Privacy Policy

1. Who is responsible for your data

The data you send through academy.opencon.kz is the responsibility of the operator — the individual entrepreneur who runs the Academy’s courses and seminars.

Operator

Individual entrepreneur Aliyev Muslim Zokhrabovich (IE “Open Consulting”)

IIN

750829300647

Address

51 Zholdasbekov St, Al-Farabi district, Shymkent

Place of lessons

Tole Bi St, 25, Saryagash

Data questions

info@opencon.kz

This policy follows Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On personal data and their protection”.

2. What data we collect

Only what we need to sign you up for a course or seminar and contact you.

What you enter in the form

• first and last name;
• phone number.

What is saved automatically

When you send an application, the IP address, date and time of the request and the browser type are recorded. This protects the form from automated submissions.

What we don’t collect

The site doesn’t collect your IIN, address, ID details or payment details. The organiser asks for the contract details separately, when preparing the contract.

3. Why we use the data

Only to sign you up for an event.

• to register you for the chosen Open Consulting Academy course or seminar;
• to contact you and confirm your place — for example, the organiser calls the number you gave;
• to prepare the contract;
• to protect the form from spam and abuse;
• if you allowed analytics, to see from anonymous Google Analytics 4 statistics which pages and buttons are useful.

We don’t use the data for advertising mailings without your separate consent and don’t make automated decisions about you.

4. Your consent

We process the data on the basis of your consent.

• You give it by ticking the box in the form before sending the application. The application can’t be sent without consent.
• The full consent text opens from the link next to the tick box.
• If you are under 18, your legal representative submits the application.

5. Where the data is stored

Applications are stored in Kazakhstan. On the way, the e-mail passes through a Google service that doesn’t keep it.

• The application reaches the operator as an e-mail to academy@opencon.kz. The mail server is in the Republic of Kazakhstan (PS.kz hosting).
• To send the e-mail, the application passes through the Google Cloud service (processing in the Republic of Poland). The application isn’t stored there; technical request logs (IP address, time) are kept for up to 30 days.
• The site pages are served through Firebase Hosting (Google). The pages themselves contain none of your data.

The application passing through a Google service is a cross-border transfer of personal data. It happens with your consent.

6. Who we share the data with

We don’t sell your data or pass it to third parties for their own purposes.

• The operator and staff who handle applications.
• Service providers that technically run the site and e-mail: Google (Google Cloud, Firebase and, with your consent, Google Analytics) and the hosting provider PS.kz.
• Government bodies, only in cases provided for by the law of the Republic of Kazakhstan.

7. How we protect the data

We use technical measures so the data doesn’t reach outsiders.

• data is sent only over a secure connection (HTTPS, TLS);
• the mailbox password is kept in the protected Google Secret Manager store and is not in the site code;
• the form is protected from automated submissions and limits the number of applications from one address;
• names and phones are not written to the service logs;
• only staff who handle applications have access to the applications mailbox.

8. How long we keep the data

No longer than needed.

• Applications — until the purposes of processing are achieved and the operator’s obligations are fulfilled, or until consent is withdrawn if there are no outstanding obligations. After that the application is deleted from the mailbox.
• Google Cloud technical logs — up to 30 days, then deleted automatically.

9. How to control your data

At any time you can find out what data we hold about you, correct it or delete it.

Your rights

Under Article 24 of Law No. 94-V you can, in particular:

• know whether the operator has your data and receive information about it;
• ask for the data to be corrected or completed;
• ask for the data to be blocked or deleted if it is processed in breach of the law;
• withdraw consent to processing;
• appeal the operator’s actions to the competent authority or in court.

How to send a request

Write to info@opencon.kz with the subject “Personal data”. Give the name and phone number from the application and what needs to be done.

For example: “Please delete my data. Application for the Beginner Accountant course, name Aigerim, phone +7 707 000 00 00.”

After consent is withdrawn, the operator stops processing within fifteen working days (Art. 8(7) of Law No. 94-V), unless further processing is required by law. Other requests are answered within the time limits set by the law of the Republic of Kazakhstan.

10. Cookies and similar technologies

Essential cookies remember your choice, and Google analytics is turned on only if you allowed it. There are no advertising pixels on the site.

• Your choice is stored in the oc_consent cookie for up to 12 months, so the banner doesn’t appear on every page.
• Google Analytics 4 loads only if you clicked “Accept all” or allowed “Analytics” in the cookie settings. It then sets the _ga and _ga_3QPPTKXPN8 cookies, and we see anonymous statistics: which pages are opened, how far they are scrolled, clicks on the sign-up, WhatsApp, phone and directions buttons, starting to fill in the form and sending an application, and the page language. Your name, phone and form answers are not sent to Google Analytics. Google (Google LLC) receives the IP address and browser details and processes them under its own rules (Google Privacy Policy); the data may be processed outside Kazakhstan. Statistics are kept in Google Analytics for up to 14 months.
• Without consent, Google Analytics doesn’t load and sends nothing. You can change or withdraw your choice at any time with the “Cookie settings” link at the bottom of the site: after you refuse, the Google Analytics cookies are deleted and the page reloads.
• So that the page opens at the same place when you switch language, the browser temporarily remembers the scroll position in session storage. If analytics is allowed, it also marks there that you started filling in the form, so it isn’t counted twice. This is not personal data; it is deleted when the tab is closed.
• Application draft. While you fill in the form, your name, phone and answers (not the consent tick) are kept in this tab’s session storage, so nothing is lost if the page reloads. The draft is not sent to the server; it is deleted after the application is sent or when the tab is closed.
• Pages with an address include an embedded Google map. When the map appears on screen, the browser contacts Google’s servers: they receive the IP address and browser details and may use cookies under their own rules (Google Privacy Policy, Google Maps Additional Terms).

If other services appear on the site, we will update this policy.

11. Changes to this policy

We may update the policy, for example if the way data is processed changes.

• The new version is published on this page, with the effective date at the top.
• If the changes affect data already received and the law requires it, we will ask for your consent.

Key terms

Personal data

Information that identifies a specific person, such as a name and phone number.

Operator

The party that collects and processes personal data and is responsible for protecting it. Here, IE “Open Consulting”.

Consent

Your permission to process the data. You give it with the tick box in the form and can withdraw it at any time.

Cross-border transfer

Transfer of personal data outside Kazakhstan. For us, this is the application passing through a Google service in Poland when the e-mail is sent.

IP address

A number a device gets when it goes online. The site uses it to tell one request from another.

Cookie

A small file a site stores in your browser. Our site stores your cookie choice in a cookie, and Google Analytics sets its own cookies only after your consent.

Session storage (sessionStorage)

Space in the browser for the temporary data of one tab. Cleared when the tab is closed.