Privacy Policy
Policy on Personal Data Processing
General Provisions
This personal data processing policy is drawn up in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V "On Personal Data and Their Protection", as well as international treaties ratified by the Republic of Kazakhstan. This Privacy Policy is developed in accordance with their norms and defines the procedure for processing personal data and measures to ensure the security of personal data taken by "Inventivo" LLP (hereinafter referred to as the Operator).
The Operator sets compliance with the rights and freedoms of individuals as its most important goal and condition for carrying out its activities when processing their personal data, including protecting the right to privacy.
This Operator's policy on personal data processing (hereinafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website https://www.inventivo.io & https://inventivo.kz
Key Concepts Used in the Policy
Automated processing of personal data - processing of personal data using computer technology;
Blocking of personal data - temporary suspension of the processing of personal data (except in cases where processing is necessary to clarify personal data);
Website - a set of graphic and informational materials, as well as computer programs and databases, providing their availability on the Internet at the network addresses https://www.inventivo.io & https://inventivo.kz;
Personal data information system - a set of personal data contained in databases, and ensuring their processing by information technologies;
De-identification (depersonalization) of personal data - actions as a result of which it is impossible to determine without the use of additional information the belonging of personal data to a specific User or other subject of personal data;
Processing of personal data - any action (operation) or set of actions (operations) carried out using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), de-identification, blocking, deletion, destruction of personal data;
Operator - a government agency, municipal agency, legal entity, or individual, independently or jointly with other persons, organizing and/or carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data subject to processing, actions (operations) performed with personal data;
Personal data - any information directly or indirectly related to a certain or determinable User of the website https://www.inventivo.io & https://inventivo.kz;
User - any visitor to the website https://www.inventivo.io & https://inventivo.kz;
Providing personal data - actions aimed at disclosing personal data to a specific person or a specific group of persons;
Distribution of personal data - any actions aimed at disclosing personal data to an indefinite group of persons (transferring personal data) or making personal data available to an unlimited number of persons, including disclosing personal data in mass media, posting on information and telecommunication networks, or providing access to personal data by any others;
Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state to a foreign state authority, foreign individual, or foreign legal entity;
Destruction of personal data - any actions resulting in the irretrievable destruction of personal data with the impossibility of further restoring the content of personal data in the personal data information system and/or the destruction of material carriers of personal data.
The Operator may process the following personal data of the User:
Also, the website collects and processes anonymized data about visitors (including "cookie" files) using internet statistics services (Yandex Metrica, Google Analytics, and others).
The above-listed data are further referred to in the text of the Policy as Personal Data.
Purposes of processing personal data
The purpose of processing the User's personal data includes: Registering Users for a doctor's appointment through the Website; Providing access to a medical-rehabilitation program, treatment plan, and communication with a professional doctor. The Website provides general information about remote rehabilitation using advanced platform technology, making rehabilitation programs available for users to continue recovery outside of the hospital settings. These programs are not a diagnosis before medical manipulation and do not replace professional medical care/diagnosis/treatment.
The purpose of processing data includes providing support for the use of the Website, sending advertising and marketing materials, improving the Website's operation, and receiving feedback and suggestions about the Website's operation.
The Operator has the right to send the User notifications about new products and services, special offers, and various events via electronic mailings, including using messaging apps such as WhatsApp.
The User can always opt-out of receiving informational messages by sending an email to the Operator at makpal.ikramova@inventivo.io with the subject "Opting out of notifications about new products and services and special offers".
The Operator collects and processes personal data of Users, including data related to their health. Such data are provided by Users directly and only to doctors or medical organizations that are obliged to maintain their confidentiality in accordance with applicable laws of the Republic of Kazakhstan.
Anonymous User data collected through internet statistics services is used to gather information about Users' actions on the website, improve the quality of the website and its content.
Legal Basis for Personal Data Processing
The Operator processes the User's personal data only if they are filled in and/or submitted by the User independently through special forms located on the website https://www.inventivo.io & https://inventivo.kz. By filling out the respective forms and/or submitting their personal data to the Operator, the User expresses their consent to this Policy.
The Operator processes anonymized data about the User if permitted in the User's browser settings (cookie file storage enabled and JavaScript technology used).
Procedure for collecting, storing, transmitting, and other types of processing of personal data
The security of personal data processed by the Operator is ensured by implementing legal, organizational, and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.
The Operator ensures the security of personal data and takes all possible measures to prevent unauthorized access to personal data. The User's personal data will never, under any circumstances, be transferred to third parties except in cases related to compliance with applicable legislation.
In case of inaccuracies in personal data, the User can update them independently by sending a notification to the Operator's email address makpal.ikramova@inventivo.io with the subject "Updating personal data".
The processing period of personal data is unlimited. The User can withdraw their consent to the processing of personal data at any time by sending a notification to the Operator via email to the Operator's email address makpal.ikramova@inventivo.io with the subject "Withdrawal of consent to the processing of personal data".
Cross-Border Transfer of Personal Data
Before initiating the cross-border transfer of personal data, the Operator must ensure that the foreign state, to which the transfer of personal data is intended, provides reliable protection of the rights of the subjects of personal data.
The cross-border transfer of personal data to the territories of foreign states that do not meet the above-mentioned requirements may only be carried out if there is written consent from the subject of personal data for the cross-border transfer of their personal data and/or the performance of a contract, the party to which is the subject of personal data.
Final Provisions
The User can obtain any clarifications on issues related to the processing of their personal data by contacting the Operator via email at makpal.ikramova@inventivo.io.
Any changes to the policy for processing personal data by the Operator will be reflected in this document. The policy is valid indefinitely until replaced by a new version.