Privacy policy
Last updated: 2026-08-18
Draft. This document was prepared as a starting point and must be reviewed by the organiser's legal counsel before publication, including for compliance with the Law of the Republic of Kazakhstan No. 94-V on personal data and its protection.
This policy explains what personal data is processed when you enter the AstanaTechCup championship, why, and how long it is kept.
1. Who processes the data
The data controller is the championship organiser, SmartHub. Contact details for data protection enquiries are published in the Contact section.
2. What we collect
When you submit an entry: the team and organisation name, region and city, the names and ages of team members, and the contact person's name, email, phone number and note. When you pay the entry fee, payment details are handled by the payment provider — this site neither receives nor stores card details.
3. Why we process it
To register your team and admit it to the competition, to confirm the entry and stay in touch, to produce results and award documents, and to keep the service secure and free from abuse.
4. Data about minors
The championship's main audience is schoolchildren. Data about participants under 18 is submitted by a legal guardian or with their consent; confirming this is a mandatory condition of entry.
5. How long we keep it
Entry data is retained for the duration of the championship and the reporting period that follows, after which it is deleted or anonymised. Specific periods are set out in the controller's internal policy.
6. Who it is shared with
Data is never sold, and never passed to third parties for advertising. Limited access is held by the service providers needed to run the site: hosting, email delivery, the payment provider and the bot-protection service.
7. Your rights
You may request a copy of your data, ask for it to be corrected or deleted, and withdraw your consent to processing. Contact the organising committee quoting your entry reference.
8. Cookies
Essential cookies keep the registration form working and protect against request forgery. Analytics cookies are set only after explicit consent and can be declined without losing any site functionality.
9. Security
Data is transmitted over an encrypted connection, access to it is restricted, and actions on entries are logged. Personal data is never written to service logs in the clear.