Consent to personal data processing

This document contains the text of the consent that you give when placing an order, registering or subscribing to the newsletter in the online store shop.lamelacosmetics.com.

To Whom the Consent Is Given

To the Limited Liability Partnership "La Pomme Group", BIN 240940003095, address: 050040, Republic of Kazakhstan, city of Almaty, Bostandyk district, Al-Farabi avenue, building 41/3-67 (hereinafter referred to as the "Operator").

Text of the Consent

By ticking the box "I agree with the terms of the Public Offer and the Privacy Policy" when placing an order on the website shop.lamelacosmetics.com, I, the personal data subject, freely, by my own will and in my own interest, give the Operator my consent to the collection and processing of my personal data on the following terms.

1. Categories of personal data to the processing of which consent is given:

• surname, first name, patronymic (where provided);
• contact telephone number;
• e-mail address;
• preferred method of communication;
• WhatsApp number or Instagram account — where communication via a messenger is chosen;
• the content of correspondence with the operator in the WhatsApp or Instagram Direct messenger;
• delivery address: city, street, building, apartment, postal code, post office number;
• order history;
• the masked payment card number (the first six and the last four digits) transmitted by the acquiring bank for information purposes;
• technical data: IP address, device and browser type, cookie identifiers and advertising identifiers, referral source, information about pages viewed and actions taken on the Website;
• where consent to marketing cookies has been given — irreversibly transformed (hashed) e-mail address, telephone number, first name, surname, city, postal code and country, as well as the internal identifiers of the Website visitor and of the buyer;
• information about the consents I have given: the fact of consent, the date and time, the IP address, the type and version of the browser, the language of the page, the revision of the document and the checksum of the text to which I consented.

2. Purposes of the processing:

• the conclusion and performance of the retail sale contract, and the placement, confirmation and delivery of the Order;
• communication with me to confirm the contents of the Order and the delivery address;
• the carrying out of settlements and the generation and sending of the fiscal receipt;
• the transfer to the postal service of the information necessary for delivery;
• the consideration of my enquiries, claims and reviews;
• the handling of disputes relating to payments and the provision of the necessary information to the acquiring bank;
• the analysis of Website traffic and the improvement of its operation — where I have given my consent to analytical cookies;
• the measurement of advertising effectiveness and the building of advertising audiences — where I have given my consent to marketing cookies;
• ensuring security and preventing fraudulent actions;
• the performance of the obligations imposed on the Operator by the legislation of the Republic of Kazakhstan.

3. List of actions with personal data: collection, recording, systematisation, accumulation, storage, clarification (updating, amendment), extraction, use, transfer (provision, access) to the extent and to the persons specified in clause 4, anonymisation, blocking, deletion, erasure — both with and without the use of means of automation.

4. Transfer to third parties. I give my consent to the transfer of my personal data, to the extent necessary for the performance of the Order, to: Kazpost JSC — for delivery to localities outside Almaty and Astana; acquiring banks and payment systems; the fiscal data operator and the provider of the cloud cash register — COMRUN LLP (the re:Kassa service) — for generating the fiscal receipt and sending it to me at the e-mail address I provided; providers of hosting and technical support services for the Website; and state authorities of the Republic of Kazakhstan — in the cases expressly provided for by law.

Separately, where the corresponding consent has been given: to Meta Platforms, Inc. and its affiliates (when using the WhatsApp messenger, Instagram Direct, and also Meta's advertising and analytics services) and to Google LLC (when using the Google Analytics service).

5. Place of storage. I have been notified that the database containing my personal data, the Operator's servers and its corporate e-mail are located within the territory of the Republic of Kazakhstan. The acceptance and performance of Orders, settlements and delivery are ensured within the Republic of Kazakhstan.

5.1. Cross-border transfer. I have been notified that, in the cases listed in section 5.6 of the Privacy Policy, part of my data is transferred to persons located outside the Republic of Kazakhstan: to Meta Platforms, Inc. — when the WhatsApp messenger and Instagram Direct are used for communication and when Meta's advertising and analytics services are used; to Google LLC — when the Google Analytics service is used. Such transfer is carried out on the basis of separate consent in accordance with Article 16 of the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" and may be terminated by me at any moment by choosing another method of communication and declining analytical and marketing cookies. Such refusal does not affect the ability to place and receive an Order.

