Privacy Policy

This Privacy Policy was last updated on: August 27, 2025

Introduction

ТОО “METREC” understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website, (“Our Site”) and will only collect and use personal data in ways that are described here and in a way that is consistent with our obligations and your rights under applicable data protection laws worldwide.

Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of this Privacy Policy is deemed to occur upon your first use of Our Site. If you do not accept and agree with this Privacy Policy, you must stop using Our Site immediately.

1. Definitions and Interpretation

In this Policy the following terms shall have the following meanings:

2. Information About Us

Our Site is owned and operated by ТОО “METREC”, a limited liability company registered under the laws of Kazakhstan (jurisdiction of incorporation), under incorporation number 230740022101.

Registered address: Адрес: г. Астана, р. Есиль, ул. Сығанақ, 54 А, кв 141
Email address: info@qazaqkat.kz
Telephone number: +77088386326

3. What Does This Policy Cover?

This Privacy Policy applies only to your use of Our Site. Our Site may contain links to other websites. Please note that We have no control over how your data is collected, stored, or used by other websites and We advise you to check the privacy policies of any such websites before providing any data to them.

4. What Is Personal Data?

For the purposes of this Privacy Policy, “personal data” means any information relating to an identified or identifiable natural person, as defined under applicable data protection and privacy laws worldwide, including but not limited to the EU General Data Protection Regulation (GDPR), the UK Data Protection Act (UK GDPR), Brazil’s LGPD, Canada’s PIPEDA, Australia’s Privacy Act, Singapore’s PDPA, and other relevant local laws.

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

5. What Are My Rights?

Under applicable data protection and privacy laws worldwide, you have the following rights, which we will always work to uphold:

1. The right to be informed about Our collection and use of your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact Us to find out more or to ask any questions using the details in Part 11.
2. The right to access the personal data We hold about you. Part 9 will tell you how to do this.
3. The right to have your personal data rectified if any of your personal data held by Us is inaccurate or incomplete. Please contact Us using the details in Part 11 to find out more.
4. The right to be forgotten, i.e. the right to ask Us to delete or otherwise dispose of any of your personal data that We hold. Please contact Us using the details in Part 11 to find out more.
5. The right to restrict (i.e. prevent) the processing of your personal data.
6. The right to object to Us using your personal data for a particular purpose or purposes.
7. The right to withdraw consent. This means that, if We are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time.
8. The right to data portability. This means that, if you have provided personal data to Us directly, We are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask Us for a copy of that personal data to re-use with another service or business in many cases.
9. Rights relating to automated decision-making and profiling. We do not use your personal data in this way.

For more information about Our use of your personal data or exercising your rights as outlined above, please contact Us using the details provided in Part 11.

It is important that your personal data is kept accurate and up-to-date. If any of the personal data We hold about you changes, please keep Us informed as long as We have that data.

Further information about your rights can also be obtained from your local data protection authority or regulator, depending on your place of residence (for example, the European Data Protection Board for EU residents, the UK Information Commissioner’s Office, or the California Attorney General for residents of California, USA).

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with your local supervisory authority. We would welcome the opportunity to resolve your concerns ourselves first, however, so please contact us using the details in Part 11.

6. What Information Do We Collect?

Depending upon your use of Our Site, We may collect and hold some of the personal and non-personal data set out below. Please also see Part 10 for more information about Our use of Cookies and similar technologies. We do not collect any ‘special category’ or ‘sensitive’ personal data or personal data relating to children or data relating to criminal convictions and/or offences, unless required or permitted by applicable laws and with your explicit consent.

We may collect and process personal data regarding employment, administration of complaints or communication with you:

The processing of your personal data

If we receive your CV (curriculum vitae), cover letter, recommendation letter, and/or other documents or data in connection with a job application on our website, or if you voluntarily submit your CV to us directly or through a recruiting agency, your personal data will be processed for the purposes of staff selection and recruitment.

Your personal data will be processed until the recruitment process is completed – i.e., when a decision is made to hire a particular candidate, after completion of their probationary period, or when the process is concluded without hiring any candidate. This period will normally not exceed 4 months, unless applicable local laws require a different retention period.

After the recruitment process ends, your personal data may be stored for up to 3 years, so that we may contact you in case of future job opportunities, unless you object or request deletion earlier. If you do not agree with the storage of your data after the end of the recruitment process, you may inform us at any time using the Subject Access Request Form, by email, or in any other convenient way.

