Privacy Policy

1. General Provisions
The present Personal Data Processing Policy is drafted in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V "On Personal Data and Their Protection" (hereinafter — the Law on Personal Data) and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by LLP "BACCA MODEL MANAGEMENT KAZAKHSTAN" (hereinafter — the Operator).

1.1. The Operator sets as its most important goal and condition for its activities the observance of human and civil rights and freedoms during the processing of personal data, including the protection of the right to privacy, personal, and family secrets.
1.2. This Operator’s policy regarding the processing of personal data (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors to the website https://bacca-models.com.

2. Basic Concepts Used in the Policy

2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary suspension of personal data processing (unless processing is necessary to clarify the data).
2.3. Website — a collection of graphic and informational materials, as well as computer programs and databases, ensuring their accessibility on the Internet at the network address https://bacca-models.com.
2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing.
2.5. Anonymization of personal data — actions that make it impossible to determine the ownership of personal data to a specific User or other data subject without additional information.
2.6. Processing of personal data — any action (operation) or set of actions performed with or without automation tools, including collection, recording, organization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.
2.7. Operator — a state body, municipal body, legal entity, or individual who independently or jointly with others organizes and/or performs the processing of personal data, and determines the purposes, composition of data, and actions performed with it.
2.8. Personal data — any information relating directly or indirectly to a specific or identifiable User of the website https://bacca-models.com.
2.9. Personal data authorized for distribution — data to which the subject has provided access to an unrestricted circle of persons by giving consent in the manner prescribed by the Law on Personal Data.
2.10. User — any visitor to the website https://bacca-models.com.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or circle of persons.
2.12. Distribution of personal data — any actions aimed at disclosing personal data to an undefined circle of persons, including publication in mass media or placing in information networks.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state, a foreign authority, or a foreign individual/legal entity.
2.14. Destruction of personal data — actions resulting in the permanent destruction of data or material carriers without the possibility of recovery.

3. Basic Rights and Obligations of the Operator

3.1. The Operator has the right to:
- Receive reliable information and documents containing personal data from the subject.
- Continue processing without consent if the subject withdraws consent, provided there are grounds specified in the Law on Personal Data.
- Independently determine the list of measures necessary to ensure compliance with the Law on Personal Data.
3.2. The Operator is obliged to:
- Provide the subject, upon request, with information concerning the processing of their data.
- Organize processing in accordance with the current legislation.
- Respond to requests from subjects and their legal representatives.
- Notify the authorized body for the protection of rights within 10 days upon request.
- Publish or otherwise ensure unrestricted access to this Policy.
- Take legal, organizational, and technical measures to protect data from unauthorized access, destruction, or modification.
- Stop the transfer and destroy data in cases provided for by the Law on Personal Data.

4. Basic Rights and Obligations of Data Subjects

4.1. Subjects have the right to:
- Receive information regarding the processing of their data in an accessible form.
- Demand clarification, blocking, or destruction of data if it is incomplete, outdated, or inaccurate.
- Set a condition of prior consent for data processing for marketing purposes.
- Withdraw consent or demand the termination of processing.
- Appeal against the Operator's actions in court or to an authorized body.
4.2. Subjects are obliged to:
- Provide the Operator with accurate data.
- Notify the Operator about updates or changes to their data.
4.3. Persons who provide the Operator with false information or information about another subject without consent bear responsibility according to legislation.

5. Principles of Personal Data Processing

5.1. Processing is carried out on a lawful and fair basis.
5.2. Processing is limited to achieving specific, predetermined, and legitimate goals.
5.5. The content and volume of processed data must correspond to the stated purposes; redundancy is not permitted.
5.7. Storage is carried out in a form that allows identifying the subject for no longer than the processing purposes require, unless the period is established by law or contract.

6. Purposes of Personal Data Processing
Purpose of ProcessingPersonal DataLegal BasisTypes of Processing
Informing the User via email; searching and selecting candidates; assessing compliance with agency requirements; database maintenance; contacting applicants; concluding contracts.

Surname, first name, patronymic; email address; phone numbers; year, month, date, and place of birth; photographs; physical parameters.

Consent of the personal data subject.

Collection, recording, systematization, accumulation, storage.

7. Conditions for Personal Data Processing

7.1. Processing is carried out with the subject's consent.
7.4. Processing is necessary for the execution of a contract where the subject is a party, beneficiary, or guarantor, or for concluding a contract at the subject's initiative.
7.5. Processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, provided that the subject's rights are not violated.

8. Procedure for Collection, Storage, Transfer, and Other Processing

8.2. User data will never, under any circumstances, be transferred to third parties, except for compliance with legislation or if consent is given for the execution of a civil law contract.
8.3. The User may update data by emailing info@bacca-models.com with the note "Personal Data Update".
8.4. The User may withdraw consent at any time by emailing info@bacca-models.com with the note "Withdrawal of consent for personal data processing".

9. List of Actions Performed by the Operator

9.1. The Operator performs collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, and destruction of data.

10. Cross-border Transfer

10.1. Before starting cross-border transfer, the Operator must notify the authorized body of its intention.

11. Confidentiality of Personal Data

11.1. The Operator and other persons who have gained access to personal data are obliged not to disclose it to third parties without consent, unless otherwise provided by law.

