General provisions and scope of application.

 

1.1. This Regulation on the processing and protection of personal data (hereinafter referred to as the “Regulation”) is developed in accordance with the current legislation of Ukraine, including the Law of Ukraine “On Personal Data Protection” dated June 1, 2010, No. 2297-VI, and establishes the procedure for obtaining, collecting, accumulating, storing, processing, using, ensuring the protection, and disclosing personal data (hereinafter referred to as “Data” and/or “Personal Data”) through the website: https://pharmely.com/ (hereinafter referred to as the “Website”).
1.2. By registering on the Site https://pharmely.com/ and attempting to place an order without prior registration, the User (Buyer) grants permission and unequivocal consent to the processing of their personal data under the terms and conditions outlined below, and also confirms their acquaintance with this Regulation, its acceptance, and agreement with its content.
1.3. In this Regulation, the User (Buyer, consumer) refers to any individual and/or legal entity who has access to the Online Store and uses its functionality and services.
1.4. The owner of Users’ personal data is FOP Melnychuk.
1.5. In this Regulation, all terms are used in the meaning defined in the Law of Ukraine “On Personal Data Protection” dated June 1, 2010, No. 2297-VI.
1.6. The Site may contain links to other websites (for informational purposes only). When following a link to other websites, this Regulation will not apply to those sites. Therefore, it is recommended to familiarize yourself with the privacy and personal data policies of each website before transmitting personal data by which you can be identified.
1.7. This Regulation is mandatory for application by the responsible person and employees of FOP Melnychuk, who directly process and/or have access to personal data in connection with the performance of their official duties.

Composition and content of personal data.

2.1. Data refers to any information that directly or indirectly relates to a specific User. This may include: first name, last name, patronymic (if applicable), phone number, email address, date of birth, gender, hobbies, address of residence/stay/delivery, information about skin condition, information about the User’s actions while using the Online Store, IP address, data about devices used by the User (device type, browser type, device operating system), message history (information contained in correspondence between the User and the Online Store administration, history of reviews or comments, other information used for communication, and provided by the User at their discretion in the registration form and/or when filling out their profile in the Online Store, when participating in surveys (by filling out a questionnaire or in another way), or information obtained during oral communication between the User and the Site administration, information provided when making a payment in the Online Store (including when purchasing goods and/or services offered in the Online Store on credit/installment). In particular: information regarding the User’s passport details, identification code, and others). This list of personal data is not fixed and mandatory for all Users, but depends on the needs and desires of the User themselves and on the operations they perform in the Online Store. Data also includes other information obtained by the online store on a legal basis from third parties and/or accessible from the User’s profiles on social networks in the case of registration in the online store using social network authentication services. In such a case, the User consents to the processing of information available from the respective accounts (profiles) in social networks.
2.2. Users are responsible for all information posted by them in publicly accessible accounts. The user must be aware of all the risks associated with disclosing their address or information about their exact location.

Purpose, scope, and duration of personal data processing.

