Career in a leading advertising group in Central Asia
DASM Group

1. General Provisions

1.1. This personal data processing policy has been drawn up in compliance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and Its Protection" and determines the procedure for processing personal data and measures to ensure the security of personal data of the DASM Group of Companies (hereinafter referred to as the Operator).

1.2. The Operator’s most important goal and condition for carrying out its activities is the observance of human rights and freedoms when processing their personal data, including the protection of the rights to personal and family privacy.

1.3. This Operator policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the website https://www.dasm.kz/

2. Key Terms Used in the Policy

Automated Personal Data Processing – processing of personal data using means of computer technology;

Blocking of Personal Data - temporary cessation of personal data processing (except where processing is necessary to clarify personal data);

Website – a set of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://www.dasm.kz/

Personal Data Information System – a series of personal data contained in databases, and information technologies and technical means that ensure their processing;

Depersonalization of Personal Data – actions making it impossible to determine without any additional information the ownership of personal data by a specific User, or another owner of personal data;

Processing of Personal Data – any action (operation) or series of actions (operations) performed with the use of automation tools or without the use of such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data;

Personal Data – any information directly or indirectly related to a specific or determinable User of the Website;

User – any visitor to the Website registered in the manner regulated by the site;

Provision of Personal Data – actions aimed at disclosing personal data to a specific person or a specific circle of persons;

Distribution of Personal Data – any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or familiarizing an unlimited circle of persons with personal data, including disclosure of personal data in the media, posting in information and telecommunications networks or providing access to personal data in any other way;

Cross-Border Data Transfer – transfer of personal data to the territory of a foreign state to a government body of a foreign state, a foreign individual or a foreign legal entity;

Destruction of Personal Data – any actions as a result of which personal data are destroyed irrevocably with the impossibility of further restoration of the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed.

3. The Operator may Collect, Process and Retain the Following Personal Data of the User

1.   Last name, first name, patronymic;

2.  Email address;

3.  Phone numbers;

4.  The website also collects and processes anonymized data about visitors (including cookies) using Internet statistics services (Yandex Metrica and Google Analytics, and others);

5.   Company name.

6.  In the text of the Policy, the above data are hereinafter combined by the general concept of Personal Data.

4. Purposes of Collecting and Processing Personal Data

4.1. The purpose of collecting and processing the User's personal data is to inform the User by sending emails about any open vacancies and career opportunities.

4.2. The Operator also has the right to send the User notifications about new products and services, special offers and various events. The User may opt out of receiving informational messages by sending the Operator an email to hr@dasm.kz marked ‘Waiver of Notifications’.

4.3. Anonymized User Data collected using Internet statistics services are used to collect information about the Users’ actions on the website, and to improve the quality of the website and its content.

4.4. The Operator shall have the right to disclose personal data to third parties affiliated with the Operator, subject to the conditions of ensuring the security of personal data in compliance with the provisions of this Policy.

5. Legal Grounds for Collecting, Processing and Retaining Personal Data

5.1. The Operator shall only collect, process and retain the User's personal data if the User fills them in and/or sends them independently through special forms provided on the Website. By filling in the relevant forms and/or sending their personal data to the Operator, the User expresses their consent to the terms of this Policy and thereby expresses their consent to the collection, processing and retention of their personal data by the Operator under the conditions set out in this Policy.

5.2. The Operator shall process anonymized data about the User if permitted in the User's browser settings.

6. The procedure for Collecting, Retaining, Transferring, and Otherwise Processing Personal Data

6.1. The security of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully comply with the requirements of the current legislation in the field of personal data protection.

6.2. The Operator shall ensure the security of personal data and take all possible measures to prevent unauthorized persons from accessing such personal data.

6.3. The User's personal data shall never, under any circumstances, be disclosed to third parties, with the exception of persons affiliated with the Operator, except in cases related to compliance with the current legislation of the Republic of Kazakhstan.

6.4. In the event that inaccuracies are detected in the personal data, the User may update them on their own, by sending a notification to the Operator's email address hr@dasm.kz with the subject line "Personal Data Update".

6.5. The period for processing personal data shall be unlimited. The User may at any time revoke their consent to the processing of personal data by sending the Operator a notice via e-mail to the Operator's e-mail address hr@dasm.kz with the subject line "Revocation of Consent to the Processing of Personal Data".

7. Cross-Border Transfer of Personal Data

7.1. Before commencing the cross-border transfer of personal data, the Operator shall ensure that the foreign state to whose territory the personal data is to be transferred ensures reliable protection of the rights of personal data owners.

7.2. Any cross-border transfer of personal data to the territory of foreign states that do not meet the above requirements may only be performed if there is written consent from the personal data owner to the cross-border transfer of their personal data and/or execution of an agreement to which the personal data owner is a party.

8. Final Provisions

8.1. This document shall reflect any changes to the Operator's personal data processing policy. The policy shall be valid indefinitely until it is replaced by a new version.

8.2. The Operator shall have the right to update the terms of this Policy by posting information about such changes on the Website in advance. If the User fails to state their disagreement with the changes, the collection, processing and retention of personal data shall be carried out in accordance with the revised terms.

8.3. The current version of the Policy is freely available on the Internet