Personal Data Processing Policy

1. General provisions

1.1. This Personal Data Processing Policy (the "Policy") is drawn up in accordance with the Law of the Republic of Uzbekistan No. ZRU-547 of 02.07.2019 "On Personal Data", the Law "On Informatization" and other personal-data legislation of the Republic of Uzbekistan.

1.2. The Policy defines the procedure and conditions for processing personal data of visitors of unidevs.uz (the "Website") and the measures taken to keep such data secure. The data controller is United Developers (the "Controller"), 25B Kashgar street, Tashkent.

1.3. By using the Website and submitting data through its forms, the data subject freely, of their own will and in their own interest consents to the processing of their data under this Policy.

2. Definitions

• personal data — information relating to an identified or identifiable natural person (the data subject);
• processing — any operation or set of operations: collection, systematization, storage, alteration, use, depersonalization, blocking and destruction of personal data;
• controller — the person that processes personal data and determines the purposes and means of such processing;
• personal data database — a set of personal data systematized in an information system.

3. Data processed

3.1. The Controller processes the data the subject submits voluntarily through the Website forms: first/last name; phone number; e-mail address; the content of the enquiry (task description, project type, indicative budget).

3.2. The following is processed automatically when visiting the Website: IP address, browser and device information, date and time of access, pages visited, cookies. This data is used in depersonalized form for statistics and to keep the Website operational.

3.3. The Controller does not purposefully collect special categories of personal data (race, political or religious views, health, etc.) or biometric data.

4. Purposes and legal grounds

4.1. Data is processed for: handling the enquiry and contacting the subject; preparing a commercial proposal and concluding a contract; performing concluded contracts; statistics and service-quality improvement.

4.2. The legal grounds are: the data subject's consent (Art. 15 of ZRU-547); the necessity to perform a contract to which the subject is a party; compliance with the Controller's statutory obligations.

5. Processing procedure and terms

5.1. Processing is carried out with and without automation means. The personal data database is hosted on servers located in the territory of the Republic of Uzbekistan, in line with the localization requirement (Art. 27-1 of ZRU-547).

5.2. Access to the data is limited to the Controller's employees whose duties include its processing, subject to confidentiality.

5.3. Processing term: until the purposes are achieved, the consent is withdrawn, or the statutory retention periods expire (accounting and contractual documents are kept for the periods set by archiving and accounting legislation). Upon expiry the data is destroyed or depersonalized.

6. Disclosure to third parties

6.1. The Controller does not sell personal data and does not transfer it to third parties except: with the subject's separate consent; to persons engaged by the Controller to perform obligations to the subject (provided they undertake confidentiality obligations); upon reasoned requests of authorized state bodies in the cases and manner established by the legislation of the Republic of Uzbekistan.

6.2. Cross-border transfer is performed only where the receiving party ensures adequate protection of the subjects' rights, in the manner provided by Art. 15 of ZRU-547.

7. Cookies and analytics

7.1. The Website uses technical cookies (language choice, sessions — required for operation) and analytical cookies (depersonalized traffic statistics). The subject may restrict or block cookies in browser settings; certain Website features may be affected.

8. Security measures

8.1. The Controller takes legal, organizational and technical measures against unlawful access, destruction, alteration, blocking, copying and dissemination of data, including: access-rights segregation, encrypted transfer channels (TLS), backups, anti-virus protection and access-event logging.

9. Rights of the data subject

9.1. The subject may: obtain information on whether and which of their data the Controller holds, and on the purposes and methods of processing; demand rectification, blocking or destruction of data that is incomplete, outdated or processed unlawfully; withdraw consent; appeal against the Controller's actions (inaction) to the authorized personal-data protection body or to court.

9.2. Requests are sent to the e-mail address in Section 11 and are considered by the Controller within ten business days of receipt.

9.3. Withdrawal of consent does not affect the lawfulness of processing performed before the withdrawal and does not deprive the Controller of the right to process data required to comply with statutory obligations.

10. Final provisions

10.1. The Controller may amend this Policy. The new version takes effect upon publication on the Website unless it provides otherwise. The date of the current version is indicated in the document header.

10.2. Matters not regulated by the Policy are governed by the legislation of the Republic of Uzbekistan.

11. Controller's details and contacts

United Developers, 25B Kashgar street, Tashkent, Republic of Uzbekistan.
E-mail: sales@unidevs.uz; phones: +998 78 147 00 08, +998 88 309 00 08.