PERSONAL DATA PROCESSING TERMS

These Personal Data Processing Terms define the procedure for processing personal data when using the Fasten mobile application and https://fasten.comwebsite (hereinafter, "Application" is used for both the mobile application and website). The Application is a digital platform to request passenger and luggage transportation services, as well as cargo transportation from our partners. By using the Application, you enter into an agreement for the provision of services directly with partners and/or receive the option to track the process of service provision.

1. WHO PROCESSES YOUR PERSONAL DATA?

1.1. Your personal data is processed by YGO UB Limited Liability Company (Tashkent, Yunusabad District, 2 Shakhrisabz St.), which is the operator of the personal data database.

1.2. The authentication tool used in the Application is text messages sent to the mobile phone number you specified.

1.3. We adhere to the following principles when processing data:

Compliance with constitutional rights and freedoms
Compliance with the law in regards to the purposes and methods of processing personal data
Accuracy and quality of personal data
Confidentiality and security of personal data
Equality of the rights of subjects
Security of the individual, society, and state
Limiting the processing of personal data to specific, predetermined, and legal purposes
Preventing the processing of personal data that does not align with the purposes of collecting personal data
Preventing the unification of databases containing personal data that is processed for purposes incompatible with each other
Compliance of the content and volume of processed personal data with the stated purposes of processing
Preventing the redundancy of personal data processed in regards to the stated purposes of processing
Transparency of the processing of personal data: the personal data subject can receive relevant information concerning the processing of their personal data
Storage of personal data that allows for the identification of the personal data subject for no longer than required by the stated purposes of processing personal data

1.4. When processing personal data, we:

Take the necessary and sufficient measures to ensure compliance with Law of the Republic of Uzbekistan dated 02 July 2019 No. ZRU-547 "On personal data" and internal documents and local regulations regarding personal data.
Take the required legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, and other illegal actions.
Appoint a person responsible for operations related to the processing and protection of personal data.
Register personal data databases in the State Register of Personal Data Databases.
Publish internal documents defining the personal data processing policy, bylaws regarding the processing of personal data, and bylaws establishing procedures to prevent and identify law violations in the Republic of Uzbekistan and resolve the consequences of such violations.
Inform employees about the provisions of laws in the Republic of Uzbekistan, internal documents, and local regulations regarding personal data, including requirements for the protection of personal data, and train employees.
Conduct regular mandatory training for employees on issues regarding personal data.
Carry out internal monitoring and (or) audits of personal data processing compliance with laws and regulations in the Republic of Uzbekistan, other requirements for the protection of personal data, and internal documents and bylaws.
Publish or otherwise provide unrestricted access to these terms.
Stop the processing of personal data and destroy it when stipulated by law in the Republic of Uzbekistan.
Carry out other actions provided for by law in the Republic of Uzbekistan regarding personal data.

2. WHAT PERSONAL DATA IS PROCESSED, HOW, AND WHY?

2.1. The categories of data we process on the basis of the user agreement that you accept, their source, and purposes of processing:

Source	Data	Purpose	List of actions	Duration
You provide us directly	Name Phone number	To identify you as our user and communicate with you regarding your trips.	Collection, systematization, storage, modification, addition, use, provision, distribution, transfer, depersonalization, and destruction	The data is processed during the use of the Application and then for the period of limitation.
	Addresses	To show you the services available in your city, as well as to process and fulfill trip requests
	Your trip instructions	To process and fulfill your trip requests in accordance with your preferences
	Banking details	To pay for trips
	Email address	To send you information about your trips (e-receipts) and marketing communications with your consent
	Forms	To provide you with feedback and special offers, process your support requests, and enable your participation in marketing contests or other events
Sent by your device and the Application	IP address; device ID, type, and model; mobile operating system, browser or Application information	To ensure secure access to your account and our IT systems	Collection, systematization, storage, modification, addition, use, provision, distribution, transfer, depersonalization, and destruction	The data is processed during use of the Application.
Generated when using the Application	Time spent on trip fulfillment, services used most often, number of screens viewed when using the Application, average trip price	To improve the Application and user experience, provide relevant features, change the interface of the Application, expand our customer base, improve our marketing and business strategy, and prevent unauthorized trip requests
Sent by the authentication tool you use in the Application	Addresses you searched for or specified in trip requests	To improve the Application and user experience, as well as to suggest trip or delivery addresses
Sent from our marketing agencies	Source ID or advertising link for downloading or accessing the Application	To analyze advertising campaign performance
You provide to the support team on social media	Specified by you at your discretion and requested by us at our discretion	To solve problems related to the Application
Generated when you communicate with the support team in the Application	Voice recordings	To resolve disputes and lawsuits and monitor the quality of services		3 months
Generated when you communicate with drivers and couriers in the Application	Voice recordings	To resolve disputes and lawsuits and monitor the quality of services		30 calendar days

2.2. The data you provide us directly is needed for the Application to function properly. Without this data, you will not be able to request trips, make payments, or use other features.

2.3. Data generated as you use the Application, obtained through the authentication tool you use in the Application provided by our group of companies, or obtained from our marketing agencies, is used to achieve legal interests subject to your rights.

2.4. We may ask for your consent to use your data to confirm your participation in marketing contests or other activities.

You will always be informed about data processing and its purpose. You can revoke your consent at any time by contacting us. Revoking consent will not affect your normal use of the Application in accordance with the terms of the user agreement.

You have the right to revoke consent, and this will not affect your ability to use the Application.

2.5. We use automated data processing in our fraud protection systems to automatically detect your activity in the Application and block certain features or the ability to request trips. This is done to protect your account and our financial interests, as well as the financial interests of our partners and third parties in the performance of the contract between you and us and/or our partners.

