Privacy Policy

Personal Data Processing Policy

Version 1.0 · Revision date: 19 September 2026

General Provisions

This Personal Data Processing Policy defines the procedure for processing and ensuring the security of personal data of users of the website https://maschina.uz, carried out by "MAS CHINA" MCHJ (hereinafter referred to as the Operator).

The Policy has been developed in accordance with Federal Law No. 152-FZ dated 27 July 2006 “On Personal Data” and other applicable regulatory legal acts of the Russian Federation.

The Operator aims to ensure respect for human and civil rights and freedoms when processing personal data, including the protection of the right to privacy.

This Policy applies to all cases of personal data processing through the website https://maschina.uz.
Key Definitions

Personal data means any information relating to an identified or identifiable individual.
Processing of personal data means any action or set of actions performed on personal data, whether by automated means or otherwise.
Operator means a person that organizes and/or carries out the processing of personal data, determines the purposes of processing, the scope of data, and the actions performed with such data.
Personal data subject (User) means an individual to whom the processed data relates.
Automated processing means processing of personal data using computing equipment.
Provision of personal data means actions aimed at disclosing data to a specific person or a specific group of persons.
Blocking of personal data means the temporary suspension of personal data processing, except where processing is necessary to clarify the data.
Destruction of personal data means actions resulting in the irreversible destruction of personal data.

Operator Information
Operator: "MAS CHINA" MCHJ.
TIN / Tax Identification Number: 311757246.
Contact address: 4 Inzhobod Street, Shaykh Shivli MFY, Yunusabad District, Tashkent City.
Contact phone number: 998999361890.
Website: https://maschina.uz.
Rights and Obligations of the Operator

The Operator has the right to:

obtain necessary and accurate information from the personal data subject;
continue processing after withdrawal of consent where there is an independent lawful basis for doing so;
determine the measures necessary to comply with personal data protection legislation.

The Operator is obliged to:

organize personal data processing in accordance with the legislation of the Russian Federation;
provide data subjects with information required by law and review their requests;
ensure access to this Policy;
implement the necessary legal, organizational and technical security measures;
correct inaccurate data, cease unlawful processing and destroy data in cases provided for by law.

Rights of the Personal Data Subject
The personal data subject has the right to:

obtain information about the processing of their personal data;
request correction or blocking of personal data;
request deletion or destruction of personal data in cases provided for by law;
withdraw consent to the processing of personal data;
request termination of processing where lawful grounds exist;
appeal the Operator’s actions or inaction to Roskomnadzor or apply to a court.

Requests may be submitted using the following contact details: 998999361890.
Principles of Personal Data Processing

lawfulness and fairness of processing;
processing for specific, predetermined and lawful purposes;
prohibition of processing incompatible with the purposes for which the data was collected;
ensuring that the content and scope of personal data correspond to the stated purposes and avoiding excessive collection;
ensuring the accuracy, sufficiency and relevance of personal data;
storage for no longer than required for the purposes of processing, unless another retention period is established by law or contract.

Categories of Data Subjects and Personal Data Processed
Categories of data subjects:

website visitors submitting requests;
website visitors.

Personal data processed:

First name / Full name;
Phone number;
Email address;
IP address;
cookies;
browser information;
device information;
date and time of visit;
pages visited;
user actions on the website.

Purposes and Legal Grounds for Personal Data ProcessingApplications and Requests
Processing of user requests, provision of feedback and provision of information at the user’s request.
Category of data subjects: website visitors submitting requests.
Category of personal data: general personal data; general personal data and information contained in files uploaded by the user.
Personal data: First name / Full name, Phone number, Email address, Uploaded files.
Legal basis: consent of the personal data subject.
Processing operations and methods: collection, recording, organization, accumulation, storage, updating, retrieval, use, blocking, deletion and destruction, using automated means and/or without the use of automated means.
Processing period: until the request has been fully reviewed or until consent is withdrawn, unless another lawful basis for processing exists.
Destruction: once the purpose of processing has been achieved or another ground for termination of processing arises, processing shall cease and the personal data shall be destroyed or their destruction shall be ensured, unless another lawful basis for continued processing applies.

