Privacy Policy | Personal Data Protection - ACON Consulting
 
Office:AZ1025, Azure Business Center,165B, Baku, Azerbaijan
 
  • English
  • Русский
  • Türkçe
[email protected]

PRIVACY POLICY

This Privacy Policy is prepared in accordance with the Law of the Republic of Azerbaijan “On Personal Data” dated May 11, 2010, the international legal norms to which the Republic of Azerbaijan is a party and other legislative norms, and regulates the protection of clients’ (natural or legal persons’) personal data by “ACON Consulting” LLC (hereinafter – the “Company”).

This document determines the rules for collection, use, storage, transfer, sharing and protection of personal data of the Company’s clients and potential clients (hereinafter – client).

  1. Basic definitions

1.1. The following terms are used in this Privacy Policy:

1.1.1. Personal data — information that enables the identity of a person to be determined directly or indirectly and includes confidential information;

1.1.2. Subject of personal data – a client who is a natural person, whose personal data is collected, processed and protected, identified or identifiable;

1.1.3. Processing of personal data – any operation performed on personal data (collection, systematization, storage, modification, transfer, destruction, etc.);

  1. Purpose of the Privacy Policy

The main purposes of this Privacy Policy are:

  1. to ensure the processing of personal data in accordance with the requirements of the legislation;
  2. to protect the rights and freedoms of subjects of personal data;
  3. to prevent unauthorized and unlawful use of personal data;
  4. to ensure the security of clients’ information within the framework of consulting activities and to regulate the Company’s activities with clients’ data.
  5. Categories of personal data collected

The Company may collect and process the following personal data while providing consulting services:

  • first name, last name, patronymic;
  • date of birth;
  • information of identity card or other identification documents;
  • residential and actual address;
  • contact means (phone number, email address, etc.);
  • information reflecting clients’ political views, religious beliefs, convictions and worldviews;
  • information about ethnic origin or racial belonging; information on a person’s conviction;
  • private characteristics, abilities of persons and other information of this kind;
  • information about health condition;
  • information concerning provision of social assistance and social services;
  • information on mental and physical problems;
  • information about domestic violence committed against a person;
  • information related to taxation, except for tax debts;
  • information about financial transactions;
  • information about family life subject to restrictions on its acquisition;
  • other information obtained by mutual consent of the parties provided for by the legislation.

  1. Legal grounds for collection of personal data

Processing of personal data is based on the following legal grounds:

  • The explicit and voluntary consent of the subject of personal data; conclusion and performance of a contract;
  • fulfillment of obligations established by legislation;
  • unavoidable legal requests of courts and state bodies;
  • the legitimate interests of the Company (provided they do not contradict the legislation).

  1. Purposes of using personal data

The Company uses personal data for the following purposes:

  • provision of consulting services;
  • establishing contact with the client;
  • establishing and performing contractual relations;
  • preparation of legal documents;
  • representation in courts and other state bodies;
  • compliance with legislative requirements;
  • internal reporting and risk management.

  1. Transfer of personal data to third parties

The Company may transfer personal data to third parties only in the following cases:

  • if there is consent of the subject of personal data;
  • in cases provided by legislation;
  • based on a lawful request of courts, law enforcement and other competent state bodies;
  • to partners providing services on behalf of the Company (under contract and subject to confidentiality obligations).
  • Personal data is not sold or shared for commercial purposes.

  1. Retention period of personal data

Personal data is retained until the purposes of its collection are achieved or for the periods provided by legislation.

  1. Protection of personal data

The Company takes appropriate technical and organizational measures to protect personal data, including:

  • protection of information systems;
  • implementation of internal confidentiality rules;
  • employees’ confidentiality obligations.

  1. Rights of the subject of personal data

The subject of personal data has the following rights: to receive information about his/her personal data; to request clarification or updating of the data; to object to the processing of personal data; to request destruction of unlawfully processed data; to withdraw consent to sharing of data at any reasonable time; to apply to the competent state body or court.

  1. Cross-border data transfer

Transfer of personal data outside the borders of the Republic of Azerbaijan is carried out only in accordance with the requirements of the legislation and ensuring appropriate protective measures.

  1. Amendments to the Privacy Policy

The Company reserves the right to amend this Privacy Policy.