PRIVACY AND PERSONAL DATA PROCESSING POLICY.

1.1. This Privacy and Personal Data Processing Policy (hereinafter referred to as the “Policy”) establishes the procedure for the receipt, collection, recording, systematization, accumulation, storage, clarification, updating, modification, use, transfer, disclosure, anonymization, blocking, deletion, and destruction of personal data carried out by PARKTECH LLC (hereinafter referred to as the “Company”). 1.2. This Policy has been developed in accordance with the legislation of the Republic of Uzbekistan governing personal data and applies to all personal data obtained by the Company through the use of the official website (https://uz.bnect.pro/), the portal, and other Bnect digital services; through the completion of feedback forms, registration, authentication, and use of personal accounts; through the submission of inquiries, applications, requests, claims, responses, and other communications; in connection with the conclusion, performance, amendment, and termination of contracts; through participation in negotiations, procurement, marketing, informational, business, and other activities; as well as through interactions with representatives of clients, suppliers, contractors, partners, job applicants, and other individuals. 1.3. For the purposes of this Policy, depending on the nature of the relevant legal relationship, service, business process, or contract, the Company may act as the owner of a personal data database, the operator of a personal data database, or a person processing personal data on behalf of another person, in the cases and in the manner provided for by the legislation of the Republic of Uzbekistan. 1.4. This Policy is a publicly available document and shall be published on the Website, the Portal and/or otherwise made available to personal data subjects by any means ensuring the possibility of reviewing its contents. 1.5. The use of the Website, the Portal, or the Company's services, the registration of an account, the submission of inquiries, the uploading of documents, the filing of applications, as well as the provision of personal data to the Company in any other manner permitted by law, shall constitute confirmation that the personal data subject has read and acknowledged this Policy. Where the legislation of the Republic of Uzbekistan requires separate consent to the processing of personal data, such consent shall be obtained in a form that allows confirmation of its receipt, including in the form of a written document, an electronic document, a tick-box or similar acknowledgment within the relevant interface, the execution of a form, questionnaire, offer, or application, or the performance of any other action that unequivocally evidences the data subject’s intention and consent. 1.6. If a personal data subject does not agree with the terms of this Policy, such person shall refrain from providing their personal data to the Company and from using any services, functions, or features of the Platform for which the processing of personal data is objectively necessary. 1.7. Where a separate consent, contract, offer, user agreement, employment application form, agreement with a counterparty, tender documentation, or any other document contains specific provisions governing the processing of personal data, such provisions shall apply to the relevant extent in conjunction with this Policy, provided that they do not conflict with the mandatory requirements of the legislation of the Republic of Uzbekistan.

2.1. Personal Data – any information relating to an identified or identifiable natural person, whether directly or indirectly. 2.2. Personal Data Subject – a natural person to whom the personal data relates. 2.3. Processing of Personal Data – any operation or set of operations performed on personal data, whether by automated means or without the use of such means, including collection, recording, systematization, accumulation, storage, updating, use, transfer, disclosure, dissemination, anonymization, blocking, deletion, and destruction. 2.4. Automated Processing – the processing of personal data through the use of computer systems, software, information systems, CRM and ERP systems, cloud-based solutions, analytical and communication tools, and other digital platforms and services. 2.5. Third Party – any person that is not the personal data subject, the owner and/or operator of a personal data database, but that is granted access to personal data or participates in the processing on a lawful basis. 2.6. Anonymization – actions resulting in the impossibility of determining whether personal data belongs to a specific personal data subject without the use of additional information. 2.7. Cross-Border Transfer of Personal Data – the transfer, provision of access to, hosting, storage, or any other form of processing of personal data outside the territory of the Republic of Uzbekistan. 2.8. Cookies – small text files, online identifiers, and other similar technologies stored on a user's device and used to ensure the operation of the Website, maintain security, conduct analytics, preserve user preferences, personalize the interface, and improve the Company's services.

