tehprof.kz Documents Data Processing Terms
Data Processing Terms
This document applies when the Client enters personal data of its customers, counterparties and employees into the products. For medical data, cross-border transfer beyond that described in the list of subprocessors, and special requirements, an individual annex is concluded.
1. Roles
The Client determines the purposes and scope of the data processed and is responsible for the legal basis and data subjects' consents. Tehsnab Group LLP (the Operator) processes data only on the Client's documented instructions, expressed by the contract, the product settings and the actions of the Client's users.
2. Subject matter, categories, duration
- Subject matter: hosting and processing of data within the functions of the selected Platform modules.
- Data subjects: the Client's customers, counterparties and employees, and their representatives.
- Data: contact details, contents of tickets, bookings and messages, attachments, identifiers, technical logs.
- Duration: the term of the contract and the data export period after it ends.
3. Operator's obligations
- process data only to provide the services and not use it for other purposes;
- ensure confidentiality on the part of persons given access to the data;
- apply the security measures described in the Privacy Policy;
- notify the Client without undue delay of an incident affecting its data;
- assist the Client in responding to data subject requests, taking into account the nature of the processing;
- engage subprocessors from the published list; give advance notice of material changes to the list where practically and legally possible;
- on the Client's request, provide information needed to demonstrate compliance with these obligations.
4. Client's obligations
- enter data only with a lawful basis and consents, having informed data subjects of the processing;
- manage its users' access and revoke it in good time;
- not enter special categories of data (including medical data) into the products without an individual annex.
5. Return and deletion
After the contract ends the Client has 30 calendar days to export data, after which the data is permanently deleted; backups are deleted within 14 days after the primary data. Data whose retention is expressly required by law is retained to the extent necessary.
6. Contact
ilya.uchkin@tehprof.kz · Tehsnab Group LLP, BIN 190440008175.