5. Principal Rights and Obligations of the Company and the User5.1. The Company has the right to:5.1.1. receive complete, accurate, and up-to-date personal data from the User;
5.1.2. continue processing personal data without the User’s consent if the User withdraws consent to personal data processing or submits a request to stop processing personal data, provided that grounds specified in ZRU-547 exist;
5.1.3. entrust the processing of Users' personal data to third parties or transfer Users' personal data to obtain services/work from third parties necessary for its business activities, such as audits, website technical support, or website enhancement or design services. The Company always seeks to minimize the amount of personal data transferred or, where possible, to avoid transferring personal data or entrusting its processing to third parties.
5.2. The Company must:5.2.1. provide the User, upon request, with information concerning the processing of and access to their personal data and the conditions of such access;
5.2.2. approve the set of personal data necessary and sufficient to achieve the purposes of processing;
5.2.3. where necessary, take measures to ensure the accuracy, sufficiency, and currency of personal data in relation to the purposes of processing by rectifying incomplete or inaccurate data and, in certain cases, deleting data;
5.2.4. retain personal data in a form that allows the User to be identified for no longer than required by the purposes of personal data processing, unless a different retention period is established by law or a contract with the User;
5.2.5. destroy personal data once the purposes of processing have been achieved or the need to achieve those purposes no longer exists, unless otherwise provided by law;
5.2.6. provide evidence that the data subject’s consent to the processing of their personal data has been obtained in cases prescribed by law;
5.2.7. respond to inquiries and requests from Users and their legal representatives within the time limits and in accordance with the requirements of ZRU-547;
5.2.8. notify the data subject in writing if personal data is transferred to a third party;
5.2.9. provide the authorized body for the protection of personal data subjects' rights, at its request, with the necessary information within the time limits and in accordance with the requirements of ZRU-547;
5.2.10. take legal, organizational, and technical measures to protect personal data against unlawful or accidental actions involving personal data;
5.2.11. stop transferring (providing, granting access to) personal data, stop processing it, and destroy it in the manner and cases prescribed by ZRU-547;
5.2.12. ensure the confidentiality of personal data by refraining from disclosing it to third parties or disseminating it without the User’s consent, unless otherwise provided by law;
5.2.13. fulfill other obligations prescribed by ZRU-547.
5.3. Users have the right to:5.3.1. receive information concerning the processing of their personal data, including whether a particular person holds such data and what data is held, except in cases prescribed by law. The Company provides information concerning the User in an accessible form. The information to be provided and the procedure for obtaining it are established by Article 22 of ZRU-547;
5.3.2. receive information from the Company on the conditions for granting access to their personal data by sending a notice to the Company’s email address,
info@nordwire.uz, marked "Information on the conditions of access to personal data";
5.3.3. require the Company to rectify, block, or destroy their personal data or temporarily suspend its processing if the data is incomplete, outdated, inaccurate, unlawfully obtained, or not reasonably necessary for the stated purpose of processing, and take measures prescribed by law to protect their rights;
5.3.4. give and withdraw consent to personal data processing, except in cases prescribed by law, by sending a notice to the Company’s email address,
info@nordwire.uz, marked "Withdrawal of consent to personal data processing";
5.3.5. contact the authorized state body or a court regarding the protection of their rights and legitimate interests in relation to their personal data;
5.3.6. challenge the Company’s unlawful acts or omissions in processing their personal data before the authorized body for the protection of personal data subjects' rights or in court;
5.3.7. exercise other rights provided by the laws of the Republic of Uzbekistan.
5.4. The User must:5.4.1. provide the Company with accurate information about themselves. A User who provides the Company with inaccurate information about themselves or information about another personal data subject without that subject’s consent is liable under the laws of the Republic of Uzbekistan;
5.4.2. notify the Company of any rectification (updating, modification) of their personal data. The User may update the data themselves by sending a notice to the Company’s email address,
info@nordwire.uz, marked "Updating personal data."