Personal data protection Privacy Policy

This Personal Data Protection Privacy Policy (“Policy”) protects all Personal Data relating to the User which can be received by GREEN WHITE SOLUTIONS LLC (“Operator”) during the working process, whether collected by the site “smartup.uz” (“Site”), promotional records on social networks and etc.
The Policy was developed in accordance with the Law of the Republic of Uzbekistan dated July 2, 2019 No. ZRU-547 “On Personal Data” (“Law”).

1.1. For the purposes of the present Policy, the following terms are defined as follows:
1.1.1. Automated processing of personal data – processing of personal data using Computer Engineering;
1.1.2. Blocking of personal data – temporary suspension of processing personal data (unless the processing is necessary to clarify personal data);
1.1.3. Information system of personal data – a set of personal data, contained in databases, information technologies and technical means that ensure data processing;
1.1.4. Confidentiality of personal data mandatory requirement for the Operator or other person who has access to personal data to prevent its distribution without the User’s consent or other legal basis.
1.1.5. Depersonalization of personal data – actions resulted in impossibility to determine the ownership of personal data by a specific User without additional information usage;
1.1.6. Processing of personal data – any operation or set of operations which is performed upon Personal Data or sets of Personal Data, by manual or automated means (including the collection, recording, organisation, structuring, storage, adaptation or alteration, extraction, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of Personal Data);
1.1.7. Operator – GREEN WHITE SOLUTIONS LLC, TIN 308432936, address: Tashkent, Shaykhantakhur district, Yangi Kamolon MFI, Beshagach massif, 22, independently or in cooperation with other subjects organizing and (or) carrying out the processing of Personal Data, as well as determining the purposes of processing Personal Data, the composition of Personal Data to be processed, actions (operations) performed with Personal Data;
1.1.8. Personal Data – any information relating directly or indirectly to a specific or identifiable individual (User);
1.1.9. Providing Personal Data – actions aimed at disclosing personal data to an individual or to a group of individuals;
1.1.10. User – a person interacting with the Site, as well as advertising materials on social networks (Facebook, Instagram, LinkedIn, etc.).
1.1.11. Dissemination of Personal Data – actions aimed at disclosing Personal Data to an indefinite group of individuals (transfer of Personal Data) or familiarizing with Personal Data of an unlimited number of individuals, including the disclosure of Personal Data in the media, placement in information and telecommunication networks or providing access to Personal Data in any other ways;
1.1.12. Cross-border transfer of Personal Data – transfer of Personal Data to an authority of foreign states, foreign individuals or foreign legal entities;
1.1.13. Destruction of Personal Data – actions resulted in impossibility to restore the content of Personal Data in the information system of Personal Data and (or) as a result of which material information carriers of Personal Data are destroyed;
1.1.14. "Cookies" – a small piece of data sent by a web server and stored on the user's computer, which the web client or web browser sends to the web server in an HTTP request every time it tries to open a page of the corresponding site;
1.1.15. "IP-address" – a unique network address of a node in a computer network built using the IP protocol.

2.1. The site is an officially registered site in accordance with the legislation of the Republic of Uzbekistan.
2.2. The provision of personal information by the user through social networks and the Site means acceptance of this Policy and the conditions for processing the User's Personal Data.
2.3. In case of disagreement with the terms of the Privacy Policy, the User must not provide the Company with their Personal Data.
2.4. This Policy applies only to the Site and the Company's advertising posts. The Operator does not control and is not responsible for the websites and pages of third parties that advertise their goods and services through social networks, where the Company places its advertising materials.

