accessing personal data processed in the information system of personal data and ensuring the registration and recording of all actions performed with personal data in the information system of personal data.
• Familiarizing employees of the iI, its branches, and representations directly involved in the processing of personal data with the provisions of the legislation of the Republic of Kazakhstan and the local regulatory acts of the IE in the field of personal data, including requirements for the protection of personal data, and providing training to these employees.
• Monitoring the measures taken to ensure the security of personal data and the level of security of information systems of personal data.

Changes to the Privacy and Personal Data Protection Policy:
The current version of the "Privacy and Personal Data Processing Policy" of the IE "Redmaya" is published on the website www.redmaya-travel.kz and is available openly on the Internet at the address: www.redmaya-travel.kz.
The IE may make changes to the "Privacy and Personal Data Protection Policy" unilaterally, including without prior notice to the subjects.

Aktau, Kazakhstan
April 1, 2021
Individual Entrepreneur "REDMAYA," represented by Director Abdol Serik Aktaubayuly.

Address: House 28, Asar Street, Akzhelken Village, Aktau, Kazakhstan, 130000
Phone: +7705 176 1726
Email: mangystau@redmaya-travel.kz
Website: redmaya-travel.kz

1. LEGAL REGULATION

Article 395 of the Civil Code of the Republic of Kazakhstan. Offer

1. An offer is recognized as a proposal to conclude a contract made to one or more specific persons if it is sufficiently definite and expresses the intention of the person making the offer to consider themselves bound in case of its acceptance. An offer is sufficiently definite if it contains the essential conditions of the contract or the procedure for determining them.

2. The offer binds the sender from the moment it is received by the addressee.

If notice of withdrawal of the offer is received earlier or simultaneously with the offer itself, the offer is considered not received.

3. The offer received by the addressee cannot be revoked during the period established for its acceptance unless otherwise stipulated in the offer itself or does not follow from the nature of the offer or the circumstances in which it was made.

4. Advertising and other offers addressed to an indefinite circle of persons are considered as an invitation to make offers unless otherwise expressly stated in the offer.

5. An offer that contains all the essential conditions of the contract and expresses the will of the person making the offer to conclude a contract on the terms specified in the offer with anyone who responds is considered an offer (public offer).

Article 396 of the Civil Code of the Republic of Kazakhstan. Acceptance
1. Acceptance is considered the response of the person to whom the offer is addressed about its acceptance.

Acceptance must be complete and unconditional.

2. Silence is not acceptance unless otherwise provided by a legislative act, business custom, or the parties' previous business relations.

3. The performance by a person who received the offer, within the period established for its acceptance, of actions to fulfill the conditions of the contract specified in it (shipment of goods, provision of services, performance of work, payment of the corresponding amount, etc.) is considered acceptance unless otherwise provided by law or specified in the offer.

4. If notice of withdrawal of the acceptance is received by the person who sent the offer earlier or simultaneously with the acceptance itself, the acceptance is considered not received.

2. SUBJECT OF THE CONTRACT-OFFER
1.1. This Contract-Offer of the tour operator redmaya-travel.kz, represented by the Individual Entrepreneur REDMAYA (hereinafter referred to as the "Contract-Offer"), constitutes a public offer by the Tour Operator and defines the conditions for providing tourist services to the Client (hereinafter referred to as the "Client").
1.2. The Contract-Offer is considered concluded between the Tour Operator and the Customer from the moment the Customer performs the actions specified in section 2.1.1 of this Contract-Offer. The Contract-Offer is valid until both parties fully fulfill their obligations.

3. PROCEDURE FOR CONCLUDING A CONTRACT-OFFER
3.1. The conclusion of the Contract-Offer means that the Client:
3.1.1. In accordance with paragraph 5 of Article 395 of the Civil Code of the Republic of Kazakhstan, if the conditions set out below are accepted and the payment for the services is made, the Tour Operator, a legally capable individual who accepts this Offer, becomes the Client (tourist) (in accordance with paragraph 3 of Article 396 of the Civil Code of the Republic of Kazakhstan, the acceptance of the Offer is equivalent to the conclusion of a contract on the conditions specified in the Offer), and the Tour Operator and the Client together are the parties to the public offer contract.
3.1.2. In connection with the above, carefully read the text of this contract. In case of disagreement with any provision of this contract, the Tour Operator suggests that you refrain from using the services.
3.2. Accepts the terms of this Contract-Offer, as well as any additional conditions set by the Tour Operator at the time of the Customer's actions necessary for the registration of an order for tourist services, as determined by the Tour Operator, including consent to the collection and processing of personal data (if applicable).
3.3. Provides the Tour Operator with accurate information necessary to process an order for tourist services, including contact information, passport data, and other information as requested by the Tour Operator.
3.4. The Contract-Offer is considered concluded and enters into force from the moment of its acceptance by the Client, namely when the Client agrees to the terms of this Contract-Offer, as indicated in section 2.1.1 of this Contract-Offer. Acceptance is made by the Customer by performing the actions specified in section 2.1.1 of this Contract-Offer.

4. PAYMENT PROCEDURE FOR TOURIST SERVICES
4.1. The cost of tourist services and the payment procedure are determined in accordance with the tariffs and conditions set by the Tour Operator at the time of the Customer's order.

4.2. The Customer pays for tourist services according to the invoice issued by the Tour Operator. Payment terms and procedures are specified in the "Payment and Refund Rules" section. In case of non-compliance with the specified payment conditions, the Tour Operator reserves the right to cancel the order for tourist services.

4.3. Online Credit Card Payment:
Our website is connected to internet acquiring, and you can pay for the service with a Visa or Mastercard bank card. After confirming the selected service, a registration form will open, where you need to provide accurate information in Russian or English: surname and name, contact phone, email address, and the city where you reside. Make sure all information is correct and click the "Proceed to payment" button.

Then, a secure window with the payment page of the Maxpay processing center will open, where you need to enter your credit card details. The 3D Secure protocol is used for additional cardholder authentication. If your bank supports this technology, you will be redirected to its server for additional identification. For information on the rules and methods of additional cardholder identification, please contact the bank that issued your credit card.

4.4. Security Guarantees:
The Maxpay processing center protects and processes information about your bank card in accordance with the PCI DSS 2.0 security standard. The transfer of information to the payment gateway is done using SSL encryption technology. Further transmission of information takes place over closed banking networks with the highest level of reliability. Maxpay does not transfer your card data to us or any other third parties. The 3D Secure protocol is used for additional cardholder authentication.

4.5. Online Payment Security:
The personal information provided by you (name, address, phone, email, credit card number) is confidential and not subject to disclosure. Information about your credit card is transmitted only in encrypted form and is not stored on our web server. The security of online card payments is guaranteed by TOO "Payment Organization Maxpay". All operations with payment cards are carried out in accordance with the requirements of VISA International, MasterCard, and other payment systems. Special security technologies are used for information transmission during online card payments, and data processing is carried out on a secure high-tech server of the processing company.

5. CANCELLATION OF TOURIST SERVICES
5.1. The Client has the right to demand the cancellation or modification of tourist services by sending written notice to the Tour Operator in accordance with the provisions and conditions outlined in this Contract-Offer and the conditions in effect at the time of the change or cancellation. In this case, the cancellation conditions set by the Tour Operator apply.

5.2. The Tour Operator reserves the right to unilaterally change or cancel tourist services in case of violation of the conditions of the Offer Agreement or in the event of force majeure circumstances, which will be communicated to the Client.

6. RESPONSIBILITY OF THE PARTIES
6.1. The parties are responsible for non-performance or improper performance of obligations under this Offer Agreement in accordance with the terms of this Offer Agreement and the current legislation of the Republic of Kazakhstan.

6.2. The Tour Operator is responsible for providing the Client with necessary and accurate information about tourist services.

6.3. The Tour Operator is responsible for non-provision or improper provision of services included in the tourist product to the Client. The Tour Operator is not responsible for the actions (inaction) of third parties.

7. AMENDMENT AND TERMINATION OF OFFER AGREEMENT
7.1. This Offer Agreement may be amended or terminated by mutual agreement of the Parties or for other reasons provided by the current legislation or this Offer Agreement.

7.2. Each of the Parties has the right to demand amendments or termination of the Offer Agreement in connection with significant changes in circumstances that the Parties relied on when entering into the Offer Agreement. Significant changes in circumstances include:
1. Deterioration of travel conditions.
2. Changes in travel dates.
3. The Client's inability to undertake the trip due to circumstances beyond their control (Client's illness, visa refusal, and other similar circumstances).

7.3. Untimely or incomplete payment of funds by the Customer under the Offer Agreement, non-provision of documents necessary for the performance of the Offer Agreement, the impossibility of providing Services due to the Customer's non-compliance with obligations and/or violation of the conditions of the Offer Agreement is considered by the Parties as the impossibility of performing the service due to the fault of the Customer.

7.4. The Client has the right to unilaterally terminate the Offer Agreement, provided that the specified losses (if any) are paid, depending on the time of cancellation of the Tourist product. Information about the losses is provided to the Client on the Tour Operator's website and/or in the order confirmation and/or verbally (when making a transaction in the Tour Operator's sales office) when concluding this Offer Agreement. The date of cancellation is considered the date of the Client's notification sent to the Tour Operator's email address (or any other communication channel, messenger, etc.), or the original notification sent to the Tour Operator's postal address, or the Client's verbal refusal made in person at the Tour Operator's sales office. The Tour Operator has the right not to accept cancellations on non-working and public holidays - in this case, the cancellation is considered made on the next working day.

