Consent to collection and processing of personal data
Freedom Pay Kyrgyzstan Limited Liability Company I hereby, in accordance with the requirements of Law of the Kyrgyz Republic No. 58 "On Personal Information" dated April 14, 2008, as well as the regulatory legal acts adopted in accordance with them (hereinafter — Applicable Law), freely, consciously, and of my own free will grant my full and unconditional consent to: 1. collection and processing of Data by means of: a) registration and (or) authorization of the Subject on the website (in the mobile application) of the Operator or in another electronic resource of the Operator; b) signing of the Consent on an electronic medium by any means, by means of an electronic digital signature, signing using one-time password sent by the Operator or its agent to the mobile phone number of the Subject via SMS or in web or other software application via push notification; c) visit of electronic resources of the Operator, including by means of acceptance of cookies or other policies, protocols, software and hardware that may record data of the Subject; d) use of products or services of the Operator.
2. collection, transfer and processing of Data (any operation or set of operations performed regardless of the methods by the holder (owner) of personal data or by his order, by automated means or without such, for the purpose of collection, recording, storage, updating, grouping, blocking, erasing and destruction of personal data), not limited to personal data, data constituting a banking secret, an insurance secret, a commercial secret in the securities market and other secrets protected by law in favor of the Operator’s affiliates, the Operator’s agents, and any other third parties (hereinafter collectively referred to as the "Third Parties"), when provision of Data is required in accordance with the requirements of applicable law, for the purpose of provision of products and services to the Subject by the Operator or Third Parties, or for the purpose of fulfillment of obligations under the agreement between the Operator and the mentioned Third Parties. The Subject agrees that Data may be included in the databases of the Operator or Third Parties, where personal data of the Subject may be subsequently processed without any participation of the Operator; provided that the Operator shall be obliged to require Third Parties to ensure confidentiality of the transferred Data;
3. cross-border transfer of Data by the Data Operator outside the territory of the Kyrgyz Republic to the territory of states (transfer by the holder (owner) of personal data to holders under the jurisdiction of other states) in cases when this is necessary for the purposes of collection and processing of Data stated in this consent. The Subject agrees that the countries to which the Data may be transferred may have conditions and requirements for Data storage lower than those stipulated in Law of the Kyrgyz Republic "On Personal Information", applicable legislation of the Kyrgyz Republic, and the Data operators in these countries will not be able to ensure proper protection.
A. In this Consent, "Data" includes, but is limited to, data/information related to the Subject determined on the basis thereof, recorded on an electronic medium, including, without exception: last name, first name; telephone number; email address; the model of the device of the Subject and data on the type of operating system language and browser and/or the type of Internet connection used during the visit; data on location of the Subject obtained by IP address; information on purchases made by the Subject in the Internet and other metadata for analytics (cookies, etc.); content posted by the Subject or viewed by it in the Internet; changes in user status and duration of the visit.
B. The data of the Subject is collected and processed for the purpose (the list is not exhaustive): implementation of the activity of the Operator and Third Parties on rendering of financial services, marketing and advertising activities, research, holding promotions, provision (forwarding) to the Subject any information materials, including about products and (or) services and (or) offers of the Operator and Third Parties, as well as other notifications by means of telephone, fax and other types of communication, as well as through open communication channels (including SMS, e-mail, push notifications, voice messages, remote access systems, social networks, etc.), as well as for payment using QR-codes or barcodes, for selection of the recipient of payment or service from phone book contacts, for display of avatar/photo of the Subject in the mobile application of the Operator and/or Third Parties, for receipt and provision of digital documents of the Subject to/from the digital document services, for voice communication with representatives of the Operator/Third Parties; to render services to the Subject; to conduct verifications by the Operator/Third Party related to compliance with requirements for countering money laundering and terrorism financing; to protect the clients of the Operator from fraudulent actions of the Subjects.
C. Personal data of the Subject may not be distributed by the Operator and/or Third Parties in publicly available sources, unless the Subject has provided the corresponding written consent.
D. This Consent is provided for the whole period of the activity of the Operator or until an updated consent is issued with notification to the Subject.
The company is PCI DSS compliant Payment system operator license – №2022160218 dated 16.02.2018. Payment company license - №3027111019 dated 11.02.2019.