{"id":11580,"date":"2026-05-15T17:04:22","date_gmt":"2026-05-15T11:04:22","guid":{"rendered":"https:\/\/bf.kg\/?page_id=11580"},"modified":"2026-05-15T17:09:47","modified_gmt":"2026-05-15T11:09:47","slug":"privacy_policy","status":"publish","type":"page","link":"https:\/\/bf.kg\/en\/privacy_policy\/","title":{"rendered":"Privacy policy and personal data processing CJSC MCC \u201cBailyk Finance\u201d"},"content":{"rendered":"

Privacy policy<\/strong> and personal data processing<\/strong><\/span><\/p>\n

CJSC MCC \u201cBailyk Finance\u201d<\/strong><\/span><\/p>\n

    \n
  1. General provisions<\/strong><\/span>\n
      \n
    • This Privacy and Personal Data Processing Policy (hereinafter \u201cthe Policy\u201d) has been developed in accordance with the requirements of the Digital Code of the Kyrgyz Republic (hereinafter \u201cDC KR\u201d), including Chapter 11 of the DC KR regulating the processing of personal data, regulatory legal acts (hereinafter \u201cRLA\u201d) of the National Bank of the Kyrgyz Republic, and other RLAs of the Kyrgyz Republic.<\/span><\/li>\n
    • The Policy establishes the legal and organizational bases for the processing of personal data by the Closed Joint-Stock Company Microcredit Company \u201cBailyk Finance\u201d (hereinafter \u201cthe Company\u201d) and applies to all categories of personal data subjects whose data are processed by the Company in connection with its activities.<\/span><\/li>\n
    • The Policy is a public document, published on the Company\u2019s website https:\/\/bf.kg\/ (hereinafter \u201cthe Website\u201d) and in the \u201cBailyk 24\u201d Mobile Application (hereinafter \u201cthe Mobile Application\u201d), and applies jointly with other Company documents governing personal data processing, including: the Public Offer on the use of the Mobile Application and its Annex 1 (Consent to Personal Data Processing), the Loan Agreement and other civil law agreements concluded with personal data subjects, as well as the Company\u2019s internal regulatory documents.<\/span><\/li>\n<\/ul>\n<\/li>\n
    • Terms and Definitions<\/strong><\/span><\/li>\n<\/ol>\n

      The following terms and abbreviations are used in this Policy:<\/span><\/p>\n

      Company<\/strong> \u2014 Closed Joint-Stock Company Microcredit Company \u201cBailyk Finance\u201d, the owner of personal records in accordance with Article 1 of the DC KR, independently determining the purposes and methods of personal data processing.<\/span><\/p>\n

      Personal Data Subject<\/strong> \u2014 a natural person to whom the personal data being processed relate. Depending on the context, the subject may be:<\/span><\/p>\n

        \n
      • Website Visitor \u2014 any natural person visiting the Website without entering into a contract;<\/span><\/li>\n
      • Prospective Client \u2014 a natural person who has submitted a consultation request or online credit\/financing application via the Website;<\/span><\/li>\n
      • Client \u2014 a natural person aged 18 or above with full legal capacity and capacity to act, who has entered into a Loan Agreement and\/or other civil law agreement with the Company;<\/span><\/li>\n
      • Mobile Application User \u2014 a natural person who has been identified at a Company office, signed the Agreement of Participants in Digital Legal Relations, and registered in the Mobile Application;<\/span><\/li>\n
      • Partner \/ Prospective Supplier \u2014 a natural or legal person who has submitted a partnership application via the Website.<\/span><\/li>\n<\/ul>\n

        Personal Data<\/strong> \u2014 digital data containing personal information, i.e. information about a natural person who can be identified either on the basis of that information or in combination with other information to which the Company has access.<\/span><\/p>\n

        Special Categories of Personal Data<\/strong> \u2014 categories of personal data whose processing requires a separate legal basis: health data, data on racial or ethnic origin, political views, religious beliefs, trade union membership, and genetic information.<\/span><\/p>\n

        Processing of Personal Data<\/strong> \u2014 any action (operation) or set of actions performed with personal data, including collection, recording, organization, structuring, accumulation, storage, adaptation, alteration, use, disclosure by transmission, dissemination, alignment, deletion, or destruction.<\/span><\/p>\n