3.1. The processing of Personal Data by the Operator is carried out on the basis of the following principles:
3.1.1. legitimacy and fairness;
3.1.2. limiting the processing of Personal Data by the achievement of specific, predetermined and legitimate purposes;
3.1.3. preventing the processing of Personal Data that is incompatible with the purposes of collecting Personal Data;
3.1.4. preventing the merging of databases containing Personal Data, the processing of which is carried out for purposes that are incompatible with each other;
3.1.5. processing only those Personal Data that meet the purposes of their processing;
3.1.6. compliance of the content and scope of the processed Personal Data with the stated purposes of processing;
3.1.7. preventing the processing of Personal Data that is excessive in relation to the stated purposes of their processing;
3.1.8. ensuring the accuracy, sufficiency and relevance of Personal Data in relation to the purposes of processing Personal Data;
3.1.9. destruction or depersonalization of Personal Data upon reaching the goals of their processing or in case of loss of the need to achieve these goals, if it is impossible for the Operator to eliminate the committed violations of Personal Data, unless otherwise provided by the Law.
3.2. The processing of Personal Data of Users is carried out in order to:
3.2.1. ensuring the processes of identification and authentication of the User;
3.2.2. identifying and (or) preventing actions of using the Site that are contrary to the requirements of the law and this Policy;
3.2.3. improve the quality and usability of the Site;
3.2.4. conducting statistical and other research based on depersonalized data.
3.3. The storage of Personal Data is carried out for the period necessary to achieve the goals listed in this Policy.
3.6. The processing of biometric Personal Data and special categories of Personal Data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life is not carried out on the Site.
3.7. The Operator does not verify the accuracy of the information provided by the User, and proceeds from the fact that the User provides reliable and sufficient information, controls its relevance.
3.8. The Operator performs the following actions with Personal Data: collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), blocking, deletion, destruction.
3.9. The storage of Personal Data is carried out in a form that allows the User to be identified no longer than is required by the purposes of processing Personal Data.
3.10. The condition for terminating the processing of Personal Data may be the achievement of the goals of processing Personal Data, the expiration of the period for processing Personal Data, the withdrawal of the Site User’s consent to processing his Personal Data, as well as the identification of illegal processing of Personal Data.
3.11. The Operator processes Personal Data in the presence of at least one of the following conditions:
3.11.1. processing of Personal Data is carried out with the consent of the User to processing of his Personal Data;
3.11.2. the processing of Personal Data is necessary to achieve the goals provided by the Law, to implement and fulfill the functions, powers and duties assigned by the legislation of the Republic of Uzbekistan to the Operator;
3.11.3. the processing of Personal Data is necessary to provide the rights and legitimate interests of the Operator or third parties, to achieve socially significant goals, in case that the rights and freedoms of the User are not violated;
3.11.4. processing of Personal Data is carried out if the access to an unlimited group of individuals is provided by the User or at his request;
3.11.5. processing of Personal Data is carried out when it is obligated to be published in accordance with the Law.
3.12. The terms for processing Personal Data are determined based on the purposes of processing.

4.1. To provide protection and security measures of Personal Data from unauthorized access, loss, destruction and unauthorized access by third parties, the Operator uses modern software and hardware tools.
4.2. The Operator is responsible to take all measures to ensure the confidentiality of information. The Operator has the right to access the User's Personal Data at the request of the User or at the request of a court or law enforcement agencies in order to ensure the rights and legitimate interests of the Operator, as well as in other cases provided for by law.
4.3. The Operator and other individuals who have gained access to Personal Data are obliged not to disclose to third parties and not to distribute Personal Data without the consent of the User, unless the consent to the processing of Personal Data is provided by the Law.

5.1. The User of the Site has the right to receive information regarding the processing of his Personal Data, including:
5.1.1. confirmation of processing Personal Data by the Operator;
5.1.2. legal bases and purposes of Personal Data processing;
5.1.3. the purposes and methods used by the Operator for processing Personal Data;
5.1.4. the name and location of the Operator, information about individuals (excluding employees of the Operator) who have access to Personal Data or to whom Personal Data may be disclosed on the basis of the Law;
5.1.5. processed Personal Data relating to the relevant User, the source of their receipt, unless a different procedure for the provision of such data is provided by the Law;
5.1.6. terms of processing Personal Data, including the terms of their storage;
5.1.7. other information provided by the Law.
5.2. The Website user has the right to demand from the Operator the clarification, blocking or destruction of his Personal Data if it is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take measures provided by the Law to protect their rights.
5.3. All questions regarding the processing of Personal Data should be reported to: info@greenwhite.uz.

6.1. The Operator has the right to independently make changes to the Policy. The modified version of the Policy comes into force immediately after publication on the Site and is binding on the User. Users may be notified about changes to the Policy, but such notification is not required, and the Operator encourages all interested parties to keep track of changes to the Policy. If users do not agree with the changes to the Policy, they must stop using the Site.