Image

Privacy policy

 

PERSONAL DATA PROTECTION POLICY

The Dermatological Clinic Merkoureas Andreas - Dermatologicum (hereinafter referred to as the "Company") attaches particular importance and respect to the protection of your personal data. This Personal Data Protection Policy (hereinafter referred to as the "Policy") concerns the conditions for the collection, storage and use of personal data by our Company, headquartered at: 124 Kifissias Avenue, 15125 Maroussi, tel.: 2168098769 and e-mail: info@dermatologicum.gr

About us

The Company is responsible for the website www.dermatologicum.gr which is the Company's website (hereinafter referred to as the site). The personal data you provide to us during your registration or visit to our website are subject to processing and will be stored in a file under the responsibility of our Company. In addition, any other personal data you provide to us are also subject to processing and will be stored in a file under the responsibility of our Company.

This Policy and its Terms may be updated from time to time and, for this reason, you should regularly be informed of its content and check it for any changes.

1. DEFINITION OF PERSONAL DATA

The term "personal data", as used in this Policy, refers to information about data subjects, i.e. natural persons, whether private individuals or professionals, such as name, postal address, email address, contact telephone number, etc., which can be used to identify a customer or visitor to the website (site).

2. DEFINITION OF PERSONAL DATA PROCESSING

Processing of Personal Data is the collection, recording, organization, storage, adaptation, alteration, retrieval, information search, use, transmission to third parties, dissemination, association, combination, restriction, deletion and destruction of Personal Data of natural persons.

3. METHOD OF COLLECTING PERSONAL DATA

We collect information about you, among other things, in the following cases:

A. When you contact us directly, through our call center, to request information.

B. When you visit the Website.

C. If you respond to our promotional actions or request information, e.g. by completing a response form or by entering your data online on our website via the contact form.

D. in order to register as a member and open an Account

E. If you provide personal data on behalf of a third party, you must ensure that the third party in question has previously been informed of this Policy. If you are under 16 years of age, you must not provide us with any information about yourself unless you have the consent of the person exercising your parental responsibility. Please help us keep your information up to date by informing us of any changes to your personal data.
4. WHAT PERSONAL DATA DO WE COLLECT FROM YOU?

The following categories of data about you may be collected and further processed through the various services and means of communication described in this Policy:

A. Contact Data: e.g. name, telephone numbers, fax number, email address, postal code, etc.

B. Website Usage & Communication: IP, browsing data for statistical purposes

C. Information on the reasons for contacting us: information regarding the reasons for interest, support services, requests for our services, including complaints and claims.

D. The Website may use cookies in order to improve the user's experience while browsing it and to improve the overall quality of its services. Cookies are small text files that are sent to a user's computer when they visit a website. Cookies are stored on the visitor's / user's hard drive but do not take knowledge of any document or file from their computer. They are used to facilitate the visitor / user's access to specific services, for statistical purposes in order to determine the areas in which these services are useful or popular or for marketing purposes. The visitor / user / member of the Website / Application can configure his browser in such a way as to prohibit the reception of all cookies or to notify him when a cookie is sent. However, the visitor / user / member of the Website should be aware that certain features or services of the Website may not function properly without cookies.

We collect the above necessary information from you, which you provide to us voluntarily.
5. PROCESSING OF PERSONAL DATA

We do not make decisions, nor do we conduct profiling, based on automated processing of your data.

6. LEGAL BASIS FOR PROCESSING PERSONAL DATA

For your data related to your above actions, the lawfulness of their processing is based on your consent.

7. PURPOSE OF PROCESSING PERSONAL DATA

The personal data you declare anywhere on the pages and services of our website are intended exclusively and solely for reasons related to the provision of our services and communication with you for your information.

The personal data declared by the user / member anywhere on the Website are intended exclusively and solely for ensuring the operation of the services provided and the legality of the relevant communications and may not be used by any unauthorized third party, without complying with the provisions of the General Data Protection Regulation (EU) 2016/679, national legislation and the relevant acts of the Personal Data Protection Authority, Law 3471/2006 and the ePrivacy directive (2002/58/EC, amended 2009/136/EC) as currently in force regarding the protection of personal data processing. Finally, by using the services of the Website, it is possible to request or collect other information for statistical purposes, which, however, are disconnected from the personal information of the user / member in accordance with the provisions of the legislation on the protection of personal data.

The company operates in accordance with the applicable Greek and EU legislation and securely keeps your personal data.

In summary, we only request as much information as we need so that you can enjoy a unique browsing experience, service based on your needs and communication with you. We therefore collect your information for the purposes of supporting our visitors, providing our services and communication.

