This personal data processing policy (hereinafter referred to as the Policy) defines the procedure for processing personal data on the website https://karavan.az (hereinafter referred to as the Site) and aims to protect the privacy of personal data of the Site users.
1. General Provisions
1.1. This policy regulates the procedure for collecting, processing, and storing personal data in accordance with the legislation of the Republic of Azerbaijan.
1.2. The collection and processing of personal data are carried out for the following purposes:
- Providing access to services available on the Site;
- Improving the use of materials and services on the Site;
- Notifying registered users of the Site.
2. Key Terms
The following terms are used in this Policy:
- Personal data – any information related to a specific individual;
- Processing – any actions with personal data (collection, recording, systematization, storage, updating, modification, use, transfer, privacy protection, deletion);
- Site – the internet resource https://karavan.az;
- Operator – the legal entity processing personal data.
3. Collection of Personal Data
3.1. Certain information about the user is automatically collected when using the Site:
- IP address;
- browser type;
- device type and operating system;
- date and time of site access.
3.2. Personal data is also collected based on information provided by the user (e.g., during registration).
4. Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the following rights:
- to obtain information on the processing of their personal data;
- to request updating or correcting their personal data;
- to restrict or request the deletion of their personal data.
4.2. Personal data subjects are obliged to:
- provide accurate information about themselves to the Operator;
- inform the Operator about any corrections to their personal data.
4.3. Individuals providing false information or sharing personal data of others without consent are liable under the laws of the Republic of Azerbaijan.
5. Principles of Personal Data Processing
5.1. Personal data processing is carried out on lawful and fair grounds.
5.2. Personal data processing is limited to achieving specific, predetermined, and lawful objectives.
5.3. Merging incompatible personal data databases is prohibited.
5.4. Only data relevant to the purposes of processing are included.
5.5. The composition and volume of processed personal data should meet the stated purposes.
5.6. Accuracy, sufficiency, and relevancy of personal data are ensured during processing.
5.7. Personal data is stored for as long as necessary to achieve processing purposes and is deleted or anonymized afterward.
6. Purposes of Personal Data Processing
6.1. The purposes for processing user personal data are:
- to inform the user via email;
- to provide access to services and materials on the site.
6.2. The Operator may inform the user about new products, services, and special offers. The user may unsubscribe from notifications at any time.
6.3. Anonymous data collected through internet statistics services is used to analyze user activity on the site and improve the quality of the site.
7. Legal Grounds for Processing Personal Data
7.1. The legal grounds for the Operator to process personal data include:
- The Constitution of the Republic of Azerbaijan;
- Legislation of the Republic of Azerbaijan on personal data protection;
- User’s consent to the processing of their personal data.
7.2. The Operator processes only personal data provided by the user on special forms on https://karavan.az.
7.3. The Operator processes anonymous data if cookies are enabled in the user’s browser settings.
8. Collection, Storage, and Other Processing of Personal Data
The Operator ensures the protection of personal data through legal, organizational, and technical measures.
8.1. The Operator guarantees the security of personal data and restricts unauthorized access to it.
8.2. Personal data may be disclosed to third parties only in cases required by law or with the subject’s consent.
8.3. Users may contact the Operator to update their personal data via email.
8.4. The processing period of personal data ends upon achieving the purposes for processing.
The user may refuse to have their data processed at any time.
8.5. The Operator is not responsible for third-party services’ privacy practices.
8.6. Personal data disclosed by the user may be used for public interest purposes.
8.7. The Operator ensures confidentiality of personal data.
8.8. Personal data is stored only for purposes aligned with the processing.
8.9. Processing may stop when the purposes are achieved or upon user withdrawal of consent.
9. Actions Performed with Personal Data by the Operator
The Operator performs collection, recording, systematization, storage, updating, use, transfer, and deletion of personal data.
10. Transfer of Personal Data to Foreign Countries
Transfer of personal data abroad is allowed with the subject’s written consent or for fulfilling a contract with the subject.
11. Confidentiality of Personal Data
The Operator and other persons accessing personal data must not disclose it to third parties without the subject’s consent.
12. Final Provisions
12.1. Users may contact the Operator with any questions regarding the processing of their personal data at mail@karavan.az.
12.2. Any changes to this document will be reflected here. The Policy is effective until replaced with a new version.
12.3. The current version of the Policy is available at https://karavan.az.
