FASTEN PRIVACY NOTICE

Fasten is a mobile and web application (hereinafter the “application” or the “applications”) providing access to a service that allows a user, by means of the Fasten mobile application and the website, to post information about the user’s potential demand for passenger and baggage transportation services or road freight transportation services, as well as to review information about the offers of organisations providing services in that field and to search for such offers according to the parameters specified by the user (hereinafter the “Service”).

1. What is the Personal Data Processing Notice?

You entrust us with your personal data, and we take that responsibility seriously. We undertake to protect your personal data and to be transparent about how we process information about you.

This Personal Data Processing Notice explains what personal data we collect, how and why we use and share it, and what rights you have as data subjects.

2. Who processes personal data?

2.1. Depending on the region where you are located, the Service is provided by different legal entities (hereinafter “Fasten”), which act as personal data operators and determine the purposes and means of personal data processing.

Country

Name

Address

Kazakhstan

Y. Taxi Qazaqstan LLP

BIN 160540014930, 100/4 Nursultan Nazarbayev Avenue, office 105, Medeu district, Almaty

Uzbekistan

YGO UB LLC

Republic of Uzbekistan, Tashkent, Lolazor mahalla, 30 Fidokor Street

2.2. Our applications use Yandex ID as a single authorisation tool. This tool is provided by different companies depending on the country of your mobile operator, as set out in the Yandex ID Terms of Use (available at: https://yandex.com/legal/id_termsofuse/en/). To find out how these companies process your personal data, please read the Yandex ID Personal Data Processing Notices (available at: https://yandex.com/legal/id_privacy_policy/en/).

3. What personal data of yours is processed, how and why?

3.1. The categories of personal data, the purposes of processing and the legal bases for processing are set out in the table below.

Categories of personal data

Purposes

Legal bases

Name or nickname

Contact telephone number

To register your account

To identify and authorise you as a user

To contact you regarding your order

To process your payments

Contract

Destination or delivery addresses

To show you the services or goods available for ordering, purchase and delivery in your region

To place, process and fulfil your order

To help you select addresses quickly

Contract

Your preferences

To process and fulfil your order in accordance with your preferences

Contract

Credit or debit card data

Electronic wallet details

Mobile money account details

Payment method

To process your payments

Contract

Your image

To confirm your identity to the driver

Consent

Voice recording

To ensure your safety and the safety of the driver in the event of an incident

Legitimate interest in ensuring safety

To assist in the investigation of an incident and to provide evidence to law enforcement authorities and for legal proceedings

Public interest

To provide you with customer support

Contract

To monitor the quality of our customer support service

To monitor the quality of the service provided by drivers

Legitimate interest in monitoring the quality of our services

Email address

To send you service information

To receive and process your customer support request

Contract

To inform you about our products and offers, as well as about the products and offers of our partners

To invite you to take part in a contest, marketing or other activities

Consent

Users’ contacts

To order a non-regular transportation service for another person

To share your route with a trusted person

Consent

Data collected in forms: name, telephone number, email address, user feedback, message, rating or reviews

To obtain feedback

To improve our services

Legitimate interest in obtaining feedback and improving our service on the basis of that feedback

IP address

Device ID

Device type and model

Mobile operating system

Browser or mobile application details

To ensure secure access to your account and to our IT systems

Legitimate interest in ensuring the security of our systems and of our users’ data

To prevent fraudulent activities

Legitimate interest in preventing fraudulent activities

Geolocation data

To check the availability of drivers

To assign a driver to you

To send your location to the driver

Contract

To transfer data about your location to third parties

Consent

Advertising identifier

Targeted advertising settings

Consent

Yandex user identifier

Order frequency

Time spent fulfilling an order

Most frequently ordered services or goods

Screens viewed while interacting with the applications

Average order value

Device battery level

To improve our applications and user service

To provide relevant features

To modify the user interface of our applications

Legitimate interest in improving our applications, user experience and services

To analyse user activity for marketing purposes

To improve our marketing and business strategy

Legitimate interest in conducting marketing research

To invite you to take part in a contest, marketing or other activities

Consent

Data about your orders: date and time of the order, pick-up point, destination, route, price, payment details and contact details

To provide you with the history of your orders

To enable the re-order feature

Contract

To prevent fraudulent activities

Legitimate interest in preventing fraudulent activities

Order data and trip history

Contact information

Social media account

Comments, attachments and other information that you provide or that the customer support service requests

To provide you with customer support

Contract

Recording of conversations

Your communications in the applications or by other means

Other data that you have provided

To protect our legitimate rights and the rights of third parties

To resolve disputes and legal claims

To monitor the quality of the services provided

Legitimate interest in protecting our rights, resolving disputes and monitoring the quality of our services

3.2. The following personal data is mandatory for registering an account: a name or nickname, as well as a telephone number.

The following personal data is mandatory for using your account: destination or delivery addresses. If you choose not to provide this information, you will not be able to place an order.

3.3. You may refuse to give consent to the processing of your personal data, and this will not affect your ability to use the application. You may withdraw your consent at any time by contacting us or by using automated means, where these are available in your application.