3.1. The Company may process personal data of users of the Website, the Portal, and mobile services; clients and prospective clients; representatives of legal entities; counterparties, suppliers, contractors, and partners; individuals submitting inquiries, applications, complaints, requests, and other communications; participants in events, meetings, presentations, marketing and informational activities; job applicants; candidates for cooperation; as well as other individuals lawfully interacting with the Company. 3.2. Depending on the purposes of processing, the Company may process the following categories of personal data: 3.2.1. surname, first name, and patronymic; 3.2.2. date of birth; 3.2.3. citizenship; 3.2.4. gender; 3.2.5. contact telephone number; 3.2.6. email address; 3.2.7. postal address; 3.2.8. job title, place of employment, and name of the organization; 3.2.9. information regarding the authority of a representative, including details of a power of attorney or other document evidencing such authority; 3.2.10. identification and registration data, including the Personal Identification Number of an Individual (PINFL), the Taxpayer Identification Number (TIN), and other similar information, where the processing of such data is necessary for compliance with the legislation of the Republic of Uzbekistan or for the performance of a contract; 3.2.11. username, password, account identifiers, and other information required for registration, authentication, and use of a personal account. 3.2.12. history of interactions with the Company's services; 3.2.13. the content of inquiries, applications, correspondence, and the results of their review and processing; 3.2.14. information regarding services, works, products, and service features ordered, received, or requested by the data subject; 3.2.15. information relating to settlements, payments, and documentation, to the extent necessary for the performance of a contract and/or compliance with legal requirements; 3.2.16. technical and behavioral data, including IP address, information about the browser, device, operating system, language settings, time zone, cookies, logs, security events, information regarding viewed notifications, opened messages, navigation across sections of the Platform, search history, and other information concerning the user's activities on the Website and the Portal. 3.3. In connection with the use of certain Company services, including registration on the Platform, participation in procurement and contracting procedures, submission of commercial proposals, use of a Personal Account, electronic signatures, electronic document management systems, as well as the uploading and submission of documents, the Company may process the personal data contained therein to the extent necessary for the provision of the relevant service, ensuring the legal validity of actions performed, supporting business processes, and complying with the requirements of the legislation of the Republic of Uzbekistan. 3.4. The Company does not intentionally process special categories of personal data, biometric data, or genetic data unless such processing is required by law, the nature of a particular service, or another valid legal basis. Where such data has been provided to the Company without necessity or without a sufficient legal basis, the Company may restrict its processing, require the submission of alternative documents, or take any other measures necessary to ensure compliance with applicable law and to mitigate legal risks. 3.5. Where a data subject provides the Company with personal data relating to another individual, the data subject represents and warrants that he or she has the necessary authority and lawful basis for such disclosure and shall be solely responsible for providing any required notice to such individual where such notice is required under applicable law.

4.1. The Company may obtain personal data directly from the data subject; from the data subject’s employer, represented organization, customer, partner, client, contractor, or any other person having a lawful basis for the disclosure of such data; from publicly available sources; from state information systems, registers, platforms, and services in the cases and manner prescribed by law; from the information systems of partners and service providers integrated with the Company’s digital infrastructure; and automatically through the use of the Website, the Portal, applications, services, and communication channels of the Company. 4.2. Where the Company obtains personal data other than directly from the data subject, it may assume that the transferring party has ensured the lawfulness of such disclosure, possesses the necessary authority to transfer the data, and that the scope of the data transferred is necessary and sufficient for the relevant processing purpose, unless otherwise evident from the circumstances of a particular case. 4.3. When obtaining information from external information systems, registers, publicly available sources, and third-party services, the Company may rely on the accuracy and currency of such information in accordance with reasonable commercial diligence and shall not be liable for any initial inaccuracies in such information arising through no fault of the Company. Upon receipt of a duly documented request from the data subject, the Company shall take reasonable measures, within the limits of its authority and technical capabilities, to correct, restrict the processing of, or delete inaccurate data.

