Approved by the Order of the General Director of MEDIATEKA LLC
for No. 2pp from 03.01.2025

PRIVACY POLICY FOR MEDIATEKA SERVICES

1. General Provisions

1.1. The subject matter of this Privacy Policy (hereinafter referred to as
the "Policy") is the relationship between MEDIATEKA LLC, a legal entity created and operating in accordance with the legislation of the Republic of Uzbekistan, located at the following address: Republic of Uzbekistan, Tashkent city, Yunusabad district, Sh. Rashidov street 97A, (hereinafter referred to as the "Company" or
"MEDIATEKA"), which is the copyright holder of websites, services, programs and/or other products, including information, communication and other nature (hereinafter referred to as
the "Services" and individually as the "Service"), located on the Internet and individuals, including employees and representatives of legal entities, sole proprietors and other categories of personal data subjects (hereinafter referred to as the "User"), regarding the processing of information about the User, including personal data, in the process of using the Company's Services (hereinafter referred to as the "Information").

1.2. This Policy is available at: https://oats.uz/rus/politikakonf.

1.3. Relationships related to the processing of information, including, but not limited to the collection, use, storage of personal data, distribution and protection of information about Users of the MEDIATEKA Services, are governed by this Policy, other rules posted within the MEDIATEKA Services (hereinafter collectively referred to as the "Policies" and individually as the "Policy"), as well as the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 dated 02.07.2019, as well as current regulatory acts of the Republic of Uzbekistan.

1.4. Before using the Company's Services, the User is obliged to familiarize themselves with this Policy, as well as with all applicable Rules.

1.5. By registering, accessing, and/or using any of the Services, the User agrees to the terms of this Policy, as well as the agreements, terms, and conditions of the Services they use, which are posted on the pages (sections) of the relevant Services, in the versions in effect at the time of their actual use.

1.6. The Company does not verify the accuracy of the personal information provided by Users and does not monitor their legal capacity. However, the Company assumes that the User provides accurate and sufficient personal information in response to the questions asked in the registration form and maintains this information up to date. The risk of providing inaccurate information is borne by the User who provided it. By registering for the relevant Service or accessing it without registration, the User confirms that they have reached the permitted age for using such Service in accordance with applicable law.

2. Composition of the Information

2.1. The Information processed by the Company includes:
2.1.1. Account data, which means:
(a) data about the User provided by the User to create an account during registration in the Service;
(b) additional information filled in by the User when editing their account while using the Service;
(c) data additionally provided by the User at the request of the Company for the purpose of fulfilling the Company's obligations to the User arising from the agreement on the provision of the relevant Service, for example, first name, last name, date of birth, gender, passport details, mobile phone number, etc.;
2.1.2. Other data necessary for the functioning of a certain Service, namely:
(a) data on technical means (devices), technological interaction with the Service (including the host IP address, type of operating system of the User, browser type, geographic location, Internet service provider);
(b) information automatically received when accessing the Service using cookies; (c) information received as a result of the User's actions in the Service, in particular, information on the addition of any content (if applicable);
(d) information received as a result of the actions of other Users in the Service (if applicable);
(e) summarized analytical information on the use of Internet services.
The Accounting and other data processed by the Company, to the extent necessary and sufficient for them to be classified as personal data in accordance with the current legislation of the Republic of Uzbekistan, are processed by the Company as personal data under the terms of this Policy.
If any MEDIATEKA Service does not contain a special privacy policy for the relevant Service, the terms of this Policy shall apply.
To fully use some MEDIATEKA Services, the User must be authorized (enter login and password) through the MEDIATEKA account. In this case, the Service can receive the following data about the User from the MEDIATEKA account: first name, last name, date of birth, gender, passport details, email. Moreover, the volume of data received about the User in each specific MEDIATEKA Service depends on the functional necessity of such Service for the purposes of fulfilling the agreement with the User (the purpose of processing).
2.2. The functionality and rules for using individual Services may allow the User to post any other information (if applicable) in the Services, in addition to that specified in paragraph 2.1. of this Policy, if it does not conflict with the requirements of current legislation. The Company does not intend to process such information, as well as biometric and special categories of personal data. By posting information, the User understands that it may be accessible to an indefinite number of Internet users, taking into account the settings of the desired level of privacy.
2.3. If the functionality of the Service used allows for information about the User to be reflected in their Account, which is accessible for viewing by other Users of such Service or Internet users, the User agrees to the reflection of information about them in their Account. The User agrees that Information, including Account and other data, as well as other information, may be available to other Users of the relevant Service and/or other Internet users, taking into account the existing functionality of the Service (which may be changed from time to time by the Company).

2.4. Cookie processing
Cookies are small pieces of data that websites request from the browser used on the User’s computer or mobile device. Cookies are stored locally on the Internet user’s computer or mobile device. The Company collects and processes cookies in relation to Users visiting the Company’s Services.
The Company’s Services use the following types of cookies:
● strictly necessary cookies / technical cookies: these cookies are necessary for the website to operate and provide the User with the Services; among other things, they allow the Company to identify the User’s hardware and software, including the browser type;
● statistical / analytical cookies: these cookies make it possible to recognise users, count their number and collect information, such as transactions performed on websites, including information about the web pages visited and the content received by the User;
● technical cookies: these cookies collect information about how users interact with the website, which allows us to identify errors and test new features to improve the performance of the Services;
● functional cookies: these cookies allow certain functions to be provided to make the websites easier to use, for example by storing preferences (such as language and location);

3. Terms of processing Information

3.1. The Company processes User Information in accordance with the following principles:
3.1.1. the legality of the purposes and methods of processing Information;
3.1.2. the good faith of the Company;
3.1.3. the compliance of the purposes of processing Information with the purposes previously determined and declared during its collection, as well as with the powers of the Company;
3.1.4. the compliance of the volume and nature of the processed Information, the methods of its processing with the purposes of processing Information;
3.1.5. the inadmissibility of combining databases containing User Information created for incompatible purposes.

