1. DEFINITION OF TERMS
1.1. Personal data base – a named set of organized personal data in electronic form and/or in the form of personal data files. In the context of this provision, the Company is the owner of the “Users” personal data base.
1.2. Company or We – Medical Information System “UAPOTHECARY.COM“.
1.3. Electronic medical information system (MIS) is an information and telecommunication system, which, in particular, ensures the formation and processing of orders of buyers (Users) for goods. MIS, in particular, provides the User with the opportunity to receive remote (via the Internet) access to information about the Product, remotely (via the Internet) to order the Product and pay for it.
1.4. Provisions – this Privacy Policy.
1.5. The User or You is a legal or natural person registered on the Site or a person who has visited the Site at least once, including without registration. In the process of using the Site, the user acquires the status of a subject of personal data. By default, the User is a natural person, unless otherwise specified. A legal entity can place an order for Products through the Site by selecting the option: Payment from a legal entity – non-cash settlement.
1.7. Products – any products (goods), works or services that are manufactured, performed or offered for the needs of the User using the Site as MIS.
1.8. Site – the website https://uapothecary.com/, the administrator of which is the Company, including its mobile versions and applications.
1.9. Consent is any voluntary, specific, informed and unequivocal manifestation of the User’s will, made by making a statement or showing clear positive actions to confirm consent (permission) to the Company’s processing of his personal data. The consent of the User (the subject of personal data) is given by putting a mark on the electronic page of the document or in the electronic file processed in the information system based on documented software and technical solutions.
1.10. A cookie is a piece of data in the form of one or more files, generated by the Site, sent to the web browser and stored on the User’s device. In the context of this Regulation, Cookies should also be understood as any similar technologies, such as pixel tags, web beacons and empty GIF files (added on the Site).
1.11. Capitalized terms not defined in these Terms shall have their meanings.
2. GENERAL PROVISIONS
2.1. This Regulation defines how the Company collects, registers, accumulates, stores, adapts, changes, updates, uses, distributes, anonymizes, transfers and destroys your personal data on the Site.
2.2. This Regulation is an integral part of the Site Terms of Use.
2.3. This Regulation applies to the Site with its mobile versions, applications and other programs / software. The Site may contain links to other websites (exclusively for informational purposes). If you link to other websites, the Regulations will not apply to such websites.
2.4. The purpose of personal data processing is:
• execution of contractual relations;
• providing or offering goods or services to the User by the Company;
• processing and fulfillment of the User’s orders;
• creation and implementation of bonus programs;
• the possibility of contact with the User through (I) sending the User by the Company or Partners service, legal, informational, advertising or other e-mail letters; (II) making calls (including automatically dialed and/or pre-recorded) from the Company to the User’s phone number; (III) sending SMS, Viber messages or other text messages by the Company or Partners to the User’s phone number;
• improvement / simplification of work with the site;
• ensuring the security of the Site.
2.5. Personal data is stored for as long as is necessary for the purposes of personal data processing, unless otherwise provided by applicable law.
2.6. Processing of personal data is carried out with your consent. You consent to the processing of your personal data when registering or using the Site. By giving Consent to the processing of personal data, you confirm that you are fully and completely familiar with and agree to the terms of the Regulations. By giving Consent to the processing of your personal data, you also confirm that you fully understand the purpose of the Site as an MIS and the purpose of processing your personal data.
2.7. The Company reserves the right to change the Regulations at any time, to update it by publishing changes on the Site. If you continue to use the Site after making changes, you automatically assume a legal obligation to comply with the updated terms of the Regulations. The Company shall not be liable for any damages or losses suffered by you or third parties as a result of misunderstanding or misunderstanding of the terms of this Regulation.
2.8. The provision is mandatory for employees of the Company and Partners who directly process and/or have access to personal data in connection with the performance of their official duties and/or contractual obligations.