5.1. The Company processes personal data solely for purposes that comply with the legislation of the Republic of Uzbekistan, the nature of the Company's business activities, the functionality of the Platform, the nature of the relevant legal relationship, and the legitimate interests of personal data subjects, provided that such interests do not infringe upon the rights and freedoms of the data subject. 5.2. Personal data may be processed for the purposes of identifying a data subject when contacting the Company, registering on the Portal, and using the services; creating, maintaining, and administering user accounts; concluding, performing, amending, and terminating contracts; preparing commercial proposals, presentations, and responses to requests and applications; ensuring the operation of the Website, the Portal, personal accounts, applications, APIs, integrations, and other information technology services; processing inquiries, complaints, applications, requests, and providing feedback; managing payments, issuing invoices, preparing primary accounting documents, certificates of acceptance, registers, and other documents; providing technical support, ensuring information security, preventing fraud, abuse, unauthorized access, and other violations; complying with legal requirements, including requirements relating to document retention, internal controls, protection of the rights of the Company and data subjects, interaction with public authorities, and compliance with binding orders and instructions; sending service-related, legally significant, and organizational notifications; sending news, analytics, offers, invitations, advertising, and marketing materials, subject to the data subject’s consent or another lawful basis; conducting statistical, analytical, research, marketing, and product-related studies; aggregating, modelling, and analyzing question-and-answer data, behavioral data, and users’ interaction history with the services; conducting procurement and tender procedures; testing, quality audits, and service improvement activities; preparing internal and published analytics, reports, and rankings, including on the basis of anonymized data; organizing business meetings, events, conferences, presentations, procurement and partnership procedures; recruitment, review of résumés, and communication with candidates; as well as protecting the rights and legitimate interests of the Company, data subjects, and third parties in connection with disputes, claims, judicial, administrative, and other proceedings. 5.3. The Company shall not process personal data for purposes that are incompatible with the purposes for which such data was originally collected, unless otherwise permitted by the legislation of the Republic of Uzbekistan or based on the duly obtained consent of the personal data subject.

6.1. The Company processes personal data where at least one of the following legal bases applies: the consent of the personal data subject; the necessity of processing for the conclusion, performance, amendment, or termination of a contract to which the data subject or the person represented by the data subject is a party; the necessity of processing in order to take steps at the request of the data subject prior to entering into a contract; the necessity of processing for compliance with the Company's obligations under the legislation of the Republic of Uzbekistan; the necessity of processing for the protection of the rights and legitimate interests of the data subject, the Company, or another person; the necessity of processing for the exercise of the rights and legitimate interests of the Company or a third party, or for the achievement of objectives serving the public interest, provided that such processing does not infringe upon the rights and legitimate interests of the data subject; processing for statistical, analytical, scientific, historical, and other research purposes, subject to mandatory anonymization; and any other grounds expressly provided for by the legislation of the Republic of Uzbekistan. 6.2. Consent to the processing of personal data may be given in any form that allows the fact of such consent to be verified, unless the legislation of the Republic of Uzbekistan requires a written form or the form of an electronic document. 6.3. For the processing of special categories of personal data, as well as in any other cases expressly required by law, the Company shall obtain consent in writing, including in the form of an electronic document executed in a manner permitted under the legislation of the Republic of Uzbekistan. 6.4. Biometric and genetic data, where their processing is required by law or by the nature of the relevant service, shall be processed by the Company only on the basis of an appropriate legal ground and, where required, upon obtaining the separate written consent of the data subject, including in the form of an electronic document.

available to the data subject prior to the relevant action being taken, as well as by any other means permitted by law and capable of evidencing the data subject’s expression of intent. 7.2. A data subject may withdraw his or her consent in the same form in which such consent was provided or in writing, including in the form of an electronic document, unless otherwise provided by the legislation of the Republic of Uzbekistan. 7.3. The withdrawal of consent shall not affect the lawfulness of the processing of personal data carried out prior to the receipt of such withdrawal and shall not prevent further processing where such processing is permitted or expressly required by law, is necessary for the performance of a contract, the consideration of a request, the completion of an ongoing business process, the preservation of the legal validity of actions already performed, the protection of the rights and legitimate interests of the Company, or on any other grounds provided for by the legislation of the Republic of Uzbekistan. 7.4. In the event of the withdrawal of consent, the Company may continue to retain and/or otherwise process personal data that is required to be retained by law or is necessary for the completion of obligations, accounting, tax, contractual, claims-handling, judicial, archival, employment-related, and other mandatory record-keeping requirements, as well as for the verification of legally significant facts and circumstances.