        Processor<\/strong> \u2014 a participant in digital legal relations to whom the Company has entrusted personal data processing under a contract.<\/span><\/p>\n

        Cross-border Transfer<\/strong> \u2014 transfer of personal data to record owners under the jurisdiction of other states.<\/span><\/p>\n

        Subject\u2019s Consent<\/strong> \u2014 a voluntary, specific, informed, and conscious expression of will by the personal data subject regarding the processing of their personal data, given in any form that allows confirmation of its receipt. Consent may be withdrawn by the subject in a manner no more burdensome than the procedure for its provision.<\/span><\/p>\n

        Mobile Application<\/strong> \u2014 the \u201cBailyk 24\u201d software application for Android and\/or other supported operating systems, designed for the User to access Company services.<\/span><\/p>\n

        Loan Agreement<\/strong> \u2014 an agreement concluded between the Company and the Client providing for the issuance of a microloan and defining the terms of its disbursement, use, and repayment.<\/span><\/p>\n

        ABS<\/strong> \u2014 the Company\u2019s automated banking system.<\/span><\/p>\n

        PWD<\/strong> \u2014 person with a disability.<\/span><\/p>\n

        AML\/CFT<\/strong> \u2014 anti-money laundering and countering the financing of terrorism, in accordance with the Law of the Kyrgyz Republic \u201cOn Countering the Financing of Criminal Activities and Legalization (Laundering) of Criminal Proceeds\u201d dated 6 August 2018 No. 87.<\/span><\/p>\n

          \n
        1. Categories of Personal Data Subjects and Legal Bases for Processing<\/strong><\/span><\/li>\n<\/ol>\n

          The Company processes personal data where at least one of the grounds provided for in Article 79 of the DC KR is present:<\/span><\/p>\n

            \n
          1. necessity to conclude or perform a contract to which the subject is a party;<\/span><\/li>\n
          2. fulfilment of obligations established by the legislation of the Kyrgyz Republic;<\/span><\/li>\n
          3. pursuit of the Company\u2019s legitimate interests, provided that the subject\u2019s rights are respected;<\/span><\/li>\n
          4. consent of the personal data subject \u2014 in the absence of other grounds.<\/span><\/li>\n<\/ol>\n

            3.1.\u00a0\u00a0\u00a0\u00a0\u00a0 Website Visitor<\/span><\/h2>\n
              \n
            • When visiting the Website, the Company automatically receives technical data: IP address, browser and device data, cookies, and data on Website behavior. Collection is carried out in part via the Google Analytics service.<\/span><\/li>\n
            • Processing is performed on the basis of the Company\u2019s legitimate interest for the purpose of ensuring the Website\u2019s operation, its security, and improving service quality.<\/span><\/li>\n<\/ul>\n

              3.2.\u00a0\u00a0\u00a0\u00a0\u00a0 Prospective Client<\/span><\/h2>\n
                \n
              • The following forms are available on the Company\u2019s Website:<\/span><\/li>\n<\/ul>\n
                  \n
                • \u201cConsultation Request\u201d form \u2014 the subject provides the subject of the enquiry, name, and mobile phone number. Data are forwarded to the Company\u2019s Contact Centre. Processing is performed on the basis of pre-contractual measures at the subject\u2019s initiative;<\/span><\/li>\n
                • \u201cOnline Application\u201d form \u2014 the subject provides full name, email address, phone number, financing amount and term, financing purpose, and comments, and may indicate the need for home-visit service (\u201cI require home-visit service (PWD)\u201d). Data are forwarded to the Company\u2019s Contact Centre. Processing is performed on the basis of pre-contractual measures at the subject\u2019s initiative and the subject\u2019s consent given by clicking the \u201cSubmit\u201d button. The home-visit service indication is informational \u2014 the final PWD status is recorded by an authorized Company employee upon the subject\u2019s personal visit to the office.<\/span><\/li>\n<\/ul>\n

