This English version is provided for convenience; the Russian and Kazakh texts prevail.
This page explains what data the registration site for the free ByFly presentations collects, why, who receives it and how to delete it. It supplements the general ByFly privacy policy.
General ByFly privacy policy — byfly-shop.com/privacy
1.Who processes the data
The operator is ByFly LLP (registered as “BYFLY”), BIN 231040040048. Address: 100 Aiteke Bi St., premises 71, Almalinsky district, Almaty. Phone: +7 702 075 72 82, +7 727 353 33 33.
The person responsible for organizing personal data processing is Stanislav Volkov. Requests are accepted by phone at +7 727 353 33 33 or in writing at the operator’s address.
2.What data we collect
- First and last name, phone number, city, the number of guests coming with you, boarding pass number, check-in mark.
- Technical data: IP address, browser, time, ad click label (utm, gclid, yclid, etc.), the record of your consent.
- For prize draw winners, in addition: full name, IIN and signature on the prize acceptance form (with a separate consent in that form).
We do not collect the names or phone numbers of the guests coming with you — only their number.
3.Why
- Registration for the presentation.
- An SMS with your boarding pass and reminders about the presentation.
- Entry with the boarding pass.
- The prize draw for guests.
- Measuring advertising results — without your name or phone number.
We send no marketing messages based on this data.
4.Legal basis
Your consent (Articles 7 and 8 of the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”), given with a separate checkbox at registration. We keep a record of the consent: the time, the text version and its fingerprint.
5.Who receives the data
- The presentation organizers — ByFly agents. They sign a confidentiality undertaking, and each sees only their own city.
- SMSC.kz — sending SMS (Kazakhstan).
- Cloudflare Turnstile — the “not a robot” check in the form: receives technical browser data and the IP address, without your name or phone number.
- Yandex Metrica — visit statistics: only after “Accept all”, without Session Replay (your actions on the page are not recorded), without your name or phone number.
- The advertising system whose ad brought you here — only the ad click label, to count registrations; without your name or phone number.
6.Where the data is stored
The data is stored on a server in Kazakhstan (Article 12(2) of the Law). Personal data is not transferred abroad and is not made public.
7.How long we keep it
Until 31.01.2027; after that the data is deleted or anonymized. Prize documents are kept for the retention period of tax documents.
8.Your rights and withdrawing consent
You can find out what data we hold about you, correct it and withdraw your consent (Article 8(7), Article 10(2) of the Law):
- with the “Cancel my registration and delete my data” button on your boarding pass page (the link is in the SMS);
- by phone at +7 727 353 33 33;
- in writing at the operator’s address.
We reply within 15 working days. Once you withdraw, your name and phone number are deleted immediately and you are removed from the guest lists, the draw and SMS. Only a withdrawal mark remains — the date and an irreversible fingerprint (hash) of the number.
9.Cookies and browser storage
Necessary — always on:
- pres_consent — your choice in the cookie window, 1 year;
- pres_lang — site language, 1 year;
- pres_adm — organizers’ sign-in to the admin area (only for those who sign in at /admin/), 30 days;
- Cloudflare Turnstile — protects the registration form from bots;
- pres_city — the city you chose, so we can show it right away next time; kept only in your browser storage until you clear it;
- pres_my_tickets — your passes on this device for the “My pass” button: pass number, city and pass link, up to 6 passes, no name or phone number; kept only in your browser storage until you clear it;
- pres_att — ad click labels; with “Necessary only”, kept for the current visit only.
Analytics — Yandex Metrica without Session Replay — is switched on only after “Accept all”. In that case click labels are kept in the browser for up to 30 days. There are no other counters on the site. Your name and phone number are never sent to Metrica; we may pass the ad click label, without your name or phone number, to the advertising system to count registrations.
You can change your choice at any time with the “Cookie settings” link at the bottom of the page or the button below.
10.How we protect the data
- Role-based access: an organizer sees only their own city.
- Door staff see phone numbers masked.
- Only senior organizers can export lists.
- Sign-ins and actions in the admin area are logged.
