Personal Data Processing and Privacy Policy

1. Operator details

• Legal name: СП ООО «Asman Auto»
• Address: г. Ташкент, Яшнабадский район, Oʻrta Masjid MFY, Oxangrabo koʻchasi, 1-b-uy
• Tax/registration number: 312943814
• Person responsible for data processing: Tursunov Kamronbek, Network Marketing Manager
• Privacy requests: [email protected]; +998 93 801 80 90

2. Data we collect

• Request data: name, telephone number, city, dealer, model, trim, colour, and free-form comment.
• Request context: form type, CTA, page, language, and submission time.
• Advertising attribution: UTM tags, allow-listed click identifiers, landing page, and referrer.
• Security data: browser User-Agent and a one-way hash of the IP address.
• Consent evidence: document version and URL, displayed consent text, selected options, and submission time.
• After the relevant cookie consent: identifiers and events created by Google Analytics, Google Ads, Meta Pixel, and functional third-party services.

3. Purposes and legal bases

• Callback, test-drive booking, car advice and sale, instalment or credit, service booking, and transfer to a selected or assigned dealer — based on explicit consent and a pre-contractual request.
• Fraud and spam prevention, service stability, and incident investigation — based on the operator’s security obligations and legitimate interests where applicable.
• Website and advertising performance measurement — based on separate cookie consent.
• Subsequent promotional calls and SMS — only under a separate, optional, unticked consent.

4. Recipients and processors

Only the data required for a task may be shared with authorised operator staff and the selected or assigned dealer shown at https://mg-motor.uz/en/dealers that has a dealer agreement with Asman Auto.

Technical processors may include Uzbekistan VPS/hosting, Cloudflare, Telegram operational notifications, Google Sheets, Google Analytics, Google Tag Manager, Google Ads and Meta Pixel after consent, Yandex Maps after functional consent, and Bitrix24 only when the CRM integration is enabled. GTM itself does not set cookies, but every tag it starts must respect the corresponding consent state.

The operator does not sell personal data and limits each recipient to its task.

5. Cross-border transfers

Cloudflare, Google, Meta, Telegram, Yandex, and Bitrix24 may process certain data outside the Republic of Uzbekistan. The operator carries out cross-border transfers only for the stated purposes and where a condition under Articles 15 and 27¹ of the Personal Data Law of Uzbekistan is met, including obtaining consent where required.

6. Retention

• Requests and consent evidence: until the purpose is fulfilled, normally no longer than 120 months unless a longer period is required by law.
• Analytics data: up to 14 months in Google Analytics settings.
• Technical logs and backups: up to 120 months for security, dispute handling, and recovery; actual technical rotation may be shorter.
• Data is deleted or anonymised when the purpose is achieved, consent is withdrawn, or the applicable period expires, unless another legal basis requires retention.

7. Your rights

Send requests to [email protected]. We may ask for information needed to verify identity.

• Request information about the data, purposes, sources, recipients, and retention periods.
• Correct inaccurate data and request restriction or cessation of processing where there is no lawful basis.
• Withdraw consent and request deletion where applicable under law.
• Withdraw cookie consent through the footer settings and promotional call/SMS consent by contacting the operator.

8. Security and policy changes

The operator applies legal, organisational, and technical measures intended to reduce the risk of unauthorised access, alteration, disclosure, or loss. Updated versions and dates will be posted on this page; material changes may require renewed consent.

9. Important conditions

• Forms are intended for adults; a legal representative should act for a minor.
• No decision producing legal or similarly significant effects is made solely by automated processing.
• This policy is prepared with regard to Uzbekistan Law No. ZRU-547 of 2 July 2019 on Personal Data, as currently amended in 2026, and Law No. ZRU-776 of 7 June 2022 on Advertising.