1. General Provisions
1.1. This Personal Data Processing Policy has been prepared in accordance with the requirements of the legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan dated July 2, 2019 No. ZRU-547 “On Personal Data”, and determines the procedure for processing personal data and the measures taken to ensure their security by LAWTAX LLC (TIN 308249047) (hereinafter referred to as the Operator).
1.2. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data to be its most important objective and a mandatory condition of its activities, including the protection of the right to privacy, personal and family secrecy, as well as compliance with the regime of professional and other legally protected secrecy.
1.3. This Policy applies to all information that the Operator may obtain about users of the website https://lawtax.uz/ (hereinafter referred to as the Website) when they use the Website services, submit inquiries and applications, as well as when concluding and performing contracts.
1.4. Use of the services, materials and information posted on the Website, as well as acceptance of the public offer agreement available at https://lawtax.uz/, constitutes the Owner’s full and unconditional consent to all provisions of this Policy and the personal data processing terms specified herein. If the Owner disagrees with this Policy, the Owner is not entitled to use the Platform services.
2. Definitions
For the purposes of this Policy, the following terms shall have the meanings set forth below:
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary suspension of personal data processing, except where processing is required to clarify personal data.
2.3. Personal data information system — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
2.4. Anonymization of personal data — actions as a result of which it becomes impossible to determine the ownership of personal data by a specific Owner without the use of additional information.
2.5. Processing of personal data — any action or set of actions performed with personal data, including collection, systematization, storage, modification, supplementation, use, provision, dissemination, transfer, anonymization and destruction.
2.6. Operator — a state authority, individual and/or legal entity that processes personal data.
2.7. Personal data — information recorded on electronic, paper and/or other material media relating to a specific individual or enabling their identification.
2.8. Owner — an individual to whom the personal data relate.
2.9. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign individual, legal entity or authority of a foreign state.
2.10. Destruction of personal data — actions resulting in irreversible destruction of personal data.
2.11. Website / Platform — a set of information materials, computer programs and databases ensuring access thereto on the Internet at https://lawtax.uz/.
2.12. Dissemination of personal data — any actions aimed at disclosure of personal data to an indefinite circle of persons or making personal data available to an unlimited number of persons, including publication in mass media, placement in information and telecommunication networks or granting access in any other manner.
3. Owner Matter of the Policy
3.1. This Policy establishes the Operator’s obligations to ensure confidentiality and protection of personal data provided by the Owner at the Operator’s request or in the course of using the Platform.
3.2. Personal data permitted for processing under this Policy are provided by the User and may include (depending on the functionality and status of the User) the following information:
3.2.1. Data provided during registration and use of the Platform:
- surname, name and, where applicable, patronymic;
- mobile phone number;
- email address;
- authentication data (login and password);
- taxpayer identification number (TIN), name and details of a legal entity or individual entrepreneur (for agencies, realtors, companies);
- other information voluntarily provided by the Owner in the profile/advertisement (including photographs and video materials).
3.2.2. Data automatically transmitted to the Platform during its use via software installed on the User’s device, including:
- IP address;
- cookie information;
- information about the User’s browser and device type;
- technical characteristics of equipment and software;
- date and time of access;
- addresses of requested pages;
- statistics of advertisement views, clicks and actions in the personal account and chat.
3.2.3. Payment transaction data received from payment systems and acquiring banks (type of transaction, amount, partial details, payment status), without storage of full bank card details by the Operator.
3.3. The above-mentioned data, further in the text of this Policy, are united by the general concept of "Personal Data."
4. Rights and Obligations of the Operator
4.1. The Operator has the right to process personal data.
4.2. The Operator is obliged:
4.2.1. Compliance with the legislation on personal data.
4.2.2. Provide information regarding the processing of the Owner's personal data upon their request.
4.2.3. Approve the composition of personal data necessary and sufficient for the performance of their tasks.
4.2.4. Take measures to destroy personal data if the purpose of their processing is achieved, as well as in other cases established by law.
4.2.5. Submit proof of obtaining the Owner's consent to the processing of their personal data in cases stipulated by law.
4.2.6. To modify and (or) supplement personal data, provided that the accuracy of the new data is documented, or to destroy them, if it is impossible to make such changes and (or) additions.