3. COLLECTION AND PROCESSING OF PERSONAL DATA
3.1. You are given the opportunity to register on the Site using social networks, such as: Facebook, Google+, or the available registration option on the Site, in which case you must enter the following data: name, surname, e-mail address, mobile phone, come up with a password. You are also given the opportunity to place an order without registration by entering the following data: name, surname, e-mail address, mobile phone.
3.2. When leaving feedback, the User fills in the following data: name, order number (optional), phone number (optional), email address, feedback. When leaving feedback, the User fills in the following data: name, email address, message addressed to the relevant department of the Company. For a return call, the User provides a mobile phone number. Also, the User can, at his discretion, specify some personal data when communicating with a consultant in the messenger.
3.3. When changing the functionality of the site, we may ask you to provide other data necessary for authorization.
3.4. The Company does not collect information about racial or ethnic origin, political, religious or ideological beliefs, membership in political parties and trade unions, about criminal convictions, as well as data related to health, sexual life, biometric or genetic data.
3.5. The site is not intended for users under the age of 14.
3.6. The Company may from time to time monitor or verify the feedback / messages that are distributed on the Site, however, the Company does not assume any obligation and is not responsible (I) for the content of any message / feedback; (II) any error, defamation, omission, falsification, advertising material, vulgarity, slander, disclosure of private / confidential / commercial information or (III) for inaccuracies, inaccurate or out-of-date information (for example, in relation to informational materials distributed Partners or in their interests with the help of the Site as MIS) (IV) for violation of the legislation of Ukraine, committed in the process of processing and creating databases of personal data, the owners of which are third parties / Partners.
3.7. Users are personally responsible for any information they post on the Site, communicate to other Users, as well as for any interaction with other Users, such interaction is at their own risk.
3.8. To make visiting the Site more convenient, track visits to the Site and improve the service, the Company collects cookies.
3.9. Processing of personal data is carried out by the Company in accordance with the purpose of such processing.
3.10. Processing of personal data is carried out in full or in part in electronic form using means of the information (automated) system. Personal data is processed in the Company’s data centers (servers).
3.11. All Personal Data Bases owned by the Company are located in data centers or at the Company’s address.
Consent to the processing of personal data
On the basis of my own voluntary expression of will, I give “UAPOTHECARY.COM“, (hereinafter – the Company) my unequivocal consent to the processing of my personal data in accordance with the following conditions:
1. Composition and scope of my personal data that can be processed: any of my personal data necessary for the Company to achieve the purpose of their processing indicated below, including, but not limited to, data about my name, surname, e-mail address, number mobile phone, user account passwords.
2. Purpose of processing my personal data:
1. execution of contractual relations;
2. providing or offering goods or services to the User by the Company;
3. processing and fulfillment of the User’s orders;
4. creation and implementation of bonus programs;
5. the possibility of contact with the User through (I) sending legal, informational, advertising or other letters to the User by e-mail; (II) making calls (including automatically dialed and/or pre-recorded) from the Company, including third parties – independent service providers, delivery services to the User’s phone number; (III) sending SMS, Viber messages or other text messages by the Company, including third parties – independent service providers, delivery services to the User’s phone number;
6. improvement / simplification of work with the site;
7. ensuring the security of the Site.
3. The scope of processing of my personal data may include, inter alia, collection, registration, accumulation, storage, adaptation, change, renewal, use, transfer, depersonalization and destruction of my personal data. At the same time, the Company is granted permission to transfer my personal data and / or grant the right to partially or fully process my personal data to any managers of personal data and third parties (including any Partners of the Company, independent service providers, delivery services, affiliates of the Company) within the limits of the above-mentioned purpose of processing and subject to compliance with the requirements of the law on the protection of personal data without notifying me of such a transfer.
4. The form of processing of my personal data includes, among other things, processing using information (automated) systems.
5. The term of processing my personal data is unlimited, but no longer than is necessary for the purpose of processing provided for in this consent.
6. Any objections to the processing of my personal data in accordance with this consent, other than those mentioned above, can be sent to the email address: uapothecary.pharmacy@gmail.com.
