USER CONSENT for the Collection, Processing, and Transfer of Personal Data — BizdeBar Service
(Translation from Russian. In case of discrepancies, the Russian version shall prevail.)
Effective date: March 02, 2026
I, as a User of the BizdeBar online service (bizdebar.de, BizdeBar mobile application, Telegram bot @bizdebar_bot) (hereinafter referred to as the “Service”), freely, knowingly, and voluntarily consent to “Bizde Bar” Limited Liability Company, registration number 325873-3301-OOO, TIN: 02002202610551, registered address: Kyrgyz Republic, Bishkek, Pervomaysky District, Logvinenko St., Bldg. 55, Apt. 32 (hereinafter referred to as the “Administration”), collecting, processing, storing, and transferring my personal data in accordance with the Law of the Kyrgyz Republic “On Personal Information” dated April 14, 2008, No. 58 (as last amended on July 12, 2022).
1. Purposes, Categories of Personal Data, Legal Bases, and Retention Periods
| No. | Purpose | Data Categories | Legal Basis | Retention Period |
|---|---|---|---|---|
| 1 | Account registration and use | Phone number, name (nickname), authentication data (Telegram ID, SMS code) | Contract performance (Art. 9 KR Law, Art. 6(1)(b) GDPR) | Until account deletion + 1 year |
| 2 | User support and Service security | Device identifiers, IP address, activity logs, AI assistant chat history | Legitimate interest (Art. 9 KR Law, Art. 6(1)(f) GDPR) | 12 months from last interaction |
| 3 | Marketplace and AI assistant operation | Query content, photos, listing descriptions, preferences, search history | Contract performance (Art. 9 KR Law, Art. 6(1)(b) GDPR) | Until account deletion + 6 months |
| 4 | Marketing activities | Contact details (phone), preferences, in-Service behavior | User consent (Art. 6(1)(a) GDPR) | Until consent withdrawal or 12 months after last activity |
| 5 | AI system query processing | Query text, dialog context, language preferences | Contract performance / Legitimate interest | Period of use + 30 days |
| 6 | Web analytics and Service improvement | Cookies, IP, behavior, visit times, device type | Consent (cookies) or legitimate interest (internal analytics) | Up to 13 months or until consent withdrawal |
| 7 | Legal and tax compliance | TIN, payment details, contact data | Legal obligation (Art. 6(1)(c) GDPR) | As required by KR tax legislation |
2. Third Parties and Cross-Border Transfers
My data may be transferred exclusively to the following categories of organizations:
- hosting provider (Finland, EU) - the Service’s servers are located in Finland;
- AI model providers (LLMs) - for processing AI assistant queries, with minimization and depersonalization of transferred data;
- analytics services - for analyzing Service usage and improving quality;
- payment services - for processing payments for Paid Services (bank card data is not stored by the Administration);
- SMS/verification services - for sending confirmation codes during registration;
- government authorities of the Kyrgyz Republic - only in cases prescribed by law.
Cross-border data transfers are carried out in accordance with Article 25 of the KR Law “On Personal Information” and where an adequate level of protection exists (GDPR for the EU) or on the basis of my consent.
3. Cookie Processing
The Service uses cookies and similar technologies for analytics, personalization, and functionality.
I consent to the use of non-essential cookies (analytical, marketing) with the ability to withdraw consent at any time through browser settings. Detailed information is provided in the Service’s Privacy Policy.
4. Methods and Forms of Processing
Personal data processing is carried out using automated and non-automated means, including collection, recording, systematization, storage, depersonalization, transfer (including cross-border), blocking, and destruction. Distribution of data without the User’s separate consent is not permitted.
Processing by the AI system includes the transmission of query text to language model providers for generating responses. The Administration takes measures to minimize the volume of personal data transmitted and to depersonalize it.
5. Rights of the Data Subject
I have been informed of my rights, including:
- obtaining information about the processing of my data;
- access, rectification, blocking, and deletion of my data;
- restriction of processing and objection to processing (including marketing);
- withdrawal of consent without affecting the lawfulness of prior processing;
- filing a complaint with the State Agency for Personal Data Protection under the Cabinet of Ministers of the Kyrgyz Republic (dpa.gov.kg) or with a court.
To exercise my rights, I may contact: ceo@bizdebar.com.
6. Validity Period
The validity period of this consent depends on the processing purposes specified in the table in Section 1.
General consent is valid until withdrawal or until account deletion, unless otherwise provided by the legislation of the Kyrgyz Republic.
7. Withdrawal of Consent and Recording
Consent may be withdrawn by:
- sending a written notice to: ceo@bizdebar.com;
- contacting via Telegram: @bizdebar_support;
- using the Service’s functionality (app settings, account deletion).
The fact of consent is recorded automatically - by an entry in the registration log (date, time, IP address, consent version).
Confirmation of my consent is the checking of the corresponding checkboxes and/or registration on the Service.
I confirm that I have read the Privacy Policy and the Terms of Use published at bizdebar.de.
Administration Details
“Bizde Bar” Limited Liability Company TIN: 02002202610551, Reg. No.: 325873-3301-OOO, OKPO: 34689616 Address: Kyrgyz Republic, Bishkek, Pervomaysky District, Logvinenko St., Bldg. 55, Apt. 32 Email: ceo@bizdebar.com