12. Final Provisions

12.1. The User can obtain any clarifications by contacting the Operator at info@bacca-models.com.
12.2. Any changes will be reflected in this document. The Policy is valid indefinitely until replaced by a new version.
12.3. The current version is available at: https://bacca-models.com

Privacy Policy

1.1. The Operator sets as its most important goal and condition for its activities the observance of human and civil rights and freedoms during the processing of personal data, including the protection of the right to privacy, personal, and family secrets.

1.2. This Operator’s policy regarding the processing of personal data (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors to the website https://bacca-models.com.

2. Basic Concepts Used in the Policy

2.1. Automated processing of personal data — processing of personal data using computer technology.

2.2. Blocking of personal data — temporary suspension of personal data processing (unless processing is necessary to clarify the data).

2.3. Website — a collection of graphic and informational materials, as well as computer programs and databases, ensuring their accessibility on the Internet at the network address https://bacca-models.com.

2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing.

2.5. Anonymization of personal data — actions that make it impossible to determine the ownership of personal data to a specific User or other data subject without additional information.

2.7. Operator — a state body, municipal body, legal entity, or individual who independently or jointly with others organizes and/or performs the processing of personal data, and determines the purposes, composition of data, and actions performed with it.

2.8. Personal data — any information relating directly or indirectly to a specific or identifiable User of the website https://bacca-models.com.

2.9. Personal data authorized for distribution — data to which the subject has provided access to an unrestricted circle of persons by giving consent in the manner prescribed by the Law on Personal Data.

2.10. User — any visitor to the website https://bacca-models.com.

2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or circle of persons.

2.12. Distribution of personal data — any actions aimed at disclosing personal data to an undefined circle of persons, including publication in mass media or placing in information networks.

2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state, a foreign authority, or a foreign individual/legal entity.

2.14. Destruction of personal data — actions resulting in the permanent destruction of data or material carriers without the possibility of recovery.

3. Basic Rights and Obligations of the Operator

3.1. The Operator has the right to:

Receive reliable information and documents containing personal data from the subject.

Continue processing without consent if the subject withdraws consent, provided there are grounds specified in the Law on Personal Data.

Independently determine the list of measures necessary to ensure compliance with the Law on Personal Data.

3.2. The Operator is obliged to:

Provide the subject, upon request, with information concerning the processing of their data.

Organize processing in accordance with the current legislation.

Respond to requests from subjects and their legal representatives.

Notify the authorized body for the protection of rights within 10 days upon request.

Publish or otherwise ensure unrestricted access to this Policy.

Take legal, organizational, and technical measures to protect data from unauthorized access, destruction, or modification.

Stop the transfer and destroy data in cases provided for by the Law on Personal Data.

4. Basic Rights and Obligations of Data Subjects

4.1. Subjects have the right to:

Receive information regarding the processing of their data in an accessible form.

Demand clarification, blocking, or destruction of data if it is incomplete, outdated, or inaccurate.

Set a condition of prior consent for data processing for marketing purposes.

Withdraw consent or demand the termination of processing.

Appeal against the Operator's actions in court or to an authorized body.

4.2. Subjects are obliged to:

Provide the Operator with accurate data.

Notify the Operator about updates or changes to their data.

4.3. Persons who provide the Operator with false information or information about another subject without consent bear responsibility according to legislation.

5. Principles of Personal Data Processing

5.1. Processing is carried out on a lawful and fair basis.

5.2. Processing is limited to achieving specific, predetermined, and legitimate goals.

5.5. The content and volume of processed data must correspond to the stated purposes; redundancy is not permitted.

5.7. Storage is carried out in a form that allows identifying the subject for no longer than the processing purposes require, unless the period is established by law or contract.

7.1. Processing is carried out with the subject's consent.

7.4. Processing is necessary for the execution of a contract where the subject is a party, beneficiary, or guarantor, or for concluding a contract at the subject's initiative.

7.5. Processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, provided that the subject's rights are not violated.

8. Procedure for Collection, Storage, Transfer, and Other Processing

8.2. User data will never, under any circumstances, be transferred to third parties, except for compliance with legislation or if consent is given for the execution of a civil law contract.

8.3. The User may update data by emailing info@bacca-models.com with the note "Personal Data Update".

8.4. The User may withdraw consent at any time by emailing info@bacca-models.com with the note "Withdrawal of consent for personal data processing".

9. List of Actions Performed by the Operator

9.1. The Operator performs collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, and destruction of data.

10. Cross-border Transfer

10.1. Before starting cross-border transfer, the Operator must notify the authorized body of its intention.

11. Confidentiality of Personal Data

11.1. The Operator and other persons who have gained access to personal data are obliged not to disclose it to third parties without consent, unless otherwise provided by law.

12. Final Provisions

12.1. The User can obtain any clarifications by contacting the Operator at info@bacca-models.com.

12.2. Any changes will be reflected in this document. The Policy is valid indefinitely until replaced by a new version.

12.3. The current version is available at: https://bacca-models.com