3.2. Purposes of Processing Information
The Company processes Account Data and Other Data of Users of the Services for the purpose of fulfilling agreements concluded with Users for the use of the relevant Services.

3.3. Collection of Information.
The User's Credentials are collected upon registration with the relevant Service by completing the registration form, as well as subsequently when the User edits previously provided information or supplements their Credentials on their own initiative) using the tools of the relevant Service.
The Company independently collects Other Data during the User's use of the Service. In some cases, the collection of Other Data begins from the moment the User gains access to the Service (for example, when loading a web page or launching an application) until the moment of registration with the relevant Service.

3.4. Transfer of Information.
The Company does not disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by the legislation of the Republic of Uzbekistan in the field of protection and use of personal data.
In order to provide high-quality, multifunctional, user-friendly Services tailored to the personal needs and interests of Users, the Company develops, improves, and optimizes the current functionality of the Services and introduces new ones (information, communication, advertising, educational, entertainment, and other).
Taking into account the above, and also taking into account the Company's compliance with the processing purposes specified in paragraph 3.2 of this Policy, the User agrees and instructs the Company to perform the following actions:
- processing, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), comparison, retrieval, use, blocking, deletion/destruction of the User's Account and other data.

3.5. Storage of Information
The user's account and other data are stored in the Republic of Uzbekistan and are stored exclusively on electronic media and processed using automated systems, except in cases where non-automated processing of the account and other data is necessary to comply with applicable law.
The account and other data are stored until the processing purposes are achieved, unless otherwise specified in the privacy policy of the relevant service.

3.6. Information Retention Periods
The account and other data are stored by the Company for the duration of the agreement between the User and the Company on the use of the relevant Service, and after the termination of such agreement - for the period required and established by the current legislation of the Republic of Uzbekistan.

3.7. Termination of Information Processing
Upon achieving the purposes of Information processing, the Company stops processing the account and other data in one of the ways stipulated by the Law of the Republic of Uzbekistan "On Personal Data".

4. Rights and obligations of Users when processing their Information Users have the right to:

4.1. receive free access to information about themselves by viewing the User Account in the relevant Service;

4.2. use the Service tools to set the desired level of confidentiality with respect to information about themselves (conditions for access to information) taking into account the functionality of the relevant Service (if applicable);

4.3. independently use MEDIATEKA services;

4.4. require the Company to clarify information about the User, block or destroy it if such information is incomplete, outdated, inaccurate, obtained without justification or is not necessary for the stated purpose of processing and if the functionality of the Service does not allow the User to independently delete such information;

4.5. receive information from the Company regarding the processing of information about the User upon request.

5. Information Security Measures

5.1. The Company takes technical, organizational, and legal measures to ensure the protection of User information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other illegal actions.

5.2. The Company's technical security measures are implemented taking into account the requirements of current legislation, the current state of technology, the nature of the information processed, and the risks associated with its processing.
Information is processed primarily automatically, without access by the Company's employees and/or contractors. If such access is granted to the Company's employees or contractors, it is only to the extent necessary for such persons to perform their official duties or duties under an agreement with the Company. Such persons are also obligated to comply with security requirements when accessing Information. To protect and ensure the confidentiality of data, all employees/contractors comply with internal rules and procedures regarding information processing. These persons also comply with all technical and organizational security measures stipulated by applicable law and necessary to protect User information.

6. Limitation of Company Liability
6.1. The Company shall not be liable for the disclosure and dissemination of information about the User by other Users of the Services or other Internet users if such persons have gained access to said information in accordance with the privacy level settings selected by the User for the relevant Service, or if the User has violated the security of their login and/or password or other data required for authorization.

7. User Inquiries

7.1. Information about the data processed by the Company, including the User's personal data, in connection with their use of the relevant Service, is provided to the User or their representative upon inquiry.

7.2. Inquiries shall be sent in writing to the address of the Company's location or in another form stipulated by the current legislation of the Republic of Uzbekistan.

7.3. The User has the right to revoke consent to the processing of their personal data by sending the Company a written application to the location of the Company in accordance with the requirements of the current legislation.

8. Changes and additions to this Policy

8.1. This Policy and the policies of individual Services may be changed by the Company with notice to the User, including by posting a new version of the amended Policy on the Website. Changes to the Policy made by the Company shall come into force on the day following the day the new version of the Policy is posted on the Website. The User undertakes to independently check this Policy and the Policies of individual Services for changes made. The User's failure to carry out familiarization actions cannot serve as grounds for the User's failure to fulfill their obligations and the User's failure to comply with the restrictions established by this Agreement and the Agreements of individual Services.

8.2. The User has the right to refuse to accept changes and additions to this Policy, which means the User renounces the use of all and/or individual MEDIATEKA Services and all previously granted rights.

8.3. This Policy is governed by and interpreted in accordance with the laws of the Republic of Uzbekistan. Issues not regulated by this Policy shall be resolved in accordance with the laws of the Republic of Uzbekistan.