PERSONAL DATA – PRIVACY POLICY

PROPHARM LTD (hereinafter referred to as “PROPHARM” or the “Company”) recognizes the importance of protecting the personal data of visitors and customers of www.propharm.com.gr and is committed to protecting such data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), applicable Greek legislation and any other applicable provisions concerning the protection of personal data.

This Privacy Policy informs users about how PROPHARM collects and processes personal data in the context of the operation of its website and the provision of its services.

What Personal Data We Collect

When visiting or using the website, placing an order or contacting the Company, personal data necessary for the provision of the relevant services may be collected.

Depending on the circumstances, such data may include:

• full name
• email address
• telephone number
• delivery address
• information necessary for the issuance of receipts or invoices
• order and transaction information
• information provided through the contact form or other communication channels with the Company

PROPHARM collects and processes only the data that are necessary for each specific processing purpose.

Purposes of Processing

Personal data may be used, as applicable, for:

• processing and completing orders
• shipping and delivering products
• communicating with customers regarding their order or request
• issuing the necessary receipts, invoices and other relevant documents
• customer service
• managing returns, cancellations or other requests relating to a transaction
• sending informational or promotional communications where the required consent has been provided
• complying with the Company’s applicable legal and tax obligations
• ensuring the security and proper operation of the website

Legal Basis for Processing

The processing of personal data is carried out in accordance with the GDPR and is based, depending on the specific purpose, on one or more of the following legal grounds:

• the performance of a contract, where processing is necessary for the completion and delivery of an order or the provision of a related service;
• compliance with a legal obligation of the Company, such as the Company’s tax, accounting and other legal obligations;
• the consent of the user, where required, such as for the sending of informational or promotional communications;
• the legitimate interests of the Company, where this constitutes an appropriate legal basis and the rights and freedoms of the user do not override such interests.

Where processing is based on consent, the user has the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

Confidentiality of Transactions

All transactions carried out through the website are subject to the principle of confidentiality.

PROPHARM takes appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized access or disclosure.

Access to personal data is limited to authorized persons, to the extent necessary for the performance of their duties and the provision of the relevant services.

Recipients of Personal Data

PROPHARM does not sell, rent or otherwise make customers’ personal data available for commercial exploitation.

For the completion of orders and the provision of its services, the Company may disclose the necessary personal data to service providers and business partners, such as courier and delivery companies, payment service providers or other partners necessary for the execution of the transaction.

Personal data is disclosed only to the extent necessary for the relevant purpose and in accordance with applicable legislation.

PROPHARM may also disclose personal data where required by law or by a competent public, judicial or supervisory authority.

Retention of Personal Data

PROPHARM retains personal data for as long as necessary to fulfil the purpose for which it was collected.

Where there is a legal obligation to retain data, particularly for tax or accounting purposes, the data will be retained for the period required by applicable legislation.

Once the applicable retention period has expired, personal data will be deleted or anonymized, where technically feasible and permitted by law.

Newsletter and Promotional Communications

Where a user has subscribed to PROPHARM’s newsletter or other mailing list and has provided the required consent, the Company may use their email address to send informational and promotional communications.

The user may withdraw their consent at any time and unsubscribe from the relevant mailing list by using the corresponding unsubscribe link included in the communications or by contacting the Company.

Cookies

The website uses cookies and similar technologies for its proper operation and, where applicable, to improve the user experience and collect statistical information.

Where cookies require prior consent, the user’s consent is obtained through the relevant mechanism provided on the website.

Users may find detailed information regarding the cookies used on the website and manage their preferences through PROPHARM’s Cookie Policy.

Rights of Data Subjects

In accordance with the GDPR and subject to the conditions provided by applicable law, data subjects have the following rights:

• Right of access to their personal data processed by the Company
• Right to rectification of inaccurate or incomplete personal data
• Right to erasure of personal data, where the applicable legal conditions are met
• Right to restriction of processing, where the applicable legal conditions are met
• Right to object to the processing of personal data, where provided by applicable legislation
• Right to data portability, where applicable
• Right to withdraw consent, where processing is based on consent

To exercise their rights, users may contact PROPHARM using the contact details provided in this Privacy Policy.

The Company will examine relevant requests and respond within the time limits provided by applicable legislation.

Right to Lodge a Complaint

If a user believes that the processing of their personal data violates the applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.

For Greece, the competent supervisory authority is:

Hellenic Data Protection Authority (HDPA)
www.dpa.gr

Transfers of Personal Data Outside the European Economic Area

Where the provision of a specific service requires the transfer of personal data outside the European Economic Area, such transfer will be carried out in accordance with the conditions and appropriate safeguards provided by applicable legislation.

Automated Decision-Making

PROPHARM does not make decisions producing legal or similarly significant effects on users based solely on automated processing of personal data, unless otherwise provided by applicable legislation and the required information and safeguards have been provided.

Contact

For any questions regarding the processing of personal data or the exercise of their rights, users may contact:

PROPHARM LTD
Email: info@propharm.com.gr
Telephone: 23410 70227

PROPHARM reserves the right to amend or update this Privacy Policy where necessary due to changes in the operation of the website, the services provided or applicable legislation. The current version will always be available on www.propharm.com.gr.