Personal data processing policy
Shaurma Food restaurant chain (applies to the website https://shaurma-food.kz)
1. General Provisions
1.1. This Policy defines the procedure for processing and protecting personal data carried out by the Shaurma Food restaurant chain (hereinafter referred to as the “Operator”), in accordance with the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On personal data and their protection”.
1.2. The policy applies to all visitors to the website https://shaurma-food.kz, as well as customers who place orders, register on the website, arrange delivery or subscribe to newsletters.
2. Legal basis for data processing
2.1. Personal data is processed on the basis of:
- voluntary consent of the data subject;
- conclusion and execution of contracts (including online orders);
- requirements of the legislation of the Republic of Kazakhstan;
- legitimate interests of the Operator that do not violate the rights and freedoms of the subject
2.1. Personal data is processed on the basis of:
- voluntary consent of the data subject;
- conclusion and execution of contracts (including online orders);
- requirements of the legislation of the Republic of Kazakhstan;
- legitimate interests of the Operator that do not violate the rights and freedoms of the subject
3. Personal data subject to processing
3.1. The operator processes the following categories of personal data:
- Full name;
- Contact phone number;
- Email address;
- Delivery address;
- Order history;
- IP address and information about user actions on the site;
- Information from cookies and other similar technologies.
3.1. The operator processes the following categories of personal data:
- Full name;
- Contact phone number;
- Email address;
- Delivery address;
- Order history;
- IP address and information about user actions on the site;
- Information from cookies and other similar technologies.
4. Purposes of personal data processing
4.1. Processing is carried out for the following purposes:
- registration and identification of users;
- acceptance and delivery of orders;
- improvement of the website operation and quality of service;
- feedback from clients;
- provision of personalized offers and promotions;
- conducting marketing mailings with consent;
- compliance with the legislation of the Republic of Kazakhstan.
4.1. Processing is carried out for the following purposes:
- registration and identification of users;
- acceptance and delivery of orders;
- improvement of the website operation and quality of service;
- feedback from clients;
- provision of personalized offers and promotions;
- conducting marketing mailings with consent;
- compliance with the legislation of the Republic of Kazakhstan.
5. Conditions of data storage and transfer
5.1. Personal data is stored in secure databases and processed using technical and organizational security measures.
5.1. Personal data is stored in secure databases and processed using technical and organizational security measures.
5.2. Data may be transferred to third parties only in the following cases:
- partners involved in the delivery of orders;
- at the request of authorized government agencies;
- in other cases stipulated by the legislation of the Republic of Kazakhstan.
- partners involved in the delivery of orders;
- at the request of authorized government agencies;
- in other cases stipulated by the legislation of the Republic of Kazakhstan.
5.3. Personal data is stored no longer than is necessary for the purposes of their processing or in accordance with applicable law.
6. Rights of personal data subjects
6.1. Users have the right to:
- receive information about their personal data;
- demand their change, clarification or deletion;
- revoke consent to processing;
- appeal the Operator's actions to authorized bodies;
- exercise other rights provided for by the legislation of the Republic of Kazakhstan.
6.1. Users have the right to:
- receive information about their personal data;
- demand their change, clarification or deletion;
- revoke consent to processing;
- appeal the Operator's actions to authorized bodies;
- exercise other rights provided for by the legislation of the Republic of Kazakhstan.
7. Security of personal data
7.1. The operator takes all necessary measures to protect personal data from unauthorized access, loss, modification or distribution.
7.1. The operator takes all necessary measures to protect personal data from unauthorized access, loss, modification or distribution.
7.2. Only authorized employees and contractors who have signed confidentiality obligations have access to personal data.
8. Use of cookies and analytics
8.1. The website https://shaurma-food.kz uses cookies and analytical services (Google Analytics, Yandex.Metrica, etc.) to analyze user behavior and improve the quality of service.
8.2.Users can disable cookies in their browser settings. This may affect the correct operation of the site.
9. Consent to data processing
9.1. By providing personal data through the website or other communication channels, the user expresses voluntary consent to their processing in accordance with this Policy.
9.1. By providing personal data through the website or other communication channels, the user expresses voluntary consent to their processing in accordance with this Policy.
10. Deletion and destruction of data
10.1. Personal data are subject to destruction:
- at the request of the data subject;
- upon expiration of the storage period;
- upon achievement of the processing purposes.
- at the request of the data subject;
- upon expiration of the storage period;
- upon achievement of the processing purposes.
11. Changes to Policy
11.1. The Operator reserves the right to make changes to this Policy. The current version is always available at: https://shaurma-food.kz.