7.6. Any changes and additions to the Offer Agreement are valid if made in ways not prohibited by the current legislation of the Republic of Kazakhstan (including by exchanging documents by email or using other means of electronic communication), or with the Client's consent to the information provided on the Tour Operator's website or in the order confirmation or sent to the Client using electronic means of communication. The Client's actions to fulfill the Offer Agreement with the changes proposed by the Tour Operator may be equated by the Tour Operator to making changes in writing in accordance with the legislation of the Republic of Kazakhstan.

7.7. Early termination of the Offer Agreement for any reason is carried out in the same form as the conclusion of the Offer Agreement, by sending an offer to terminate the Offer Agreement by one Party no later than 10 (ten) calendar days before the expected termination date and 90 days before the tour date, if the Offer Agreement is concluded earlier than 10 (ten) calendar days before termination, also 90 days before the scheduled date of the Service, the Tour Operator undertakes to refund the Customer within the terms stipulated by this Offer Agreement.

7.8. In case of termination of the agreement due to the fault of the Client, the latter undertakes to compensate for all losses, including lost profits.

8. CONSENT TO COLLECTION AND PROCESSING OF PERSONAL DATA
8.1. In accordance with the legislation regulating relations related to the collection and processing of personal data, if the Client accepts the conditions defined in this Offer Agreement, the Client unconditionally gives consent to the Tour Operator and third parties (directly related to the provided service) for the collection, processing, and, if necessary, transfer of the Client's personal data in accordance with the method not contrary to the law, for the purposes specified in this Offer Agreement, from sources. Including the transfer of information to government authorities, if the latter obliges to transfer.

8.2. The Client's personal data includes the following information about the Client and any changes and/or additions to it that may occur in the future, and is recorded on electronic, paper, and/or other material media, including: surname, name, patronymic (if any), Individual Identification Number (IIN) (if any), date of birth, gender, citizenship, passport number and expiry date, place of work and position, residential address, mobile phone number, email address. This list is not exhaustive.

8.3. The collection, processing, and, if necessary, cross-border transfer of the Client's personal data are carried out by the Tour Operator for the following purposes:
8.3.1. For the proper performance of this Offer Agreement, as well as the rights and obligations imposed on the Tour Operator by law.
8.3.2. For internal control and accounting of the Tour Operator.
8.3.3. For judicial and extrajudicial protection of the rights of the Tour Operator: in case of non-compliance with obligations under relevant transactions; in case of disputes, including disputes with third parties.

8.4. By providing personal data to the Tour Operator through open communication channels, the Client acknowledges and assumes the risk of unauthorized access by third parties and the consequences associated with it. The Tour Operator is not responsible for unauthorized access by third parties to personal data when transmitted through open communication channels. This list is not exhaustive.

8.5. The Client's consent to the collection, processing, and, if necessary, cross-border transfer of personal data, regulated by this section and the law of the Republic of Kazakhstan, may be revoked in cases provided by the legislation of the Republic of Kazakhstan, based on the relevant written statement submitted to the Tour Operator no later than 10 (ten) calendar days before the date of revocation of this consent. At the same time, the Client realizes that this consent is an integral part of the Offer Agreement, and the withdrawal of consent to the processing of personal data may lead to the inability of the Tour Operator to fulfill its obligations under the Offer Agreement.

9. DISPUTE RESOLUTION
9.1. In case of disputes and disagreements under this Offer Agreement, the Parties undertake to make efforts to resolve them through negotiations.
9.2. If disputes cannot be resolved through negotiations, they shall be submitted to the court in accordance with the current legislation of the Republic of Kazakhstan.

10. FINAL PROVISIONS
10.1. All changes and additions to the Offer Agreement are valid exclusively in writing and are signed by authorized representatives of the Parties.
10.2. All notifications and messages within the framework of the Offer Agreement are sent by the Parties to each other by sending an email to the email addresses specified in the Offer Agreement or by any other method that ensures confirmation of message receipt, unless otherwise provided by the Offer Agreement.
10.3. This Offer Agreement is drawn up in Russian and is the official text.
10.4. All disputes related to the performance of this Offer Agreement are considered in accordance with the current legislation of the Republic of Kazakhstan.

10.6. This Offer Agreement enters into force from the moment of its acceptance by the Client, namely from the moment of the Client's agreement to the terms of this Offer Agreement in the manner specified in section 2.1.1. The acceptance is carried out by the Customer through the actions specified in section 2.1.1 of this Offer Agreement.