1. Identity of the Data Controller
In accordance with applicable national data protection regulations of the Republic of Kazakhstan and international privacy standards (GDPR), acting as Data Controller, POLINDEKS LLP (“Polindeks”, “Company” or “we”), registered in Astana, Kazakhstan, places paramount importance on the security, confidentiality, and integrity of personal information entrusted to us by clients, prospective partners, subcontractors, suppliers, and website visitors.
This Privacy Policy explains what personal information we collect through our corporate website (polindeks.com.tr) and corporate communication channels, the purposes for processing such data, third-party sharing practices, legal grounds, and your statutory rights.
2. Categories of Personal Data Collected
In the course of your technical inquiries, RFP submissions, and digital interactions with Polindeks, we may collect and process:
- Identity Information: Full name, professional title, corporate affiliation, and company representation status.
- Contact Information: Corporate or personal email address, phone number, physical office address, city, and country.
- Project & RFP Data: Structural requirements, project location, anticipated steel tonnage, technical blueprints, scope descriptions, procurement timelines, and correspondence history.
- Technical & Telemetry Data: IP address, browser type, device information, access timestamps, HTTP referrer, and security session identifiers.
3. Purposes of Processing
We process your data exclusively for legitimate commercial, operational, and regulatory purposes, including:
- Engineering & RFP Evaluation: Analyzing submitted architectural and structural requirements, conducting engineering feasibility reviews, and preparing formal commercial proposals.
- Commercial & Contractual Negotiations: Coordinating technical pre-qualification audits, scheduling field surveys, and establishing EPC/subcontractor agreements.
- Client & Stakeholder Relations: Responding to informational inquiries, providing technical capability dossiers, and maintaining corporate communication.
- Legal & Regulatory Compliance: Fulfilling statutory accounting, tax, labor, and safety obligations under applicable Kazakhstani and international laws.
- Information Security: Safeguarding network infrastructure, preventing malicious attacks (such as CSRF and DDoS), and maintaining website integrity.
4. Legal Grounds for Processing
Our data processing activities are grounded on the following legal bases:
- Contractual Necessity: Processing necessary for negotiating or performing a contract at your request (such as evaluating an RFP or engineering project proposal).
- Legal Obligation: Compliance with statutory and regulatory mandates.
- Legitimate Interests: Securing our digital assets, improving industrial service quality, and maintaining commercial integrity without overriding your fundamental privacy rights.
- Explicit Consent: Granted by you when submitting our web inquiry form after reviewing this policy.
5. Disclosure & Third-Party Transfers
Polindeks does not sell, rent, or commercialize personal data to third-party marketing entities. Your data may only be disclosed to:
- Authorized engineering and project management personnel within Polindeks LLP on a strict need-to-know basis.
- Technical infrastructure service providers (e.g., enterprise email infrastructure, secure hosting environments) bound by strict confidentiality obligations.
- Judicial or administrative authorities upon lawful official request as mandated by law.
6. Data Security & Retention
We implement robust administrative, technical, and physical security measures—including TLS/SSL cryptographic protocols and access management—to protect your personal data against unauthorized disclosure, loss, alteration, or unlawful processing. Personal data related to project inquiries is retained for the duration required to evaluate the commercial proposal and fulfill statutory retention periods.
7. Your Statutory Rights
Under applicable data protection legislation, you are entitled to:
- Request confirmation as to whether your personal data is being processed by Polindeks.
- Obtain information regarding the scope and purpose of processing.
- Request rectification of inaccurate, outdated, or incomplete data.
- Request deletion or erasure of personal data where legal retention periods have expired.
- Object to unlawful processing or withdraw previously granted consent.
To exercise any of these rights, please contact our data management team at[email protected].