1. General provisions
1.1. This Regulation has been prepared in accordance with the Law of the Republic of Tajikistan “On Personal Data Protection” No. 1537 of 3 August 2018, as well as other regulatory legal acts in the field of personal data processing and protection.
1.2. The purpose of this Regulation is to set out the procedure for collecting, storing, processing and protecting users’ personal data, and to safeguard the rights and freedoms of individuals when their personal data are processed by Dunyo LLC.
1.3. The personal data operator is Limited Liability Company “Dunyo” (Dunyo LLC), registered under the laws of the Republic of Tajikistan, legal address: Republic of Tajikistan, Dushanbe, Dusti Mardum (Friendship of Nations) Street, 62.
1.4. This Regulation applies to all personal data processed by Dunyo LLC, regardless of how they were obtained.
2. Terms and definitions
2.1. Website — the web resource of Dunyo LLC available at: https://visit.dunyocargo.com.
2.2. User — a natural or legal person interacting with the website of Dunyo LLC.
2.3. Personal data — any information relating to an identified or identifiable natural person (personal data subject).
2.4. Personal data processing — any operation or set of operations performed on personal data, including collection, recording, organisation, accumulation, storage, updating, use, transfer, blocking, deletion and destruction.
2.5. Automated personal data processing — processing of personal data by means of information technology.
2.6. Confidentiality of personal data — Dunyo LLC’s obligation not to disclose personal data without the subject’s consent or another lawful basis.
3. Principles of personal data processing
3.1. Personal data processing by Dunyo LLC is carried out on a lawful and fair basis and is limited to achieving specific, predetermined and lawful purposes.
3.2. Only personal data that are adequate for the stated purposes of processing are subject to processing.
3.3. Personal data are processed in accordance with the following principles:
- lawfulness and fairness of processing;
- pursuit of specific, predetermined and lawful purposes;
- ensuring accuracy, adequacy and relevance of personal data;
- retention periods must not exceed what is necessary for the purposes of processing.
4. Purposes of personal data processing
4.1. Personal data are processed solely for the following purposes:
- providing transport and logistics services;
- performing contractual obligations toward users;
- complying with the laws of the Republic of Tajikistan, including tax and accounting requirements;
- identifying users for interaction with the website of Dunyo LLC;
- improving the quality of user service.
5. Retention periods for personal data
5.1. Users’ contact and account data are retained until consent to processing is withdrawn.
5.2. Order data and accounting information are retained for 5 years in accordance with the tax legislation of the Republic of Tajikistan.
5.3. Upon expiry of the retention period, personal data are destroyed, except where retention is required by the laws of the Republic of Tajikistan.
6. Rights of personal data subjects
6.1. Users (personal data subjects) have the right to:
- request information about data held about them;
- request correction, deletion or blocking of their personal data;
- withdraw consent to personal data processing;
- appeal against actions of Dunyo LLC before competent state authorities.
7. Obligations of Dunyo LLC when processing personal data
7.1. Dunyo LLC shall:
- protect personal data against unauthorised access, loss, destruction or alteration;
- apply legal, organisational and technical measures to protect personal data;
- provide personal data subjects with access to their data upon request;
- take measures to correct or delete inaccurate personal data.
8. Measures to ensure the security of personal data
8.1. Dunyo LLC takes the following measures to protect personal data:
- access control to information;
- use of modern data protection tools, including encryption and user authentication;
- organisational and technical measures to protect data against leaks, breaches and unauthorised use;
- regular audits of information systems.
9. Disclosure and transfer of personal data
9.1. Dunyo LLC does not transfer personal data to third parties except where required by the laws of the Republic of Tajikistan or necessary to perform contractual obligations toward clients.
9.2. Transfer of personal data is permitted only:
- with the written consent of the personal data subject;
- upon a lawful request from state authorities.
10. Final provisions
10.1. This Regulation may be amended unilaterally by Dunyo LLC if the legislation of the Republic of Tajikistan changes.
10.2. The current version of the Regulation is always available on the website of Dunyo LLC.
10.3. If a user does not agree with the terms of processing of their personal data, they must stop using the website and request deletion of their data.
Last updated: 5 February 2025
