Privacy Policy
1. General Provisions
1.1. This Privacy Policy (hereinafter — the "Policy") is an annex to the User Agreement and is applied by REALSOFT LLC (hereinafter — "REALSOFT") to the personal data of the User during the User's use of the "RSID Information System" (hereinafter — the "Service").
1.2. Before using the Service, the User must fully review not only the terms of the User Agreement but also the terms of this Policy.
1.3. REALSOFT shall not be liable for the consequences of the User's disclosure of personal data to third parties where such disclosure occurred on a third party's information resource.
1.4. Use of the Service constitutes the User's unconditional consent to this Policy and to the terms of processing of the User's personal data obtained from the User's mobile device and from external information resources.
1.5. If the User does not agree with the terms of this Policy, the User must immediately cease using the Service.
1.6. The terms and definitions used in this Policy shall be applied in accordance with the Law of the Republic of Uzbekistan "On Personal Data" and the User Agreement.
2. Composition of Personal Data Collected and Processed by REALSOFT
2.1. In accordance with the functional purpose of the Service, the following User data shall be processed in an automated manner:
a) personal data provided independently by the User upon registration in the Service:
passport series and number, ID card number, or PINFL (personal identification number of an individual);
date of birth;
mobile phone number;
biometric data (a facial image and anatomical features enabling identification of the person).
b) personal data obtained by submitting requests to the information systems of authorized state bodies:
digital photographic portrait;
personal identification number of an individual (PINFL);
passport series and number or ID card number;
date of birth, date of issue and validity period of the passport/ID card;
surname, first name and patronymic in the state language (in Latin script), as well as the full name in English;
sex, ethnicity, citizenship and vital status;
place of issue of the passport or ID card, country and place of birth;
information on registration at the place of residence.
c) data automatically transmitted to REALSOFT in the course of the User's use of the Service:
information about the User's device (device model, operating system version, IP address, unique device identifiers);
the type and status of actions performed for identification and authentication purposes (successful, unsuccessful), and the date and time of such actions.
2.2. All personal data of the User shall be processed by the Service in an automated mode.
3. Purposes of Collecting and Processing Personal Data
3.1. Personal data of Users (including biometric data) shall be processed within the framework of the concluded User Agreement, in particular for the following purposes:
reliable identification and authentication of the User;
granting the right of access to the information resources of third parties integrated with the Service;
detecting and preventing actions performed through the Service that are contrary to the legislation and the requirements of this Policy;
ensuring the security and reliability of the User identity verification process;
conducting statistical and other analytical research, subject to depersonalization (anonymization) of the data.
3.2. Personal data shall be stored for the period necessary to achieve the purposes stated at the time of their collection.
4. Terms of Processing and Protection of Personal Data
4.1. The processing of the User's personal data shall be carried out in accordance with the Law of the Republic of Uzbekistan "On Personal Data" and other regulatory legal acts in this field.
4.2. REALSOFT shall take all necessary legal, organizational and technical measures to ensure the confidentiality of personal data, preserve their integrity, and prevent their unlawful processing and dissemination to third parties.
4.3. Personal data (including biometric data) shall be processed only upon receipt of the User's (data subject's) permission (consent) in electronic form.
4.4. Personal data of citizens of the Republic of Uzbekistan shall be stored and processed on servers and in personal data databases physically located within the territory of the Republic of Uzbekistan (in accordance with the requirements of Article 27-1 of the Law).
4.5. REALSOFT may provide (transfer) the User's personal data to third parties only in the following cases:
with the User's consent — in the course of providing the identification status and the required data to information resources integrated through the Service;
in cases provided for by the legislation of the Republic of Uzbekistan, as well as on the basis of an official request from authorized state and law enforcement bodies.
5. Rights and Obligations of the User (Data Subject)
5.1. The User (Data Subject) has the following rights:
to request and receive information on the processing of their personal data;
to demand that their personal data be amended or supplemented if such data are incomplete, outdated or inaccurate;
to withdraw, in accordance with the established procedure, the consent given to the processing of their personal data;
to demand the destruction of the data when the purpose of their processing has been achieved or if the data were obtained unlawfully.
6. Procedure for Transferring Personal Data to Third Parties
6.1. Before the User's personal data are transferred to the information resources of third parties (at the time consent is obtained), the following information shall be openly displayed to the User in the Service:
the name of the information resource (third party) to which the personal data are being provided;
the exact list of the personal data being transferred.
6.2. If the User grants permanent permission to the specified information resource (third party), upon a subsequent request the personal data may be provided automatically, without a repeated request for consent.
7. Amendments to the Policy
7.1. REALSOFT reserves the right to amend this Policy at its own discretion. This applies, in particular, to cases arising from changes in the legislation of the Republic of Uzbekistan governing the processing of personal data.
7.2. The new version of the Policy shall enter into force from the moment of its official publication in the Service. If the User does not agree with the amendments made, the User must immediately cease using the Service and withdraw their consent to the processing of their data.