Privacy Policy for European Residents

GDPR NOTICE

This GDPR Notice provides mandatory information as required under Articles 13 and 14 of the European General Data Protection Regulation (GDPR) regarding the transparency of personal data processing. This GDPR Notice is effective as of March 01, 2021. This GDPR Notice applies only to data processing activities of data subjects residing in the European Economic Area as well as, regardless of residence, the processing of any Personal Data in the European Economic Area. In the event there is a conflict between this GDPR Notice and other parts of our Privacy Policy, this GDPR Notice shall control with respect to residents of the European Economic Area. As used in this GDPR Notice, “Personal Data” means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

This Website, thelegit.org (the “Site”), is operated by Khududgaztaminot JSC, a Uzbekistan limited liability company (“we”, “our”, “us”). Pursuant to the GDPR, we may function in the capacity of a “processor” and/or “controller”. This GDPR Notice incorporates within it the terms outlined in our general Privacy Policy, provided, however, that in the event of a conflict between this GDPR Notice and the Privacy Policy, this GDPR Notice shall control.

How is Your Personal Data Collected

We collect Personal Data about users through the following sources and you hereby consent to each of the following:

• Direct interactions. You may give us your Personal Data (including identity and contact information) by submitting a “Contact Us” for or directing communications to us.
• Automated technologies or interactions. As you interact with the Site we may automatically collect technical data about your equipment, browsing actions and patterns.

Purpose of Processing Your Personal Data

We process your Personal Data in order to facilitate the provision of the Site, enhance user experiences and enabling us and third-party marketers to direct relevant ads to you.

How We Use/Process Your Personal Data

We will only use your Personal Data when the law allows it. Most commonly, we will use your Personal Data in the following circumstances:

• Where we need it to respond to your requests or to provide you with access to the Site.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.
• Based on your consent, we may collect cookies and other Online identifiers.

Legal Basis for Processing Personal Data

As noted above, we collect and processes your Personal Data for a variety of different purposes, each of which is supported by a legal basis (or more than one legal basis) for processing such Personal Data under the GDPR. The primary legal basis is your consent.

To the extent that we are required to process or share Personal Data to comply with laws, regulators, court orders, or other legal obligations, or pursuant to legal process, the legal basis for such processing and sharing is done pursuant to GDPR’s “compliance with legal obligations” basis for processing.

Marketing

We use cookies and Online tags/identifiers to personalize content and ads, to provide social media features and to analyze our traffic. We also share the cookies, Online tags/identifiers and information about your use of our Site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services or the services of others.

Except as described above, we do not sell or rent your Personal Data to third parties. Likewise, except as provided in this GDPR Notice, we do not disclose your Personal Data to third parties for marketing purposes. We will get your express opt-in consent before it shares your Personal Data with any third party for marketing purposes.

Without limiting the foregoing, we may utilize your Personal Data to market or provide our services directly to you, to provide support to you and to use the Personal Data for the purpose for which it was provided to us.

To the extent that we send you marketing messages or materials, you can opt out of such messages by clicking the “unsubscribe” link included in such email marketing messages or by contacting us at [email protected].

Consent Withdrawal and Contact Details

You may at any time withdraw the consent you provide for the processing of your Personal Data by contacting us at [email protected], provided that we are not required by applicable law or professional standards to retain such information.

Data Security

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Except as otherwise provided in this Notice and except to the extent that you have provided us with your consent, we will maintain the confidentiality of your Personal Data and will require that persons authorized to process and access the Personal Data have committed themselves to maintain the confidentiality of Personal Data.

Data Retention

We will only retain your Personal Data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to its relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we collected and processed your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Your Legal Rights Under the GDPR

Under certain circumstances, you have rights under data protection laws in relation to your Personal Data, including to:

• Request access to your Personal Data.
• Request correction of your Personal Data.
• Request erasure of your personal data.
• Object to processing of your Personal Data.
• Request restriction of processing your Personal Data.
• Request transfer of your Personal Data.
• Right to withdraw consent.
• Lodge a complaint with a supervisory authority.

If you wish to exercise any of the rights set out above, please contact us at the contact information provided below.

Contact Information

If you have any questions about this GDPR Notice or our privacy practices, please contact our privacy manager:

Email: [email protected]