Privacy Policy

Use of the website www.photosafari-travel.kz, the purchase of a travel product, or consultation (including in the official sales offices of photosafari-travel.kz) by the Subject confirms full and unconditional acceptance of this Policy regarding the processing and protection of the Subject's personal data, in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”.
This Privacy Policy of Sole Proprietor “PHOTOSAFARI TRAVEL” (photosafari-travel.kz) (hereinafter – the Travel Agency) defines the position and intentions of the Travel Agency regarding the processing and protection of personal data, in order to ensure the rights and freedoms of each individual, including the right to privacy, personal and family secrecy, as well as the protection of honor and dignity.
This Policy is strictly followed by the management and employees of all structural divisions of Sole Proprietor “PHOTOSAFARI TRAVEL”.
This Policy applies to all personal data of Subjects processed by the Travel Agency, both with and without the use of automation tools.
Any Subject of personal data has access to this Policy. This Privacy and Personal Data Protection Policy applies exclusively to the website www.photosafari-travel.kz. The Travel Agency does not control and is not responsible for third-party websites that the Subject may access via links available on www.photosafari-travel.kz.

The Travel Agency understands the security of personal data as the protection of such data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution, as well as from other unlawful actions.
When processing personal data, the Travel Agency adheres to the following principles:

• Lawfulness and fairness;
• Limitation of processing to achieving specific, predetermined, and lawful purposes;
• Prohibition of processing incompatible with the purposes of collection;
• Prohibition of combining databases containing personal data if the purposes are incompatible;
• Processing personal data relevant to the declared purposes;
• Consistency and accuracy of the content with the stated purposes.

The Travel Agency processes personal data only under at least one of the following conditions:

• Processing is carried out with the consent of the Subject;
• Processing is required to achieve legal purposes or fulfill legal obligations imposed by the legislation of the Republic of Kazakhstan on the data owner;
• Processing is required for the performance of a contract to which the Subject is a party, or for concluding such a contract at the Subject’s initiative;
• Processing is required to exercise the legitimate interests of the Travel Agency or third parties, provided it does not violate the rights and freedoms of the Subject;
• Processing involves data made publicly available by the Subject or at their request;
• Processing involves data that must be disclosed or published in accordance with the legislation of the Republic of Kazakhstan.

The Travel Agency has the right to delegate the processing of personal data to third parties under a contract if it is necessary for the provision of travel booking services and order fulfillment, including airlines, tour operators, hotels, visa centers, consulates, courier services, postal organizations, internet service providers, and email service providers. Such parties must comply with the approved rules and principles of personal data protection as defined by the Law “On Personal Data and Their Protection”. For each such party, the list of actions, purposes of processing, and confidentiality and data security requirements are defined.

In cases established by the laws of the Republic of Kazakhstan, the Travel Agency may transfer personal data of citizens.
The Travel Agency deletes or anonymizes personal data upon achieving the purposes of processing or if processing is no longer required, or if the Subject withdraws their consent.

Personal data processing is carried out with the Subject’s consent, unless otherwise provided by law.
Email addresses and phone numbers obtained by the Travel Agency may be used to send messages, including newsletters informing Subjects about commercial and/or non-commercial activities, promotions, terms of travel services, or advertising and informational materials from third parties. Subjects may unsubscribe at any time by using the link provided in the message or by contacting: c.kikvidze@gmail.com.
The Travel Agency is not obligated to verify the accuracy of the information provided by the Subject and does not monitor the Subject’s legal capacity. It assumes the information provided is accurate and sufficient and will be maintained up to date by the Subject. Any risks arising from inaccurate data remain with the Subject who provided it.

A Subject whose personal data is processed by the Travel Agency has the right to request from the Travel Agency:

• Confirmation of whether their personal data is being processed;
• Information on the legal basis and purpose of the processing;
• Information on the methods of data processing used by the Travel Agency;
• The name and location of the Travel Agency;
• Information on individuals who have access to the data or to whom the data may be disclosed under a contract or by law;
• A list of the personal data being processed and its source, unless otherwise provided by the legislation of the Republic of Kazakhstan;
• Information on the processing duration, including retention periods;
• The name and address of the entity processing data on behalf of Sole Proprietor “PHOTOSAFARI TRAVEL”;
• Other information as provided by the Law “On Personal Data and Their Protection”.

The Subject also has the right to:

• Request correction, blocking, or deletion of personal data if it is incomplete, outdated, inaccurate, obtained unlawfully, or unnecessary for the stated purpose;
• Withdraw consent for data processing;
• Demand the cessation of any unlawful actions by the Travel Agency;
• Protect their rights and interests, including compensation for damages and/or moral harm in court.

In the event of non-compliance with this Policy, the Travel Agency is liable in accordance with the laws of the Republic of Kazakhstan.

In processing personal data, the Travel Agency takes all necessary legal, organizational, and technical measures to protect the data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, and other illegal actions.

Such measures include:

• Identifying threats to personal data during processing in information systems;
• Applying organizational and technical measures to ensure data security in accordance with Kazakhstani legislation;
• Using certified information protection tools;
• Detecting unauthorized access to data and taking appropriate actions;
• Establishing access rules and logging all actions performed with the data;
• Training staff of the Travel Agency, including branches and representative offices, in legal and internal regulations on data protection;
• Monitoring the effectiveness of data security measures and the protection level of information systems.