3.4. Audio and video recording in the vehicle is an emergency feature. It will be used only in exceptional cases of threat, conflict or danger, where the driver activates the conflict button in accordance with the Yandex Terms of Use. Both the user and the driver are notified before recording begins, for the purposes of dispute resolution and safety.

4. How is your personal data protected?

4.1. We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised, accidental or unlawful destruction, loss, alteration, misuse, disclosure or access, as well as against any other unlawful processing.

4.2. These security measures have been implemented taking into account the state of the art, the cost of implementation, the risks associated with the processing and the nature of the personal data concerned.

4.3. In most cases personal data is processed automatically, without access by our employees. However, where such access is necessary, only employees whose duties require the use of this information may access your personal data. These employees are required to follow internal rules and protocols for personal data processing and to comply with technical and organisational security measures to protect your personal data.

5. With whom do we share your personal data?

5.1. Your personal data is shared with parties directly involved in providing the services in the application (depending on the services performed):

  • Our partners who receive and process your order and provide software solutions for the same purpose;
  • Payment service providers, electronic wallet providers and mobile money service providers that facilitate electronic transactions;
  • Insurance companies;
  • Our partners who issue virtual bank cards for our users;
  • Our partners providing authentication tools;
  • Our affiliates and third parties that provide us with servers, data storage and other infrastructure facilities; and
  • Our affiliates and third parties that assist us with customer support.

The legal entities that may be involved in the processing of personal data are listed on the following page: https://yandexgo.com/legal/list_of_le_data_processing. Not all of the listed legal entities are necessarily involved in processing your personal data.

5.2. Your personal data is shared with persons entitled to receive your personal data in accordance with applicable law:

  • For example, where law enforcement authorities have a lawful right to access your personal data, or financial regulators have a proper right to investigate suspicious activities or transactions (in accordance with applicable law).

5.3. Your personal data is shared with parties that help us improve our applications:

  • For example, data on technical errors that occurred while using our services is shared with our partners involved in the development of our applications.

5.4. Your personal data is shared with parties that help us inform you about products, services and offers:

  • For example, advertising identifiers or device identifiers may be shared with companies that provide us with advertising or analytics services.

6. To whom do we transfer personal data?

The parties to whom we transfer your personal data may be located in different countries.

Some of these countries may not ensure the same satisfactory level of data protection or of data subjects’ rights as the country where the application is located. In such cases we follow the necessary procedures to ensure that your rights are respected and your personal data is protected during and after the transfer.

You may contact us to obtain information about the countries to which your personal data may be transferred and about the safeguards applied.

7. How long will your personal data be stored?

7.1. We process your personal data until the purpose of the processing has been achieved.

7.2. The actual retention period depends on the personal data processed and on the country in which the processing takes place.

7.3. We may continue to process your personal data even after you have deleted it from our applications, where such processing is required by law or is necessary to protect our rights and interests or the rights and interests of third parties, in particular in the context of legal proceedings.

The ability to delete data may also be limited by laws relating to freedom of expression and information.

8. What are your rights?

Under personal data processing laws you have a number of rights. Your rights depend on the purpose for which we process your personal data and on the applicable law.

You can always access, correct or delete your personal data yourself after logging into the application using our authentication tool.

You may exercise the following rights by contacting our customer support service through our applications.

8.1. Right of access

You always have access to your personal data. You have the right to request a copy of your personal information.

8.2. Right to rectification

You have the right to ask us to update or correct information that you consider to be incorrect, inaccurate or out of date. You also have the right to ask us to supplement any information that you consider to be incomplete.

8.3. Right to withdraw consent

You have the right to withdraw your consent to the processing of your personal data where such processing is based on your consent.

8.4. Right to erasure

You have the right to ask us to delete your personal data in certain circumstances, for example where the data is no longer necessary for our purposes, where we process your data without a valid legal basis or otherwise unlawfully, where you have withdrawn your consent (if the processing was based on your consent), or in other circumstances in accordance with applicable law.

8.5. Right to restriction of personal data processing

You have the right to restrict the processing of your personal data in certain circumstances, for example, if you wish to exercise your right to rectification, you may require us to restrict the processing of your data until it has been corrected.

8.6. Right to object

You have the right to object to the processing of your personal data if you consider that the processing infringes your rights. Please note that the right to object may be exercised only where we process your data on the basis of legitimate or public interests.

8.7. Right to lodge a complaint

We are always ready to consider your complaints and suggestions. Please send them to our customer support service.

If you believe that your rights have been infringed, you have the right to lodge a complaint with a supervisory authority. The list of competent supervisory authorities and their contact details is available at the following address: https://yandex.com/legal/yandexgo_list_of_sa/.

9. How to contact us?

9.1. If you need assistance, you can contact the support service through the mobile application after logging in.

9.2. Our Data Protection Officer (DPO) can be contacted by email at data_privacy@yandex-team.com.

9.3. Please indicate in your message the telephone number you used to register in our application, so that we can quickly identify you and handle your request efficiently.

10. How is this document amended?

In the event of material changes to this Personal Data Processing Notice, we may use any available means (an in-app push notification, SMS or email) to notify you.

Document published on: 20 August 2026

Previous version of the document: https://fasten.com/ru_uz/legal/pp_uz/16082024/