I hereby also confirm that I have been duly informed about the owner of my personal data, the composition and content of the collected personal data, my rights as a subject of personal data defined by the Law of Ukraine “On the Protection of Personal Data”, the purpose of data collection regarding my persons and persons to whom my personal data may be transferred.
4. COLLECTION AND USE OF COOKIE FILES
4.1. The company collects the following categories of cookies:
• Strictly necessary cookies (strictly necessary Cookies), which are mandatory for the correct operation of the Site. These cookie files include, for example, files that allow you to view protected pages of the Site, use the shopping cart. Due to their importance for the functioning of the Site, you cannot refuse such cookies.
• Operational cookies (performance cookies), which collect information about the User’s use of the Site, for example, which pages you visit most often, and whether you encounter any errors. These files do not identify you. All collected information is aggregated and, as a result, anonymous, and is used solely to improve the Site. If you limit the use of operational cookies, we will not be able to use information based on the results of your use of our Site in order to improve your experience of using the Site in the future.
• Functionality cookies (functionality cookies). They are used to recognize and remember the settings you have chosen during previous visits to the site. As a result, the Site will automatically take into account your personal preferences during further use. For example, the Site will be able to remember the size of text, fonts, name / login, choice of city or settlement. This information may be anonymized. Often, such cookies are placed with the consent of the Company by third parties, and the data collected by such files may be transferred to third parties for the above purpose. If you limit the use of functional cookies, we will not be able to take into account your preferences when you visit our website.
• Targeting Cookie files (targeting cookies), which are used to display advertisements on the Site that are more relevant to your interests. Also, these files allow limiting the number of times the User sees advertisements, and the Company can analyze the effectiveness of marketing activities. Yes, the target cookie files remember data about the User’s visit to the Site, the pages the User visited and the links the User followed. This information may be anonymized. Often, such cookies are placed with the consent of the Company by third parties, and the data collected by such files may be transferred to third parties for the above purpose. If you restrict the use of targeted cookies, we will not be able to provide you with advertising that will match your interests.
• Cookie analytical files (analytics cookies). They allow you to recognize and count the total number of visitors to the Site, as well as analyze their movement through the Site. This helps the Company to improve the Site, for example, to help Users easily find the information they are looking for. This information is not personal.
• The company reserves the right to collect other categories of cookies.
4.2. The company uses the following cookie files on the Site, including third-party resources:
• _fbp
• _ga
• _gid
• _st
• jv_enter_ts_S5yEASAf1h
• jv_pages_count_S5yEASAf1h
• jv_utm_S5yEASAf1h
• jv_visits_count_S5yEASAf1h
• PHPSESSID
• site_version
• wucmf_customorder_used
• wucmf_filter_new_whocan
• wucmf_order_phones
• wucmf_region
• wucmf_telemedicine_new
• wucmf_your_pharmacy
• wucmf_your_pharmacy_new
The company reserves the right to collect and use other cookie files not specified in this list.
4.3. Most of the cookies collected by the Company are session cookies. That is, such files have a temporary nature, which counts from the moment the browser window is opened to the moment it is closed. After the browser session ends, they are deleted from your electronic device.
4.4. In addition, our cookie files belong to the so-called protective cookies (secure cookies), which allow you to protect the contents of such files during a browser session.
4.5. For prompt delivery, better display and detailed analysis of content on the Site, the Company uses services owned by other third-party companies, such as Facebook, Google and others. The companies given as an example may use cookies on your device while working on the Site. It should be noted that the Site cannot affect the operation of cookies used by these services. All the necessary information about their use can be found in the policy for the use of relevant analytics, available at the following addresses:
• Facebook data usage policy – https://www.facebook.com/privacy/explanation;
4.6. When using the Site, the codes of other Internet resources and third parties may be present on its pages, as a result of which such Internet resources and third parties can receive and process information that you have visited the site, as well as other information transmitted Your browser. Such Internet resources can be: banner display systems; social network plugins (for example, Facebook, Google+).