8.1. The Company adheres to the principle of data minimization and processes only such personal data as is necessary and sufficient to achieve the stated purposes of processing. 8.2. The data subject shall provide accurate, up-to-date, and relevant personal data. In the event of any change to such personal data, the data subject shall promptly notify the Company thereof where such data is relevant to contractual, registration, service-related, identification, or other legal relationships with the Company. 8.3. The Company may request confirmation of the accuracy and currency of personal data, as well as documents verifying identity, the authority of a representative, the lawfulness of the transfer of third-party personal data, and other circumstances relevant to the lawful and proper processing of personal data. 8.4. Where mandatory data is not provided, false information is knowingly submitted, authority to transfer personal data is absent, indications of abuse of rights exist, or legal requirements are otherwise violated, the Company may refuse to provide the relevant service, restrict access to certain functions, suspend the processing of personal data, reject a document, application, or request, or require the identified violation to be remedied. 8.5. The Company shall not be liable for any inability to provide services, grant access to platform functionality, register a user on the Platform, enable participation in a procurement procedure, or conclude or perform a contract where such inability results from the data subject’s failure to provide data required by law, contract, the terms of the relevant service, or the technical logic of the Platform’s operation.

9.1. Personal data shall constitute confidential information unless otherwise provided by law, resulting from its status as publicly available data, or arising from the actions of the personal data subject. 9.2. The Company may disclose personal data to, and/or engage third parties to process personal data on its behalf, to the extent necessary to achieve the purposes of processing, including hosting service providers, cloud infrastructure providers, data centers, providers of CRM and ERP systems, backup and disaster recovery systems, software vendors, providers of communication, analytics, technical support, and information security services, telecommunications operators, postal, courier, SMS, e-mail, and push notification service providers, payment service providers, accounting, auditing, legal, and consulting firms, system integrators, contractors, service providers, partners and subcontractors, affiliated persons and group companies, where applicable and where an appropriate legal basis exists, governmental authorities, courts, law enforcement agencies, and other competent authorities in cases prescribed by law, as well as counterparties where such transfer is necessary for the conclusion, performance, administration, verification, amendment, or termination of a contract with or for the benefit of the data subject. 9.3. The Company may transfer personal data internally within PARKTECH LLC among its structural divisions, departments, branches, and representative offices, as well as transfer personal data to affiliated persons, parent companies, subsidiaries, and other entities forming part of the Company's corporate group, to the extent necessary to achieve the purposes of processing, ensure uniform service standards, and perform internal organizational, technical, analytical, marketing, human resources, accounting, legal, compliance, and control functions, provided that the requirements of the legislation of the Republic of Uzbekistan are observed and an appropriate level of confidentiality and data protection is maintained. 9.4. The Company shall ensure that such third parties undertake obligations relating to the confidentiality, security, and use of personal data solely for agreed purposes and within the limits permitted by the legislation of the Republic of Uzbekistan. 9.5. Where the legislation of the Republic of Uzbekistan requires a data subject to be notified of the transfer of his or her personal data to a third party, the Company shall provide such notification in accordance with the procedure prescribed by law, subject to any statutory exceptions. 9.6. Where a recipient of personal data acts, upon receipt of such data, as an independent owner and/or operator under applicable law, any subsequent processing by such recipient shall be governed by its own policies, obligations, and legal bases, unless otherwise provided by an agreement with the Company or by mandatory provisions of applicable law.

10.1. The Company may carry out cross-border transfers of personal data and use foreign infrastructure, software, cloud solutions, communication channels, and other technological services only in the cases and subject to the conditions provided for by the legislation of the Republic of Uzbekistan. 10.2. The Company shall not store outside the Republic of Uzbekistan any categories of personal data that, under applicable law, are required to be stored within the territory of the Republic of Uzbekistan. 10.3. Personal data that is not subject to mandatory local storage requirements may be stored and/or processed outside the Republic of Uzbekistan only where the conditions and legal grounds prescribed by applicable law are satisfied, including where an adequate level of personal data protection is ensured, permissible contractual or corporate safeguards are implemented, the requirements of competent public authorities are complied with, or another lawful basis exists, including the consent of the data subject where such consent is required by law. 10.4. In connection with any cross-border transfer of personal data, the Company shall implement reasonable and necessary legal, organizational, and technical measures to ensure confidentiality, security, access restrictions, contractual oversight of the recipient, and the use of personal data solely for the stated purposes and only to the extent necessary to achieve such purposes. 10.5. Where the legislation of the Republic of Uzbekistan, an order of a competent authority, a court decision, or a change in the legal regime of the relevant foreign jurisdiction, service, or infrastructure prohibits or restricts cross-border transfers, the Company may modify its data storage architecture, discontinue the use of the relevant foreign service, migrate personal data to local infrastructure, or suspend the relevant functionality, and such actions shall not constitute a breach of the Company's obligations to the user unless otherwise expressly provided by law. 10.6. By using certain functions of the Website, the Portal, CRM systems, communication channels, application forms, integrations, and cloud-based solutions of the Company, the data subject acknowledges and agrees that certain routing, backup, logging, security monitoring, technical support, and secure data recovery operations may be carried out using foreign infrastructure, provided that the requirements of the legislation of the Republic of Uzbekistan are complied with.