Analytics and Cookies
Analysis of website usage, ensuring the proper operation of the website and improving the user experience.
Category of data subjects: website visitors.
Category of personal data: technical data and online identifiers.
Personal data: IP address, cookies, browser information, device information, date and time of visit, pages visited, and user actions on the website.
Legal basis: consent of the personal data subject.
Processing operations and methods: collection, recording, organization, accumulation, storage, updating, retrieval, use, blocking, deletion and destruction, using automated means and/or without the use of automated means.
Processing period: for the period necessary for website analytics and operation, or until consent to optional analytics is withdrawn.
Destruction: once the purpose of processing has been achieved or another ground for termination of processing arises, processing shall cease and the personal data shall be destroyed or their destruction shall be ensured, unless another lawful basis for continued processing applies.

Personal Data Processing Operations and Methods
The Operator may collect, record, organize, accumulate, store, update, retrieve, use, provide or grant access to where necessary, block, delete and destroy personal data.
Processing is carried out using automated means and, where applicable, without the use of such means.
Procedure and Conditions for Processing, Storage and Transfer
Processing is carried out to the extent necessary to achieve the stated purposes, while maintaining confidentiality and complying with the requirements of the legislation of the Russian Federation.

Access to personal data is granted only to persons who require such access to perform the relevant tasks. Data may be transferred where there is a lawful basis, including for the performance of a contract, compliance with legal requirements, or with the consent of the personal data subject.
The Operator takes measures to keep personal data up to date and to prevent excessive processing.

Uploaded Materials
The service is not intended for the transmission, through uploaded materials, of personal data, special categories of personal data, biometric data or other confidential information. The User must not provide personal data of third parties without an appropriate lawful basis.

Cookies and Web Analytics
The website uses cookies and web analytics systems to ensure proper website operation, improve usability and analyze user interaction with the website.
The following technical data is processed automatically: IP address, cookies, browser information, device information, date and time of visit, pages visited, and user actions on the website.
You may restrict or disable cookies in your browser settings. Please note that disabling cookies may cause certain website features to function incorrectly.

Localization of Personal Data
When collecting personal data of citizens of the Russian Federation, the recording, organization, accumulation, storage, updating, modification and retrieval of such data shall be carried out using databases located within the territory of the Russian Federation, except in cases provided for by the legislation of the Russian Federation.

Website and Infrastructure Geography
According to information provided by the Operator, the servers and the primary database are located outside the Russian Federation.
This information reflects the declared configuration of the website and must be verified by the Operator before this document is published; it does not replace applicable requirements governing the processing of personal data.

Processing Periods, Termination of Processing and Destruction
Personal data shall be processed for no longer than required for the relevant purposes of processing, unless another period is established by the legislation of the Russian Federation or by contract.

Once the purpose of processing has been achieved, the Operator shall cease processing and destroy the personal data within a period not exceeding 30 days, unless another lawful basis for continued processing exists.
Where consent is withdrawn and no other basis for processing exists, personal data shall be destroyed within a period not exceeding 30 days from the date the withdrawal request is received.

A request by the personal data subject to cease processing shall be reviewed within a period not exceeding 10 business days. This period may be extended by no more than 5 business days, provided that a reasoned notice is sent to the applicant.

Confidentiality and Protection of Personal Data
The Operator and other persons who have gained access to personal data are required to maintain its confidentiality, except in cases provided for by the legislation of the Russian Federation.
The Operator implements the necessary legal, organizational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, provision and other unlawful actions. The specific set of measures is determined by the Operator taking into account the nature of processing and relevant threats.

Procedure for Requests from Personal Data Subjects
The personal data subject has the right to submit a request to the Operator regarding the existence and processing of their personal data, its correction, blocking, termination of processing or destruction.
To withdraw consent, correct personal data or request termination of processing, the User may contact the Operator using the email address or telephone number specified in the contact section.
Requests shall be reviewed within the time limits established by the legislation of the Russian Federation. The Operator may request information necessary to identify the applicant and verify their authority.

Final Provisions
This Policy is a publicly available document and is published on a separate publicly accessible page of the website.
The Operator shall update this Policy whenever personal data processing procedures or applicable legal requirements change. A new version shall take effect from the date of its publication unless otherwise specified therein.

Date of the latest Policy update: 19 September 2026.
Current version of the Policy: https://maschina.uz/privacy/.