4.7. Part of the data from cookies collected by the Company may be provided to third parties who have the right to receive such data in accordance with contractual or other legal grounds.
5. DISABLE COOKIE FILES
5.1. By using our Site, you automatically agree to the use of cookies and the terms of this Regulation.
5.2. You can refuse the use of cookies (this option is available in the browser settings). However, disabling the function of sending cookies may limit the possibilities of using the Site.
5.3. If, for any reason, you do not want other Internet resources whose codes are present on the Site (for example, Facebook, Google+) to access your data, you can log out of your account or profile, clear the files Cookie (through your browser).
6. PROTECTION OF PERSONAL DATA
6.1. The company uses system and software and communication tools that prevent loss, theft, unauthorized destruction, distortion, forgery, copying of information and meet the requirements of international and national standards.
6.2. The work related to the protection of personal data during their processing is organized by the responsible person in the Company in accordance with the legislation. The person responsible for processing personal data is the director of the Company.
6.3. Employees of the Company, who directly process and / or have access to personal data in connection with the performance of their official (labor) duties or contractual obligations, are obliged to comply with this Regulation and other internal documents in the field of personal data protection .
6.4. Employees of the Company or Partners who have access to personal data, including those who carry out their processing, are obliged not to allow the disclosure in any way of personal data entrusted to them or which became known in connection with the performance of professional , official or labor duties.
6.5. The company constantly monitors the measures taken to ensure the security of personal data. However, the Company cannot guarantee absolute security against any threats arising outside of the Company’s control. On the Internet, electronic messages can be distorted, not always promptly delivered (or not delivered at all). In addition, there is a possibility of infection of electronic information with viruses that exist on the Internet. By using the Site, you agree to assume the risks associated with downloading files and using information.
7. TERMS OF TRANSFER OF PERSONAL DATA TO THIRD PARTIES
7.1. The company transfers your personal data (provides access to them) to third parties in accordance with the purposes of their processing. By consenting to the processing of personal data, you simultaneously consent to such transfer of your personal data.
7.2. Below we indicate the cases in which your personal data is transferred, however, the Company reserves the right to transfer them in other cases in accordance with the purposes of processing.
7.3. The Company transfers personal data to Partners related to the Company by contractual relations and to fulfill the User’s orders to other third parties, including independent service providers, delivery services. Such transfer of personal data is necessary and carried out for the purposes of their processing specified in this Regulation, as well as for the implementation of the main functions of the Site as an MIS and is carried out without any additional notification.
7.4. The company may transfer personal data to affiliates of the company without any additional notice.
7.5. Personal data received from you may also be transferred to a third party, without additional notice of such transfer, to the extent permitted by the current legislation of Ukraine, in the event that the Site or its part is alienated, will be transferred to a third party in any way. In this case, from the moment of such alienation / transfer / provision of access, the rights and obligations specified in this Regulation are transferred to the successors on the basis of the relevant agreement.
7.6. Your personal data may be transferred to a third party without additional notification of such transfer in accordance with the requirements of the current legislation of Ukraine, a court decision or an act of a subject of authority. Requirements for the disclosure of personal data may be challenged if the Company believes that there are legal grounds for this, but the Company does not undertake such an obligation.
7.7. We may engage service providers to process your personal data for the purposes described in this Policy. These service providers process data only on our behalf, in accordance with our instructions and under our control in accordance with this Regulation.
7.8. Access to personal data is not granted to a third party if the specified person refuses to undertake obligations to ensure the fulfillment of the requirements of the legislation on the protection of personal data or is unable to ensure them. However, the Company cannot bear any responsibility for the actions of employees of Partners, delivery services, affiliated persons, other third parties who directly process and / or have access to personal data in connection with the performance of their official (labor) or contractual responsibilities Such third parties remain responsible for the actions of their employees and bear all related risks themselves.
7.9. The Company is not responsible for the processing and disclosure of personal data and any other information to third parties not owned or controlled by the Company, natural persons who are not employees of the Company.
