Privacy Policy (GDPR)
1. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR): upbonus.io NSR Kazakhstan (НСР Казахстан) Tovarishchestvo s ogranichennoy otvetstvennostyu Kazakhstan, Almaty city, Bostandyk district, Ulitsa Edil Ergoshin, House 27, 050060 E-mail: info@upbonus.io Phone: +7 (777) 034-35-46
2. General Information
We care about your privacy. We process your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
3. Data Collection and Processing
We collect personal data when you:
- visit our website (IP address, browser type, operating system, date and time of access),
- register with us or use our services,
- contact us via forms, e-mail, or support.
Processing is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interests in the functionality and security of the website).
5. Google Analytics
We use (or plan to use) Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
IP anonymization is enabled. Your IP address will be truncated by Google within the EU/EEA before transfer to the USA.
Legal basis: Art. 6(1)(a) GDPR (consent). Analytics will only run after you have explicitly consented in the cookie banner.
Note: Google Analytics (GA4) will be connected. Measurement ID: G-5D7NZWDCKJ. Tracking will be activated only after your consent.
You can prevent storage of cookies via your browser settings, and you can prevent the collection of data generated by the cookie by installing the browser plugin available at:
https://tools.google.com/dlpage/gaoptout
More information: https://policies.google.com/privacy
6. Data Sharing
- with your explicit consent,
- where necessary for contract performance,
- where required by law.
Transfers to the USA by Google are based on EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.
7. Your Rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
You may withdraw your consent at any time via the Cookie Settings. You can also lodge a complaint with a data protection authority.
8. Data Security
We implement technical and organizational security measures to protect your data against manipulation, loss, or unauthorized access.
9. Changes to this Privacy Policy
We may update this Privacy Policy in the future, especially when introducing new services or due to legal changes.
10. Newsletter / E-mail Marketing
We do not currently operate a newsletter. If we introduce one in the future, this policy will be updated accordingly.