“According to Directive 2013/11/EU, which was incorporated into Greek law by Joint Ministerial Decision 70330/2015, there is now also the possibility of online resolution of consumer disputes through the Alternative Dispute Resolution (ADR) process throughout the European Union. If the customer has the status of a consumer (i.e. a natural person acting outside their professional capacity) and has any issue with a purchase made from our Website, they may initiate the ADR process through the single EU-wide Online Dispute Resolution platform (ODR platform), available at https://webgate.ec.europa.eu/odr/main/index.cfm?event=main.home.chooseLanguage”
INTRODUCTION
The website “drug-store.gr” (hereinafter the “Website”) has been created by the pharmacy company under the name “PHARMACY OF CHRISTOS PONTIKIS AND CO. G.P.” (hereinafter the “Company”), for the purpose of providing information and access to pharmacy products and services permitted by pharmaceutical legislation and professional ethics to the visitors/users of the Website.
Our company, respecting the applicable legislation, implements appropriate measures to ensure the protection of your personal data and your privacy. This privacy policy applies exclusively to the processing of your personal data that we collect during your browsing of this website and your use of the services provided.
Acceptance of this Privacy Policy shall be deemed a free declaration of your consent to the collection, use, and further transfer of your personal data for purposes related to the use of our website and the services provided therein. Therefore, we recommend that you read the following Privacy Policy carefully:
Our Company collects Personal Data concerning you directly from you. Collection takes place through this website and/or by other means. The processing of your Personal Data by the Company is carried out in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 (EU), as supplemented by the relevant national and European legislation on the protection of personal data. The legal basis for processing your personal data may sometimes be your consent and, in other cases, one of the other legal grounds provided by law may apply (for example, the performance of a contract to which the data subject is a party).
The Company may update or amend this Privacy Policy at any time in order to reflect any changes in the operation of the website, the services it offers, and any changes in the law.
For the purposes of this Privacy Policy, the following definitions apply:
The term “controller” refers to the natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
The term “personal data” or “data of a personal nature” refers to any information relating to an identified or identifiable natural person (“data subject,” hereinafter also “user”); an identifiable natural person is one whose identity can be determined, directly or indirectly, in particular by reference to an identifier such as a name, an identity number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.
The term “special categories of data” or “sensitive personal data” refers to any kind of information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health, or data concerning a natural person’s sex life or sexual orientation.
The term “processing” refers to any operation or set of operations performed, whether or not by automated means, on personal data or on sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
The term “consent” of the data subject refers to any indication of wishes that is freely given, specific, explicit, and fully informed, by which the data subject signifies agreement, by statement or by clear affirmative action, to the processing of personal data relating to them.
DATA CONTROLLER
For any processing of personal data carried out by the Company or its partners, exclusively for the purposes and in the manner determined by the Company, the Data Controller shall be the Company under the name “PHARMACY OF CHRISTOS PONTIKIS AND CO. G.P.”
PERSONAL DATA COLLECTED BY THE COMPANY
Visits to the website www.drug-store.gr
do not entail the automatic registration of any personal data that identifies you. However, there is certain information that is neither personal nor identifiable, which may be collected and stored on the website www.drug-store.gr
(for example, the type of internet browser used by the User, the User’s operating system for accessing pages of the website www.drug-store.gr
), for the purpose of improving our services, such as the browsing and management experience of the website www.drug-store.gr
. Furthermore, we automatically collect information about you, such as your Internet Protocol address (IP address) and your domain name. This information may be used to provide you with a more personalized experience during your visit to our website.
However, in order to use the Services of our website, place product orders, and enjoy our services, you will be asked to provide personal data such as: full name, postal address, telephone number, email address, and, if you wish to receive an invoice for the purchase of our products, you will also be asked for your business name, profession, tax registration number, and the tax office to which you belong.
In order to receive information about offers on our products and services and about Company news, you will be invited to register your email address on our website so that a relevant newsletter may be sent to you.
In any case, the Company will provide you with the necessary information so that you are able to give prior consent to the processing of your personal data for one or more specific processing purposes.