In particular, we collect your information for the purpose of registering you as a member of the site and communicating with you for services you requested or information about our services.

8. DATA RECIPIENTS

Recipients of the Data are the Company's strictly necessary personnel and associates, who are committed to maintaining confidentiality. We may share or disclose your data when you have explicitly requested it or when required by law.

9. PERFORMERS OF THE PROCESSING

The Processors of personal data have agreed and committed to the Company:

•    to maintain confidentiality,

•    not to send Data to third parties without the Company's permission,

•    to take appropriate security measures,

•    to comply with the legal framework for the protection of personal data and in particular the GDPR Regulation.

10. DATA PROCESSING AND STORAGE TIME – DATA DELETION TIME

The data provided by you will be kept/stored by us only for as long as is necessary to fulfill the purpose for which you have communicated your data to us and in compliance with the applicable legal provisions.

In particular, your data is kept from the receipt of the relevant consent, which is calculated from your voluntary granting of it and after you have first become aware of the Terms of the Privacy Policy posted on the home page of our website and until you revoke it by sending us a relevant request to the Company's email or when it is no longer necessary for the above purposes.

We limit access to your data to authorized persons who are necessary to use it for the specific purpose.

11. DATA SECURITY

We are committed to safeguarding your Personal Data. We have taken appropriate organizational and technical measures to secure and protect your data from any form of accidental or unlawful processing. The site has an SSL certificate installed for the encryption and secure management of your personal data and browsing data.

These measures are reviewed and modified when necessary, with the aim of ensuring the security of your personal data.

Any processing of your Data is permitted only to persons, employees and associates authorized by us exclusively for the purposes mentioned above.


12. YOUR RIGHTS AS A DATA SUBJECT

A. You have the right to access your personal data.

This means that you have the right to be informed by us about whether and which data we are processing about you. If we are processing any of your personal data, you can ask to be informed about the purpose of the processing, the type of data we are processing, to whom we provide it, how long we store it, whether automated decision-making is taking place, as well as about your other rights, such as correction, deletion of data, restriction of processing and filing a complaint with the Personal Data Protection Authority.

B. You have the right to rectification of inaccurate personal data.

If you find that there is an error in any personal data held about you, you can submit a request to us to correct it.

C. You have the right to erasure/right to be forgotten.

You can ask us to delete your data if it is no longer necessary for the above-mentioned processing purposes or you wish to withdraw your consent in the event that this is the only lawful basis.

D. You have the right to data portability.

You can ask us to receive the data you have provided in a readable format or ask us to transmit it to another controller.

E. You have the right to restriction of processing.

You can ask us to restrict the processing of your data for as long as the examination of your objections to the processing is pending.

F. You have the right to object to the processing of your data.

You can object to the processing of your data or withdraw your consent and we will stop processing your data, unless there are other compelling and legitimate reasons that override your right.

13. HOW TO EXERCISE YOUR RIGHTS

For the above purposes, any request you may have should be addressed in writing to the company at the following email address: info@dermatologicum.gr

For any questions, suggestions or statements related to these issues, please contact us by email or using the contact form.

You can also contact us in the above ways for more information on the progress of your requests.

14. APPLICATION MANAGEMENT

We will respond to your requests free of charge without delay, and in any case within (1) one month of receiving your request. However, if your Request is complex or there is a large number of your requests, we will inform you within the month whether we need to obtain an extension of another (2) two months within which to respond to you.

If your requests are manifestly unfounded or excessive, in particular because of their repetitive nature, we may charge a reasonable fee, taking into account the administrative costs of providing the information or taking the requested action, or refuse to act on the request.

15. APPLICABLE LAW

We process your Data in accordance with the General Data Protection Regulation 2016/679/EU, and in general the applicable national and European legislative and regulatory framework for the protection of personal data.

16. YOUR RIGHT OF APPEAL

You have the right to submit a complaint to the Personal Data Protection Authority (postal address Kifisias 1-3, P.C. 115 23, Athens, tel. 2106475600, e-mail address (e-mail) contact@dpa.gr), if you consider that the processing of your Personal Data violates the applicable national and regulatory legal framework for the protection of personal data.

17. AMENDMENT OF THIS POLICY

We will update this Policy whenever necessary. If there are material changes to the Policy or to the way we use your Personal Data, we will notify you either by posting a notice in a prominent place before the changes take effect or by any other appropriate means. We encourage you to periodically review this Policy to be aware of how your Data is protected.

The Company is the Data Controller of the Data it processes.