Your personal data will be processed based on one or more of the following legal grounds:

• your consent to participate in the recruitment process and/or to retain your data for future opportunities,
• our legitimate interest in selecting and hiring qualified candidates,
• compliance with legal obligations under applicable employment and data protection laws.

If you voluntarily submit your personal data to us so that we can keep it in our candidate database and contact you if necessary, we will store your personal data for up to 3 years, unless a shorter or longer period is required or permitted under local law, or you withdraw your consent earlier.

Please note: we may contact your previous employers to obtain references about your qualifications, professional skills, and work characteristics. However, we will never contact your current employer without your explicit prior consent.

Administrating complaints, inquiries, or feedback

If you submit a complaint, inquiry, or feedback to us by email or through any other communication channel, the personal data you voluntarily provide will be processed for the purposes of handling and responding to that complaint, inquiry, or feedback.

If your complaint or inquiry relates to a potential dispute, legal claim, or possible damage, your personal data may be retained for up to 10 years, or for a period consistent with the applicable local statute of limitations or regulatory requirements in your country of residence. If the data does not relate to a potential dispute, it will be deleted within a shorter period, once it is no longer needed for the original purpose.

The legal basis for processing your personal data may include:

• your consent, when you voluntarily provide the information,
• our legitimate interest in addressing and resolving complaints, inquiries, or feedback,
• compliance with legal obligations, where longer storage or disclosure of the data is required by law or regulatory authorities.

Communication by e-mail

According to applicable data protection and privacy laws worldwide, personal data may include the content of correspondence by e-mail, even when the correspondents are employees of a legal entity. In this context, both the content of the communication and the email addresses are subject to mandatory rules on the processing of personal data.

The legal basis for processing your personal data in this context may include:

• your consent, when you voluntarily choose to communicate with us via e-mail,
• the performance of a contract, where the correspondence is necessary to provide our services or respond to your request,
• our legitimate interests, such as ensuring the proper administration of business communications, preventing fraud, or ensuring compliance with internal rules,
• compliance with legal obligations, where laws or regulations require us to retain or review certain communications.

Your email address, correspondence, and related personal data will be processed in accordance with the principle of proportionality. These details will normally only be visible to the person you are directly corresponding with. However, in certain limited cases, your correspondence may also be accessed by other authorized employees, for example, for internal administration, compliance audits, investigations into possible breaches of legal or regulatory requirements, or violations of internal company policies.

Direct marketing

With your permission and/or where permitted by applicable data protection laws, we may use your personal data for marketing purposes, which may include contacting you by email, telephone, or post with information, news, and offers about our services. You will not be sent unlawful marketing or spam. We will always work to protect your rights and comply with our obligations under applicable privacy and marketing regulations worldwide, and you will always have the opportunity to opt out of receiving marketing communications at any time.

We will always obtain your express opt-in consent before sharing your personal data with third parties for their own marketing purposes, and you will be able to withdraw that consent at any time.

We will only use your personal data for the purpose(s) for which it was originally collected, unless we reasonably believe that another purpose is compatible with the original one(s). If we do use your personal data for such a compatible purpose and you wish us to explain how the new purpose is compatible, please contact us using the details in Part 11.

If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the original purpose(s) for which it was collected, we will inform you and explain the legal basis that allows us to do so.

In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of applicable data protection laws and your legal rights.

7. How and Where Do You Store or Transfer My Personal Data?

We take the protection of your personal data seriously. Your personal data will be stored and processed in compliance with applicable data protection laws as referenced in Part 4 of this Policy.

If we transfer your personal data outside of your country of residence, we will ensure that it is protected by appropriate safeguards in accordance with those laws. For example, transfers from the European Economic Area (EEA) or the United Kingdom may rely on approved mechanisms such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

To protect your data, we implement the following security measures:

• Limiting access only to employees, agents, contractors, and other third parties who have a legitimate business need to know, subject to confidentiality obligations;
• Applying technical and organizational measures such as encryption, secure storage, and access controls;
• Maintaining procedures for detecting, investigating, and addressing data breaches, including notifying you and/or relevant authorities when required.