3.1. The purpose of processing personal data is:
– ensuring the implementation of civil law relations, economic, tax relations, and the performance of the functions, powers, and duties assigned to the Company in accordance with the current legislation of Ukraine; – identifying the client as a User of the Online Store, for communication with the User, including for providing services, processing payments, sending, conducting settlement operations, providing reporting, maintaining accounting and management records, creating and implementing bonus programs, loyalty programs, sending mailings by post, email, phone number, including for sending commercial offers, notifications about promotions and news of the Online Store, with the aim of improving the quality of goods/services, forming ratings of goods and offers of the Online Store, analyzing User activity, performing searching by keywords, managing traffic in the online store, analyzing and forecasting User preferences and interests to form the most relevant and beneficial personal offers or promotional offers; conducting research and analytical activities, sending informational and marketing newsletters (news, company promotions, information about promotions, promo codes and discounts, personal recommendations, personal discounts and offers), which contain information about goods and/or services, advertising and commercial offers regarding such goods and/or services, etc.;
– for the purpose of sending newsletters, commercial offers, promotional messages, loyalty programs, bonus programs, and/or for the purpose of sending messages regarding the functioning of the online store by mail, email, or phone number. The user can unsubscribe from receiving informational and marketing newsletters at any time through the appropriate settings on the Website.
– for the purpose of fulfilling other obligations imposed by law on the Data Controller, to protect the legitimate interests of the Data Controller or a third party to whom the personal data is transferred.
3.2. The Controller does not process data related to racial or ethnic origin, political opinions, religious or other beliefs, membership in public organizations, or any other information that can be used to identify individuals.
3.3 The processing of personal data is limited to the collection of the minimum amount of mandatory information necessary solely for fulfilling the User’s request. In any case, when non-mandatory information is requested, the User is informed about it at the moment of collecting such information. The optional information is provided by the User voluntarily and at their own discretion. The Company uses this information to improve the Website, its services, and to offer the User proposals based on their preferences and the optional information provided by the User.
3.4. The terms of processing and storage of Data are determined based on the purposes of Data processing, as well as the conditions specified in the contracts concluded with Users in accordance with the requirements of the current legislation of Ukraine. Personal data is processed and stored for as long as necessary to achieve the purposes for which it was collected, including to fulfill any legal, accounting, or reporting requirements, or until the data is deleted by the User or at the User’s request.
3.5. Users can change/delete personal information at any time, unsubscribe from message distribution, or withdraw consent for Data processing. This can be done by sending a message to the email address: info@starlit-group.com with the subject line “Personal Data”. Account deletion at the User’s initiative occurs in accordance with the procedure specified in the Terms of Service.
3.6. In the event of inactivity in the User’s account for a period exceeding 1 (one) year, the Owner reserves the right to delete the User’s account, including all personal data stored in the account, which means that you will no longer be able to access and use it.

 

Location of personal data.

4.1. The personal data of Users of the online store are processed and protected on the Owner’s servers.
Conditions for disclosing personal data to third parties
5.1. FOP Melnychuk may exchange Data with affiliated persons of FOP Melnychuk (companies operating on the basis of joint ownership), who may process and use the Data for the purpose defined by this Regulation.
5.2. Disclosure of Data occurs when the User orders goods/services in the online store to the sellers of such goods/services to the extent necessary for the identification of the User, execution, and processing of the User’s order (including for the proper execution of payments for goods/services, ensuring the User receives financial services, etc.).
5.3. FOP Melnychuk may engage third-party suppliers of goods/services to fulfill the order, in which case such third-party suppliers of goods/services do not have the authority to use the personal data obtained through the Website for any purpose other than fulfilling the Order.
5.4. FOP Melnychuk may transfer certain anonymized information, as well as grant permission for the collection of such depersonalized information directly on the website using appropriate technologies (data that do not allow the identification of Users individually) to third-party service providers, trusted partners, or authorized researchers for the purposes of conducting marketing research, improving the effectiveness of advertising offers and campaigns (by offering more relevant proposals for the online store), analytical activities, better understanding which advertisements, goods, and/or services may interest Users, and improving the overall quality and effectiveness of goods/services on the Website.
5.5. FOP Melnychuk may also exchange Data with suppliers of goods/services during the conduct of contests, promotions, and campaigns to ensure their proper execution. In such cases, the Data is used and may be transferred to third parties for the purposes of conducting these contests, promotions, and campaigns, and determining the winners. In the event of a win/victory, if the contests, promotions, and campaigns are conducted by suppliers of goods/services, these suppliers may independently contact Users regarding the conduct of contests, promotions, and campaigns, determining the winners, awarding the prizes, etc.
5.6. FOP Melnychuk processes Data on a lawful and fair basis: Data is not disclosed to third parties and is not distributed without the User’s consent, except in cases provided for by the current legislation of Ukraine and only in the interests of national security, economic welfare, and human rights, in particular, but not limited to: – justified requests from state authorities that have the right to demand and receive such Data; – for the purposes of combating fraud and abuse on the Site.
5.7. In cases of transfer of personal data as provided in section 5 of this Regulation, informing the User about the transfer of their personal data remains at the discretion of the Company.

