Consent for Personal Data Processing

General Provisions

Hereby I, the user (hereinafter referred to as the "Customer"), acting of my own free will and in my own interest, give my consent to IE TeezBar (hereinafter referred to as the "Service"), located at 7/2 Rakyimzhan Koshkarbayev Street, Priozersk, Karaganda Region, Republic of Kazakhstan, to process my personal data under the following terms.

1. Terms and Definitions

1.1. Personal Data — any information directly or indirectly relating to a specific or identifiable individual (personal data subject).

1.2. Service — the entity that independently organizes and/or carries out the processing of personal data, as well as determines the purposes of processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.

1.3. Mobile Application — the software program "TeezBar Taxi" installed on the Customer's device running iOS or Android mobile operating systems, integrated into the Service's software and hardware complex, and enabling automation of the order creation process for service provision.

1.4. Website — a set of programs and information accessible via the Internet at: https://teezbar.kz.

1.5. Services — information services provided by the Service to the Customer, aimed at receiving, processing, and transmitting the Customer's order to a Partner (driver), and informing the Customer about order fulfillment.

1.6. Customer — an individual who places an order for services through the mobile application and provides their personal data for this purpose.

1.7. Partner (Driver) — a person who independently provides the Customer with passenger transportation services. The Service is not a transportation company and does not independently provide transportation services.

1.8. Processing of Personal Data — any action (operation) or set of actions (operations) performed with or without automation on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.

2. List of Personal Data

This consent applies to the following personal data:

2.1. Data Provided by the Customer

• Mobile phone number (required for registration)
• Last name, first name, patronymic
• Date of birth

2.2. Driver Data (when registering as a Partner)

• Photograph
• Driver's license details
• Vehicle information (make, model, color, state registration number)

2.3. Automatically Collected Data

• Geolocation data (GPS coordinates) of the device for pickup, drop-off, and tracking during the ride
• Device information: model, operating system version, unique identifiers
• Usage data: ride history, routes, ratings, reviews
• Push tokens (Firebase Cloud Messaging) for ride status notifications
• Cookies and device identifiers

3. Purposes of Personal Data Processing

Personal data is processed by the Service for the following purposes:

• Concluding and performing the agreement between the Customer and the Service for the provision of information services
• Receiving, processing, and transmitting orders to Partners
• Informing the Customer about the progress and status of order fulfillment
• User verification and security
• Fraud prevention and dispute resolution
• Calculating the ride cost and performing settlements
• Improving service quality, analytics, and route optimization
• Sending notifications about ride status, service updates, and technical support
• Complying with the legislation of the Republic of Kazakhstan

4. Methods of Personal Data Processing

Personal data processing is carried out with or without the use of automation, including: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.

Personal data is stored on electronic media and processed using automated personal data processing systems.

5. Transfer of Personal Data

The Service has the right to transfer the Customer's personal data to the following recipients:

• Partners (Drivers): Customer's contact details and location for order fulfillment
• Infrastructure Providers: cloud hosting (Supabase), push notifications (Firebase / Google)
• Mapping Services: for route calculation and geocoding
• Government Authorities: upon lawful request in accordance with the legislation of the Republic of Kazakhstan

The Service does not sell Customer's personal data to third parties for marketing purposes.

6. Geolocation Data

The Service receives the Customer's location data (geolocation data) through the mobile application. Geolocation data is transmitted to the Service during the use of the mobile application. The Customer may prohibit the transmission of geolocation data by changing the corresponding settings on their mobile device.

In order to fulfill an order, the Service provides the Customer's geolocation data to Partners (drivers) who have accepted the order for fulfillment.

7. Cookies and Device Identifiers

The Service may use cookies and device identifiers to:

• Ensure proper operation of the website and mobile application
• Collect usage statistics
• Remember Customer preferences
• Internal accounting of mobile application users

Cookies can be blocked or deleted in the Customer's browser settings.

8. Personal Data Protection

The Service takes the following measures to prevent unauthorized access to Customer's personal data:

• Appointment of personnel responsible for organizing personal data processing
• Encryption in transit (HTTPS / TLS) and at rest
• Row-Level Security access control
• Regular automated backups
• Security monitoring and access auditing
• Two-factor authentication for administrative access
• Ensuring preservation of personal data carriers
• Monitoring measures taken to ensure security

9. Personal Data Retention Periods

• Account Data: retained for the duration of the account and up to 3 years after deletion
• Ride History: retained for 3 years for accounting and dispute resolution
• Real-Time Location: stored only during an active ride
• Driver Documents: retained in secure storage for the duration of the account

Destruction of personal data is carried out without the possibility of subsequent recovery.

10. Rights of the Personal Data Subject

The Customer has the right to:

• Obtain information concerning the processing of their personal data, including confirmation of processing, legal grounds and purposes, methods applied, processing and storage periods
• Require the Service to clarify (update) their personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing
• Appeal against the actions or inaction of the Service to the authorized body for the protection of personal data subjects' rights or in court
• Protect their rights and legitimate interests, including compensation for damages and/or moral harm in court
• Request complete deletion of the account and associated personal data (see Data Deletion)

To exercise these rights, send a request to: support@teezbar.kz. The Service must provide a reasoned response within 30 calendar days from the date of receipt of the request.

11. Withdrawal of Consent

The Customer has the right to withdraw this consent to personal data processing at any time by sending the Service a corresponding request:

• By email: support@teezbar.kz
• Through the account deletion function in the mobile application
• In writing by registered mail to: 7/2 Rakyimzhan Koshkarbayev Street, Priozersk, Karaganda Region, Republic of Kazakhstan

Upon withdrawal of consent, the Service ceases processing personal data and destroys them within 30 calendar days from the date of receipt of the withdrawal, except in cases where processing may be continued in accordance with the law.

12. Term of Consent

This consent is effective from the moment of its provision (use of the mobile application or website) until the moment of withdrawal of consent by the personal data subject.

13. Contact Information

• Data Controller: IE TeezBar
• Address: 7/2 Rakyimzhan Koshkarbayev Street, Priozersk, Karaganda Region, Republic of Kazakhstan
• Email: support@teezbar.kz
• Phone: +7 700 670 31 16