Personal data processing policy

  1. General Provisions
    • This policy regarding the processing of personal data (hereinafter - «Policy») is developed in compliance with the requirements of the law of the Republic of Uzbekistan from 02.07.2019 ODU-547  «About personal data» (hereinafter - «Law on personal data») to ensure the protection of human and citizen’s rights and freedoms when processing their personal data, including the protection of privacy, personal and family secrets.
    • The present Policy is applicable to the following categories of Data Subjects, which the Operator (hereinafter — "Data Subjects") processes:
      • Counterparties of the Operator (natural persons).
      • Representatives (employees) of the Operator's (legal entities and individual entrepreneurs).
      • Clients of the Operator.
      • Users of the Operator's Website.
    • Basic concepts used in the Policy:
      Processing of Personal Data — IP of «LANGAME» INC 310900551Urdic address g . Tashkent, Chelyazzar district, Katta Chilonzor - 1 HMG, 1 block, house 50, apartment - 1,2, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as defining purposes of processing personal data, composition of personal data, to be processed, actions (transactions) carried out with personal data
      Personal Data Operator — any action (operation) or set of actions (operations) with personal data, performed using automation tools or without using such tools. Processing of personal data includes, among other things: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction
      Automated Processing of Personal Data — processing of personal data using computer technology
      Distribution of Personal Data — actions aimed at disclosing personal data to an indefinite circle of persons
      Provision of Personal Data — actions aimed at disclosing personal data to a specific person or a specific circle of persons
      Blocking of Personal Data — temporary suspension of the processing of personal data (except in cases where processing is necessary to clarify personal data)
      Destruction of Personal Data — actions resulting in the impossibility of restoring the content of personal data in the personal data information system and (or) resulting in the destruction of tangible media of personal data
      Depersonalization of Personal Data — actions resulting in the impossibility of determining the ownership of personal data to a specific data subject without the use of additional information
      Personal Data Information System — a set of personal data contained in databases and ensuring their processing by information technologies and technical means
      Cross-Border Transfer of Personal Data — transfer of personal data to the territory of a foreign state to the authority of a foreign state, a foreign individual or a foreign legal entity
      Website — a set of programs for electronic computers and other information contained in the information system, access to which is provided via the information and telecommunication network internet and located at: https://langame.ru/
      Website Services (Services) — functions of the Website that allow Data Subjects to receive services from the Operator
      Purpose of Personal Data Processing — providing access to Services, information and/or materials contained on the Website, providing Data Subjects with the opportunity to use all the functions of the Website developed for the provision of services, informing Data Subjects by sending emails; fulfilling obligations within the framework of civil-law relations between the Operator and Data Subjects during the use of the Services by the latter
      By registering on the Site, the Data Subject consents to the processing of his personal data in accordance with this Policy.
    • Basic rights and obligations of the Operator.
      • The Operator has the right:
        • to independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations, provided for in the Personal Data Law and other legal acts adopted in accordance with it, if other than that provided for in the Personal Data Law or other laws;
        • to delegate the processing of personal data to another person with the consent of the Data Subject, if other than that provided for in the Personal Data Law, on the basis of a contract concluded with this person.
        • in case of revocation by the Data Subject of his consent to the processing of personal data, the Operator may continue the processing of personal data without the consent of the Data Subject provided that there are grounds for this provided for in the Personal Data Law.
      • The Operator must:
        • organize the processing of personal data in accordance with the requirements of the Personal Data Law;
        • respond to requests and inquiries of Data Subjects and their legal representatives in accordance with the requirements of the Personal Data Law;
        • report to the authorized body for the protection of the rights of Data Subjects (hereinafter — "Roskomnadzor") upon request of this body necessary information within 10 working days from the date of receipt of such a request.
    • Basic rights of Data Subjects. The Data Subject has the right:
      • to receive information concerning the processing of his personal data, except in cases provided for in laws.
      • to require the Operator to clarify his personal data, their blocking or destruction in case the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the declared purpose of processing, and to take measures provided for by law to protect his rights;
      • to appeal to Roskomnadzor or to a judicial body in case of unlawful actions or inaction of the Operator in the processing of his personal data.
    • The subject of personal data may exercise the right to obtain information concerning the processing of his personal data, as well as the right to correct, block or delete his personal data, by contacting the Operator with an appropriate request via e-mail langameglobal@gmail.com. In both cases, the request must be processed in compliance with the requirements of article 6.1. of this Policy.
