Consent to the Collection and Processing of Personal Data

1. Data Subject and Operator

I, an individual who personally entered my name and contact details in the order form immediately before providing this consent, voluntarily consent to the collection and processing of my personal data on the terms of this document.

The name of the data subject is included in the enquiry or order record from the completed form field. Consent is accepted only where the required name field has been completed and an enquiry or order has been successfully created so that the action can be linked to the data subject.

2. Method and Time of Giving Consent

Consent is given by a separate affirmative action: the data subject selects the consent checkbox, which is not pre-selected in the original form, and then presses the button to submit the enquiry or proceed to payment.

The checkbox for accepting the Public Offer and the checkbox for this Consent are separate mandatory elements. This Consent does not include marketing communications, personalised advertising or publication of personal data.

3. Categories of Personal Data

This Consent applies to the following categories of data necessary for the stated purposes:

• customer name and contact details: telephone number and email address;
• information about an organisation and other data provided by the customer for a corporate order;
• name and necessary contact details of a passenger where the customer books a trip for another person;
• route, pickup and destination addresses, additional stops, date, time, flight number and terminal information;
• number of passengers, luggage, vehicle class, child seat, service, duration and special requests;
• final price, currency, payment status, order number and payment transaction identifiers available to the operator;
• content of enquiries, messages, order changes, cancellations, refunds, claims and incident reports where related to the order;
• technical information available to the relevant website systems: IP address, browser, session, cookies, access dates and times, and security logs;
• form submission, results of separate consents, applicable locale, timestamps and other information related to ordering and checkout.

A full card number, CVV/⁠CVC, PIN, one-time banking codes and copies of identity documents are not requested through the order form or support. They must not be sent in messages or enquiries.

4. Purposes of Processing

• price calculation and creation and performance of an enquiry or order;
• identification of the customer, communication and sending confirmations and other order-related messages;
• appointment of a carrier and transfer to it of the minimum necessary trip and passenger information;
• acceptance and confirmation of payment, sending related documents, cancellation and refunds;
• customer support and ensuring passenger accessibility and safety;
• protection of the website and the order, prevention of abuse and investigation of incidents;
• handling claims, resolving disputes and complying with legal requirements;
• mandatory accounting, tax and other record keeping required by law.

This Consent does not grant permission for marketing communications, personalised advertising or publication of personal data in publicly accessible sources.

5. Actions with Personal Data and Automated Processing

I authorise the collection, receipt, recording, systematisation, accumulation, storage, modification, supplementation, clarification, comparison, use, transfer in the cases provided for by this document, blocking, depersonalisation, anonymisation, deletion and destruction of personal data within the stated purposes.

Automated and non-automated processing is permitted, including processing an enquiry, calculation, handling payment status and technical protection of the website and order.

Access to personal data is granted to authorised persons within the scope of their functions. Retention and protection conditions are governed by the Privacy Policy and the requirements of the legislation of the Republic of Kazakhstan.

6. Disclosure to Third Parties and Cross-Border Transfers

This Consent provides for the transfer of personal data to third parties to the extent necessary. Recipients may include the appointed carrier and driver, the bank and payment provider, providers of hosting, mapping and routing data, flight information, communications, support, security, analytics and notifications, and public authorities acting under a lawful request.

Each recipient receives only the information necessary for its function. Full card details are processed by the bank or payment provider and must not be received by ICBP systems.

The website may use providers located outside the Republic of Kazakhstan. For such cross-border transfers, personal data is transferred only for the purposes listed above, to the minimum necessary extent and in compliance with the legislation of the Republic of Kazakhstan.

I do not consent to the owner, operator or third parties disseminating my personal data in publicly accessible sources. Publication of a name, contact details, route, photograph or identifiable review requires separate consent or a direct legal requirement.

7. Duration, Retention and Withdrawal

This Consent is effective from the time its record can be verified until the stated purposes have been achieved, mutual obligations have been performed and mandatory retention and claim-protection periods have expired. It does not remain effective longer than necessary for these purposes unless another period is established by the legislation of the Republic of Kazakhstan or by contract.

I may withdraw this Consent in full or in the relevant part by sending a request to info@bslimousine.kz. Assistance with preparing the request is available by phone at +7 702 910 1628 and through Telegram @bslimousine. The request should include the name, contact details and information sufficient to locate the order or consent record; a full card number and CVV/⁠CVC must not be provided.

Within fifteen business days after receiving a withdrawal, ICBP ceases processing unless continued retention or processing is required by the legislation of the Republic of Kazakhstan, or sends a reasoned refusal. Withdrawal does not affect the lawfulness of prior processing. ICBP may continue processing without consent where expressly permitted by law or where an obligation remains outstanding.

If the withdrawn data is objectively necessary for a future trip, continued performance may become impossible. ICBP will inform the customer of this before cancellation.

8. Rights of the Data Subject

To the extent provided by law, I have the right to obtain information about the existence, purposes, sources, methods and periods of processing of my personal data, review the list of such data, request correction, supplementation, blocking or destruction of unlawfully processed data, and challenge actions of ICBP before the competent authority or a court.

Before fulfilling a request, ICBP may ask for reasonable evidence of identity or authority of a representative without collecting excessive information.

9. Passenger and Minor Data

This Consent applies to the person who gives it. When providing personal data relating to another passenger, the customer separately confirms a lawful basis and authority for the transfer and undertakes to familiarise the passenger with the applicable documents. Where direct consent of the passenger is required, ICBP obtains it before the relevant processing.

An order is placed by an adult customer. Personal data relating to a minor passenger is processed to the minimum extent necessary for a safe trip on the basis of the authority of a parent, guardian or other legal representative.

10. Evidence and Applicable Version

When an enquiry or order is created, the record stores the name, order identifier, applicable locale, values of the separate mandatory consents, order or payment status where created, and the timestamp of the record. Website technical logs may contain request information within the configuration of the relevant systems.

A copy of the current version of this Consent and information about the order record may be requested at info@bslimousine.kz.