                  3.3.\u00a0\u00a0\u00a0\u00a0\u00a0 Client<\/span><\/h2>\n
                    \n
                  • A natural person who has entered into a Loan Agreement and\/or other civil law agreement with the Company at a Company office.<\/span><\/li>\n
                  • Processing is performed on the basis of contract performance, legislative requirements (including AML\/CFT), and the Client\u2019s consent drawn up as a separate document signed by hand.<\/span><\/li>\n<\/ul>\n

                    3.4.\u00a0\u00a0\u00a0\u00a0\u00a0 Mobile Application User<\/span><\/h2>\n
                      \n
                    • A natural person who has been identified at a Company office and registered in the Mobile Application by accepting the Public Offer. Registration in the Mobile Application is voluntary and is not a mandatory condition for entering into a Loan Agreement.<\/span><\/li>\n
                    • Currently, the Mobile Application is available only to existing Clients who have registered and been identified at Company offices.<\/span><\/li>\n
                    • Processing is performed on the basis of the Public Offer and its Annex 1 (Consent to Personal Data Processing) accepted by the User.<\/span><\/li>\n<\/ul>\n

                      3.5.\u00a0\u00a0\u00a0\u00a0\u00a0 Partner \/ Prospective Supplier<\/span><\/h2>\n
                        \n
                      • When completing the \u201cBecome a Partner\u201d form on the Website, the subject provides the legal name of the organization, contact person\u2019s full name, phone number, and email address.<\/span><\/li>\n
                      • Processing is performed on the basis of pre-contractual measures at the subject\u2019s initiative and consent expressed by clicking the \u201cSubmit Application\u201d button.<\/span><\/li>\n<\/ul>\n
                          \n
                        1. Categories of Personal Data Processed<\/strong><\/span><\/li>\n<\/ol>\n

                          4.1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Website Visitor Data (collected automatically):<\/span><\/h2>\n
                            \n
                          • IP address;<\/span><\/li>\n
                          • browser data (type, version, language);<\/span><\/li>\n
                          • device data (type, operating system);<\/span><\/li>\n
                          • cookies;<\/span><\/li>\n
                          • Website behavior data (pages visited, time on Website).<\/span><\/li>\n<\/ul>\n

                            4.2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Prospective Client Data:<\/span><\/h2>\n
                              \n
                            • \u201cConsultation Request\u201d form:<\/span><\/li>\n<\/ul>\n
                                \n
                              • name (free form);<\/span><\/li>\n
                              • mobile phone number;<\/span><\/li>\n
                              • subject of enquiry (free form).<\/span>\n
                                  \n
                                • Online Application:<\/span><\/li>\n<\/ul>\n<\/li>\n
                                • full name;<\/span><\/li>\n
                                • email address;<\/span><\/li>\n
                                • phone number;<\/span><\/li>\n
                                • financing amount and term;<\/span><\/li>\n
                                • financing purpose;<\/span><\/li>\n
                                • comments (free form);<\/span><\/li>\n
                                • home-visit service indication (PWD) \u2014 informational; PWD status is recorded in the Company\u2019s ABS by an authorized employee upon the subject\u2019s personal visit to the office.<\/span>\n
                                    \n
                                  • QR loan repayment service:<\/span><\/li>\n<\/ul>\n<\/li>\n
                                  • taxpayer identification number (TIN) \u2014 entered by the subject and transmitted to the Company\u2019s payment partner to generate a payment order.<\/span><\/li>\n
                                  • The type of product selected (classic credit or Islamic financing) is recorded for correct payment routing.<\/span><\/li>\n<\/ul>\n

