1. GENERAL PROVISIONS
1.1. The Personal Data Protection and Processing Policy is drawn up in accordance with the requirements of the Law "On Personal Data Protection" and determines the procedure for processing personal data and measures to ensure the security of personal data in the Online Store of FOP CHITRA (hereinafter referred to as the Policy).
1.2. The Online Store of FOP CHITRA (hereinafter - the Online Store) sets as its most important goal and condition for its activities the observance of human and civil rights and freedoms when processing their personal data, including the protection of rights to privacy, personal and family secrets.
1.3. The Policy determines the requirements of the Online Store for the processing and the procedure for ensuring the protection of personal data of personal data subjects at all stages of their processing, including through organizational and technical measures.
1.4. The Policy applies to an indefinite number of persons - personal data subjects who enter or may enter into any relationship with the Online Store.
2. DEFINITION OF TERMS AND ABBREVIATIONS
2.1. Personal Data Owner - the Online Store.
The owner of personal data determines the purpose of processing personal data, establishes the composition of these data and the procedures for their processing, unless otherwise required by law.
2.2. Consent of the personal data subject - a voluntary expression of the will of an individual (provided they are informed) regarding granting permission to process their personal data in accordance with the formulated purpose of their processing, expressed in writing or in a form that allows drawing a conclusion about granting consent. In the field of e-commerce, consent may be provided during registration by ticking a box. Consent can also be granted by:
- the Client joining the Public Offer Agreement by registering on the Website or by confirming an order on the Website;
- by concluding an appropriate transaction between the Counterparty and the Online Store;
- by the User participating in a relevant survey;
- by the Employee signing a consent to the processing of personal data;
- by providing documents/information containing personal data.
2.3. Personal data (hereinafter - PD) - information or a set of information about an individual who is identified or can be specifically identified.
2.4. Client - a personal data subject (individual or their representative) acting as a consumer of goods/services provided by the Online Store, as well as any visitor who registers on the Website https://shivmed.com/.
2.5. Counterparty - a personal data subject entering into civil and economic legal relations with the Online Store.
2.6. Users - Clients, Counterparties, and Employees jointly referred to in the text of the Policy.
2.7. Processing of personal data - any action or set of actions, such as collection, registration, accumulation, storage, adaptation, alteration, renewal, use and dissemination (distribution, realization, transfer), depersonalization, destruction of personal data.
2.8. Employee - an individual performing labor functions under an employment contract.
2.9. Personal Data Processor - a natural or legal person granted the right to process these data on behalf of the owner.
2.10. Website - the website https://shivmed.com/ located on the Internet.
3. MAIN PART
3.1. Processing of personal data in the Online Store.
3.1.1. The Online Store is the owner of personal data, and in cases provided for by law, the processor of personal data.
3.1.2. The procedure for processing personal data is determined by this Policy based on the current legislation of Ukraine.
3.1.3. The Online Store will take all necessary measures to ensure that Users' personal data is processed securely.
3.1.4. The Online Store does not process personal data regarding racial or ethnic origin, political, religious or ideological beliefs, membership in political parties and trade unions, as well as biometric or genetic data.
3.1.5. User data is collected and processed exclusively on the territory of Ukraine in accordance with the current legislation.
3.1.6. The grounds for processing personal data include: consent of the Subject, conclusion and execution of a transaction, protection of vital interests, and the need to fulfill legal obligations.
3.1.7. Processed personal data is subject to destruction or depersonalization after achieving the goals of processing.
3.2. Personal data of Users received and processed by the Online Store.
The Online Store processes data provided during registration or by other means. This may include: Name, date of birth, gender, marital status, passport data, email address, phone number, delivery address, cookie files, IP address, and other technical data.
3.3. Purpose and legal grounds for the collection and processing of Personal Data.
The Online Store processes data to: register the Client on the Website, process orders, provide technical support, send promotional messages, improve service quality, conduct accounting and tax reporting, and comply with Ukrainian legislation.
3.4. Conditions for processing personal data and transferring it to third parties.
The Online Store has the right to transfer data to third parties (such as postal/courier services, banks, financial institutions) for the purpose of executing orders, preventing fraud, or upon the legal request of competent state authorities.
3.5. Measures applied to protect User's personal data.
The Online Store takes necessary legal, organizational, and technical measures to protect personal information from unlawful or accidental access, destruction, distortion, blocking, copying, and distribution.
4. NOTIFICATION OF THE RIGHTS OF THE PERSONAL DATA SUBJECT
4.1. According to Article 8 of the Law of Ukraine "On Personal Data Protection", the Subject has the right to: know the sources of collection and location of their data, receive access to their data, submit a reasoned demand to change or destroy their data if it is processed illegally or is unreliable, protect their data from illegal processing, withdraw consent to data processing, and apply legal remedies.
4.2. Access to one's own data is provided free of charge upon submission of a request to the Online Store.
5. FINAL PROVISIONS
5.1. The Online Store takes measures to ensure data protection at all stages of processing.
5.2. The Website may contain links to other websites. The Online Store is not responsible for the privacy policies of third-party services.
5.3. For any questions regarding personal data processing, the User may contact the Online Store via email: office@shivmed.com.
5.4. This Policy is valid indefinitely until replaced by a new version and is published on the official website https://shivmed.com/.