PRIVACY NOTICE

since 18 January 2024

INTRODUCTION

The following Privacy Notice describes how We, PT. Merapi Utama Pharma, domiciled in Central Jakarta – Indonesia, collect, store, control, process, use, transfer, disclose and/or protect data and information about You. This Privacy Notice applies to all and any (i) users of our website (including micro-sites of the website) (“Users”); (ii) manufacturers, importers, wholesalers and distributors who supply pharmaceutical products and medical devices to Us (“Principal”); (iii) healthcare facilities, clinic/laboratory, pharmacies, drug stores, pharmaceutical wholesalers, medical devices distributors and any other party who is a potential customer or consumer of Us (“Customer”); (iv) potential providers or providers of goods/services  to Us (“Providers”); and (v) individuals who submit job applications to Us (“Candidates”).

Customers, Providers, and Candidates who use Our website will also be considered as Users.

Any reference to Your data in this Privacy Notice will also include Personal Data (as defined below) that We obtain or collect from You.

ACKNOWLEDGEMENT AND CONSENT

By using Our website (including micro-site) and services, You acknowledge that You have read and understood this Privacy Notice and agree to all terms and conditions therein. In particular, You have given consent to Us to collect, store, control, process, use, transfer, disclose and/or protect Your data.

If You provide Us with Personal Data relating to any other individual (such as Personal Data relating to a spouse, family member, reference, employee, administrator, person in charge, or any other party), then You represent and warrant that You have obtained consent from such individual, and hereby consent on behalf of such individual, for collection, storage, control, processing,  Our use, transfer and/or disclosure of their Personal Data. We may request proof of such consent from You at any time. Furthermore, You release Us from all forms of losses and legal claims of any kind from the owner of Personal Data that We obtain or collect from You.

You may withdraw any of Your consent under this Privacy Notice at any time by giving Us reasonable notice in writing via the contact details set out below. You must understand and acknowledge that after the withdrawal of such consent, all forms of relationship between You and Us may result in termination of service, deletion of Your account or termination of Your contractual relationship with Us, with all rights and obligations that arise remain fully fulfilled. Upon receipt of withdrawal of consent from You, We will inform You of the possible consequences of such withdrawal so that You can decide whether You wish to withdraw consent anyway or cancel such withdrawal.

SUMMARY

What data do We collect about You?

We collect data about You which may include data about an identified or identifiable natural person individually or combined with any other information either directly or indirectly through electronic or non-electronic systems (“Personal Data”). This Personal Data includes (i) data of a general nature, including full name, gender, nationality, religion, marital status and/or Personal Data combined to identify an individual; and/or (ii) specific data, including health data and information, biometric data, genetic data, crime records, child data, personal financial data, and/or other data in accordance with laws and regulations.

How do We use data about You?

We use Your data to set up and manage Your account with Us, to conduct feasibility study and due diligence about You, to communicate with You, to provide or receive data and information from or to You, to provide services to You or receive services from You, as well as for other purposes in connection with Our business activities.

Who do We share data about You with?

We may share Your data with third parties, including to government agencies, regulatory bodies, consultants, business partners, and/or Our affiliates, with the purposes of (i) facilitating the performance of services for or by You; (ii) in connection with Your interests with Us; and/or (iii) to implement good distribution practices for drugs and medical devices. We may also share data about You for the purpose of processing and/or storing Your data.

How do We process data about You?

We process Your data in accordance with the provisions of the prevailing laws and regulations in the Republic of Indonesia, which includes the activities of obtaining and collecting, processing and analyzing, storing, correcting and updating, transferring and disclosing, and/or destroying Your data.

TYPES OF PERSONAL DATA

To the extent permitted by the prevailing laws and regulations in the Republic of Indonesia, We may collect, store, process, use, and/or transfer Your Personal Data, consisting of general Personal Data and/or specific Personal Data, which We have categorized as follows:

1. Identity Data including name, username, user password, place and date of birth/ age, gender, nationality, family relationship, occupation/ profession, identity card/ other identification, taxpayer identification number, signature, photo and/or biometric data.
2. Contact Data includes home address, office/business address, email address, telephone number, and/or other contact information.
3. Eligibility Data includes company profile, company deed, business identification number and other business licenses, health service facility licenses, pharmacist practice licenses or the like, product distribution license numbers or the like, work / portfolio history, and / or recommendation letters.
4. Transaction Data includes product order, purchase, delivery, storage and/or resale data, product tracking data and/or interests, preferences, feedback, complaints and survey responses.
5. Financial and Payment Data includes bank account details, virtual account data, financial history or records, credit scoring data, payment or transfer details, and/or tax invoices.
6. Technical Data includes details about Your access to our website and micro-site,  such as identification generated by information systems, internet protocol address, data related to web pages, duration of  each visit/session, internet device identity or media access control address, advertising ID and other device information including information about manufacturer, model,  and the operating system of the device You use to access  our website and micro-site and crash logs.
7. Other Data in the form of any data and information that We collect from You.