                                    4.3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Client Data:<\/span><\/h2>\n
                                      \n
                                    • Provided by the Client when entering into a contract:<\/strong><\/span><\/li>\n<\/ul>\n
                                        \n
                                      • surname, first name, patronymic (if applicable);<\/span><\/li>\n
                                      • gender;<\/span><\/li>\n
                                      • date of birth;<\/span><\/li>\n
                                      • citizenship;<\/span><\/li>\n
                                      • personal identification number (PIN);<\/span><\/li>\n
                                      • series, number, date of issue and expiry of identity document, name of issuing authority;<\/span><\/li>\n
                                      • residential address (actual and registered);<\/span><\/li>\n
                                      • marital status and family composition;<\/span><\/li>\n
                                      • phone number;<\/span><\/li>\n
                                      • email address;<\/span><\/li>\n
                                      • place of work, position;<\/span><\/li>\n
                                      • salary and other income;<\/span><\/li>\n
                                      • information on assets and liabilities;<\/span><\/li>\n
                                      • bank account or other electronic payment instrument details;<\/span><\/li>\n
                                      • information on education and employment history.<\/span>\n
                                          \n
                                        • Received from third parties with the Client\u2019s consent:<\/span><\/li>\n<\/ul>\n<\/li>\n
                                        • data from credit bureaus and mobile network operators;<\/span><\/li>\n
                                        • information from the Social Fund of the Kyrgyz Republic;<\/span><\/li>\n
                                        • information from the State Registry of National Passports of KR Citizens (Ministry of Digital Development of KR, State Enterprise \u201cKyzmat\u201d);<\/span><\/li>\n
                                        • data from the National Integrated Cadastral System;<\/span><\/li>\n
                                        • information from other lawful sources.<\/span>\n
                                            \n
                                          • Collected during servicing:<\/span><\/li>\n<\/ul>\n<\/li>\n
                                          • information on transactions performed and credit history;<\/span><\/li>\n
                                          • records of enquiries to the Company\u2019s Contact Centre;<\/span><\/li>\n
                                          • other data necessary for contract performance.<\/span><\/li>\n<\/ul>\n

                                            4.4.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Mobile Application User Data:<\/span><\/h2>\n
                                              \n
                                            • login (mobile phone number), PIN code;<\/span><\/li>\n
                                            • mobile device data: model, OS version, unique device identifiers;<\/span><\/li>\n
                                            • data on actions and requests performed in the Mobile Application;<\/span><\/li>\n
                                            • anonymized Mobile Application usage statistics;<\/span><\/li>\n
                                            • other data necessary for providing services through the Mobile Application.<\/span><\/li>\n<\/ul>\n

                                              4.5.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Partner \/ Prospective Supplier Data:<\/span><\/h2>\n
                                                \n
                                              • legal name of the organisation;<\/span><\/li>\n
                                              • contact person\u2019s full name;<\/span><\/li>\n
                                              • phone number;<\/span><\/li>\n
                                              • email<\/span><\/li>\n<\/ul>\n
                                                  \n
                                                1. Processing of Health Data<\/strong><\/span>\n
                                                    \n
                                                  • In accordance with Article 80 of the DC KR, health data are a special category of personal data and require a separate legal basis for processing.<\/span><\/li>\n
                                                  • The Company processes information on whether a Client has the status of a person with a disability (PWD). The status is recorded by an authorized Company employee in the ABS on the basis of a document presented by the Client upon visiting the office. A subject who indicated the need for home-visit service in an online application via the Website informs the Company of their preference \u2014 the final status is recorded by an authorized employee upon the subject\u2019s personal visit to the office.<\/span><\/li>\n
                                                  • Data are processed exclusively for the purpose of organizing appropriate service. The legal basis is the subject\u2019s explicit expression of will.<\/span><\/li>\n
                                                  • The Company applies additional protection measures to health data and does not process them for purposes other than those specified in this Policy.<\/span><\/li>\n<\/ul>\n<\/li>\n
                                                  • Purposes of Personal Data Processing<\/strong><\/span>\n
                                                      \n
                                                    • The Company processes personal data for the following predetermined and lawful purposes:<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
                                                        \n
                                                      • Identification and verification of the personal data subject.<\/span><\/li>\n
                                                      • Conclusion and performance of the Loan Agreement and other civil law agreements.<\/span><\/li>\n
                                                      • Assessment of the Client\u2019s creditworthiness and solvency, verification of credit information.<\/span><\/li>\n
                                                      • Disbursement, servicing, and repayment of microloans, monitoring of active loans.<\/span><\/li>\n
                                                      • Ensuring the operation and technical functioning of the Mobile Application and Website, improving service quality.<\/span><\/li>\n
                                                      • Security, prevention of fraudulent actions and unauthorized access.<\/span><\/li>\n
                                                      • Interaction with subjects: notifications, consultations, handling of enquiries and complaints.<\/span><\/li>\n
                                                      • Informing about the Company\u2019s products and services (with the right to opt out of promotional messages via Mobile Application settings or by contacting the Contact Centre).<\/span><\/li>\n
                                                      • Fulfilment of KR legislative requirements, including AML\/CFT, enforcement of court and other authorities\u2019 orders.<\/span><\/li>\n
                                                      • Storage of documents in accordance with archival retention periods established by KR legislation.<\/span><\/li>\n
                                                      • Review of applications from prospective partners and suppliers.<\/span><\/li>\n
                                                      • Ensuring Website operation and analyzing its use (web analytics).<\/span><\/li>\n
                                                      • Organizing appropriate service for PWDs.<\/span>\n
                                                          \n
                                                        • The Company ensures that the volume of data processed corresponds to the stated processing purposes and takes measures to eliminate any excess.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
                                                            \n
                                                          1. Principles of Personal Data Processing<\/span>\n
                                                              \n
                                                            • The Company processes personal data in accordance with the following principles:<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
                                                                \n
                                                              • Lawfulness, fairness, and transparency \u2014 processing is carried out on lawful grounds, openly with respect to the subject.<\/span><\/li>\n
                                                              • Purpose limitation \u2014 data are processed only for specific, predetermined, and lawful purposes; change of purpose without the subject\u2019s consent is not permitted.<\/span><\/li>\n
                                                              • Data minimization \u2014 the volume of data processed does not exceed what is necessary to achieve the processing purpose.<\/span><\/li>\n
                                                              • Accuracy \u2014 the Company takes measures to ensure the accuracy, adequacy, and currency of data.<\/span><\/li>\n
                                                              • Storage limitation \u2014 data are stored no longer than required by processing purposes or legislation.<\/span><\/li>\n
                                                              • Integrity and confidentiality \u2014 processing is carried out with the application of organizational and technical protection measures against unauthorized access, destruction, or damage to data.<\/span>\n
                                                                  \n
                                                                • The Company is responsible for compliance with these principles and must be able to demonstrate such compliance.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
                                                                    \n
                                                                  1. Transfer of Personal Data to Third Parties<\/strong><\/span><\/li>\n<\/ol>\n