 

 

Protection of personal data.

6.1. The data controller is equipped with system and software-technical means and communication tools that prevent losses, thefts, unauthorized destruction, distortion, forgery, and copying of information, and comply with international and national standards.
6.2. Employees/authorized persons who directly process and/or have access to personal data in connection with the performance of their official (labor) duties are obliged to comply with the requirements of Ukrainian legislation in the field of personal data protection and internal documents regarding the processing and protection of personal data.
6.3. Employees/authorized persons who have access to personal data, including processing it, are obliged not to disclose in any way the personal data entrusted to them or that became known in connection with the performance of their professional, official, or labor duties. This obligation remains in effect after they cease activities related to personal data, except in cases established by law.
6.4. Personal data must not be stored longer than necessary for the purpose for which such data is stored, but in any case, not longer than the storage period defined by this Regulation with the User’s consent.
6.5. All employees of the personal data controller are required to adhere to the confidentiality requirements regarding personal data and information on securities accounts and securities circulation.
6.6. Notification of the deferral is communicated to the third party who submitted the request in writing, along with an explanation of the procedure for appealing such a decision.

User Rights (data subject). in the performance of their official duties, the retention period of personal data.

7.1. The subject of personal data (User) has the right:
to know the location of the personal data that contains his personal data, its purpose and designation, the location and/or residence (stay) of the owner or manager, or to give appropriate instructions for obtaining this information to authorized persons, except in cases established by law;
to receive information about the conditions for granting access to personal data, including information about third parties to whom his personal data is transferred;
to access their personal data;
manage the procedure for sending notifications through the appropriate settings on the Site.
receive, no later than thirty calendar days from the date of the request, except in cases provided by law, a response regarding whether their personal data is being stored, as well as receive the content of their stored personal data;
submit a reasoned objection against the processing of their personal data by state authorities and local self-government bodies in the exercise of their powers as provided by law;
to submit a reasoned request for the amendment or deletion of their personal data by any controller or processor, if such data is processed unlawfully or is inaccurate;
to protect their personal data from illegal processing and accidental loss, destruction, damage due to intentional concealment, non-provision, or untimely provision, as well as to protect against the provision of information that is false or tarnishes the honor, dignity, and business reputation of an individual;
address issues related to the protection of their rights regarding personal data to state authorities, local self-government bodies, which are empowered to ensure the protection of personal data;
apply legal remedies in case of violations of personal data protection legislation.

 

 

Procedure for handling requests from the data subject (User). 

 

8.1. The data subject (User) has the right to obtain any information about themselves from any entity involved in personal data relations, without specifying the purpose of the request, except in cases established by law. 

8.2. Access of the data subject (User) to their data is provided free of charge. 

8.3. The data subject (User) submits a request for access (hereinafter referred to as the request) to the data owner. The request must include: • surname, first name, patronymic, place of residence (place of stay), and details of the document that certifies the identity of the data subject (User); • other information that allows the identification of the data subject (User); • information about the personal data to which access is requested, or information about the owner or manager; • a list of the personal data being requested. 

8.4. The period for reviewing the request for its satisfaction cannot exceed ten working days from the date of its receipt. 

8.5. During this period, the Personal Data Controller informs the data subject (User) whether the request will be satisfied or the relevant personal data cannot be provided, stating the grounds as defined in the relevant regulatory legal act. 

8.6. The request is satisfied within thirty calendar days from the date of its receipt, unless otherwise provided by law. 

 

Amendments to the Regulation 

 

9.1. FOP Melnychuk may periodically update this Regulation unilaterally without notifying the User of such changes. The new edition of the Regulation comes into effect from the moment it is posted on the Website, unless otherwise provided by the new edition of the Regulation. The current edition of the Regulation is always available on the relevant page of the Website. 

9.2. In the event that any changes have been made to the Regulations that the User does not agree with, they are obliged to cease using the Online Store. The fact that the User continues to use the Online Store is confirmation of their agreement and acceptance of the respective edition of the Regulations.