8. YOUR RIGHTS AS A PERSONAL DATA SUBJECT
8.1. The user as a subject of personal data has the right to:
• to know about the sources of collection, the location of your personal data, the purpose of their processing, the location or place of residence (residence) of the owner or manager of personal data or to give an appropriate mandate to obtain this information to persons authorized by him, except for cases established by law;
• receive information about the terms of providing access to personal data, in particular information about third parties to whom personal data is transferred;
• to access your personal data;
• receive, no later than thirty calendar days from the date of receipt of the request, except in cases provided by law, an answer about whether his personal data is being processed, as well as receive the content of such personal data;
• present a reasoned demand to the owner of personal data with an objection to the processing of his personal data;
• make a reasoned demand for the change or destruction of your personal data by any owner and administrator of personal data, if these data are processed illegally or are unreliable;
• to protect your personal data from illegal processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision of data, as well as protection from providing information that is unreliable or disgraces the honor, dignity and business reputation of a physical person individuals;
• file complaints about the processing of your personal data to the Commissioner or to the court;
• apply legal remedies in case of violation of the legislation on the protection of personal data;
• enter a disclaimer on the limitation of the right to process one’s personal data when giving consent;
• withdraw consent to the processing of personal data;
• know the mechanism of automatic processing of personal data;
• to protect against an automated decision that has legal consequences for him.
8.2. You may update or correct your registration information at any time through the account management feature available on the Site. You can also make this request to the Company by email or to the Company’s address (listed below). In the letter, you must specify exactly what information needs to be corrected or updated, and the Company will provide such an update or correction.
8.3. If you wish to have your data deleted, you can delete your user account, withdraw your Consent or object to the processing of your personal data. In order to withdraw your Consent or object to the processing of your personal data, you need to contact the Company with a letter to the Company’s e-mail address or address (listed below) and the Company will promptly delete the collected personal data.
8.4. The user can delete his account using the mobile application. By deleting the account, the User also withdraws his consent to the processing of the User’s Personal Data by the Company.
8.5. Account deletion is irreversible. Once deleted, account data is deleted and cannot be recovered. The Company also stops processing and deletes the User’s Personal Data.
8.6. When deleting the account, the following data about the User will be deleted:
• full name;
• Gender;
• Date of birth;
• Address;
• E-mail;
• Cellphone;
• Data about social networks (if the account was linked to social networks);
• Order information;
• Information in the favorites list.
8.7. If the User has linked his account to loyalty cards, the information about the account linked to such cards will also be deleted.
8.8. Account deletion is possible if the User has no unfulfilled orders at the time of deletion. Otherwise, before deleting the account, the User must wait for the order to be fulfilled or cancel the order.
8.9. In some cases, the Company is required to retain data to comply with legal obligations established by law. In this case, We guarantee that Your data will be used only to comply with legal obligations, and not for other purposes.
9. PROCEDURE FOR WORKING WITH REQUESTS
9.1. You, as a subject of personal data, have the right to receive any information about yourself from any subject of relations related to personal data, without specifying the purpose of the request, except for cases established by law.
9.2. The access of the subject of personal data to personal data is free of charge.
9.3. The subject of personal data submits a request for access to personal data (hereinafter referred to as a request) to the Company.
9.4. The request states:
• surname, first name and patronymic, place of residence (location) and details of the document certifying the identity of the subject of personal data;
• other information allowing identification of the subject of personal data;
• information about the Personal Data Base for which the request is submitted, information about the owner or manager of this database;
• list of requested personal data.
9.5. The term of examining the request for its satisfaction cannot exceed ten working days from the date of its receipt.
9.6. During this period, the Company informs the subject of personal data whether the request will be satisfied or the relevant personal data cannot be provided, indicating the reason in the relevant regulatory act.
9.7. The request is satisfied within thirty calendar days from the date of its receipt, unless otherwise provided by law.
10. CONTACT INFORMATION
10.1. If you have any questions or complaints, recommendations or comments regarding the protection of personal data, this Regulation, you can contact the Company by e-mail or letter.