1. Who processes your data
1.1. The operator of personal data on gscstudy.com (the “Website”) is GSCSTUDY CORPORATION LLP, BIN 221240037945 (“GSC Study”, “we”).
1.2. GSC Study is the owner and operator of the personal data you leave on the Website within the meaning of Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection” (the “Law”).
1.3. For questions about personal data processing, write to info@gscenter.kz or call +7 700 127 77 88.
2. What data we collect
2.1. Data you enter in the Website forms:
- your name (and a parent’s name in a camp request);
- phone number, including your WhatsApp number;
- city and chosen branch;
- the programme or service you are interested in and the planned year of admission;
- the child’s age, destination and departure city (camp request);
- answers to online level tests and their results.
2.2. Technical data collected automatically: IP address, device and browser type, Website pages you visited, traffic source (including UTM tags) and time of visit. The analytics and advertising services Meta Pixel, Google Analytics and Yandex Metrica collect them using cookies; we also store the page and UTM tags together with your request.
2.3. We do not ask for or collect your IIN, ID document details, payment details or health information on the Website. Admission documents (school certificates, passports, test certificates) are provided separately under a contract, not through the Website.
3. Why we process data
- to contact you about your request by phone or WhatsApp;
- to hold a consultation, assessment or trial lesson and to choose a programme and branch;
- to check an online test and tell you the result;
- to prepare and sign a contract for studies or services;
- to tell you about GSC Study programmes, intakes and events, unless you have opted out of such messages;
- to analyse how the Website and advertising perform in order to improve them.
4. Legal basis
4.1. We process personal data on the basis of your consent, which you give by ticking the box in a Website form. Consent text: gscstudy.com/en/consent.
4.2. If you are under 18, your parent or other legal representative gives consent (Articles 7 and 8 of the Law).
5. Who we share data with
5.1. We do not sell personal data or publish it in publicly available sources without separate consent.
5.2. Data may be shared only for the purposes in section 3:
- Bitrix24: the CRM system where requests are stored and processed;
- GSC Study branches in Astana and Almaty, if the request concerns their branch;
- WhatsApp (Meta Platforms), if you message us on WhatsApp;
- Meta Platforms (Meta Pixel), Google LLC (Google Analytics) and Yandex (Yandex Metrica): the technical data in clause 2.2;
- government authorities in cases expressly provided for by the laws of the Republic of Kazakhstan.
5.3. Data is shared with universities, schools and camp organisers abroad only after a contract is signed and with separate consent, not on the basis of a Website request.
6. Cross-border transfer
6.1. The technical data in clause 2.2 and WhatsApp messages are processed by Meta, Google and Yandex services on servers outside the Republic of Kazakhstan. This is a cross-border transfer of personal data (Article 16 of the Law), to which you consent in clause 6 of the consent text.
6.2. On your first visit, the Website shows a notice about cookies. You can block cookies and third-party scripts in your browser settings; the Website still works fully.
7. How long data is stored
Data is stored until the purposes of processing are achieved. If you have not signed a contract with us, request data is deleted or anonymised no later than 3 years after your last contact. Client data is stored for the term of the contract and the periods set by the laws of the Republic of Kazakhstan.
8. How we protect data
Only employees who need access to handle your request can see requests. CRM access is granted through personal accounts. Connections to the Website are protected by HTTPS.
9. Your rights
You have the right to:
- find out whether we process your personal data and receive a list of it;
- ask us to correct or complete inaccurate data;
- ask us to delete data if its processing is not required by law;
- withdraw your consent to processing: we will stop processing within 15 working days or send a reasoned refusal (Article 8 of the Law);
- opt out of messages about programmes and events;
- appeal against our actions to the authorised personal data protection body or to a court.
To do so, write to info@gscenter.kz or to WhatsApp +7 771 808 08 28 with the subject “Personal data”.
10. Changes to this policy
We may update this policy. The current version is always published on this page with the date of the change.
