Kazakhstan Amends Rules for Labeling and Traceability of Medicines

1. General provisions
1.1 This Personal data processing policy is compiled in accordance with the requirements of the Law of the Republic of Kazakhstan No. 94-V "On Personal Data and their Protection" dated May 21, 2013 and defines the procedure for processing personal data and measures to ensure the security of personal data of Kazakh Pharmaceutical Company "MEDSERVICE PLUS" LLP (herein – Operator).
1.2 The Operator sets the observance of the rights and freedoms of man and citizen as its most important goal and condition for the implementation of its activities in the processing of personal data, including the protection of the rights to privacy, personal and family secrets.
1.3 This Policy regarding the processing of personal data of Operator (herein – Policy) applies to all information that the Operator can receive about website visitors medservice.kz

2. Basic concepts used in the Policy
2.1 Automated processing of personal data – processing of personal data using computer technology;
2.2 Blocking of personal data – temporary termination of processing of personal data (except for cases when processing is necessary for clarification of personal data);
2.3 Website is a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address medservice.kz;
2.4 Information system of personal data is a set of personal data stored in databases and providing their processing of information technology and technical means;
2.5 Depersonalization of personal data is actions, as a result of which it is impossible to determine the belonging of personal data to a specific User or other subject of personal data without the use of additional information;
2.6 Processing of personal data is any action (operation) or set of actions (operations) with personal data performed using automation tools or without using such means including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
2.7 Operator is a state body, municipal body, legal or natural person, independently or jointly with other persons organizing and (or) carrying out the personal data processing, as well as defining the purposes of processing personal data, the composition of personal data subject to processing, actions (operations) performed with personal data;
2.8 Personal data are any information related directly or indirectly to a specific or determined User of medservice.kz website;
2.9 User is any visitor of the medservice.kz website;
2.10 Provision of personal data are actions aimed at disclosing personal data to a certain person or a certain circle of persons;
2.11 Distribution of personal data are any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or familiarization with personal data of an unlimited circle of persons, including disclosure of personal data in the media, placement in information and telecommunication networks or providing access to personal data in any other way;
2.12. Cross-border transfer of personal data is transfer of personal data to the territory of a foreign state to a foreign state authority, a foreign individual or a foreign legal entity;
2.13 Destruction of personal data is any actions as a result of which personal data are permanently destroyed with the impossibility of further restoration of the content of personal data in the personal data information system and (or) as a result of which personal data material carriers are destroyed.


3. The Operator can process the following personal data of the User
- Surname, first name;
- Email address;
- Phone number;
- The site also collects and processes depersonalized data about visitors (including cookies) using Internet statistics services.
The above-listed data, hereinafter referred to in the text of the Policy by the general concept as Personal Data.


4. Personal data processing purposes of
4.1 The purpose of processing the User's personal data is to inform the User by sending emails.
4.2 The Operator also has the right to send notices to the User about new products and services, special offers and various events. The User can always refuse to receive informational messages by sending an email to the Operator at info@medservice.kz email address marked "Refusal of notices about new products and services and special offers".
4.3 Depersonalized User data collected using Internet statistics services are used to collect information about User actions on the website, improve the quality of the website and its content.


5. Legal grounds for processing personal data
5.1 The Operator processes the User's personal data only if they are filled in and/or sent by the User independently through special forms located on medservice.kz website. By filling in the appropriate forms and/or sending the personal data to the Operator, the User agrees with this Policy.
5.2 The Operator processes depersonalized data about the User if this is allowed in the User's browser settings (the saving of cookies and the use of JavaScript technology are enabled).


6. The procedure for collecting, storing, transferring and other types of personal data processing
6.1 The safety of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.
6.2 The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized persons to access the personal data.
The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to the implementation of current legislation.
6.3 In case of inaccuracies in personal data, the User can update them independently by sending a notice to the Operator to the following email address info@medservice.kz marked "Personal data update".
6.4 The period of processing the personal data is unlimited. The User can withdraw his/her consent for the processing of personal data at any time by sending a notice to the Operator via e-mail to the Operator's info@medservice.kz email address marked "Withdrawal of consent for the processing of personal data".


7. Cross-border transfer of personal data
7.1 Before initiating the cross-border transfer of personal data, the Operator is obliged to make sure that the foreign state to whose territory the transfer of personal data is supposed to be carried out provides reliable protection of the rights of personal data subjects.
7.2 Cross-border transfer of personal data to the territory of foreign states that do not meet the above-specified requirements may be carried out only if there is a written consent of the personal data subject for the cross-border transfer of his/her personal data and/or execution of the agreement to which the personal data subject is a party.


8. Final provisions
8.1 The User can receive any clarifications on issues of interest concerning the processing of his/her personal data by contacting the Operator via info@medservice.kz e-mail.
 8.2 This document will reflect any changes to the Operator's personal data processing policy. The policy is valid indefinitely until it is replaced by a new version.