Consent to personal data processing
Version of 2 November 2026. You give this consent when you tick the box in the leasing request or feedback form.
By ticking “I agree to the collection and processing of my personal data” and submitting a form on trc-citymall.kz (the “Site”), I, acting freely, of my own will and in my own interest, give my consent to Trading Company MDM LLP (BIN 040840002587, 56 Ch. Valikhanov St., Petropavlovsk, Republic of Kazakhstan; the “Operator”) to collect and process my personal data on the following terms.
1. Personal data — to the extent I entered it in the form: name, phone number, company or brand name, the space I am interested in and a comment (leasing request); phone number (the “Notify me” form); type and topic of the message, its text, phone number, store and photos (feedback).
2. Purposes: to review my leasing request or message and to contact me about it.
3. Processing operations: collection, recording, systematisation, accumulation, storage, clarification, use, blocking, anonymisation and destruction — with or without automation.
4. The data is stored on servers in the Republic of Kazakhstan. Only authorised employees of the Operator and contractors who maintain the Site have access to it, under a contract with a confidentiality obligation. The data is not disclosed to other third parties, except as required by the laws of the Republic of Kazakhstan. Form data is not transferred outside the Republic of Kazakhstan.
5. The consent is valid for 3 years from the moment the form is submitted or until it is withdrawn. After that, the data is deleted or anonymised.
6. I may withdraw my consent by sending a request to info_citymall@mail.ru or a letter to the Operator’s address marked “Personal data”. After withdrawal, the Operator stops processing and deletes the data within the time limits set by law, unless the law requires it to be kept.
7. The consent is given in accordance with Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection”. The Privacy Policy on the Site explains in more detail how the Operator processes data.
8. I am at least 18 years old, or I submit the form with the consent of my parents or other legal representatives.