                                                                    8.1.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 General Rule<\/span><\/h2>\n

                                                                    The Company does not transfer personal data of subjects to third parties, except in the following cases:<\/span><\/p>\n

                                                                      \n
                                                                    • the subject has given explicit consent to the transfer;<\/span><\/li>\n
                                                                    • the transfer is necessary for the performance of a contract with the subject;<\/span><\/li>\n
                                                                    • the transfer is provided for by the legislation of the Kyrgyz Republic.<\/span><\/li>\n<\/ul>\n

                                                                      8.2.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Internal Structural Divisions of the Company<\/span><\/h2>\n
                                                                        \n
                                                                      • Access to personal data is granted only to those Company employees for whom it is necessary to perform their job duties. Applications submitted via the Website (consultation request, online application, partnership application) are forwarded to the Company\u2019s Contact Centre.<\/span><\/li>\n
                                                                      • Loan applications submitted through the Mobile Application are forwarded to Company office employees for further processing and decision-making.<\/span><\/li>\n<\/ul>\n

                                                                        8.3.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Processors<\/span><\/h2>\n
                                                                          \n
                                                                        • The Company may engage processors under a contract. Processors include:<\/span><\/li>\n<\/ul>\n
                                                                            \n
                                                                          • the Company\u2019s payment partners \u2014 for processing loan repayment requests, including via the QR service on the Website (the subject\u2019s TIN is transmitted to the payment partner to generate a payment order);<\/span><\/li>\n
                                                                          • other organizations engaged to support the Company\u2019s operations under a contract.<\/span>\n
                                                                              \n
                                                                            • The Company ensures the processor\u2019s compliance with DC KR requirements regarding personal data processing.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                                                                              8.4.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Third Parties Under Legislative Requirements<\/span><\/h2>\n
                                                                                \n
                                                                              • The Company transfers personal data to state authorities, credit bureaus, the Social Fund, courts, and other authorized bodies in the cases and manner provided for by the legislation of the Kyrgyz Republic, including in compliance with AML\/CFT requirements.<\/span><\/li>\n<\/ul>\n