You may also be asked to provide us with information about your location or your personal preferences and interests in order for us to offer you more personalized services. The collection of such information may also take place by electronic means, and you are given the right to choose the appropriate settings so that similar personal data is not collected. The information provided will be stored in the Company’s databases, either manually or electronically.
IDENTIFICATION FILES – “COOKIES” – CONCEPT – COLLECTION – USE
Identification files, known as “Cookies,” are self-installing text files with short content, lawfully stored on the user’s computer when they visit a website. “Cookies” are sent from a website to the user’s terminal equipment during the first visit and follow the reverse path during subsequent visits by the user to the same website. The “Cookies” originating from this website serve to identify the user and, through statistical data, improve the services provided by the website to the user, such as by offering personalized services. The harmless collection of non-personal information and data that under no circumstances reveals the user’s identity contributes to the faster and more efficient operation of our website through statistical evaluations and comparative observations, the faster processing of the user’s orders, and the overall optimization of the services of this website. The technically necessary storage of “Cookies” is permitted with the user’s consent, which may be given through the appropriate settings in the web browser or through another application, for the purposes of transmitting a communication, providing a service expressly requested by the user, and for the processing purposes referred to above. The user may delete “Cookies” from their terminal equipment at any time. However, we inform you that doing so may affect the ease of access to the website and may cause reduced functionality or usability.
This website accesses and stores cookies, as well as related technologies, on your computer. Cookies are installed by the website and by third parties. The use of cookies to analyze user activity serves to improve our website and provide personalized services. By improving the functionality of our website through the use of cookies, we enhance the browsing experience of the website visitor. Through cookie technology and similar applications, information about users may be collected, such as browser type, server, language selected by the user, preferences, searches, and the user’s geographic location.
The Company uses third-party partner cookies. Cookies of this kind make it possible to display promotional material on other websites visited by the user. Information that we obtain through cookie technology and similar technology is disclosed to third parties in the context of creating targeted advertising messages that may be shown to the user during visits to third-party websites. In addition, the relevant cookie technology allows measurements relating to user activity on another website that referred the user to our website or, respectively, relating to user activity when our website referred the user to another website. Cookies may also be used for security purposes (prevention of cyberattacks).
USE OF PERSONAL DATA
We collect your personal data exclusively in order to inform you about our activities, our services and products, as well as the services and products of third-party companies with which our Company cooperates for advertising purposes. You may also contact our Company through the contact form. The information you enter in the relevant form may be used for one of the following purposes:
• Communication by our Company with you (to respond to your message/request to our Company).
• Registration in the newsletter recipient list (newsletter with information about offers on products and services, Company news, Company and third-party company events and happenings, discount coupons, and contests).
• Registration in our contests.
• Supply of our products. Your personal data will be used for the issuance of the relevant transaction document for your transaction with our Company and the shipment of products to your premises via courier companies cooperating with our Company.
• Receipt of beauty and health advice.
The Company may, in compliance with the relevant legal provisions, use the user’s personal data for the following purposes:
• Sending personalized information regarding new products and services.
• Sending regular updates that the Company considers of interest to the User.
• Sending information upon request regarding products and services.
• For market research and marketing purposes.
• For the Company’s internal administrative purposes and the improvement of the services provided.
• For “direct marketing” activities, including any communication by the Company for the purpose of promoting products and services.
All personal data collected and subject to further processing by the Company is suitable, adequate, and limited to what is necessary for the purposes for which it is collected. Furthermore, we process your personal data in a manner that guarantees its accuracy, continuous updating, and security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage, taking every technical and organizational measure deemed appropriate for that purpose, in particular through encryption, coding, pseudonymization, and anonymization of personal data, as well as monitoring, supervision, and regular logging of all processing operations.
We will provide you with all the necessary information you need in order to give your prior consent to the processing of your personal data by the Company for one or more specific purposes. You may withdraw your consent at any time, easily and free of charge. In cases where the option of automated withdrawal of your consent is not available, please contact our Company by any means and we will provide all necessary information for the desired withdrawal.
