Privacy Policy
This Privacy Policy (the “Policy”) sets out how personal data of users of the startevent.app website (the “Site”) is processed and protected. The personal data operator is RailDev LLP (BIN 191140009353), which operates the StartEvent platform (the “Operator”).
The Policy is developed in accordance with the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Its Protection.” The Operator gives priority to protecting the rights and freedoms of individuals when processing their personal data.
By using the Site and submitting data through its forms, the user confirms their agreement with this Policy.
1. Key Definitions
- Personal data — information relating to a directly or indirectly identified user.
- Processing of personal data — any action with data: collection, recording, storage, modification, use, transfer, anonymisation, deletion.
- Operator — the entity that organises and carries out the processing of personal data and determines its purposes and scope.
- User — a person who visits the Site and/or submits data through its forms.
- Anonymisation — actions that make it impossible to determine whether data belongs to a specific user without additional information.
- Cookie — a small file stored by the user’s browser, used for the operation of the Site and for analytics.
2. Data the Operator Processes
2.1. Data the user provides voluntarily through the request form on the Site:
- name of the contact person;
- job title;
- organisation name;
- phone number;
- email address;
- details of the planned event (type, date, venue);
- the message text, if provided by the user.
2.2. Data collected automatically when using the Site (metadata):
- IP address;
- device and browser information (type, version, language, screen resolution);
- date and time of access to the Site;
- pages viewed and actions taken on the Site;
- the source of the visit (referrer);
- anonymised identifiers (including cookies) collected by web analytics tools.
The Operator does not collect special categories of personal data (health, religious or political views, etc.).
The platform and Site are intended for use by persons over 18 years of age. The Operator does not knowingly collect the personal data of minors.
3. Purposes of Processing
The Operator processes personal data for the following purposes:
- processing and reviewing the user’s request to connect and use the platform;
- contacting the user to clarify request details, provide consultation, and present the platform’s capabilities;
- sending the user information about the platform’s services, terms, and updates (where the user has a relevant interest);
- collecting, analysing, and tracking Site usage statistics to improve its operation, content, and convenience.
The user may opt out of receiving informational messages by sending a notice to the address specified in the “Final Provisions” section.
4. Legal Basis for Processing
The Operator processes the user’s personal data on the basis of their consent, expressed by voluntarily completing and submitting the Site’s forms, as well as by confirming consent to the use of cookies and analytics tools through the corresponding notice on the Site.
Processing of anonymised user data by web analytics tools is carried out provided that the user has consented to it and cookies and JavaScript are enabled in their browser.
5. Collection, Storage, and Transfer of Data
5.1. The Operator ensures the security of personal data and takes the necessary legal, organisational, and technical measures to protect it from unlawful access, modification, disclosure, or destruction.
5.2. The user’s personal data is not disclosed to third parties, except in cases provided for by the legislation of the Republic of Kazakhstan and cases described in this Policy.
5.3. To process requests and operate the Site, the Operator may engage third-party service providers (including email delivery and web analytics services). Such providers process data solely to the extent necessary to provide services to the Operator and are obliged to maintain its confidentiality.
5.4. Personal data is stored no longer than the purposes of its processing require. Once the purposes of processing are achieved, and also upon the user’s withdrawal of consent, personal data is subject to destruction or anonymisation within the periods established by the legislation of the Republic of Kazakhstan. The user may at any time withdraw consent to processing or request the modification, blocking, or deletion of their data by contacting the Operator. The Operator reviews such requests within the periods established by the legislation of the Republic of Kazakhstan (as a general rule, within three business days of the request).
5.5. The Operator does not make decisions producing legal consequences for the user or otherwise significantly affecting their rights based solely on automated processing of personal data.
6. Cross-Border Data Transfer
Certain services engaged by the Operator (email delivery, web analytics) may process data on servers located outside the Republic of Kazakhstan. Before transferring data to the territory of a foreign state, the Operator verifies that an adequate level of protection of the rights of personal data subjects is ensured, or obtains the user’s consent to such transfer.
7. Cookies and Web Analytics
The Site uses cookies and web analytics tools to collect, analyse, and track anonymised visit statistics in order to improve the operation and content of the Site. The user may grant or withdraw consent to the use of analytics cookies through the notice on the Site, or restrict them in their browser settings. Disabling cookies does not affect the ability to submit a request through the Site’s forms.
8. User Rights
The user has the right to:
- obtain information about the processing of their personal data;
- request clarification, modification, blocking, or deletion of their personal data;
- withdraw consent to the processing of personal data;
- appeal the Operator’s actions to the authorised body for personal data protection.
To exercise these rights, the user contacts the Operator using the contact details below.
9. Final Provisions
Operator: RailDev LLP (BIN 191140009353). Registered address: Akmola Region, Tselinograd District, Karaotkel Rural District, Karaotkel Village, Kauken Kenzhetaiuly Street, building 30.
For questions related to the processing of personal data, the user may contact the Operator by email: info@rd-rc.digital.
The Operator may amend this Policy. Material changes are published on this page (startevent.app/privacy) with an updated revision date; users are encouraged to review the current version periodically.
Current version dated 18 July 2026.