    • The compliance with the requirements of this Policy is monitored by an authorized person responsible for organizing the processing of personal data at the Operator.
    • Liability for violation of the requirements of the legislation of the Republic of Uzbekistan and local acts of the Operator in the field of processing and protection of personal data is determined in accordance with the legislation of the Republic of Uzbekistan.
  2. Legal Basis for the Processing of Personal Data
    • The legal basis for the processing of personal data is the set of legal acts, in accordance with which and in the course of which the Operator carries out the processing of personal data, including:
      • Constitution of the Republic of Uzbekistan;
      • Civil Code of the Republic of Uzbekistan;
      • Tax Code of the Republic of Uzbekistan;
      • Act of 13 April 2016.   OAV-404  «On accounting»
      • Other regulatory legal acts regulating relations related to the activities of the Operator.
    • The legal basis for the processing of personal data also includes:
      • Operator's Charter;
      • contracts concluded with the Data Subject;
      • consent of the Data Subject to the processing of personal data.
  3. Purposes, Volume and Order of Processing of Personal Data
    • Processing of personal data is limited to achieving specific, pre-determined and lawful purposes. Processing of personal data incompatible with the purposes of collecting personal data is not allowed. Only personal data that correspond to the purposes of their processing should be processed.
    • The content and volume of personal data processed should correspond to the declared purposes of processing, provided for in this section. Personal data processed should not be excessive in relation to the declared purposes of their processing.
    • On the basis of the present Policy, the Operator may process personal data of the following categories of Data Subjects:
      • Counterparties of the Operator (natural persons).
      • Representatives (employees) of the Operator's (legal entities and individual entrepreneurs).
      • Clients of the Operator.
      • Users of the Operator's Website.
    • The Operator may process the following personal data in relation to each of the categories of Data Subjects:
      • Counterparties of the Operator (natural persons):
        • The Operator processes personal data of Counterparties (natural persons) with the following purposes:
          • Conclusion and execution of contracts.
          • Carrying out activities in accordance with the articles of association.
        • In the above-mentioned purposes, the Operator processes the following categories of personal data of Counterparties (natural persons):
          • Surname, name, patronymic.
          • Contact phone number.
          • Email address.
        • The Operator does not process biometric personal data of Counterparties (natural persons) (information that characterizes physical and biological characteristics of a person, on the basis of which his identity can be established) and special categories of personal data of Counterparties (natural persons).
        • The Operator does not process special categories of personal data of Counterparties (natural persons).
        • The Operator carries out automated processing of personal data of Counterparties (natural persons).
        • The list of actions for processing personal data of Counterparties (natural persons) — collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, blocking, deletion, destruction.
        • It is not allowed to disclose third parties and distribute personal data without the consent of the Counterparty, unless otherwise provided by law.
        • The Operator does not carry out cross-border transfer of personal data of Counterparties (natural persons).
      • Representatives (employees) of the Operator's (legal entities and individual entrepreneurs):
        • The Operator processes personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs) with the following purposes:
          • Carrying out contracts with Counterparties.
          • Preparing commercial offers.
          • Carrying out activities in accordance with the articles of association.
        • In the above-mentioned purposes, the Operator processes the following categories of personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs):
          • Surname, name, patronymic.
          • Contact phone number.
          • Email address.
        • The Operator does not process biometric personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs) (information that characterizes physical and biological characteristics of a person, on the basis of which his identity can be established) and special categories of personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs).
        • The Operator does not process special categories of personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs).
        • The Operator carries out automated processing of personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs).
        • The list of actions for processing personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs) — collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, blocking, deletion, destruction.
        • It is not allowed to disclose third parties and distribute personal data without the consent of the Representative, unless otherwise provided by law.
        • The Operator does not carry out cross-border transfer of personal data of Representatives (employees) of the Operator's (legal entities and individual entrepreneurs).
      • Clients of the Operator:
        • The Operator processes personal data of Clients with the following purposes:
          • Conclusion and execution of contracts.
          • Organization of participation in a loyalty program.
          • Direction of messages of advertising and informational nature about goods and services.
          • Carrying out activities in accordance with the articles of association.
        • In the above-mentioned purposes, the Operator processes the following categories of personal data of Clients:
          • Surname, name, patronymic.
          • Passport data.
          • Contact phone number.
          • Email address.
          • Gender.
          • Accounting data for entering the personal account: login and password.
        • The Operator does not process biometric personal data of Clients (information that characterizes physical and biological characteristics of a person, on the basis of which his identity can be established) and special categories of personal data of Clients.