USE OF PERSONAL DATA

We may use Personal Data collected for the following purposes as well as for other purposes permitted by applicable laws and regulations of the Republic of Indonesia (“Purposes”):

1. If You are a User, We may use Your Personal Data to:

• identify and register You as a User;
• allow You to access the website including our microsite;
• receive information about Your interests, preferences, feedback, complaints and responses to our surveys.
• communicate with You.

• conduct qualification and feasibility assessments of Your institution, business activities and products;
• identify and register You as a Principal;
• issue a product order letter to You;
• receive related products and services from You;
• make a return to You;
• make payments to You;
• provide pharmacovigilance information to You;
• implement good product distribution practices;
• receive information about Your interests, preferences, feedback, complaints and responses to Our surveys;
• communicate with You;
• prepare, enter into and enforce terms and conditions based on a contractual relationship with You.

• conduct qualification and feasibility assessments of Your institutions and business activities;
• identify and register You as a Customer;
• receive a product order letter from You;
• deliver products and provide related services to You;
• accept product returns (returns) from You;
• receive payments from You;
• receive pharmacovigilance information from You;
• perform product searches;
• implement good product distribution practices;
• receive information about Your interests, preferences, feedback, complaints and responses to Our surveys;
• communicate with You;
• prepare, enter into and enforce terms and conditions based on a contractual relationship with You.

• conduct a qualification and feasibility assessment of Your institution, business activities and goods/services;
• identify and register You as a Provider;
• send You a letter of order or request for a quote;
• receive goods/services from You;
• make payments to You;
• communicate with You;
• prepare, enter into and enforce terms and conditions based on a contractual relationship with You.

• conduct a qualification and eligibility assessment of You;
• identify and register You as a Candidate;
• issue a job offer letter to You;
• communicate with You;
• prepare and enter into a contractual relationship with You.

DISCLOSURE OF PERSONAL DATA

We may disclose, provide access or share Your Personal Data with affiliates and other parties for the following purposes as well as for other purposes permitted by applicable laws and regulations:

1. achieve the Goals as mentioned earlier;
2. in connection with filing, reporting, examination, investigation and/or decision based on applicable legal provisions;
3. if requested, required or permitted by the competent authority;
4. if there is legal proceedings of any kind between You and Us, or between You and other parties, or between Us and other parties, relating to the contractual relationship between You and Us or other relationships under law;
5. in connection with the examination, verification or audit process conducted by affiliates or third parties against Us;
6. carry out marketing or promotional activities for Our products and services;
7. in connection with the tender process that We follow; and/or
8. in connection with the insurance claim process.

PROCESSING OF PERSONAL DATA

The confidentiality of Your Personal Data is the most important thing for Us. We will use our best efforts to protect and secure Your Personal Data from access, collection, use or disclosure by unauthorized persons and from unlawful processing, accidental loss, destruction and damage or similar risks. However, if the transmission of data to Us is carried out via electronic mail, messaging applications on smartphones  or uploads via the internet network, then We cannot fully guarantee that the Personal Data will not be intervened, accessed, disclosed, changed or destroyed by unauthorized third parties, due to factors beyond Our control.

Your Personal Data will only be retained for as long as necessary to fulfil the purposes for which it was collected, during the retention period or as long as such retention is required or permitted by applicable laws and regulations. We will cease to retain Personal Data, or remove the purpose for which such Personal Data is associated with You as an individual, as soon as it is deemed that the purpose for which the Personal Data was collected no longer requires the retention of Personal Data, there is a lawful request from You for destruction, and such retention is no longer necessary for business or legal purposes.

Any dispute arising from or in connection with Your data stipulated in this Privacy Notice will be resolved based on the laws and regulations in the field of personal data protection applicable in the Republic of Indonesia.

CONTACT US

If You have any questions or complaints in connection with this Privacy Notice or if You wish to gain access, request deletion, make corrections and/or other statutory rights to Your Personal Data, please contact Our relevant officer in the contractual relationship with You, or:

Merapi Utama Pharma

Jl. Cilosari No. 25, Cikini

Jakarta 10330 – INDONESIA

Tel.            :    +62-21-3141906

Toll Free    :    0800-1-MERAPI

Email         :    [email protected]