4.2.7. Temporarily suspend the processing of personal data or destroy them if there is information about violations of their processing conditions.
4.2.8. Ensure the possibility of the Owner submitting documents electronically, if technically feasible, for the temporary suspension of processing and (or) destruction of their personal data.
4.2.9. Register personal data bases owned and/or processed.
4.2.10. Take the necessary legal, organizational, and technical measures to protect personal data.
4.3. The Operator has the right to entrust the processing of personal data to a third party in cases where:
4.3.1. Availability of the Owner's consent in writing, including in the form of an electronic document.
4.3.2. If the decision is made to fulfill the contract between the Operator and the Owner or to fulfill the terms of the previously concluded contract.
4.3.3. Other cases stipulated by law.
4.4. The obligations of the Operator, as well as the third party, for the protection of personal data arise from the moment of collection of personal data and remain in effect until their destruction or depersonalization.
4.5. The Operator determines the structural unit or official responsible for the work related to the processing and protection of personal data, and ensures its operation in accordance with the Standard Procedure for Processing Personal Data.
5. Rights and Obligations of the Owner
5.1. The Personal Data Owner has the right:
5.1.1. To be aware of the presence of their personal data and their composition in the Operator, as well as in a third party.
5.1.2. Receive information on the processing of personal data from the Operator upon request.
5.1.3. Receive information from the Operator regarding the terms of granting access to your personal data.
5.1.4. To apply to the authorized state body or court regarding the protection of rights and legitimate interests regarding their personal data.
5.1.5. Give consent to the processing of their personal data and withdraw such consent, except in cases stipulated by this Law.
5.1.6. To give consent to the Operator, as well as to a third party, for the dissemination of their personal data in publicly available personal data sources.
5.1.7. Require the Operator to temporarily suspend the processing of their personal data if the personal data is incomplete, outdated, inaccurate, illegally obtained, or not necessary for processing purposes.
5.2. The disposal of the Personal Data of the Owner recognized as incapacitated or limited in capacity is carried out by its legal representative.
6. Principles of Personal Data Processing
6.1. The processing of personal data is carried out on a legal, fair, and transparent basis, limited to achieving specific and legitimate goals, and does not allow for redundancy of the processed data.
7. Purposes of Collection and Processing
7.1. The Operator processes the personal data of the Owner for the following purposes:
7.1.1. Provision of outsourcing services in the field of legal, legal, and accounting support, including, but not limited to:
- legal consulting;
- preparation, analysis, and support of contracts and other legal documents;
- accounting, tax, and personnel support;
- support for the activities of legal entities and individual entrepreneurs.
7.1.2. Consideration of appeals, applications, and requests of Owners received through the Platform, email, messengers, and other communication channels used by the Operator.
7.1.3. Conclusion, execution, maintenance, and termination of civil law contracts between the Operator and Personal Data Owners, as well as fulfillment of obligations arising from such contracts.
7.1.4. Interaction with the Owners and Clients of the Operator, including sending notifications, messages of an informational, legal, and service nature related to the provision of the Operator's services.
7.1.5. Representation of the interests of the Operator's clients in state bodies, local self-government bodies, courts and other organizations - within the limits of the granted powers and on the basis of relevant powers of attorney.
7.1.6. Compliance with the requirements of the legislation of the Republic of Uzbekistan, including mandatory accounting, reporting, and storage of documents related to the provision of services by the Operator.
7.1.7. Ensuring Platform functionality, including site administration, security, technical support, and improving the quality and ease of use of Platform services.
7.2. Processing of the Owners' anonymized data, including data obtained using "cookie" files and other Internet statistics technologies, is carried out for the purpose of analyzing the Platform's operation, improving the quality of the Operator's services, and optimizing interaction without identifying a specific Personal Data Owner.
8. Legal Grounds and Conditions for Processing
8.1. The Operator processes the Owner's personal data if it is completed and/or sent by the Owner independently through special forms, interfaces, and the Platform functionality (registration, posting announcements, requesting support, etc.). By filling out the relevant forms and/or sending personal data to the Operator, the Owner expresses their consent to this Policy and the terms of the Offer Agreement.
8.2. The Operator processes anonymized data about the Owner if it is permitted in the settings of the Owner's browser and/or device (including the storage of "cookie" files and the use of JavaScript technologies and similar tools).
