This is an English translation of the Russian text, provided for convenience.
This Personal Data Privacy Policy (the “Policy”) sets out how personal data of users of the Saparga service at saparga.kz is collected, processed and protected. The Policy is based on the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” and applies to data the Operator receives when bus tickets are booked and used.
01Terms
- Operator – “One Day Labs” Limited Liability Partnership, BIN 261140009438, owner of the Saparga service; address: 4/1 Kayym Mukhamedkhanov St., Nura district, Astana, Republic of Kazakhstan;
- Service – the saparga.kz website, where users find trips, choose seats and book e-tickets for carriers’ intercity bus trips;
- Buyer – an individual placing an order in the Service;
- Passenger – an individual in whose name a ticket is issued (the Buyer and/or persons whose details the Buyer entered when placing the order);
- Carrier – the party that operates the trip and is named on the ticket;
- Personal data – information relating to an identified or identifiable data subject, recorded on electronic, paper and/or other tangible media;
- Processing of personal data – actions aimed at accumulating, storing, changing, supplementing, using, disseminating, depersonalising, blocking and destroying personal data.
02What data is processed
2.1When placing an order, the Buyer provides:
- for each Passenger: surname, first name and patronymic (if any), IIN for citizens of the Republic of Kazakhstan, or passport number and citizenship for foreign citizens, and sex;
- the Buyer’s contact details: email address and phone number.
2.2The Service also stores trip data (route, date, seat, booking code, boarding mark) and payment data (amount, status and payment number in the payment system).
2.3Bank card details are entered only on the bank’s secure payment page and are not passed to the Operator.
2.4Technical data: IP address, to protect the Service against abuse; a cookie with the chosen site language. The list of purchased tickets and the last search are remembered only in the browser of the Buyer’s device and are not sent to the server.
03Purposes of processing
3.1The Operator processes only the personal data needed to:
- issue and send the e-ticket;
- board the Passenger: the Carrier’s driver checks the ticket and sees the Passenger’s name and seat;
- accept payments and make refunds;
- notify the Buyer of changes to or cancellation of a trip;
- answer Buyers’ requests;
- keep records of sales and meet the requirements of the legislation of the Republic of Kazakhstan;
- protect against fraud and forged tickets.
3.2The Operator does not use personal data for advertising and does not sell it to third parties.
04Consent to processing
4.1The Buyer consents to the collection and processing of personal data by ticking a separate box when placing an order. The Operator keeps the date of consent and the edition of the Policy it was given for.
4.2By entering other Passengers’ details, the Buyer confirms that they have obtained those persons’ consent to the transfer and processing of their data for issuing tickets.
4.3Consent may be withdrawn by contacting the Operator. After consent is withdrawn, no new tickets can be issued with that data; data already processed is kept within the limits set by the legislation of the Republic of Kazakhstan.
05Storage and protection
- personal data is stored on servers located in the Republic of Kazakhstan (hosting provider Hoster.kz);
- IINs and passport numbers are stored encrypted; staff and Carrier accounts show only the last 4 characters of the document;
- only authorised staff with personal accounts have access to the data, and only within their role: a driver sees only the passengers of their own trips;
- the site uses a secure connection (HTTPS); important staff actions are logged;
- personal data is kept for as long as needed for the purposes of processing and as required by the legislation of the Republic of Kazakhstan.
06Transfer of data to third parties
6.1Personal data is transferred only to the extent needed to provide the services:
- to the Carrier – the Passenger’s name, sex, seat, booking code and the last 4 characters of the document – for boarding and carriage;
- to the partner bank that processes payments – the order amount and number, and the Buyer’s email and phone number – for payment and refunds;
- to the hosting provider’s mail service – the Buyer’s email address and ticket details – for sending emails;
- to authorised state bodies of the Republic of Kazakhstan – in the cases and manner established by law.
07Rights of the data subject
7.1The data subject has the right to know what data about them is processed, to request that it be changed, supplemented, blocked or destroyed, and to withdraw consent to processing – in the manner and within the limits set by the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.
7.2To do so, contact the Operator at support@saparga.kz or +7 700 280 32 68.
7.3The Buyer is responsible for the accuracy of the data they provide.
08Cookies
8.1The site uses only necessary cookies: the chosen site language and staff sign-in to the account. No advertising or analytics cookies are used.
09Other terms
9.1The Policy applies to the saparga.kz website. The Operator is not responsible for third-party sites the Buyer visits through links, including the bank’s payment page, which operates under the bank’s rules.
9.2The Operator may change the Policy. A new edition is published on this page and applies to orders placed after its publication.
9.3The Policy and relations connected with the processing of personal data are governed by the legislation of the Republic of Kazakhstan.
9.4Questions and requests about the Policy: support@saparga.kz, +7 700 280 32 68 (24/7); 4/1 Kayym Mukhamedkhanov St., Nura district, Astana, Republic of Kazakhstan.