CONSENT

1. General Provisions

Hereby, I, the User of the “Grand Pharm” Mobile Application, freely, of my own will and in my own interest, give my consent to GRAND PHARM TRADE LLC (hereinafter referred to as the Operator) for the processing of my personal data classified as medical data, in accordance with the legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan “On Personal Data”.

This consent is granted when using the functionality of the Mobile Application related to the uploading and processing of medical documents.

2. List of Medical Data

I give consent to the processing of the following medical data:

• images of medical prescriptions (photos or scans);
• information about prescribed medicines;
• information about the dosage of medicines (if specified in the prescription);
• information about the dosage form and method of use of medicines;
• information on medical prescriptions contained in the prescriptions;
• history of uploaded prescriptions;
• pharmacist’s comments related to the processing of the prescription.

3. Purposes of Processing Medical Data

Medical data is processed exclusively for the following purposes:

• processing medical prescriptions uploaded by the User;
• reviewing prescriptions by authorized pharmaceutical employees;
• forming a list of medicines based on the prescription;
• informing the User about the availability of medicines;
• providing pharmacist comments on the prescription;
• storing prescription history in the “My Prescriptions” section;
• improving the quality of user service;
• fulfilling the requirements of the legislation of the Republic of Uzbekistan.

4. List of Actions with Medical Data

I consent to the following actions being performed with medical data:

• collection;
• recording;
• systematization;
• storage;
• clarification (updating, modification);
• use;
• transfer to authorized pharmaceutical employees;
• depersonalization (if necessary);
• blocking;
• deletion;
• destruction.

Medical data may be processed both with the use of automation tools and without the use of such tools.

5. Transfer of Data to Third Parties

Medical data may be transferred to third parties only in the following cases:

• to authorized employees of the pharmacy chain (pharmacists);
• to organizations providing technical support for the Mobile Application and data storage;
• to state authorities — in cases provided for by the legislation of the Republic of Uzbekistan.

The transfer of medical data to other third parties without my consent is not allowed, except in cases provided for by the legislation of the Republic of Uzbekistan.

6. Retention Period of Medical Data

Medical data shall be stored for the period necessary to achieve the purposes of processing, but no longer than the period established by the legislation of the Republic of Uzbekistan or the internal regulatory documents of the Operator.

Upon expiration of the storage period, medical data shall be deleted or destroyed.

7. Protection of Medical Data

The Operator undertakes to ensure the confidentiality of medical data and to apply the necessary organizational and technical protection measures, including:

• storing data in a secure form;
• restricting access to data only to authorized persons;
• using information protection tools against unauthorized access;
• complying with the requirements of the legislation of the Republic of Uzbekistan on personal data protection.

8. User Rights

I have been informed that I have the right to:

• receive information about my medical data;
• demand clarification, blocking, or deletion of data;
• withdraw this consent;
• submit a request to the Operator to cease data processing;
• protect my rights in the manner prescribed by the legislation of the Republic of Uzbekistan.

9. Withdrawal of Consent

I have the right to withdraw this consent by sending a written notice to the Operator using the contact details specified in the Mobile Application.

In case of withdrawal of consent, the Operator has the right to cease processing medical data and delete previously uploaded prescriptions, unless otherwise provided by the legislation of the Republic of Uzbekistan.

10. Confirmation of Consent

By confirming this consent, I:

• confirm that the medical documents uploaded by me relate to me or to a person whose legal representative I am;
• confirm the accuracy of the data provided;
• confirm that I have familiarized myself with the terms of medical data processing;
• confirm the voluntary nature of granting this consent.

This consent shall be deemed granted from the moment of confirmation of the relevant action (for example, checking the “I Agree” box or uploading a prescription) in the Mobile Application.