11.1. The Company implements the necessary legal, organizational, and technical measures to protect personal data against unauthorized or accidental access, destruction, alteration, blocking, copying, disclosure, loss, leakage, falsification, and other unlawful actions. 11.2. Such measures may include the designation of a responsible department and/or officer for matters relating to the processing and protection of personal data; the adoption of internal policies, procedures, regulations, and access control matrices; restricting employee access to personal data on a need-to-know basis; obtaining confidentiality undertakings; implementing user identification and authentication mechanisms; maintaining access records and logs; using antivirus protection, firewalls, backup systems, encryption, and other applicable security measures; monitoring contractors and service providers with access to personal data; training employees; conducting internal audits; and taking measures to detect, contain, investigate, and remediate information security incidents. 11.3. The Company shall also ensure the registration of personal data databases in the State Register where such registration is mandatory under the legislation of the Republic of Uzbekistan.

12.1. Personal data shall be retained for no longer than is necessary to achieve the purposes for which it is processed, taking into account the terms of the data subject's consent, contractual relationships, the Company's internal procedures, and the requirements of the legislation of the Republic of Uzbekistan. 12.2. The Company may retain personal data for the duration of a contract and for a reasonable period following its termination; for the retention periods prescribed by law in relation to accounting, tax, employment, corporate, archival, claims-related, litigation, and other records; for the duration of the review and resolution of requests, disputes, claims, audits, investigations, and legal proceedings; and for the technically necessary retention period applicable to backups, logs, and security records. 12.3. Upon fulfillment of the purposes of processing, expiration of the applicable retention period, withdrawal of the data subject's consent, or the occurrence of any other grounds provided by law, the Company shall cease processing the relevant personal data and shall delete, destroy, or anonymize such data, unless otherwise required or permitted by the legislation of the Republic of Uzbekistan.

13.1. The Company may use cookies, pixels, SDKs, event logs, technical identifiers, and other similar technologies to ensure the proper operation of the Website, the Portal, and mobile services; to enable authorization and maintain user sessions; to preserve user preferences; to ensure security and prevent abuse; to collect visitor statistics and analyze the use of services; and to improve the interface, functionality, and performance of the Company's digital solutions. 13.2. Users may manage cookies through their browser or device settings, or through other tools made available on the Website, where applicable. Disabling certain cookies and similar technologies may affect the availability, functionality, and stability of certain features and services. 13.3. Technical data and cookies that have been duly anonymized and can no longer be associated with a specific data subject may be used by the Company without the restrictions applicable to personal data, unless otherwise required by law.

14.1. The Company may publish on the Website, the Portal, in presentations, advertising materials, social media platforms, and other resources, reviews, comments, case studies, lists of event participants, photographs, and other materials containing personal data only with the consent of the data subject, where such data has been made publicly available by the data subject through an interface intended for that purpose, or in other cases permitted by the legislation of the Republic of Uzbekistan. 14.2. Where a data subject independently posts information in publicly accessible sections of the Portal, forums, comments, chats, profile pages, or other public interfaces, the data subject acknowledges the risk that such information may be copied, reproduced, or further disseminated by third parties, for whose actions the Company shall not be liable unless otherwise expressly provided by law. 14.3. Upon the request of a data subject, the Company shall consider whether access to published data should be restricted, or whether such data should be removed or de-published, in the cases and in the manner provided for by the legislation of the Republic of Uzbekistan and subject to the technical capabilities of the relevant service. 14.4. By using the Platform functionality relating to procurement, tender, contractual, and other business procedures, the data subject acknowledges and agrees that other users, counterparties, and participants in such procedures may submit reviews, comments, evaluations, and ratings regarding the user's company, its business reputation, quality of performance, reliability in fulfilling obligations, good-faith conduct in business interactions, and other aspects of its business activities. The Company may display such reviews, evaluations, ratings, and aggregated indicators in public and non-public sections of the Website, the Portal, Personal Accounts, and in analytical, advertising, and informational materials to the extent necessary for the operation of the relevant functionality. 14.5. The Company is not the author of reviews, evaluations, or ratings posted by users of the Platform, does not verify or endorse their accuracy, and shall not be liable for their content except where expressly required by the legislation of the Republic of Uzbekistan. Where the Company has reasonable grounds to believe that a review, evaluation, or other user-generated content violates applicable law, the rights of third parties, or the terms of the applicable user agreement, the Company may restrict access to, hide, block, or remove such content in accordance with its internal procedures.