6. Term of validity of the consent. The consent is valid for the period necessary to achieve the purposes of the processing, and, as regards information subject to mandatory storage, for the period established by the legislation of the Republic of Kazakhstan.

7. Withdrawal of consent. I am entitled to withdraw this consent at any moment by sending an enquiry to info@lamelacosmetics.com with the subject line "Personal Data". I have been notified that the withdrawal of consent may render the performance of a placed Order impossible, and also that information the storage of which is mandatory by virtue of law will be retained.

8. Rights of the subject. I have familiarised myself with the rights provided for by Article 24 of the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" dated 21 May 2013 No. 94-V, and with the Privacy Policy, which forms an integral part of this consent.

Separate Consent to Receiving Advertising Mailings

Consent to receiving information about new products, promotions and special offers is given by a separate, optional tick when placing an Order or when subscribing to the newsletter. The wording:

I agree to receive from "La Pomme Group" LLP informational and advertising messages about new products, promotions and special offers of the La mela brand at the e-mail address and telephone number provided by me.

You may unsubscribe from the mailing at any moment — via the "Unsubscribe" link in every e-mail or by an enquiry to info@lamelacosmetics.com. Refusal of the mailing does not affect the performance of placed Orders.

Separate Consent to Communication via WhatsApp and Instagram Direct

The selection of the WhatsApp or Instagram Direct messenger as the method of communication is voluntary. The wording:

I choose communication via a messenger and give my consent to the cross-border transfer of the data necessary for this — my name, telephone number or Instagram account, the content of the correspondence and information about the contents of the Order — to Meta Platforms, Inc. and its affiliates, subject to the requirements of Article 16 of the Law of the Republic of Kazakhstan "On Personal Data and Their Protection".

You may choose communication by telephone or e-mail — in that case your data is not transferred to Meta Platforms. The choice of the method of communication has no effect on the placement, payment and delivery of the Order.

Separate Consent to Analytics and Advertising

Consent to the use of analytical and marketing cookies is given separately, in the consent banner upon the first visit to the Website. The wordings:

Analytical cookies. I agree to the collection of information about my actions on the Website using the Google Analytics service (Google LLC) and to the transfer of this information to the said company outside the Republic of Kazakhstan for the purposes of analysing traffic and improving the operation of the Website, including the transfer from the Seller's server of information about the number, amount and contents of the paid Order.

Marketing cookies. I agree to the collection of information about my actions on the Website using the Meta pixel and advertising services (Meta Platforms, Inc.) and to the transfer of this information to the said company outside the Republic of Kazakhstan for the purposes of measuring advertising effectiveness and displaying relevant advertising offers to me, including the transfer of the IP address, the type of device and browser, the number, amount and contents of the Order, and also of the irreversibly transformed (hashed) e-mail address, telephone number, first name, surname, city, postal code, country and internal identifiers of the Website visitor and of the buyer.

Refusal of both categories does not affect the operation of the cart or the placement and payment of an Order. You may change your choice at any moment in the Website settings.

Analytical and advertising scripts are not loaded on the checkout page. Information about a completed purchase is transferred to advertising services from the Operator's server after the payment has been confirmed.

Participation in Prize Draws

If you take part in a prize draw, your personal data is not transferred outside the Republic of Kazakhstan. The RANDOM.ORG service is used for the random selection of the winner, and only anonymised sequential entry numbers are transferred to it. The procedure for conducting prize draws is described in the Regulation on the Conduct of Promotions.

Contacts

For all matters relating to the processing of personal data, please contact:

• E-mail: info@lamelacosmetics.com, subject line "Personal Data"
• Telephone: +7 701 013 0748
• Person responsible for organising the processing of personal data: the director of "La Pomme Group" LLP, Kassenova Dinara M.
• Person responsible for information and technical support and technical protection measures: the technical director, Kassymkul Temirlan Y., t.kassymkul@lamelacosmetics.com
• Postal address: 050040, Republic of Kazakhstan, city of Almaty, Bostandyk district, Al-Farabi avenue, building 41/3-67

Language of the document

This document is published in the Kazakh, Russian and English languages. Legal force is vested in the Kazakh and Russian texts, which have equal legal force.

The English text is published for the convenience of foreign customers, has no legal force and shall not apply in the event of any discrepancy with the Kazakh and Russian texts — in such case the Kazakh text shall prevail.

Any discrepancy between the texts shall be eliminated by publishing a corrected edition.