Consent to Personal Data Processing

Consent to the Processing of Personal Data

Last updated: 17 июня 2026 г.

This document constitutes a standalone consent of the personal data subject to the processing of their personal data, provided in accordance with Article 21 of the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 dated 02.07.2019 (hereinafter — the "Personal Data Law").

By providing this consent, I (hereinafter — the "Personal Data Subject", "User") confirm that I act freely, of my own will and in my own interest, and that I knowingly and on an informed basis consent to the processing of my personal data by the operator on the terms set out below.

1. PERSONAL DATA OPERATOR

The consent is provided to the owner and (or) operator of the personal data base (hereinafter — the "Operator"):

Name: ООО «QAVENTO SYSTEM»
Short name: QAVENTO SYSTEM
Trade name: Omlen
STIR (TIN): 313106144
Bank: ТОШКЕНТ Ш., «КАПИТАЛБАНК» АТ БАНКИНИНГ ЯГОНА ФИЛИАЛИ
Bank MFO: 01158
Settlement account: 20208000607485524001 (UZS)
Address: город Ташкент, Шайхантахурский район, Labzak MFY, Labzak ko'chasi, 64а-uy
Email: support@omlen.site
Website: https://omlen.site

The base of personal data of platform users is registered (or is being registered) in the State Register of Personal Data Bases of the Republic of Uzbekistan, maintained by the State Personalization Center under the Cabinet of Ministers of the Republic of Uzbekistan.

2. PURPOSES OF PROCESSING

I hereby give my consent to the Operator to process my personal data for the following purposes:

Registration and maintenance of the User's account on the Omlen platform;
Provision, support and improvement of the platform's services (an AI-based SaaS website builder);
Processing of payments and issuance of invoices in Uzbek soums (UZS, soʻm);
Communication with the User on matters related to the services (technical notifications, updates, support messages);
Handling of the User's requests and inquiries to the support service;
Ensuring the operation of the artificial intelligence (AI) chat functionality, including the transfer of data to AI technology providers for content generation;
Monitoring and analysis of platform usage (analytics);
Detection, prevention and resolution of technical issues and ensuring information security;
Performance of the Operator's obligations to the User under the Public Offer;
Compliance with the requirements of the legislation of the Republic of Uzbekistan.

3. LIST OF PERSONAL DATA

The consent is provided for the processing of the following categories of personal data:

Email address;
First name, last name (where provided in the profile);
Phone number (where provided in the profile);
IP address;
Browser and device data (User-Agent, operating system type, screen resolution);
Cookies and similar identifiers;
Platform usage data (pages visited, actions, session times);
Content of support service requests;
Data voluntarily posted by the User in the AI chat;
Payment details (processed through secure intermediary payment systems).

The Operator does not collect or process special categories of personal data, nor biometric and genetic data. Should such data be voluntarily posted by the User, their processing is subject to the heightened requirements of the Personal Data Law, including mandatory localization within the territory of the Republic of Uzbekistan.

4. LIST OF ACTIONS WITH PERSONAL DATA

The consent is provided for the following actions (operations) with personal data: collection, systematization, accumulation, storage, modification (updating, supplementing), retrieval, use, provision (transfer, access), dissemination, anonymization, blocking, deletion and destruction of personal data.

The processing is carried out both with the use of automation tools (information technologies, including the Internet) and without the use thereof.

5. TRANSFER TO THIRD PARTIES

I consent to the provision (transfer) of my personal data to the following categories of third parties within the framework of the processing purposes specified above:

Hosting and infrastructure service providers — for hosting and ensuring the operability of the platform;
Payment systems and acquirers — for the processing of payments (payment card data is processed directly by the payment provider);
AI technology providers (OpenAI, Anthropic, etc.) — to enable the operation of the content generation and AI chat functionality;
OAuth providers (Google, GitHub, Telegram, etc.) — during authorization via third-party services (technical information for authentication is transferred; the following is received from the provider: identifier, email, name, avatar URL);
Analytics services — for the analysis of platform usage (in anonymized form);
State authorities of the Republic of Uzbekistan — upon lawful request in cases provided for by the legislation of the Republic of Uzbekistan.

