Annex No. 1 to the Privacy Policy

CONSENT

to the processing of personal data (hereinafter — the “Consent”)

Version dated 25 August 2026, Kyrgyz Republic, Bishkek

The User, acting voluntarily, of their own will and in their own interest, gives specific, informed and conscious consent to the processing of their personal data (hereinafter — “PD”) through the Site https://tochka-pro.com/ for: Individual Entrepreneur Nataliia Viktorovna Pichugova (TIN 13007197650032, OKPO 32852517, registration number 004-2024-169-1874, date of state registration 21 May 2024, registering authority — the State Tax Service Office for the Pervomaisky District of Bishkek, address: 2-ya Cherepki St. 22, Pervomaisky District, Bishkek, Kyrgyz Republic) (hereinafter — the “Record Owner”, the “Operator”), on the terms set out below.
1. LEGAL BASIS
1.1. This Consent is given in accordance with Chapter 11 “Processing of Personal Data” (Articles 77–91) of the Digital Code of the Kyrgyz Republic No. 178 of 31 July 2025, and in particular Article 79 thereof, which establishes the bases of processing and the requirements for consent.
1.2. The Consent is freely given, specific, informed and conscious. The User confirms that they have reviewed the Privacy Policy published on the Site, their rights as a data subject, and the legal consequences of giving this Consent.
2. PURPOSES OF PROCESSING AND CATEGORIES OF PERSONAL DATA
2.1. For Site visit statistics the Record Owner uses the Yandex Metrica web analytics service, which generates statistical information about the Site using cookies and Site usage data. The data obtained are stored by Yandex LLC (PSRN 1027700229193, TIN 7736207543, registered address: 16 Lva Tolstogo St., Moscow, 119021, Russian Federation). The service's privacy policy: https://yandex.ru/legal/confidential/.
2.2. The Record Owner does not process special categories of personal data (Article 80 of the Digital Code of the KR), including data on racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sex life, biometric and genetic data, or criminal record information.
3. PROCEDURE OF PROCESSING
3.1. Operations performed on PD: collection, recording, systematisation, accumulation, storage, rectification (updating, alteration), retrieval, use, transfer (provision, access), anonymisation, restriction of processing, blocking, erasure and destruction.
3.2. Means of processing: automated processing using computing equipment and the Internet, as well as non-automated processing.
3.3. To achieve the stated purposes the Record Owner may engage Processors — providers of hosting, payment acceptance, mailing and web analytics services acting on the basis of contracts and the written instructions of the Record Owner (Article 86 of the Digital Code of the KR). An up-to-date list of such parties is available on request sent to info@tochka-pro.com.
3.4. The User is informed of, and agrees to, the fact that certain Processors may be located outside the Kyrgyz Republic, and that PD may accordingly be transferred across borders on the terms of Article 89 of the Digital Code of the Kyrgyz Republic and Section 9 of the Privacy Policy.
4. GIVING AND WITHDRAWING CONSENT
4.1. Method of giving the Consent: the User ticks a dedicated checkbox under the relevant form on the Site. That affirmative action has the legal force of the User's written consent to the processing of their PD on the terms of the Privacy Policy and this Consent.
4.2. Method of withdrawing the Consent: sending the Record Owner an electronic document to info@tochka-pro.com with the subject line “Withdrawal of consent to the processing of PD” together with a free-form request to cease processing. The Consent ceases to have effect from the moment the withdrawal is received by the Record Owner.
4.3. Withdrawal of the Consent does not terminate processing carried out on another legal basis provided for by Article 79 of the Digital Code of the Kyrgyz Republic, in particular for the performance of a concluded contract or a statutory obligation.
5. PROCESSING PERIOD AND GROUNDS FOR TERMINATION
5.1. Processing period: from the date the Consent is given until the purposes of processing are achieved, or the Consent is withdrawn, or an objection or erasure request is upheld, or unlawful processing is detected, or the Record Owner ceases its activity, unless another period is established by the legislation of the Kyrgyz Republic.
5.2. Upon any of these grounds arising, the Record Owner shall cease processing and erase the PD within 30 (thirty) calendar days, unless another period is established by the legislation of the Kyrgyz Republic.
5.3. Method of erasure: wiping and/or formatting of the electronic medium. An act is drawn up and/or an extract from the information system event log is retained following erasure.
6. RIGHTS OF THE USER
6.1. The User has the right to obtain information about the processing of their PD, to request their rectification and correction, to request the erasure of personal records (Article 83 of the Digital Code of the KR), to object to processing (Article 84), to request the restriction of processing (Article 85), to withdraw the Consent, and to lodge a complaint against the Record Owner's acts with the State Agency for Personal Data Protection under the Cabinet of Ministers of the Kyrgyz Republic or before a court.
6.2. An objection to processing is examined within 7 (seven) business days, with a reasoned written decision issued; other requests are examined within 10 (ten) business days, with a possible extension of no more than 5 (five) business days.
6.3. By giving this Consent the User confirms that they have reviewed the terms of the Privacy Policy and their rights and obligations, understand the legal consequences of giving the Consent, and confirm the accuracy of the PD provided and that such PD belong to them.
6.4. This document is an English translation prepared for the convenience of users. The Consent is drawn up in Russian; in the event of any discrepancy between the English and Russian versions, the Russian version shall prevail.
DETAILS