Personal Data Processing Policy
  1. This Policy on the collection, processing, and protection of personal data (hereinafter referred to as "Policy") is adopted and operates within Individual Entrepreneur Dream Way, registered at: Republic of Kazakhstan, Z00T0B1, city of Astana, Almaty district, Koshkarbaeva street 2, NP 22-26, block C1-C3 (hereinafter referred to as "Company"). This Policy defines what personal data we may collect and how we may use it. This Policy applies to the personal data you (also referred to as "user") provide when using our websites, mobile applications, other services, tools, products, and services that collect data and display this Policy to users from any device, as well as in the course of the Company's performance of any agreements and contracts with you, and when communicating with us in any form, in accordance with this Policy. When collecting, processing, and protecting personal data obtained in this way, we act as the Operator and/or Owner. By using our online resources and providing us with your personal data, you confirm that you are acting voluntarily and give specific, informed, and conscious consent to the collection and processing of personal data in accordance with this Policy. The Company has no intention of collecting personal data except on the condition of voluntary provision by users. If you do not agree with any provision of this Policy or do not want your personal information to be collected and processed by us, please do not use our online resources or provide us with any personal data.
  2. The Operator's main goal and condition for carrying out its activities is the observance of the rights and freedoms of individuals in the processing of their personal data, including the protection of the right to privacy, personal, and family secrets.
  3. This Policy applies to all information that the Operator may receive about visitors to the website www.dreamway.kz.
2. Key Concepts Used in the Policy:
  1. Automated processing of personal data - processing of personal data with the use of computing devices;
  2. Blocking of personal data - temporary cessation of processing personal data (except in cases where processing is necessary to clarify personal data);
  3. Website - a set of graphic and informational materials, as well as programs for computers and databases, providing their availability on the internet at the network address www.dreamway.kz;
  4. Information system of personal data - a set of personal data contained in databases, and the information technologies and technical means ensuring their processing;
  5. Anonymization of personal data - actions that make it impossible to identify the personal data without using additional information;
  6. Processing of personal data - any action (operation) or set of actions (operations) performed with personal data, using or without using automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, usage, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data;
  7. Operator - a government body, municipal body, legal entity, or individual who independently or together with others organizes and/or carries out the processing of personal data and determines the purposes of personal data processing, the composition of personal data to be processed, and the actions (operations) to be performed with personal data;
  8. Personal data - any information related directly or indirectly to a specific or identifiable user of the website www.dreamway.kz;
  9. User - any visitor to the website www.dreamway.kz;
  10. Provision of personal data - actions aimed at disclosing personal data to a specific person or group of people;
  11. Distribution of personal data - any actions aimed at disclosing personal data to an unspecified group of people (transferring personal data) or making personal data accessible to an unlimited number of people, including publication of personal data in mass media, placement in information and telecommunication networks, or providing access to personal data in any other way;
  12. Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state to a foreign authority, foreign physical person, or foreign legal entity;
  13. Destruction of personal data - any actions resulting in the irreversible destruction of personal data, with the impossibility of further restoration of the content of personal data in the personal data information system and/or physical carriers of personal data.

3. The Operator may process the following personal data of the User:
  • Surname, first name, patronymic;
  • Email address;
  • Phone numbers;
  • Year, month, date, and place of birth;
  • Photos;
  • The above-mentioned data are collectively referred to as "Personal Data" throughout the Policy.

4. Purposes of personal data processing:
  1. The purpose of processing the user's personal data is to inform the User by sending electronic emails; conclusion, execution, and termination of civil contracts; providing the User with access to services, information, and/or materials contained on the website.
  2. The Operator also has the right to send the User notifications about new products and services, special offers, and various events. The User can always refuse to receive such notifications by sending an email to the Operator at dreamway.dc@gmail.com with the subject "Refusal of notifications about new products and services and special offers."
  3. Anonymized user data, collected using internet statistics services, is used for gathering information about user actions on the website, improving the website's quality and content.

5. Legal grounds for processing personal data:
  1. The Operator processes the User's personal data only when filled in and/or sent by the User voluntarily via special forms on the website www.dreamway.kz.
  2. By filling out the relevant forms and/or submitting personal data to the Operator, the User agrees with this Policy.
  3. The Operator processes anonymized user data in cases where this is allowed by the User's browser settings (enabling cookie storage and using JavaScript technology).

6. Procedure for collecting, storing, transferring, and processing personal data.
The security of personal data processed by the Operator is ensured by implementing legal, organizational, and technical measures required to fully comply with the applicable laws on personal data protection.
  1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access to personal data.
  2. User personal data will never be transferred to third parties except when required by law.
  3. If inaccuracies in personal data are detected, the User can update them by sending a notification to the Operator's email address, dreamway.dc@gmail.com, with the subject "Updating personal data."
  4. The duration of personal data processing is unlimited. The User can withdraw their consent for the processing of personal data at any time by sending the Operator an email to dreamway.dc@gmail.com with the subject "Withdrawal of consent to process personal data."

7. Cross-border transfer of personal data:
  1. Before starting the cross-border transfer of personal data, the Operator must ensure that the foreign state to which personal data is to be transferred provides reliable protection of personal data subjects' rights.
  2. Cross-border transfer of personal data to foreign countries that do not meet these requirements may only occur with the written consent of the personal data subject for such a transfer and/or execution of a contract to which the personal data subject is a party.

8. Final Provisions:
  1. The User can get any clarifications on issues related to the processing of their personal data by contacting the Operator via email at dreamway.dc@gmail.com.
  2. This document will reflect any changes to the Operator's personal data processing policy. The Policy is valid indefinitely until it is replaced by a new version.