PRIVACY POLICY

1.1. The Operator of the Tax Free system (hereinafter referred to as the Operator) is the owner and administrator of the Tax Free service and determines the purposes and methods of personal data processing.

1.2. Users of the Tax Free service are:

• buyers who are foreign citizens;
• participants of the Tax Free system (shopping malls, stores, and other business entities);
• representatives of system participants.

1.3. Use of the Tax Free service means the user agrees to the terms of this Policy.

2.1. Within the functioning of the Tax Free service, the Operator may process the following personal data:

• last name, first name, patronymic (if available);
• identity document data (passport, number, issue date, country);
• identification and registration data (IIN, if available and required);
• contact details (phone number, email address);
• purchase information (product name, amount, VAT);
• other data necessary for the implementation of the Tax Free mechanism.

2.2. The Operator does not process special categories of personal data, except in cases directly provided for by the legislation of the Republic of Kazakhstan.

3.1. Personal data is processed for the following purposes:

• processing and carrying out VAT refunds (Tax Free);
• compliance with the legislation of the Republic of Kazakhstan;
• interaction with government authorities, banks, and payment organizations;
• ensuring the operation and security of the Tax Free service;
• reviewing user appeals and requests.

4.1. Personal data is processed on the following grounds:

• consent of the personal data subject;
• necessity for contract performance (public offer);
• compliance with the legislation of the Republic of Kazakhstan.

5.1. By using the Tax Free service, the user confirms that they have read this Privacy Policy and voluntarily consent to the Operator collecting, processing, storing, using, transferring, and performing other actions with their personal data in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection".

5.2. Consent to personal data processing is provided electronically by performing the following actions:

• checking the consent box and registering in the Tax Free service;
• performing actions to process a VAT refund through the Tax Free service;
• accepting the public offer of the Operator and/or the Tax Free system rules.

5.3. The user confirms that the purposes of personal data processing, the list of processed data, possible recipients of the data, and their rights as a personal data subject have been explained to them.

5.4. Consent is granted for the duration of contractual and factual relations with the Operator, as well as for the period of data storage established by the legislation of the Republic of Kazakhstan.

5.5. The user has the right to withdraw consent to the processing of personal data by sending written notice to the Operator. At the same time, the User understands that withdrawal of consent may make it impossible to continue using the Tax Free service and obtaining a VAT refund.

5.6. Withdrawal of consent does not apply to the processing of personal data carried out by the Operator in cases provided for by the legislation of the Republic of Kazakhstan.

5.7. The Operator has the right to transfer personal data to the following persons:

• government authorities in the cases and according to the procedure provided for by the legislation of the Republic of Kazakhstan;
• banks and payment organizations for the purpose of carrying out VAT refunds;
• operators of state and information systems for the implementation of Tax Free;
• other persons if the personal data subject has given consent or if there are legal grounds.

5.8. Personal data is transferred to the extent necessary to achieve the purposes of processing.

5.9. If cross-border transfer of personal data is necessary, the Operator ensures compliance with the legislation of the Republic of Kazakhstan. By using the Tax Free service, the user consents to the possible cross-border transfer of personal data for the implementation of Tax Free.

6.1. The Operator has the right to make changes to this Policy unilaterally.

6.2. The current version of the Policy is posted in the Tax Free service and comes into force from the moment of publication.

6.3. For issues related to personal data processing, the user may contact the Operator using the contact details posted in the Tax Free service.

OPERATOR: