1. General provisions
1.1. This Personal Data Processing Policy has been developed in accordance with the requirements of the Digital Code of the Kyrgyz Republic dated July 31, 2025, and defines the procedure for the processing of personal data and the measures implemented to ensure the security of such data by Alban Leader LLC (hereinafter referred to as the Digital Resource Owner (DRO)).
1.2. The DRO considers the protection of the rights and freedoms of personal data subjects to be a fundamental condition of its activities, including the protection of the right to privacy and the confidentiality of personal and family information.
1.3. This Policy applies to all information that the DRO may obtain about users of the digital resource www.jobeducationhub.kg.
2. Key terms and definitions
2.1. Automated processing of personal data – processing of personal data using computer systems and software tools.
2.2. Digital resource – an organized set of digital records, graphic and informational materials, including databases, intended for storage, use, and access to digital data via the network address www.jobeducationhub.kg.
2.3. Processing of personal data – any action (operation) or combination of actions performed with personal data, including collection, recording, systematization, accumulation, storage, modification, retrieval, use, transfer, dissemination, comparison, restriction, deletion, or destruction.
2.4. User – any individual visiting or using the digital resource www.jobeducationhub.kg.
2.5. Dissemination of personal data – actions aimed at disclosing personal data to an indefinite number of persons, including publication in mass media, posting on information and telecommunication networks, or providing access by any other means.
2.6. Cross-border transfer of personal data – transfer of personal data to data controllers located under the jurisdiction of foreign states.
3. Purposes of personal data processing
3.1. Personal data is processed for the purpose of:
- Employment assistance and personnel selection
- Educational consulting and placement
- Conclusion and performance of service contracts
- Selection of foreign educational institutions
- Documentation support
- Preparation of motivation letters
- Preparation for interviews with employers, including online interviews via Zoom, Microsoft Teams, and Google Hangouts
- Creation, editing, and processing of CVs in accordance with international employer requirements.
3.2. Cross-border transfer of personal data is carried out in accordance with Government Permit No. 1664 dated December 31, 2025, for the employment of citizens of the Kyrgyz Republic in the United Kingdom.
4. Principles of personal data processing
4.1. Personal data is processed lawfully, fairly, and transparently.
4.2. Processing is limited to achieving specific, predetermined, and legitimate purposes.
4.3. The content and scope of processed personal data correspond to the stated processing purposes.
5. Categories of data subjects and types of personal data
5.1. Candidates (job seekers):
- Full name
- Contact information
- Education details
- Work experience and CV
5.2. Clients (employers):
- Full name of authorized representatives
- Contact information
- Company details
5.3. Users of the digital resource:
- Cookies
- IP addresses
- Behavioral and technical data related to use of the website
6. Legal basis for processing
Personal data processing is carried out on the basis of:
- The Constitution of the Kyrgyz Republic
- The Labor Code of the Kyrgyz Republic
- The Digital Code of the Kyrgyz Republic dated July 31, 2025
- Consent of the personal data subject
7. Storage, transfer, and protection of personal data
7.1. Storage period:
Personal data is stored for the period necessary to achieve the purposes of processing or until consent is withdrawn, unless a longer retention period is required by law.
7.2. Transfer to third parties:
Personal data of candidates (job seekers) may be transferred to potential employers strictly for employment-related purposes and in compliance with applicable legal requirements.
8. Rights of personal data subjects
Personal data subjects have the right to:
- Access their personal data
- Request correction or updating of inaccurate data
- Withdraw consent to personal data processing at any time
Request deletion of personal data (the “right to be forgotten”)