1. General Provisions
1.1. This Personal Data Processing Policy (hereinafter referred to as the Policy) defines the procedure and conditions for processing personal data of users of the official website of the State Municipal State Enterprise “Kostanay International Airport named after Akhmet Baytursynuly» of the passenger transport and highways department of the Akimat of Kostanay region (hereinafter referred to as the Operator, Airport), located at: https://ksnairport.kz (hereinafter referred to as the Site).
1.2. The policy has been developed in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On personal data and their protection”, as well as other regulatory legal acts governing the processing and protection of personal data in the territory of the Republic of Kazakhstan.
1.3. The purpose of this Policy is to ensure reliable protection of the rights and freedoms of personal data subjects whose data may be obtained, processed and stored when using the site, as well as compliance with the principles of legality, fairness, security and confidentiality in the process of processing such data.
1.4. Principles of personal data processing
Personal data processing at the Airport is carried out based on the following principles:
Legality and fairness — processing is carried out on legal grounds, in compliance with the rights and interests of the data subject;
Expediency — processing is carried out exclusively in purposes previously defined and specified in this Policy;
Data minimization — only the data necessary to achieve the stated purposes are processed;
Accuracy — measures are taken to clarify and update the data;
Limitation of storage period — data is not stored longer than necessary for the purposes of processing;
Confidentiality and security — measures are taken to protect against unauthorized access, loss or dissemination of data.
1.5. Scope of the policy
The policy applies to the processing of personal data:
users filling out feedback forms on the website;
persons requesting information on flights, services or airport operations;
visitors interacting with the website using a browser (collection of cookies and technical information).
This Policy does not apply to third-party Internet resources that can be accessed from the Airport website via external links.
1.6. Stages of personal data processing on the website
Data collection — is carried out when filling out forms, user requests, using services (for example, flight schedules, CIP lounge services, mother and child room, etc.).
Data storage — data is stored in secure information systems with limited access.
Use of data — for the purposes of feedback, provision of information, statistics and analytics to improve the quality of service.
Data transfer — can be carried out only in cases stipulated by the legislation of the Republic of Kazakhstan, or with the consent of the subject.
Data deletion – is carried out upon expiration of the storage period or at the request of the subject of personal data.