                                                                                8.5.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Cross-border Transfer<\/span><\/h2>\n
                                                                                  \n
                                                                                • The Company carries out cross-border transfer of personal data in the following cases:<\/span><\/li>\n<\/ul>\n
                                                                                    \n
                                                                                  • use of the Google Analytics service on the Website involves the transfer of technical data of Website Visitors (IP address, browser data, Website behavior) to Google servers located outside the Kyrgyz Republic. The transfer is carried out on the basis of the Company\u2019s legitimate interest;<\/span><\/li>\n
                                                                                  • transfer of subjects\u2019 personal data to third parties under the jurisdiction of other states is carried out on the basis of the subject\u2019s consent to cross-border transfer, or where such transfer is necessary for the conclusion or performance of a contract to which the subject is a party, in accordance with Article 89 of the DC KR.<\/span><\/li>\n<\/ul>\n

                                                                                    8.6.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Third-Party Data<\/span><\/h2>\n
                                                                                      \n
                                                                                    • If a Client transmits to the Company personal data of third parties (e.g., guarantors, family members), the Client confirms that they have obtained those persons\u2019 consent to the collection, processing, and transfer of the specified data.<\/span><\/li>\n<\/ul>\n
                                                                                        \n
                                                                                      1. Personal Data Retention Periods<\/strong><\/span>\n
                                                                                          \n
                                                                                        • The Company retains personal data for no longer than required by the purposes of their processing. Upon achieving the processing purposes or upon the loss of necessity to achieve them, personal data are subject to deletion or anonymization, unless a different period is established by legislation.<\/span><\/li>\n
                                                                                        • Retention periods by subject category:<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
                                                                                            \n
                                                                                          • Website Visitor data (cookies, logs) \u2014 for the period necessary to achieve the processing purpose, unless otherwise established by legislation;<\/span><\/li>\n
                                                                                          • Prospective Client data (Website applications) \u2014 for the period necessary for reviewing the application and making a decision, unless otherwise established by legislation;<\/span><\/li>\n
                                                                                          • Client data under the Loan Agreement \u2014 no less than the term of the agreement and the periods established by the List of Principal Documents Generated in the Activities of Commercial Banks and Financial Credit Organizations Licensed by the National Bank of the Kyrgyz Republic, approved by Resolution of the Board of the National Bank of the Kyrgyz Republic dated 27 August 2004 No. 22\/9;<\/span><\/li>\n
                                                                                          • Mobile Application User data \u2014 no less than the term of any agreement concluded with the Company, unless otherwise established by legislation;<\/span><\/li>\n
                                                                                          • Partner \/ Prospective Supplier data \u2014 for the period necessary for reviewing the application and making a decision, unless otherwise established by legislation.<\/span>\n
                                                                                              \n
                                                                                            • Grounds for early deletion of data are provided for in Article 83 of the DC KR, including: the data are no longer necessary for processing purposes; the subject has withdrawn consent in the absence of other legal grounds; the subject has submitted a justified objection to processing.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
                                                                                                \n
                                                                                              1. Rights of Personal Data Subjects<\/strong><\/span>\n
                                                                                                  \n
                                                                                                • Each personal data subject has the right to:<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
                                                                                                    \n
                                                                                                  • Receive information about the processing of their personal data, including purposes, legal bases, categories of data, retention periods, and list of recipients.<\/span><\/li>\n
                                                                                                  • Access their personal data and copies of records containing them.<\/span><\/li>\n
                                                                                                  • Request clarification and correction of incomplete or inaccurate data.<\/span><\/li>\n
                                                                                                  • Request deletion of personal data where grounds provided for in Article 83 of the DC KR exist.<\/span><\/li>\n
                                                                                                  • Submit an objection to the processing of personal data by certain methods or for certain purposes. The Company is obliged to consider the objection and send a reasoned response within 7 (seven) business days.<\/span><\/li>\n
                                                                                                  • Request restriction of processing in cases provided for in Article 85 of the DC KR.<\/span><\/li>\n
                                                                                                  • Withdraw consent to the processing of personal data. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal. Upon withdrawal of consent, the Company may continue processing where other grounds provided for in Part 1 of Article 79 of the DC KR exist.<\/span><\/li>\n
                                                                                                  • Appeal the Company\u2019s decisions to the sectoral personal data regulator or to a court.<\/span>\n