The Operator ensures the confidentiality of the transferred personal data and requires third parties to comply with the requirements of the Personal Data Law.

6. CROSS-BORDER TRANSFER

I am notified and agree that my personal data may be transferred outside the Republic of Uzbekistan for processing by AI technology providers and other service providers of the Operator, including to the following countries:

USA — AI technology providers (OpenAI, Anthropic, etc.), OAuth providers (Google, GitHub);
European Union countries — OAuth providers, content delivery networks (CDN);
Other countries — when using content delivery networks (CDN) to ensure the website's performance.

Cross-border transfer of personal data is carried out in accordance with Article 15 of the Personal Data Law where at least one of the following conditions is met: the recipient state ensures adequate protection of personal data; the Operator has adopted and complies with standard contractual clauses or binding corporate rules; the Operator complies with international standards in the field of personal data management and storage. For purposes not provided for by this consent, cross-border transfer is carried out only with a separate consent of the Personal Data Subject.

Mandatory localization within the territory of the Republic of Uzbekistan applies to biometric and genetic data of individuals, as well as to the data of users of communication operators' services (Article 27¹ of the Personal Data Law as amended by Law No. ZRU-1125 dated 26.03.2026). The Operator does not process the specified categories of data; other personal data may be processed and stored using infrastructure located outside the Republic of Uzbekistan on the terms of this section.

7. VALIDITY PERIOD OF THE CONSENT

This consent is valid from the moment it is provided (by ticking the relevant box during registration on the platform or by another implied (conclusive) action) and until the moment the consent is withdrawn by the Personal Data Subject, but for no longer than the validity period of the User's account plus 3 (three) years after its deletion (for the purposes of performing obligations, resolving disputes and complying with the requirements of the legislation of the Republic of Uzbekistan, including the retention periods for primary accounting documents).

8. PROCEDURE FOR WITHDRAWING CONSENT

The Personal Data Subject has the right to withdraw this consent at any time by sending a written notice to the Operator at the email address: support@omlen.site.

The Operator shall cease the processing of personal data and ensure its destruction within 30 (thirty) days from the date of receipt of the withdrawal, except in cases where the processing may be continued in accordance with the legislation of the Republic of Uzbekistan.

The withdrawal of consent entails the impossibility of further use of the platform's services that require the processing of personal data, and the deletion of the User's account.

9. RIGHTS OF THE PERSONAL DATA SUBJECT

In accordance with Article 30 of the Personal Data Law, the Personal Data Subject has the right to:

Receive information about the processing of their personal data, including information about cross-border transfer (in the manner provided for by Article 22 of the Personal Data Law);
Demand the modification, supplementing, blocking or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained or is not necessary for the stated purpose of processing;
Withdraw consent to the processing of personal data (Article 21 of the Personal Data Law);
Appeal against the actions or inaction of the Operator. A complaint of the Personal Data Subject is submitted to the authorized state body in the field of personal data — the State Personalization Center under the Cabinet of Ministers of the Republic of Uzbekistan, which maintains the State Register of Personal Data Bases — and (or) to the court. Supervision over compliance with the special conditions for the processing of personal data is carried out by the State Inspectorate for Control in the Sphere of Informatization and Telecommunications ("Uzkomnazorat").

To exercise the said rights, please contact: support@omlen.site.

10. ADDITIONAL INFORMATION

Detailed information on the procedure for the processing and protection of personal data is set out in the Privacy Policy.

The terms of use of the platform are defined in the Public Offer.

I confirm that I have read this Consent to the Processing of Personal Data, understand its content and legal consequences, and provide my consent voluntarily, of my own will and in my own interest. This consent is a standalone document and does not form part of the offer agreement or any other agreement.

This consent is governed by the legislation of the Republic of Uzbekistan.