Data Processing Agreement

Last updated: 2026-01-03

1. Parties
   This Data Processing Agreement applies between the operator of getvisa.kz and the user whose personal data is processed through the website and related services.

For the purposes of this Agreement:

• The operator acts as the Data Controller

• The user is the Data Subject

2. Subject Matter
   This Agreement governs the processing of personal data in connection with the provision of informational and analytical services related to visa chance estimation.

3. Scope of Data Processing
   The operator may process the following categories of personal data:

• Identification data

• Contact information

• Account and usage data

• Questionnaire data related to visa estimation

• Technical and device data

4. Purpose of Processing
   Personal data is processed exclusively for:

• Providing and maintaining the service

• Performing automated analytical processing

• Managing payments and subscriptions

• Ensuring security and fraud prevention

• Fulfilling legal obligations

5. Processing Operations
   Processing may include:

• Collection

• Recording

• Structuring

• Storage

• Updating

• Use

• Anonymization

• Deletion

Processing may be automated or non-automated.

6. Confidentiality
   The operator ensures that persons authorized to process personal data are bound by confidentiality obligations.

7. Security Measures
   The operator applies reasonable technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or disclosure.

8. Subprocessors
   The operator may engage third-party subprocessors, including hosting providers, analytics services, and payment processors, solely for purposes related to service operation.

Subprocessors process data under contractual obligations and applicable data protection requirements.

9. Cross-Border Data Transfer
   Personal data may be processed or stored outside the user’s country, provided appropriate safeguards are in place.

10. Data Retention
    Personal data is retained only for as long as necessary to achieve the purposes described in this Agreement or as required by law.

11. Data Subject Rights
    The user has the right to:

• Access personal data

• Request correction or deletion

• Restrict or object to processing

• Withdraw consent, where applicable

12. Term and Termination
    This Agreement remains effective as long as personal data is processed.

Upon termination of the service, personal data is deleted or anonymized unless retention is required by law.

13. Governing Law
    This Agreement is governed by the laws of the Republic of Kazakhstan, unless mandatory regulations require otherwise.