Privacy Policy
1. Who processes your data
The controller is TUTO Off-Grid Development Ltd, a participant of the Astana International Financial Centre (AIFC) (“TUTO”, “we”). We process personal data under the AIFC Data Protection Regulations and the rules made under them and, where applicable to data subjects in the Republic of Kazakhstan, with regard to the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”. Data protection contact: sergey@tutooffgrid.com.
2. What data we collect
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Request form | name; phone or WhatsApp; your role; message | to reply to your request and continue correspondence about it | your consent when you send the form |
| E-mail, call, WhatsApp | what you tell us | reply and correspondence | your enquiry and consent |
| Website visit | cookies, IP address, device and browser type, on-page actions | visitor statistics, spam protection of the form | legitimate interests; you can disable cookies in your browser |
We do not ask for passport details, national ID numbers, bank details or other sensitive data on this website. Please do not send them through the form.
3. Where data is stored and who receives it
- Form requests go to a protected spreadsheet and TUTO mailbox on Google services (Google LLC). Their servers may be located outside the AIFC and the Republic of Kazakhstan.
- Visitor statistics are collected by Yandex Metrica (Yandex LLC), which uses cookies and may record on-page actions in pseudonymised form.
- The website is hosted by a hosting provider in the Republic of Kazakhstan.
- Within the group, request data may be shared with VELOX KZ LLP (Republic of Kazakhstan) where the matter concerns construction using VELOX technology.
By sending the form you consent to these transfers, including to countries whose level of data protection may differ from that of the AIFC. We do not sell data or share it with third parties for advertising.
4. How long we keep data
We keep request data while correspondence continues and for no longer than 3 years after the last contact, unless a longer period is required by law or to protect legal rights. After that the data is deleted or anonymised.
5. Your rights
- to know what data we process about you and receive a copy;
- to have inaccurate data corrected;
- to request erasure or restriction of processing;
- to object to processing;
- to withdraw consent at any time, without affecting processing carried out before withdrawal;
- to lodge a complaint with the AIFC Commissioner of Data Protection.
To exercise a right, write to sergey@tutooffgrid.com. We reply within 30 days.
6. Security
Only authorised staff have access to requests. The website uses HTTPS.
7. Changes
We may update this policy. The current version is always published on this page with its date.