With the current policy on personal data protection regulation (“Policy”) information is provided regarding processing of your personal data.
The company operating as «Medbest SA», located in 282 Kifissias Avenue and 2 Ydras Street, post code 15232, Halandri, tel.nr. 2106856191, VAT Nr. 999399686, Tax Office FAE Athinon, (called “the Company” or “We”) acting as Data Controller, is collecting, saving, using and processing your personal data.
Who we are
Suggested text: Our website address is: https://medbest.gr.
What is personal data?
Any data that pertains to an individual (referred to as the Subject of Personal Data) and can be utilized, directly or indirectly, to identify them constitutes Personal Data under the law. This includes, but is not limited to, names, phone numbers, home addresses, bank accounts, email addresses, internet protocol (IP) addresses, etc. When in doubt about whether something qualifies as personal information, it’s best to err on the side of caution and treat it as such.
What is sensitive personal data?
Sensitive are considered the personal data which refer to the following
- Racial or ethnic origin.
- Political opinions or participation to a labor union.
- Religious or philosophical beliefs.
- Health related, medical or genetical data.
- Social security data or data concerning a person’s sex life.
- Criminal claims and convictions of a person.
What does processing personal data entail?
Processing encompasses various actions, whether automated or not, carried out on personal data or extensive sets of personal data. These actions include, but are not limited to, collection, input, recording, modification, organization, structuring, storage, retrieval, adaptation, alteration, consultation, use, transmission-based disclosure, dissemination through any means, correlation or combination, restriction, erasure, or destruction of data.
What data do we gather?
We meticulously collect only the personal data essential for their intended purpose, and they are utilized solely for that purpose. With the exception of the personal data gathered by Cookies, the personal data we collect are strictly limited to what you have provided and are utilized solely for the specific purpose for which you have consented.
- Identification Data: This includes information such as name, surname, VAT number, IP address, etc.
- Communication Data: This encompasses details like address, phone number, webmail, etc.
- Photo Gallery: This comprises photos and videos.
- Data essential for the provision of our company’s services, including quality control, participation in exhibitions, promotion of products/services, invoicing, and product shipment, are also collected.
How do we utilize your personal data?
Your personal data is processed either by specifically authorized personnel of our company or by the software and hardware of our company, and only in exceptional circumstances by third parties. These third parties are contractually obligated to our company to maintain the confidentiality and protection of your data while processing it strictly for their authorized purposes.
In general, your data is processed to provide you with the following services:
-
Communication: Your data is used by the company to respond to claims or questions submitted via email or other communication channels.
-
Quality control: Your data is utilized by the company for regular quality checks.
-
Offer submission: Your data is processed by the company to submit an offer.
-
Shipment/invoicing: Your data is processed by the company to place and ship your order according to the products you have selected.
-
Participation in exhibitions: Your data is processed by the company to inform and invite you to exhibitions in which it participates.
-
Sending of newsletters: The company provides you with the choice to receive information regarding its promotional efforts (e.g., new products, special offers) via newsletters.
-
Job search: Your data is processed by the company to assess your skills and attributes for the position for which you have applied or for any other job opening within the company. This is also used to communicate with you for the aforementioned purposes.
Who we share your data with
Our company ensures that your data will not be disclosed, transmitted, etc., for any purpose or use unless mandated by the prevailing legal framework or required by public or judicial authorities.
Access to your data is restricted to essential personnel of the company who are bound by confidentiality agreements. Additionally, affiliated companies may have access to your data as either joint or delegated data controllers, operating under our instructions.
How do we guarantee that data processors uphold your data?
The data processors, acting on behalf of our company, have consented to and are contractually obligated to:
- Maintain confidentiality.
- Refrain from disclosing your data to third parties without our company’s permission.
- Implement all necessary precautionary measures.
- Adhere to all legal frameworks concerning the protection of personal data, particularly Regulation 679/2016/EU (GDPR).
When is your data erased?
We retain your data only for the duration necessary to fulfill the purpose for which it was provided, in accordance with applicable legal requirements.
Your consent is utilized solely for the duration during which newsletters are sent to you, unless you opt to unsubscribe from the newsletter.
Curriculum vitae data submitted via email for job applications within the company is retained for three (3) years, unless you request a shorter retention period or request deletion.