15.1. A personal data subject shall have the right to know whether the Company processes his or her personal data and the categories of such data; to obtain, upon request, information regarding the processing of his or her personal data; to receive information concerning the purposes, legal grounds, methods, and retention periods of processing; to receive information regarding persons to whom his or her personal data may be disclosed; to obtain information regarding any completed or proposed cross-border transfer of his or her personal data; to require the clarification, supplementation, correction, and updating of personal data; to request the temporary suspension of the processing of personal data where such data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the purposes of processing; to withdraw consent to the processing of personal data; to object to a decision based solely on automated processing where such decision affects his or her rights and legitimate interests or produces legal consequences; to seek protection of his or her rights and legitimate interests before a competent public authority or court; and to exercise any other rights granted under the legislation of the Republic of Uzbekistan. 15.2. The Company shall provide the data subject with information regarding the processing of his or her personal data in the manner and to the extent prescribed by applicable law, subject to the proper identification of the applicant and, where the request is submitted by a representative, verification of such representative's authority. 15.3. The Company may restrict the provision of information in cases permitted by law, including where the disclosure of such information would infringe upon the rights, freedoms, or legitimate interests of other persons, impede the protection of the Company's rights, or otherwise conflict with mandatory requirements of the legislation of the Republic of Uzbekistan.

16.1. In order to exercise his or her rights, a data subject may submit a request in writing to the Company's registered address, in the form of an electronic document or electronic communication sent to the Company's designated email address for receiving such requests, or through the functionality of the Website, the Portal, or a Personal Account, where such functionality is available. 16.2. A request should, where possible, include the data subject's full name, contact details for correspondence, a description of the request, information enabling the identification of the applicant and the relevant personal data, and, where necessary, documents supporting the circumstances relied upon by the applicant. 16.3. The Company may request additional information and/or documents for the purposes of verifying identity, confirming a representative's authority, clarifying the scope of the requested data, and preventing the unlawful disclosure of personal data to third parties. 16.4. Requests that do not allow the applicant to be identified, do not contain sufficient information for proper consideration, or are manifestly inconsistent with the legislation of the Republic of Uzbekistan may be denied or considered only to a limited extent, with appropriate notice being provided to the applicant where such notice is feasible.

17.1. The Company may use automated means of processing personal data, including for authorization, request routing, technical analysis, detection of suspicious activity, request filtering, assessment of service stability, information security purposes, event logging, and other lawful purposes directly related to the operation of the Platform and the protection of its legitimate interests. 17.2. The Company shall not make decisions that affect the rights and legitimate interests of a data subject or produce legal effects concerning the data subject solely on the basis of automated processing, unless otherwise permitted by the legislation of the Republic of Uzbekistan, based on the data subject's written consent, or required for the performance of a contract in circumstances permitted by law. 17.3. Where the legislation of the Republic of Uzbekistan or the nature of a particular service permits a decision to be made solely on the basis of automated processing, the Company shall, upon the request of the data subject, explain the procedure by which such decision is made, its potential legal consequences, and provide the data subject with an opportunity to object in accordance with the procedure established by the legislation of the Republic of Uzbekistan.

18.1. Unless expressly stated otherwise, the Company's services are not specifically intended for minors. 18.2. Where the legislation of the Republic of Uzbekistan requires the consent of a minor's legal representative for a particular processing activity, the Company may request confirmation of such consent and suspend the relevant processing until such confirmation has been obtained. 18.3. The Company may delete, block, or restrict the processing of a minor's personal data where there are reasonable grounds to doubt the lawfulness of its provision, the existence of the required consent of the minor's legal representative, or the compliance of such processing with the legislation of the Republic of Uzbekistan.