If you believe there is an error in our systems, please contact us.

2.6. We process your data until the purpose of its processing is achieved. We may continue to process your data if it is required by law or necessary for the protection of our rights and interests as well as the rights and interests of third parties.

For example, data related to a trip request is stored for the period of the relevant statute of limitations.

2.7. Phone conversations with our support team, drivers, and couriers are recorded if they are held through the Applications or using the contact information provided in the Applications.

These recordings can be used in disputes and legal proceedings, and also to monitor and improve the service quality. Only our authorized employees have access to such recordings.

3. DO WE SHARE YOUR PERSONAL DATA?

3.1. Your personal data is only shared with the parties that:

(a) Directly facilitate the provision of services in the Application:

Our partners involved in receiving and processing your trip request and providing software solutions for the same purpose; individuals within the group of entities that provide authentication tools and data centers; and companies that assist us with customer support.

Our partners that directly provide the service based on your (trip) request process your data under the service contract signed between you and them.

(b) Have the right to receive your data under the law:

This may include law enforcement agencies. Such parties have their own purposes and legal grounds for processing your data (for example, acquiring banks accept payments in compliance with banking regulations).

We may share ad or device IDs with companies that provide advertising or analytical services to us. Information about technical errors that occur when you use our services is shared with related parties involved in the development of our Applications.

3.2. The parties we share your data with may be located in the Russian Federation.

In case of cross-border data transfers, we follow the relevant procedures to ensure your rights are respected and your personal data is protected during and after the transfer. These procedures may include (1) obligations under data protection agreements based on standard data transfer clauses approved by the relevant authorities, and/or (2) additional contractual obligations based on our assessment of the law in the country your data is transferred to for processing.

3.3. If we share your data for processing, the following information is made known to each recipient:

Purposes of personal data processing
List of actions to be performed with the personal data shared that way
Obligations to maintain confidentiality and security of personal data during their processing, and a list of measures taken by the data processor to ensure the protection of processed personal data.

4. YOUR RIGHTS

4.1. Destruction of personal data and the right to withdraw consent

After you log in to the Application using the authentication tool and add a username (login) and password to your account, you can remove your personal data from the app or delete your account completely.

We need to keep certain data after you have removed it from the Application. This includes the data we are required to keep under the law or to protect out interests, including in legal proceedings. In any case, this data shall only be processed within the periods specified by the laws of the Republic of Uzbekistan.

You may withdraw your consent at any time without any explanation.

4.2. Access to and modification of data and the right to receive information regarding the processing of personal data and modify personal data

You always have access to your personal data. After you log into the Application using our authentication tool, you can access your trip request history, account information, and banking details.

After you log into the Application using our authentication tool, you can edit your personal data in the Application. If you are unable to update your data in the Application, contact support.

You have the right to receive information regarding the processing of personal data that contains:

Confirmation of the fact that your personal data is processed
Grounds for and purposes of personal data processing
Methods of personal data processing used
Name of the owner and/or operator and their location (postal address), information about the parties that have access to personal data or may have personal data disclosed to under a contract signed with the owner and/or operator or under the law
Content of the processed personal data related to the relevant subject and its source unless provided otherwise by the Law
Terms of personal data processing, including storage terms
Procedure for exercising the rights by the personal data subject as provided in Article 30 of Law of the Republic of Uzbekistan dated 02 July 2019 No. ZRU-547 "On personal data"
Information about actual or prospective cross-border transfer of personal data.

4.3. Right to be informed about the disclosure of personal data to third parties

You have the right to be informed about the disclosure of your personal data to third parties. The personal data database operator shall provide you with information about what personal data has been shared and who it has been shared with.

4.4. Restriction of data processing and the right to request termination of personal data processing and/or its deletion

You may request the owner and/or operator to temporarily suspend the processing of your personal data if the personal data is incomplete, outdated, inaccurate, illegally obtained, or unnecessary for the purposes of processing.

For example, if you want to update your personal data, you can send a request to our support team to restrict the processing of your data until it has been updated. Please contact our support team to start this process.

4.5. Right to file petitions regarding the protection of your rights and legitimate interests regarding your personal data with an authorized state authority or court

We are always ready to review your complaints and suggestions. You can send them to our support team or at dpo_uz@fasten.com.

If necessary, you can also submit a petition to the authorized state personal data authority, that is the State Personalization Center under the Cabinet of Ministers of the Republic of Uzbekistan.

4.6. To exercise the rights above, please contact support through the Application. You can also send a request:

In writing, as a signed document at Tashkent, Yunusabad District, 2 Shakhrisabz St.

As an electronic document at dpo_uz@fasten.com.

The personal data database operator does not charge fees for the personal data subject's exercise of their rights.

If you send your request through our support team, it helps us identify you as a personal data subject contacting us to exercise their right and also improve oversight over the disclosure of personal data in response to requests from personal data subjects.

5. HOW TO CONTACT US?

5.1. Send an email at dpo_uz@fasten.com to get in touch with our officer in charge of personal data processing and protection.

5.2. You can contact your support team in the mobile application and on the website after logging in to your account. You need to log in for us to identify you.

6. HOW IS THIS DOCUMENT UPDATED?

6.1. We may inform you in any way possible (push notifications in the Application, text messages, email, and in other ways) if these terms are amended in a way that materially affects your rights. This includes adding new categories of data for processing or new purposes of data processing. You will be notified before any such amendments become effective.

Document published on: 21 July 2025

Previous version of the document: https://fasten.com/ru_uz/legal/pp_uz/16082024/