Where consent is given for the automated processing of your personal data, the Company collects and processes information based on your personal preferences and interests only in order to provide you with personalized information and/or notifications regarding the Company’s services and activities through direct marketing actions.
The data collected is also intended to fulfill legal obligations. The Company undertakes to maintain strict confidentiality of all data, keeping access to it only as required in accordance with its normal business activity.
The contact details you provide to us will be kept in our database and may be used for the occasional sending of information, by email, regarding products and services similar to those that are the subject of your contract with the Company. If you do not wish to receive such information, please exercise your rights as described below:
RIGHTS OF THE DATA SUBJECT
The Company provides data subjects with the rights provided by law and facilitates their exercise. At the same time, we provide data subjects with full information about their rights. Specifically, data subjects have the right to request:
Access to their data (information on processing)
Correction of inaccurate personal data
Deletion of the personal data they have provided
Restriction of the processing of their personal data
Portability of their personal data
To object to the further processing of their personal data
The Company will respond in writing within 30 days from receipt of the request and identification of the applicant.
In addition, in the event of exercising one or more of the aforementioned rights of rectification, erasure, and restriction of the processing of your personal data, the relevant requests will also be forwarded to any third-party recipient to whom the personal data may have been disclosed in the context of the processing purposes.
COLLECTION OF PERSONAL PREFERENCES AND INTERESTS THROUGH THE WEBSITE www.drug-store.gr
In addition to collecting data by the aforementioned means, when expressly authorized, the Company uses technology that allows the collection of information about users of this website. For example, the website server automatically collects information about which pages you visited, as well as which browser you used.
Our website includes hyperlinks to other pages of the website. The technology may also be used to monitor the frequency with which these links are used and which pages are viewed most often.
When provided by the User of the website www.drug-store.gr
, such information may be used for direct marketing purposes.
TRANSFER OF PERSONAL DATA
With your consent, your personal data may be transferred to companies cooperating with the Company. If you are located in a country different from the one where the Company’s servers are located, communications may entail the cross-border transfer of information.
By visiting our website and communicating with the Company electronically, you authorize the processing and transfer of your Personal Data as set out in this Privacy Policy.
RETENTION PERIOD
All personal data is retained for a predetermined and limited period depending on the purpose of processing, after which such personal data is deleted from our databases. Personal data that you provide to our Company through this website or by other means will be retained for as long as you wish to enjoy our services and related updates as described above, and you may withdraw your consent at any time. In the case of a sales contract with www.drug-store.gr
, a reasonable retention period for your personal data is five years from the completion of the sales contract. The period for which your Personal Data may be retained by our Company also depends on the relevant obligations of our Company under applicable legislation (tax, etc.) and the legal provisions regarding the maximum retention period.
APPLICABLE LAW
In the event of any dispute or claim relating to this website, Greek law shall apply, regardless of the nature of the dispute.
For all actions or legal proceedings arising out of or relating to this Privacy Policy, its validity, application, performance, breach, or content, the Greek Courts shall have jurisdiction, whose jurisdiction you irrevocably acknowledge.
Notwithstanding the above, the Company reserves the right to exercise its legal rights before the courts of the place where this Privacy Policy is violated.
INFORMATION PROTECTION
Your transactions are secured with OpenSSL/1.1.1f level SSL encryption, bank-level security.
The operation of the store is governed by the use of the applicable Code of Conduct (link)
To prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of your personal data, we have taken reasonable measures to protect personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. level SSL encryption, bank-level security.
The Company has taken reasonable precautions to secure personal information available through the online community.
If you believe that your personal data has been affected in any way, you may contact the Hellenic Data Protection Authority as follows: Website: www.dpa.gr
Postal Address: 1-3 Kifisias Avenue, P.C. 115 23, Athens
Call center: +30 210 6475600
Fax: +30 210 6475628
E-mail:
[email protected]
This privacy policy may be amended from time to time. Any changes will be posted on this page.
CONTACT
For any clarification and information regarding the use of the Website, the user/visitor may contact the “Company” by calling the following number: 27210 91313
E-mail:
[email protected]
Registered office: 85 Nedontos Street, Kalamata, 24100