                                                                                                      \n
                                                                                                    • To exercise their rights, the personal data subject sends a written request to the Company at callcenter@bf.kg or via the Contact Centre phone numbers indicated on the Website.<\/span><\/li>\n
                                                                                                    • The Company reviews the request and sends a reasoned response within 7 (seven) business days.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
                                                                                                        \n
                                                                                                      1. Personal Data Protection Measures<\/strong><\/span>\n
                                                                                                          \n
                                                                                                        • The Company takes necessary organizational and technical measures to protect personal data from unauthorized or unlawful access, destruction, alteration, blocking, copying, or dissemination, including:<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
                                                                                                            \n
                                                                                                          • appointment of an employee responsible for personal data processing at the Company;<\/span><\/li>\n
                                                                                                          • restriction of access to personal data \u2014 only for Company employees who require it for their work;<\/span><\/li>\n
                                                                                                          • application of technical information security tools;<\/span><\/li>\n
                                                                                                          • organization of employee training on personal data processing rules;<\/span><\/li>\n
                                                                                                          • storage of data on Company servers located in the Kyrgyz Republic (except for cross-border transfer cases specified in Section 7.5 of this Policy).<\/span><\/li>\n<\/ul>\n
                                                                                                              \n
                                                                                                            1. Obligations of Personal Data Subjects<\/strong><\/span>\n
                                                                                                                \n
                                                                                                              • Personal data subjects are obliged to:<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
                                                                                                                  \n
                                                                                                                • provide the Company with only accurate data about themselves;<\/span><\/li>\n
                                                                                                                • provide data in the volume necessary for the processing purpose;<\/span><\/li>\n
                                                                                                                • notify the Company in a timely manner of any changes to their personal data.<\/span><\/li>\n<\/ul>\n
                                                                                                                    \n
                                                                                                                  1. Final Provisions<\/strong><\/span>\n
                                                                                                                      \n
                                                                                                                    • All matters related to the processing of personal data not regulated by this Policy are governed by the DC KR and other applicable legislation of the Kyrgyz Republic.<\/span><\/li>\n
                                                                                                                    • The Company reserves the right to amend this Policy unilaterally. A new version takes effect from the moment of its publication on the Website and\/or in the Mobile Application, unless the new version provides otherwise. Continued use of the Company\u2019s services after the amendments take effect constitutes the subject\u2019s agreement to the updated Policy.<\/span><\/li>\n
                                                                                                                    • This Policy has been developed taking into account the requirements of the DC KR, RLAs of the National Bank of the Kyrgyz Republic, and other RLAs of the Kyrgyz Republic.<\/span><\/li>\n
                                                                                                                    • For all matters related to personal data processing, the subject may contact:<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n
                                                                                                                        \n
                                                                                                                      • by email: callcenter@bf.kg;<\/span><\/li>\n
                                                                                                                      • by Contact Centre phone: 0(220) 991-111, 0(559) 991-111, 0(509) 991-111;<\/span><\/li>\n
                                                                                                                      • by address: Bishkek, 170, Fatyanova St., 2nd floor.<\/span><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

                                                                                                                        Privacy policy and personal data processing CJSC MCC \u201cBailyk Finance\u201d General provisions This Privacy and Personal Data Processing Policy (hereinafter …<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"translation":{"provider":"WPGlobus","version":"2.8.11","language":"en","enabled_languages":["ru","kg","en"],"languages":{"ru":{"title":true,"content":true,"excerpt":false},"kg":{"title":true,"content":true,"excerpt":false},"en":{"title":true,"content":true,"excerpt":false}}},"_links":{"self":[{"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/pages\/11580"}],"collection":[{"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/comments?post=11580"}],"version-history":[{"count":3,"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/pages\/11580\/revisions"}],"predecessor-version":[{"id":11584,"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/pages\/11580\/revisions\/11584"}],"wp:attachment":[{"href":"https:\/\/bf.kg\/en\/wp-json\/wp\/v2\/media?parent=11580"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}