8.3. The Operator does not verify the accuracy of the personal data provided by the Owner and does not exercise control over its legal capacity. The Operator proceeds from the fact that the Owner provides reliable and sufficient information and maintains it in an up-to-date state. The Owner is responsible for providing unreliable information.
8.4. The Operator, as a general rule, does not process special categories and biometric personal data, except in cases directly stipulated by the legislation of the Republic of Uzbekistan and necessary for the execution of the requirements of the law.
8.5. The Operator does not make decisions that create legal consequences for the Personal Data Owner or otherwise affect its rights and legitimate interests, solely on the basis of automated processing of personal data.
8.6. The Operator has the right to transfer the personal data of the Owner to third parties in the following cases:
8.6.1. The Owner has expressed their consent to such transfer, including during the use of the Platform and/or acceptance of the Offer Agreement.
8.6.2. The transfer is necessary to provide Platform services, including attracting payment aggregators, hosting providers, SMS distribution providers, analytical and advertising services, provided they comply with the confidentiality regime.
8.6.3. Transfer is provided for by Uzbek or other applicable legislation within the procedure established by law (at the request of authorized state bodies, etc.).
8.7. The Operator terminates the processing of personal data in the following cases:
8.7.1. Upon the occurrence of conditions for termination of the processing of personal data or upon expiration of the established storage periods.
8.7.2. Upon achieving the processing objectives or if the need to achieve these objectives is lost.
8.7.3. At the reasoned request of the Personal Data Owner, if the Personal Data processed by the Operator is incomplete, outdated, inaccurate, illegally obtained, or is not necessary for the stated processing purpose.
8.7.4. In case of detection of unlawful processing of personal data, if it is impossible to ensure the legality of the processing of personal data.
8.7.5. In the event that the Personal Data Owner withdraws its consent to the processing of personal data, if the processing is carried out solely on the basis of such consent.
8.7.6. In case of liquidation of the Operator.
9. Storage, Transfer and Protection
9.1. The Operator ensures the safety of personal data and takes measures to prevent unauthorized access to them.
9.2. Transfer of personal data to third parties is permitted only in cases stipulated by law or with the consent of the Personal Data Owner.
9.3. The storage period of personal data is determined by the purposes of their processing, unless another period is established by law or contract.
9.4. When providing legal, advocacy, and accounting services, the Operator ensures compliance with the confidentiality and professional secrecy regime.
10. Cross-Border Transfer
10.1. The Operator has the right to carry out transboundary transfer of personal data for the purpose of outsourcing legal, advocacy, and accounting services.
10.2. Cross-border transfer is carried out provided that the receiving party ensures the proper level of protection of personal data or the consent of the Personal Data Owner in cases stipulated by the legislation of the Republic of Uzbekistan.
11. Confidentiality
11.1. The Operator and other persons who have obtained access to personal data are obliged to maintain confidentiality and not disclose personal data to third parties without legal grounds.
12. Dispute Resolution
12.1. Before applying to the court with a claim for disputes arising from the relationship between the Owner and the Operator, it is mandatory to file a claim (a written proposal for voluntary settlement of the dispute) sent to the Operator's email address and/or to the Operator's legal address.
12.2. The claimant, within 15 (fifteen) calendar days from the date of receipt of the claim, shall notify the applicant in writing of the results of the consideration of the claim.
12.3. If it is impossible to reach an agreement, the dispute shall be transferred to the judicial body for consideration in accordance with the current legislation of the Republic of Uzbekistan.
12.4. All disputes and disagreements are Owner to consideration within the territory of the Republic of Uzbekistan.
12.5. This Policy and the relationship between the Owner and the Operator shall be governed by the current legislation of the Republic of Uzbekistan.
13. Final Provisions
13.1. The Owner may receive clarification on any issues related to the processing of their personal data by contacting the Operator at their email address.
13.2. The Operator has the right to make changes to this Policy. The new version of the Policy shall enter into force from the moment it is posted on the Platform, unless otherwise provided for in the new version itself. Continuing to use the Platform after posting the new version of the Policy means the Owner's consent to such changes.
13.3. This Policy is valid indefinitely until it is replaced with a new version.
13.4. The current version of the Policy is available for free access on the Internet at https://lawtax.uz/ (at the bottom of the website / in the "Privacy Policy" section).