        • The Operator does not process special categories of personal data of Clients.
        • The Operator carries out automated processing of personal data of Clients.
        • The list of actions for processing personal data of Clients — collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, blocking, deletion, destruction.
        • It is not allowed to disclose third parties and distribute personal data without the consent of the Client, unless otherwise provided by law.
        • The Operator does not carry out cross-border transfer of personal data of Clients.
      • Users of the Operator's Website:
        • The Operator processes personal data of Users with the following purposes:
          • Processing of requests on the Site.
          • Direction of messages of advertising and informational nature about goods and services.
          • Preparing commercial offers.
          • Carrying out activities in accordance with the articles of association.
          • Ensuring the uninterrupted operation of the Site.
          • Improving the user experience.
          • Maintaining statistics of visits to the Site.
          • Forming the profile of the Data Subject.
          • Targeting goods and services in accordance with the interests of the Data Subject.
          • Carrying out activities in accordance with the articles of association.
        • In the above-mentioned purposes, the Operator processes the following categories of personal data of Users:
          • Surname, name, patronymic.
          • Contact phone number.
          • Email address.
          • Accounting data for entering the personal account: login and password.
          • Date and time of visit to the Site.
          • Cookies files.
          • Data collected on the Site via web site visitor statistics aggregators.
        • The Operator does not process biometric personal data of Users (information that characterizes physical and biological characteristics of a person, on the basis of which his identity can be established) and special categories of personal data of Users.
        • The Operator does not process special categories of personal data of Users.
        • The Operator carries out automated processing of personal data of Users.
        • The list of actions for processing personal data of Users — collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, blocking, deletion, destruction.
        • It is not allowed to disclose third parties and distribute personal data without the consent of the User, unless otherwise provided by law.
        • The Operator does not carry out cross-border transfer of personal data of Users.
  4. Principles and Conditions for the Processing of Personal Data
    • Processing of personal data is carried out by the Operator in accordance with the requirements of the legislation of the Republic of Uzbekistan and on the basis of the following principles:
      • legality and fairness;
      • limitation of the processing of personal data to achieving specific, pre-determined and lawful purposes;
      • preventing the processing of personal data that is incompatible with the purposes of collecting personal data;
      • preventing the union of databases containing personal data, the processing of which is carried out in the purposes that are incompatible with each other;
      • processing only those personal data that correspond to the purposes of their processing;
      • the correspondence of the content and volume of the processed personal data to the declared purposes of processing;
      • preventing the processing of excessive personal data in relation to the declared purposes of their processing;
      • ensuring the accuracy, sufficiency and relevance of personal data in relation to the purposes of processing personal data;
      • destruction or depersonalization of personal data upon achievement of the purposes of their processing or in case of loss of the need to achieve these purposes, in case of impossibility of eliminating the Operator's violations of personal data, if other than that provided for by law.
    • Processing of personal data is carried out with the consent of the subject of personal data for processing their personal data, and also without such in cases provided by the legislation of the Republic of Uzbekistan.
    • Personal data processing is carried out by employees of the Operator, whose duties include personal data processing.
    • Personal data processing is carried out by:
      • obtaining personal data in oral and written form directly from Data Subjects;
      • obtaining personal data from publicly available sources;
      • entering personal data into journals, registers and information systems of the Operator;
      • using other methods of processing personal data.
    • Persons who have provided the Operator with information about another Subject of personal data, including through the Site, without having the consent of the Subject whose personal data has been transferred, are liable in accordance with the legislation of the Republic of Uzbekistan.
    • The transfer of personal data to the investigation and investigation authorities, the Tax Service, the Pension Fund of the Republic of Uzbekistan and other authorized bodies of the executive power and organization is carried out in accordance with the requirements of the legislation of the Republic of Uzbekistan.
    • The Operator takes the necessary legal, organizational and technical measures to protect personal data from improper or accidental access, destruction, alteration, blocking, dissemination and other unauthorized actions, including:
      • identifying threats to the security of personal data during processing;
      • adopting local regulations and other documents governing relations in the field of processing and protection of personal data;
      • appointing persons responsible for ensuring the security of personal data in the structural divisions and information systems of the Operator;
      • creating the necessary conditions for working with personal data;
      • organizing the accounting of documents containing personal data;
      • organizing work with information systems in which personal data is processed;
      • storing personal data in conditions that ensure their safety and prevent unauthorized access;
      • organizing training for employees of the Operator who process personal data.
