Privacy Policy

(Regulations on the processing of personal data of users of the "Collections Online" website)

 

This Privacy Policy (hereinafter referred to as the Policy) applies to all personally identifiable information that the Almaty Museum of Arts Foundation may obtain about the User on this website https://collection.almaty.art/  (hereinafter referred to as the Site) while using the Site, their personal account on the Site, and the Site's programs and products.
By submitting personal and other data to the Operator through the Site, the User confirms their consent to the use of such data under the terms set forth in this Privacy Policy.
If the User does not agree with the terms of this Privacy Policy, they must stop using the Site.

Using the Site by the User constitutes unconditional acceptance of this Privacy Policy.

1. TERMS
1.1. Site - the website located on the Internet at https://collection.almaty.art/.
1.2. User - the person using the Site.
1.3. Legislation — the current legislation of the Republic of Kazakhstan.
1.4. Personal Data — the User's personal data, which the User provides voluntarily upon registration or while using the Website's functionality.
1.5. Data — other data about the User (not included within the definition of Personal Data).
1.6. Registration — the User completing the Registration Form located on the Website by providing the required information.
1.7. Registration Form — the form located on the Website that the User must complete to fully use the Website.
1.8. Service(s) — the services provided by the Operator based on the agreement.

2. COLLECTION AND PROCESSING OF PERSONAL DATA

2.1. The Operator collects and stores only the Personal Data necessary for the provision of the Operator's Services and interaction with the User.
2.2. Personal data may be used for the following purposes:
2.2.1 Providing Services to the User;
2.2.2 User identification;
2.2.3 Interacting with the User;
2.2.4 Conducting statistical and other research;
2.3. The Operator may also process the following data:
*Email address;
The following data is collected automatically when you visit the website:
*Traffic data;
*IP address;
*Behavioral data collected using cookies and analytics services;
*Browser information (or other program accessing the website);
*Access time;
*Pages visited.
2.4. The User is prohibited from providing personal data of third parties on the Website (except when representing the interests of such persons, provided they have documentary evidence of such actions).

3. PROCEDURE FOR PROCESSING PERSONAL AND OTHER DATA

3.1. The Operator undertakes to use Personal Data in accordance with the Law "On Personal Data" of the Republic of Kazakhstan and the Operator's internal documents.
3.2. The User's Personal Data and other Data are kept confidential, except in cases where such data is publicly available.
3.3. The Operator has the right to retain an archived copy of Personal Data. The Operator has the right to store Personal Data and Data on servers outside the Republic of Kazakhstan.
3.4. The Operator has the right to transfer Personal Data and Data of the User without the User's consent to the following persons:
3.4.1. government agencies, including inquiry and investigative agencies, and local government bodies upon their reasoned request;
3.4.2. in other cases expressly provided for by the current legislation of the Republic of Kazakhstan.
3.5. The Operator has the right to transfer Personal Data and Data to third parties not specified in paragraph 3.4. of this Privacy Policy, in the following cases:
3.5.1 The User has consented to such actions;
3.5.2 The transfer is necessary for the User's use of the Website or the provision of Services to the User;
3.6. The Operator carries out automated processing of Personal Data and Data.

4. PERSONAL DATA PROTECTION

4.1. The Operator ensures appropriate protection of Personal and other data in accordance with the Law and takes necessary and sufficient organizational and technical measures to protect Personal Data.
4.2. The security measures applied, among other things, protect Personal Data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions by third parties.

5. OTHER PROVISIONS

5.1. This Privacy Policy and the relationship between the User and the Operator arising from the application of the Privacy Policy are governed by the laws of the Republic of Kazakhstan.
5.2. All possible disputes arising from this Agreement shall be resolved in accordance with the current legislation of the Operator's place of registration. Before filing a lawsuit, the User must comply with the mandatory pre-trial procedure and submit a corresponding claim to the Operator in writing. The response period for the claim is 30 (thirty) business days.
5.3. If, for any reason, one or more provisions of the Privacy Policy are deemed invalid or unenforceable, this shall not affect the validity or applicability of the remaining provisions of the Privacy Policy.
5.4. The Operator reserves the right to unilaterally amend the Privacy Policy (in whole or in part) at any time without prior consent from the User. All changes take effect from the moment they are posted on the Website.
5.5. The User undertakes to monitor changes to the Privacy Policy by reviewing the current version.
5.6. Any suggestions or questions regarding this Privacy Policy should be communicated by email to: admin@almaty.art

Date of the last revision of the Policy: August 3, 2026.