8. When And With Whom Do We Share Personal Information?

We may share information in specific situations any of your personal data with any third parties for any purposes, subject to the following exceptions:

1. In order to fulfill your ordered services, we will only provide as much of your personal information to our partners, as it will be necessary for the particular service to be performed;
2. We may provide your personal data to our partners who carry out certain work and provide services (intermediaries who manage data to conclude and administer contracts with customers; IT companies that handle data to ensure the development, improvement, and maintenance of information systems; to our clients, who provide security and other services, including law, finance, tax, business management, personnel administration, and accounting services);
3. Your personal data may be provided to courts, law enforcement agencies, or state authorities to the extent required by law (e.g. bailiffs, court orders, regulatory requests);
4. Your personal data may be provided to other entities only with your individual consent if you would grant such consent on a case-by-case basis;

We may provide your personal data to other data processors not specifically listed in this Privacy Policy who perform services or carry out work on our behalf. Such processors may handle the personal data of customers and other data subjects strictly in accordance with our documented instructions and only to the extent necessary for the proper performance of their contractual obligations with us and, where applicable, the obligations established in our contract with you. We take all necessary steps to ensure that these processors implement appropriate organizational and technical security measures and maintain the confidentiality of your personal data at all times.

If any of your personal data is shared with a third party, as described above, We will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, Our obligations, and the third party’s obligations under the law, as described above in Part 7.

If any personal data is transferred outside of your country of residence, we will ensure that appropriate safeguards are in place so that your personal data is treated just as safely and securely as it would be under the applicable data protection laws referenced in Part 4.

If We sell, transfer, or merge parts of Our business or assets, your personal data may be transferred to a third party. Any new owner of Our business may continue to use your personal data in the same way(s) that We have used it, as specified in this Privacy Policy.

In some limited circumstances, We may be legally required to share certain personal data, which might include yours, if We are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.

9. Your Privacy Rights

If you want to know what personal data We have about you, you can ask Us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.

All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 11. To make this as easy as possible for you, a Subject Access Request Form is available for you to use. You do not have to use this form, but it is the easiest way to tell Us everything We need to know to respond to your request as quickly as possible.

There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover Our administrative costs in responding.

We will respond to your request without undue delay and, in any case, within one month of receiving it. In some cases, particularly if your request is more complex or if you have made multiple requests, We may need more time — up to a maximum of three months from the date We receive your request. If this is the case, we will keep you fully informed of Our progress.

10. How Do You Use Cookies?

Our Site may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

Cookie List:

Necessary
These cookies are vital for our website to work and cannot be turned off. They are triggered by your actions, like setting privacy preferences or logging in. You can adjust your browser settings to block or alert you about these cookies, but some parts of the site may not function properly. They do not store any personally identifiable information.

Statistics
These cookies track your interactions with our website, recording the pages visited and links clicked. The data collected is aggregated and anonymized, preventing the identification of individual users. The cookies are solely intended to enhance website functionality, which may involve third-party analytics services.

Preferences
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.

Marketing
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.

Unclassified
Unclassified cookies are those with undefined or undisclosed purposes. They might encompass cookies established by third-party services not accounted for within our current cookie categories.

The use of non-essential Cookies (such as statistics, preferences, or marketing) will depend on Your location and applicable laws, and We will obtain Your consent where required.

Certain features of Our Site depend on Cookies to function. tracking technologies and cookies deems these Cookies to be “strictly necessary”. These Cookies are shown in the table below. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings as detailed below, but please be aware that Our Site may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.

The following first-party Cookies may be placed on your computer or device:

In addition to the controls that we provide, and subject to applicable data protection laws in your location, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third-party Cookies. By default, most internet browsers accept Cookies, but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

You can choose to delete Cookies on your computer or device at any time, however you may lose any information that enables you to access our Site more quickly and efficiently.

It is recommended that you keep your internet browser and operating system up to date and that you consult the help and guidance provided by the developer of your internet browser and the manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

11. How Do I Contact You?

To contact Us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details:

Email address: info@qazaqkat.kz
Telephone number: +77088386326

You also have the right, depending on your place of residence, to lodge a complaint with your local data protection or privacy supervisory authority if you believe that Our processing of your personal data does not comply with applicable laws. However, We would welcome the opportunity to resolve your concerns directly, so We encourage you to contact us first.

12. Changes to this Privacy Policy

We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if We change Our business in a way that affects personal data protection.

Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.