Personal Data Privacy Policy

This Personal Data Privacy Policy (hereinafter referred to as the Policy) defines the procedure for processing and protecting personal data that ОсОО «Ит Клауд» may receive when users access the official website https://lancloud.kg/en/ (hereinafter referred to as the LanCloud Website), use internet services and other services, submit inquiries, participate in advertising and marketing activities, or otherwise interact with ОсОО «Ит Клауд» (hereinafter referred to as the Services).

ОсОО «Ит Клауд», registered under the legislation of the Kyrgyz Republic at: Kyrgyz Republic, 720001, Bishkek, 105/3 Isanova Street, 4th floor, Office No. 6, determines the purposes and means of processing personal data (hereinafter referred to as the Operator).

Personal data is processed in accordance with the legislation of the Kyrgyz Republic, including the Digital Code of the Kyrgyz Republic dated July 31, 2025 No. 178.

The Operator does not control and is not responsible for third-party websites that users may access through links available on the LanCloud Website. Such websites may have their own privacy policies and data processing practices.

By providing personal data through forms on the Website or by other means, the user confirms that they have read this Policy. Where the law requires the user's consent to the processing of personal data, such consent is requested separately.

1. Personal Data Received and Processed by the Operator

1.1. The Operator may process personal data voluntarily provided by the user when completing forms, submitting inquiries or using the Services, including:

• first name;
• last name;
• telephone number;
• email address;
• company name and job title, if provided;
• the content of an inquiry and other information voluntarily provided by the user.

1.2. When the Website is used, certain technical data may be processed automatically, including IP address, browser and device information, operating system, cookies, date and time of visits, pages viewed, referral source and other technical information required for the operation, security and analysis of the Website.

1.3. The Operator may request additional information where such information is necessary to provide a specific Service. The user will be informed when such information is required.

1.4. The Operator assumes that users provide accurate and up-to-date information and may request clarification where inaccurate or incomplete information is identified.

2. Purposes and Legal Grounds for Processing Personal Data

2.1. The Operator processes only personal data that is necessary to achieve specific and lawful purposes.

2.2. Personal data may be processed for the following purposes:

• processing user inquiries and requests;
• communicating with the user before entering into a contract;
• entering into and performing contracts;
• providing Services and technical support;
• sending notifications related to the Services;
• registering software in the name of the user or the organization represented by the user where necessary for the relevant Service;
• ensuring the security and proper operation of the Website;
• performing statistical analysis and improving the Website and Services;
• complying with obligations imposed by the legislation of the Kyrgyz Republic;
• sending advertising and marketing communications where an appropriate legal ground or separate consent exists.

2.3. Depending on the circumstances, the legal grounds for processing may include the necessity to enter into or perform a contract or to take steps at the user's request before entering into a contract, compliance with legal obligations, the legitimate interests of the Operator or a third party where the user's rights and freedoms are not overridden, or the user's consent where no other legal ground applies or consent is specifically required by law.

2.4. If the user refuses to provide data necessary to process an inquiry, enter into or perform a contract, or provide a particular Service, the Operator may be unable to provide the relevant Service or respond to the inquiry.

3. Transfer of Personal Data to Third Parties

3.1. The Operator maintains the confidentiality of personal data and does not disclose it to third parties without a lawful basis.

3.2. Personal data may be transferred to third parties in the following cases:

• where the user has consented to the transfer;
• where the transfer is necessary to enter into or perform a contract or provide a Service requested by the user;
• to software right holders, manufacturers, distributors or resellers where necessary to register or provide the relevant product;
• to IT, hosting, communications, analytics and other service providers engaged by the Operator to operate the Website and provide the Services;
• to public authorities and other persons where required by the legislation of the Kyrgyz Republic.

3.3. Where the Operator engages a personal data processor, such processor shall process personal data in accordance with an agreement, the Operator's instructions and the requirements of the legislation of the Kyrgyz Republic.

3.4. Any cross-border transfer of personal data, where applicable, shall be carried out in accordance with applicable law.

4. Data Retention and Deletion

4.1. Personal data is retained no longer than necessary to achieve the purposes for which it was processed, unless a longer period is required by law or contract.

4.2. Once the purposes of processing have been achieved or the applicable legal ground has ceased to exist, personal data shall be deleted or anonymized unless further retention is required by law, for performance of a contract, establishment or defense of legal claims, or another lawful ground.

4.3. Information about the specific place or places where personal data is processed and about processors engaged by the Operator is provided to users in accordance with the legislation of the Kyrgyz Republic.

5. Personal Data Security

The Operator takes necessary organizational and technical measures to protect personal data against unauthorized or accidental access, destruction, alteration, loss, blocking, copying, disclosure, distribution and other unlawful actions.

6. User Rights

6.1. Users have the right to obtain information about the processing of their personal data, including the purposes and legal grounds for processing, information about the Operator, processing locations, recipients, processing periods and their rights.

6.2. Users may:

• obtain access to their personal data;
• request correction or completion of inaccurate or incomplete data;
• request deletion of personal data where grounds provided by law exist;
• object to particular methods or purposes of processing;
• request restriction of processing where provided by law;
• request portability of digital records relating to them where provided by law;
• withdraw previously given consent to personal data processing;
• challenge the Operator's actions or decisions before the competent personal data protection authority of the Kyrgyz Republic or a court.

6.3. Withdrawal of consent does not require the Operator to stop processing where another lawful ground for processing exists.

6.4. To exercise their rights, users may contact the Operator at cloud@lancloud.kg or at: Kyrgyz Republic, 720001, Bishkek, 105/3 Isanova Street, 4th floor, Office No. 6.

6.5. The Operator may request information necessary to verify the identity of the applicant where this is required to prevent unauthorized access to personal data.

7. Contact Information and Amendments to the Policy

Questions and requests relating to personal data processing or this Policy may be addressed to ОсОО «Ит Клауд» by telephone at +996 555 906 325 or by email at cloud@lancloud.kg.

The Operator may amend this Policy as a result of changes in legislation, personal data processing practices or the Services provided. The current version of the Policy is published on the LanCloud Website.