19.1. The Website, the Portal, and the Company's mobile and other digital services may contain links to third-party websites, platforms, applications, services, application programming interfaces (APIs), payment solutions, information systems, electronic trading platforms, government resources, integration modules, and other information resources operated by third parties. 19.2. Any access to third-party websites and use of third-party services by a personal data subject shall be undertaken at the data subject's own risk and discretion. The Company does not control the content, availability, terms of use, personal data processing practices, information security measures, or other aspects of the activities of such third parties, unless otherwise expressly provided for in an agreement with the Company or by mandatory provisions of the legislation of the Republic of Uzbekistan. 19.3. Where the functionality of the Company's services involves interaction with third-party services, including, without limitation, electronic signature services, electronic document management systems, payment instruments, government information systems, data verification services, cloud-based solutions, communication channels, analytics modules, and other integrations, the personal data subject acknowledges and agrees that such third parties may independently process personal data to the extent necessary to provide the relevant service and shall bear independent responsibility for compliance with applicable legal requirements in relation to such processing. 19.4. The Company shall not be liable for the acts, omissions, decisions, content of documents and privacy policies, or for the personal data processing and protection practices of third-party websites, services, and integrations, except where otherwise expressly provided by the legislation of the Republic of Uzbekistan or where it is established that the relevant violation resulted from the Company's fault. 19.5. A personal data subject shall independently review the terms of use, privacy policies, and other applicable documents of third-party websites and services prior to using them where access to or interaction with such resources occurs through the Website, the Portal, or the Company's services.

20.1. The Company may, at any time and on a unilateral basis, amend and/or supplement this Policy due to changes in the legislation of the Republic of Uzbekistan, changes to the structure and functionality of the Website, the Portal, and the Company's services, changes in the nature of its business activities, the technological solutions, integrations, business processes, or internal procedures used by the Company, or on any other grounds requiring the updating of this Policy. 20.2. Any revised version of this Policy shall become effective upon its publication on the Website or the Portal, or upon being otherwise communicated to personal data subjects, unless a different effective date is expressly specified in the relevant version of the Policy. 20.3. The Company shall not be required to provide individual notice of amendments to this Policy to each personal data subject unless otherwise expressly required by the legislation of the Republic of Uzbekistan or the terms of a separate agreement with the data subject. 20.4. Each personal data subject shall be responsible for reviewing the current version of this Policy. Continued use of the Website, the Portal, Personal Accounts, or the Company's services, or the continued provision of personal data following the effective date of a revised version of this Policy, shall constitute acknowledgment of such revised version and acceptance of its terms to the extent that such method of expressing consent is permitted under the legislation of the Republic of Uzbekistan and does not replace any separate consent where such consent is required by law. 20.5. If a personal data subject does not agree with the amendments made to this Policy, such person shall discontinue the use of the relevant services of the Company and, where necessary, submit a request regarding the processing of his or her personal data in accordance with this Policy and the legislation of the Republic of Uzbekistan.’

21.1. This Policy shall be governed by and construed in accordance with the legislation of the Republic of Uzbekistan. 21.2. In all matters not expressly regulated by this Policy, the Company, personal data subjects, and any other persons involved in the processing of personal data shall be governed by the legislation of the Republic of Uzbekistan, the Company's internal documents adopted within the scope of its authority, as well as the terms of the relevant contracts, agreements, and user documents, provided that such documents do not conflict with mandatory provisions of law. 21.3. If one or more provisions of this Policy are held to be invalid, unlawful, unenforceable, or no longer in force, such circumstance shall not affect the validity of the remaining provisions of this Policy, which shall remain in full force and effect to the extent consistent with the legislation of the Republic of Uzbekistan. 21.4. Any disputes and disagreements arising out of or in connection with the application, performance, interpretation, or validity of this Policy shall be resolved in accordance with the procedure established by the legislation of the Republic of Uzbekistan. 21.5. For matters relating to the processing and protection of personal data, a personal data subject may contact the Company using the following details: PARKTECH LLC Taxpayer Identification Number (TIN): 311189344 Registered Address: 224 Amir Temur Street, Shodlik MCG, Amir Temur Mahalla, Samarkand, Samarkand Region, Republic of Uzbekistan Email: info@bnect.pro Telephone: +998 78 113 66 90 21.6. Requests relating to the processing and protection of personal data are accepted during business days from 08:00 to 17:30 Uzbekistan Time (UTC+5, Tashkent). Requests received outside these hours, as well as on weekends and public holidays, shall be reviewed on the next business day.