Privacy Policy

1. General provisions

1.1. This Policy sets out the procedures for processing and protecting the personal data of users of SGBF.uz (the Website).

1.2. The personal data Controller is ООО «EASY EVENTS GROUP», ИНН 313192159 (the Controller).

1.3. Personal data is processed in accordance with the Law of the Republic of Uzbekistan On Personal Data dated 2 July 2019, No. ЗРУ-547.

1.4. By using the Website and submitting their data through its forms, the user confirms their agreement to the terms of this Policy.

2. Data processed

2.1. When registering for the Forum: last name and first name, email address, contact phone number, organisation name, position, country, number of tickets, and the last names and first names of other participants listed in the order.

2.2. When submitting an application through the Become a partner, Present your product and EXPO participation forms: first name, company name, position, contact phone number, email address and, depending on the form, a brief product description and the stand category and format.

2.3. For legal entities, additionally: full organisation name, ИНН and bank details for invoicing.

2.4. The application or registration is stored together with the address of the page from which the form was submitted and the advertising campaign tags (UTM: source, medium, campaign, advertisement, keyword) through which the user reached the Website.

2.5. When communicating with the chatbot on the Website and the Telegram bot @sgbf_support_BOT:

a) the conversation text, including information provided in it, and a record of questions the chatbot could not answer;

b) data from the chat contact form: first name, email address, contact phone number and selected enquiry category;

c) on the Website — IP address, country, device and browser type, browser language and the source of the first visit to the Website;

d) in Telegram — Telegram name and username, Telegram user identifier and Telegram interface language.

This data is linked to the conversation and is not anonymised.

2.6. When sending an email to [email protected] and [email protected]: the sender's email address, name from the email signature or header, subject, body and attachments — the enquiry is registered as an application in the Bitrix24 CRM system.

2.7. Automatically when visiting the Website: IP address, browser and device type, and the date and time of access. This data is used in anonymised form for statistics, except in the cases specified in clause 2.5. When a form is submitted, the IP address is used only to prevent mass automated submissions and is not stored with the application.

2.8. The Controller does not request or store bank card details. Payment information is entered on the bank's secure page and is not transmitted to the Controller.

3. Purposes of processing

3.1. Placing and fulfilling Orders, accrediting Participants and issuing badges.

3.2. Sending organisational information about the Forum: programme, time, venue and schedule changes.

3.3. Accounting and tax reporting, issuing invoices and service acceptance certificates.

3.4. Sending informational and advertising messages — only with separate consent expressed by a separate checkbox in the form.

3.5. Sharing contact details with Forum partners and sponsors — only with separate consent expressed by a separate checkbox in the form.

3.6. Reviewing applications for partnership, product presentation and participation in the FinTech EXPO exhibition, and contacting the applicant.

3.7. Assessing the effectiveness of advertising campaigns.

3.8. Answering user questions in the Website chatbot and Telegram bot; forwarding an enquiry to a manager for follow-up if the chatbot cannot answer.

3.9. Improving chatbot response quality: analysing questions for which no answer was found.

4. Legal basis

4.1. The data subject's consent, expressed by completing a form on the Website or the chatbot contact form and selecting the relevant checkbox, or by continuing the conversation with the chatbot after receiving a notice.

4.2. Performance of a contract to which the data subject is a party.

4.3. Fulfilment of obligations imposed on the Controller by the legislation of the Republic of Uzbekistan.

5. Recipients of data

5.1. The bank processing payments — to the extent necessary to process payments and refunds.

5.2. Government authorities — in the cases and to the extent provided for by law.

5.3. Contractors supporting the Forum (accreditation, badge printing) — to the minimum extent necessary and subject to confidentiality requirements.

5.4. Forum partners and sponsors — only with the data subject's separate consent.

5.5. Data from Website forms, the chatbot (including conversation text) and email enquiries is entered into the Bitrix24 customer relationship management system (a portal in the bitrix24.uz domain zone). Under Bitrix24's terms, portal data is hosted in data centres within the Republic of Uzbekistan.

5.5.1. Before entry into Bitrix24, applications are temporarily stored on the Website server; personal data in this queue is deleted after 30 days. Chatbot conversations and the chatbot log are stored on the Website server within the Republic of Uzbekistan.

5.5.2. Email enquiries are processed by the VK WorkSpace email service (VK Digital Technologies LLC, Russian Federation); email service data is stored within the Russian Federation.

5.6. User messages to the chatbot are transmitted to OpenRouter, Inc. (USA) to prepare a response; OpenRouter forwards them to the Google Gemini artificial intelligence model (Google LLC, USA). This transfer takes place outside the Republic of Uzbekistan.

5.6.1. When communicating through Telegram, messages are also processed by the Telegram messenger in accordance with its rules.

5.6.2. Requests to the Website and chatbot pass through the network of Cloudflare, Inc. (USA), which receives the IP address and determines the user's country.

5.7. The Controller does not sell personal data to third parties.

6. Retention period

6.1. Personal data is retained for the period necessary to achieve the purposes of processing.

6.1.1. Advertising campaign tags (UTM) — in the user's browser for up to 30 days.

6.1.2. Applications queued on the Website server — personal data is deleted after 30 days.

6.1.3. Chatbot conversation state (for continuing the conversation) — 30 days.

6.1.4. Chatbot conversation log — 1 year.

6.1.5. Data in the Bitrix24 CRM system — for the period necessary to achieve the processing purposes specified in section 3.

6.2. Data relating to paid Orders is retained for the period prescribed by accounting legislation.

6.3. After the retention period expires, data is destroyed or anonymised.

7. Rights of the data subject

7.1. To obtain information about the processing of their personal data.

7.2. To request correction, blocking or destruction of data if it is incomplete, outdated or unlawfully obtained.

7.3. To withdraw consent to processing by sending a request to [email protected].

7.4. To opt out of informational and advertising messages at any time using the link in the email or by contacting the same address.

7.5. Withdrawal of consent to the processing of data required to fulfil an Order makes it impossible to provide the Services; the refund terms set out in the Public Offer then apply.

7.6. Requests are reviewed within 15 (fifteen) calendar days.

8. Cookies and browser storage

8.1. The Website uses cookies necessary for its operation and files for collecting anonymised visitor statistics.

8.2. The user may disable cookies in their browser settings. This may affect the operation of some Website features.

8.3. Advertising campaign tags (UTM) are stored in the browser's local storage (localStorage) for up to 30 days so they can be included when an application is submitted.

9. Data protection

9.1. Data is transmitted between the user's browser and the Website through a secure TLS (HTTPS) connection.

9.2. The Controller implements legal, organisational and technical measures to protect personal data against unauthorised access, destruction, alteration, blocking and disclosure.

9.3. Only employees who need personal data to perform their duties have access to it.

10. Changes to the Policy

10.1. The Controller may amend this Policy. The current version is always available on the Website.

10.2. Users are informed of material changes by email.

11. Contact details

For all personal data processing enquiries: [email protected], ООО «EASY EVENTS GROUP», 162 Amir Temur Street, Samarkand, Republic of Uzbekistan.