    • The Operator stores personal data in a form that allows to identify the subject of the personal data, no longer than the purposes of processing personal data require, if the retention period of personal data is not set by law, contract.
    • When collecting personal data, including through the information and telecommunication network Internet, the Operator provides recording, systematization, accumulation, storage, updating (updating, modification), extraction of personal data of citizens of the Republic of Uzbekistan using databases located in the territory of the Republic of Uzbekistan.
    • The information banner appearing on the Site informs the visitor of the Site about the processing of cookies and user data. The above-mentioned personal data is processed by the Operator in order to ensure stable operation of the Site, improve user experience, improve methods and methods of presentation of information on the Site, keeping statistics of visits to the Site and identification of the most visited pages of the Site, profiling, product targeting in accordance with the interests of the visitor of the Site.
      Despite the fact that most browsers automatically accept cookies, the visitor of the Site may configure his browser in such a way that only the visitor of the Site decides whether to accept or block the cookie file (the visitor of the Site should refer to the menu "Tools" or "Settings" of the browser used by the visitor of the Site). The visitor of the Site can delete the cookie files from his device at any time. It should be remembered that if the visitor of the Site does not accept cookies, some functions of the Site may be lost.
      More detailed information about managing cookies can be found in the browser help file or on specialized websites.
  5. Updating, correcting, deleting, and destroying personal data, responses to requests from subjects for access to personal data
    • Confirmation of the fact of processing personal data by the Operator, the legal grounds and purposes of processing personal data, as well as other information specified in part 7 of article 14 of the Law on Personal Data, shall be provided by the Operator to the data subject or their representative upon request or upon receipt of a request from the data subject or their representative within 10 (ten) working days from the date of receipt of the request. The provided information does not include personal data related to other data subjects, except in cases where there are legal grounds for disclosing such personal data.
      The request must contain:
      • nothing else is provided for in the contract to which the Personal Data Subject is a party.;
      • The Operator does not have the right to process personal data without the consent of the Personal Data Subject on the grounds provided for by the Law on Personal Data or other laws.;
      • no other agreement is provided for between the Operator and the Personal Data Subject.If the request (inquiry) of the data subject does not reflect all the necessary information in accordance with the requirements of the Law on Personal Data or the subject does not have the rights to access the requested information, a reasoned refusal shall be sent to them.
        The right of the data subject to access their personal data may be restricted in accordance with part 8 of article 14 of the Law on Personal Data, including if access of the data subject to their personal data violates the rights and legitimate interests of third parties.
    • In case of identifying inaccurate personal data upon request of the data subject or their representative or at their request or at the request of Roskomnadzor, the Operator shall block the personal data related to this data subject from the moment of such request or receipt of the specified request for the duration of the verification, provided that blocking the personal data does not violate the rights and legitimate interests of the data subject or third parties.
      If the fact of inaccuracy of personal data is confirmed, the Operator, based on the information provided by the data subject or their representative or Roskomnadzor, or other necessary documents, shall clarify the personal data within seven working days from the date of submission of such information and remove the blocking of personal data.
    • In case of identifying unlawful processing of personal data upon request of the data subject or their representative or at their request or at the request of Roskomnadzor, the Operator shall block the unlawful processing of personal data related to this data subject from the moment of such request or receipt of the specified request.
    • Upon achievement of the purposes of processing personal data, as well as in case of revocation of the data subject's consent to the processing of their personal data, personal data shall be destroyed if:
      • otherwise provided for in the contract, the party of which is the data subject;
      • the Operator is not entitled to process without the consent of the data subject on the basis of the Law on Personal Data or other laws;
      • otherwise provided for in another agreement between the Operator and the data subject.
  6. Final Provisions
    • The Operator may send to the Subject of personal data messages of an advertising-informative nature by e-mail, SMS and push-notifications only under the condition of prior consent for receiving advertising according to the Law of the Republic of Uzbekistan of 07.06.2022.  OCHA776 About advertising. Consent to receive advertising messages from the Operator via e-mail, SMS and push notifications is provided in writing or in electronic form by ticking the appropriate box on the Site.
    • The subject of personal data has the right to refuse receiving messages of an advertising nature by following the relevant link in the electronic letters received from the Operator, by sending a notification of refusal to receive advertising messages to the support service at the address of the Operator’s location: or by contacting the Operator with an appropriate request via e-mail langameglobal@gmail.com.
    • Pursuant to the requirements of Article 18 of the Personal Data Act, this Policy is published (and regularly updated) in free access on the information and telecommunications network «Internet» at: https://langamesoftware.uz/uz/policy