This is a translation. In case of any discrepancy between the language versions, the Russian version prevails. Open the Russian version
This Privacy and Personal Data Processing Policy (the “Policy”) sets out how personal data of users of the Staffly online service is collected, stored, used, transferred and protected.
By using the Staffly website and service, the User confirms their consent to the terms of this Policy.
1. General provisions
1.1. This Policy has been developed in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”.
1.2. The operator of the personal data is the owner and administrator of the Staffly service (the “Operator”).
1.3. The Policy applies to all information that the Operator may obtain about Users when they use the Staffly website, web application and related services.
1.4. Use of the service constitutes the User’s unconditional consent to this Policy and to the terms of processing of their personal data.
2. Terms and definitions
- Personal data means information relating to an identified or identifiable personal data subject.
- User means an individual who uses the Staffly service.
- Processing of personal data means any operation performed on personal data, including collection, storage, modification, use, transfer and deletion.
- Staffly service means the online system for leave tracking and HR processes.
3. Personal data processed
3.1. Data of company owners and employees
- name (full name);
- email address;
- login and encrypted password;
- the user’s role in the system (owner, HR, employee);
- date of hire;
- information about leave, sick leave and other types of absence;
- comments on requests and adjustments;
- history of actions in the system.
3.2. Technical data
- IP address;
- cookie data;
- browser and device information;
- date and time of access.
3.3. Data provided through forms
- feedback form;
- online support chat.
4. Purposes of personal data processing
- registration and authentication of users;
- creation and management of companies and employees;
- leave tracking and automatic calculation of leave days;
- generation of reports (including in Excel format);
- operation of notifications, including Telegram notifications;
- ensuring security and preventing unauthorized access;
- technical support for users;
- improving the quality of the service.
5. Legal grounds for processing
Personal data is processed on the basis of:
- the consent of the personal data subject;
- the need to perform the user agreement;
- the requirements of the legislation of the Republic of Kazakhstan.
6. Conditions of processing and storage of personal data
6.1. Personal data is processed using automated and non-automated means.
6.2. Personal data is stored for as long as the User uses the service and, after the User stops using it, to the extent and for the periods provided for by law.
6.3. The history of changes and actions in the system cannot be edited or deleted in order to ensure the transparency of HR processes.
7. Transfer of personal data to third parties
7.1. The Operator does not transfer personal data to third parties, except in the following cases:
- notification delivery services (for example, Telegram);
- hosting providers and cloud infrastructure;
- requests of authorized government authorities made in accordance with the law.
7.2. Personal data is transferred only to the extent necessary to provide the service.
8. Protection of personal data
The Operator takes the necessary organizational and technical measures to protect personal data, including:
- password encryption;
- separation of access rights;
- protection of the server infrastructure;
- logging of user actions;
- regular software updates.
9. Rights of the personal data subject
The User has the right to:
- receive information about their personal data;
- demand that their personal data be corrected, blocked or destroyed;
- withdraw their consent to the processing of personal data;
- appeal against the Operator’s actions to the authorized bodies.
10. Use of cookies
The Staffly service uses cookies to:
- ensure the website works correctly;
- save user settings;
- perform analytics and improve the user experience.
The User may disable cookies in their browser settings.
11. Changes to the privacy policy
11.1. The Operator may amend this Policy without prior notice to Users.
11.2. The current version of the Policy is always available on the Staffly website.
12. Contact information
For any questions regarding the processing of personal data, the User may contact the Operator through the feedback form or other contact details provided on the Staffly website.