General Data Privacy Notice

Introduction

Yakut Kazan values ​​your privacy and is committed to protecting your personal information in accordance with fair information practices and applicable data privacy laws.

This privacy notice explains how our company and our affiliates collect, use, and share personal information about you (“Personal Information”) that you provide to us or that we may otherwise obtain or create.

Scope

Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

This privacy policy applies to personal information we obtain through our regular business activities, both online and offline (in connection with sales and marketing, partner and supplier engagement, and investor relations). This Privacy Policy does not apply to personal information obtained through our Careers website, which is subject to the Applicant Privacy Policy.

Data Controller

The Controller of your data is our company, which initially collected your data and determines the purposes and methods of using it.

If you have any questions about who the Controller of your data is or any other questions regarding your data, please contact our Privacy Office using the email address shown below.

Personal data categories, processing purposes, and legal bases

Please select the subsection in this notice that applies to you.

Personal data recipients

• Within our company:Business functions that require access to your data to fulfill our contractual and legal obligations (e.g., sales, accounting, operations, legal) or for our legitimate interests (e.g., marketing)
• Third parties: We may use third parties to perform or provide services and tasks on our behalf. We may provide personal information to these third parties to perform these services and tasks. The processing of such personal information will be in accordance with our instructions and will be consistent with its original purposes.
• As Required by Law: We may also provide personal information to governmental or judicial authorities, law enforcement personnel, and agencies, including providing information as required by law to meet national security or law enforcement requirements and to agencies and courts in the countries in which we operate. Where permitted by law, we may disclose personal information to third parties (including legal counsel) as necessary to establish, exercise, or defend legal claims or otherwise enforce our rights, protect our property, or protect the rights, property, or safety of others, or to support external audit, compliance, and corporate governance functions.
• Mergers and Acquisitions: Personal information; In the event of a sale, merger, liquidation, dissolution, or other circumstances, our company’s equity, assets, or business activities may be transferred to a party that acquires all or a portion of its equity, assets, or business activities.
• Affiliates: We may also transfer information to and share information with our affiliates in accordance with applicable laws.

 

International Transfers

Because we are a global company with presence in many different countries, we may transfer your Personal Information from one legal entity to another or from one country to another to fulfill the purposes listed above. We transfer your Personal Information in accordance with applicable legal requirements and only to the extent necessary for the purposes listed above. Within our group of companies, Personal Information is transferred subject to the same rules and levels of security. If necessary, data processing agreements are entered into to ensure the required level of protection.

We rely on existing legal mechanisms to ensure the lawful transfer of Personal Information across borders. To the extent we rely on standard contractual clauses (also referred to as model clauses) to authorize transfers, we will comply with those requirements, including where there may be a conflict between those requirements and this Notice.

We will not sell or otherwise share your Personal Information outside our group of companies, except to the following individuals and situations:

• Service providers we contract with to perform services on our behalf. We only share your Personal Information with service providers whose use and disclosure we have contractually restricted, except as necessary to perform services on our behalf or comply with legal obligations;
• To comply with legal obligations, including, but not limited to, responding to a legitimate legal request from law enforcement authorities or other government regulators;
• To investigate suspected or actual illegal activity;
• To prevent physical harm or financial loss; or
• To support the sale or transfer (including in bankruptcy) of all or a portion of our business or assets.

Retention

We will retain your personal information for as long as we have an ongoing relationship with you or as necessary to fulfill the purpose for which your personal information was collected (generally for the duration of any contractual relationship and for any subsequent period legally required or permitted by applicable law).

Your Rights

• You have the right to receive, without restriction, at reasonable intervals and without undue delay or expense, a copy of all data concerning you that is being processed.
• You have the right to have inaccurate or outdated personal information corrected or updated.
• You have the right to have personal data erased.
• You have the right to object to the processing of your personal data, unless such processing is required by law, based on your particular situation. Where the objection is justified, the processing must be stopped.
• You may have the right to request data portability. Data portability is the provision of your personal information in a structured, commonly used, and machine-readable format that allows it to be easily transferred to another company. The right to data portability is subject to restrictions; Data portability does not apply to paper records and must not prejudice the rights of others or sensitive company information.
• You have the right not to be subject to decisions based solely on automated decision-making if such decisions produce legal effects or significantly affect you.
• If the legal basis for processing your personal information is consent, you have the right to withdraw any consent previously granted for a specific purpose.

We respect these rights and have processes in place to identify and respond to individuals who wish to exercise these rights. You may request to exercise any of these rights through your local contact or our Privacy Office (using the email address shown below).

Security

We are committed to ensuring that your processed personal information is kept secure and implement appropriate technical measures and security policies that protect information under our control from:

• Unauthorized access.
• Improper use or disclosure.
• Unauthorized modification.
• Unlawful destruction or accidental loss.

All our staff and the third parties we engage to process your personal information are obligated to respect the confidentiality of your information.

Privacy concerns and contacting us

If you have any concerns about our breach of privacy law or other regulation, you can contact our Privacy Office (using the email address shown below).

A Privacy Officer will be appointed to investigate your complaint and provide you with information about how it will be handled.

If we have not addressed any of your requests or have not provided you with a valid reason why we cannot do so, you have the right to contact the supervisory authority to lodge a complaint.

Changes to our privacy notice

We reserve the right to change, modify, and update this privacy notice at any time. Please check back periodically to ensure you have reviewed the most current notice.

For privacy matters, please contact us by email at info@yakutkazan.com.