Policy on the Collection, Processing and Protection of Personal Data

1. Personal Data Operator

The personal data operator is:

DOSFARM Limited Liability Partnership
BIN: 010440004078
Address: 3 Chaplygina St., Zhetysu District, Almaty, 050034, Republic of Kazakhstan
Email: dosfarm@dosfarm.kz
Phone: +7 (727) 253 03 88

For matters related to personal data, the user may contact the Operator by email at dosfarm@dosfarm.kz.

2. What Data May Be Collected

The Operator may collect and process the following personal data and technical information:

1. data that the user independently provides when completing the feedback form on the website:
   
   • name;
   • phone number;
   • email address;
   • content of the message;
   • other information voluntarily provided by the user in the request;
2. technical data that may be automatically transmitted when using the website:
   
   • IP address;
   • information about the browser and device;
   • date and time of the website visit;
   • addresses of visited pages;
   • source of referral to the website;
   • cookies and similar identifiers;
   • information about the user’s actions on the website collected by web analytics systems.

The Operator does not ask users to submit special categories of information through the general feedback form, including medical documents, diagnoses, examination results, treatment information or other confidential medical information.

If the user, on their own initiative, includes information in their request related to health, the quality of medicinal products, adverse reactions, complaints or pharmacovigilance, such information may be processed by the Operator solely for the purpose of reviewing the request, contacting the user and complying with the requirements of the legislation of the Republic of Kazakhstan.

3. Purposes of Collecting and Processing Personal Data

Users’ personal data may be processed for the following purposes:

1. receiving and processing requests submitted through the feedback form;
2. providing a response to the user;
3. contacting the user regarding products, cooperation, sales, the quality of medicinal products, complaints, proposals and pharmacovigilance;
4. ensuring the proper functioning of the website;
5. protecting the website from spam, automated submissions, malicious activity and other abuse;
6. analyzing website traffic and improving website performance;
7. complying with the requirements of the legislation of the Republic of Kazakhstan;
8. protecting the rights and legitimate interests of the Operator.

The Operator does not use the personal data of website users to make decisions that produce legal consequences for the user solely on the basis of automated processing.

4. Legal Basis for Processing Personal Data

The collection and processing of personal data are carried out on the basis of the user’s consent expressed when completing and submitting the feedback form, as well as in other cases provided for by the legislation of the Republic of Kazakhstan.

By submitting the feedback form and ticking the consent checkbox, the user confirms that they have read this Policy and consent to the collection and processing of their personal data for the purposes specified in this Policy.

The user has the right not to provide personal data; however, in such case the Operator may be unable to process the request and provide a response.

5. Use of Cookies and Third-Party Services

The website may use cookies and similar technologies. Cookies help ensure the operation of the website, analyze traffic, understand user behavior on the website and protect forms from automated submissions.

The following third-party services may be used on the website:

1. Yandex Metrica — to analyze website traffic, referral sources and user behavior on the website.
2. Google Analytics — to analyze website traffic, website usage statistics and the performance of its pages.
3. Google reCAPTCHA — to protect website forms from spam, automated submissions and abuse.

When these services are used, technical data may be transferred to third parties, including IP address, information about the browser, device, actions on the website, cookies and other technical identifiers.

The user may restrict or disable the use of cookies in their browser settings. However, certain website functions may not operate correctly.

6. Transfer of Personal Data to Third Parties

The Operator does not sell users’ personal data and does not transfer it to third parties for commercial purposes.

Personal data and technical data may be transferred to third parties in the following cases:

1. to technical contractors and service providers that ensure the operation of the website, hosting, email, feedback forms, analytics and spam protection;
2. to web analytics and website protection services, including Yandex Metrica, Google Analytics and Google reCAPTCHA;
3. to government authorities, if such transfer is required in accordance with the legislation of the Republic of Kazakhstan;
4. to other persons, where the user’s consent or another lawful basis exists.

Persons who receive access to personal data are required to ensure its confidentiality and protection in accordance with applicable legislation and the terms of agreements with the Operator.

7. Cross-Border Data Transfer

Due to the use of third-party services, including Google Analytics, Google reCAPTCHA and Yandex Metrica, certain technical data of users may be processed using information systems and servers located outside the Republic of Kazakhstan.

Such transfer is carried out for the purposes of analytics, ensuring website operability, protecting forms from spam and preventing abuse.

By submitting the feedback form and/or continuing to use the website with cookies enabled, the user confirms that they have been informed of the possibility of such data transfer.

8. Personal Data Retention Period

Users’ personal data are stored no longer than is necessary to achieve the purposes of their collection and processing, unless another period is established by the legislation of the Republic of Kazakhstan, an agreement or the need to protect the rights and legitimate interests of the Operator.

Data received through the feedback form may be stored for the period necessary to review the request, prepare a response, conduct further communication with the user, maintain internal records of requests and comply with legal requirements.

After the purposes of processing have been achieved, personal data shall be deleted, anonymized or otherwise discontinued from processing in accordance with the procedure provided for by the legislation of the Republic of Kazakhstan.

9. Protection of Personal Data

The Operator takes necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution and other unlawful actions.

Access to personal data is granted only to those persons who need it to perform their job duties, process requests, provide technical support for the website or comply with legal requirements.

10. User Rights

The user has the right to:

1. receive information on whether the Operator holds their personal data;
2. receive information about the purposes, methods and periods of personal data processing;
3. request the modification, supplementation, blocking or destruction of their personal data if such data are incomplete, outdated, inaccurate, unlawfully obtained or are not necessary for the stated purposes of processing;
4. withdraw consent to the collection and processing of personal data, unless otherwise provided for by the legislation of the Republic of Kazakhstan;
5. submit requests regarding the processing and protection of personal data;
6. exercise other rights provided for by the legislation of the Republic of Kazakhstan.

To exercise their rights, the user may submit a request to dosfarm@dosfarm.kz.

11. Withdrawal of Consent

The user has the right to withdraw consent to the collection and processing of personal data by sending the relevant request to the Operator.

Withdrawal of consent does not affect the lawfulness of the processing of personal data carried out before such withdrawal was received.

The Operator has the right to continue processing personal data without the user’s consent in cases provided for by the legislation of the Republic of Kazakhstan, including where such processing is necessary to comply with legal requirements, review a previously submitted request, or protect the rights and legitimate interests of the Operator.

12. Changes to the Policy

The Operator has the right to amend this Policy. A new version of the Policy enters into force from the moment it is published on the website, unless otherwise specified in the new version.

Users are advised to periodically review this Policy to obtain up-to-date information about the procedure for processing and protecting personal data.

13. Contact Information

For matters related to this Policy, the processing and protection of personal data, the user may contact the Operator:

DOSFARM LLP
3 Chaplygina St., Zhetysu District, Almaty, 050034, Republic of Kazakhstan
Email: dosfarm@dosfarm.kz
Phone: +7 (727) 253 03 88