Privacy Policy
Introduction
The company under the name All About Medicals wishes to inform you about the types of personal data we collect through this website, its associated applications, or by any other means (e.g., via telephone), as well as how we use such information.
1. What and who does this Privacy Policy cover?
The Company is the Data Controller of the personal data collected in the context of providing its services. This Privacy Policy applies to all users (registered and non-registered) who wish to receive services from the Company. As defined in our Terms of Use, the Company’s services are intended for a general audience, not for children, and therefore we do not knowingly collect personal data from children under 16 years of age.
2. What types of personal data do we collect about you?
The Company may collect data about you, such as data necessary for your registration on the website or for executing an order in the context of purchasing a product. Specifically, the Company collects the following categories of data:
- Registration data: information you submit to register on our website and create an account. This may include, for example, your first and last name, email address, country, and postal code.
- Order data: identification and contact information necessary for completing a transaction and delivering the product.
- Information collected through tools such as cookies: these technologies may be used to collect and store information about your use of the Company’s services, such as the pages you have visited. For more details, see our Cookie Policy.
We do not collect:
Financial information from payment service providers: in some cases, we may use an unaffiliated payment service to enable you to purchase a product or make a payment (“Payment Service”). If you wish to make a purchase or payment via a Payment Service, you will be directed to the Payment Service’s website. Any information you provide there will be subject to that Payment Service’s privacy policy, not this Privacy Policy. We have no control over, and are not responsible for, the use of your information by the Payment Service.
Sensitive information: we ask that you do not send or disclose sensitive personal data to us, such as social security numbers, information regarding racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background, or trade union membership.
3. For what purposes do we use your personal data?
We use the personal data we collect from and about you for the following purposes:
a) To provide our services.
b) To improve your experience with the Company’s services (both online and offline), by offering content you may find relevant and interesting.
c) To enable you to comment on content and participate in online games, contests, or reward programs.
d) To provide you with optimal customer service and respond to your inquiries.
e) To protect the Company’s rights, for example, when we believe in good faith that such processing is necessary to:
(i) protect, enforce, or defend our legal rights,
(ii) protect the safety, confidentiality, and security of users,
(iii) protect the Company and third parties (such as the Company’s suppliers) against fraud or for risk management purposes.
f) To comply with applicable law and respond to requests from competent authorities.
g) To complete a corporate transformation, such as a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or stock (including in bankruptcy or similar proceedings). For example, if the Company takes part in a merger or transfer of a substantial part of its business, it may disclose your personal data to the parties involved, following proper notification.
h) To send you, subject to your prior consent, offers, promotions, and other commercial communications regarding the Company’s news and activities.
4. On what legal basis do we process your personal data?
Processing of your personal data is necessary for the provision of the requested services, and in certain cases (such as product ordering and delivery) the collection of your data is essential, otherwise the Company would not be able to provide its services. Processing may also be necessary for the Company’s legitimate interests or to comply with legal obligations. Additionally, the Company processes your personal data to send commercial/marketing communications, based on your consent.
5. How do we protect your personal data?
Your personal data is processed both electronically and in paper form and is safeguarded with appropriate security measures, taking into account the nature, scope, context, and purpose of processing, as well as the varying likelihood and severity of risks to individuals’ rights and freedoms. Specifically, the Company uses appropriate technical and organizational measures to protect the personal data in its possession from loss, theft, unauthorized use, disclosure, alteration, and any kind of unlawful processing.
6. Who may access your personal data?
The Company may disclose your personal data to the following recipients under certain circumstances:
- Partner companies that support and manage the Website.
- Companies we cooperate with for the fulfillment of the above purposes.
- Any administrative, judicial, or public authority to which disclosure is legally required.
The Company has ensured that its staff and partners are specifically authorized to process your personal data for the above purposes. In all cases, both our staff and external partners are bound by confidentiality and secrecy obligations under applicable law.
7. How long do we retain your personal data?
Your personal data is retained for as long as necessary to fulfill each processing purpose. After that purpose has been met, your data will be deleted unless retention is required by applicable law or for purposes related to the establishment, exercise, or defense of legal claims.
8. Is your personal data transferred to third countries?
Your data is not transferred to third countries outside the European Economic Area (EEA). In any case, note that the European Commission has recognized certain non-EEA countries as providing an adequate level of data protection. For transfers from the EEA to countries not deemed adequate, we have established appropriate safeguards (such as standard contractual clauses or other legal mechanisms) to protect your personal data and ensure its secure transfer.
9. What are your rights regarding your personal data?
Under applicable law, you may exercise the following rights (subject to conditions):
- Right of access: to obtain a copy of the personal data we hold about you and verify that we process it lawfully.
- Right of rectification: to request correction of incomplete or inaccurate data. We may need to verify the accuracy of the new data you provide.
- Right to erasure: to request deletion of your personal data when there is no valid reason for us to continue processing it. This right also applies if you have successfully exercised your right to object, if your data has been unlawfully processed, or if we must delete it to comply with legal obligations. However, we may not always be able to comply for specific legal reasons, which will be communicated to you at the time of your request.
- Right to object: to object to processing based on legitimate interests (including profiling) where you believe it impacts your fundamental rights and freedoms. You may also object to processing for marketing purposes.
- Right to restriction: to request suspension of processing in specific circumstances, e.g., verifying data accuracy, unlawful use but refusal of deletion, data needed for legal claims, or pending verification of overriding legitimate grounds.
- Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to a third party. This applies only to automated information processed with your consent or under a contract.
- Right to withdraw consent: to withdraw your consent at any time where processing is based on consent. This does not affect the lawfulness of prior processing. Withdrawal may limit our ability to provide certain services or products.
You may exercise your rights by submitting a written request to the Company. We will respond within one (1) month of receiving your request, and in any case within two (2) months, depending on complexity or volume.
10. Updates to this privacy policy
This Policy will be updated whenever necessary. If significant changes are made, the relevant text will be modified before the changes take effect, and we will make every reasonable effort to notify you. We encourage you to review this Privacy Policy periodically to remain informed about how we process your personal data.
11. Data protection authority
If you have any questions regarding data protection law or believe your rights may have been violated, you may contact the Hellenic Data Protection Authority:
1 Kifissias Ave., Athens 11523, Tel: +30 210 6475600, or visit www.dpa.gr.
12. Contact us
For any questions regarding this Privacy Policy and to exercise your rights, please contact the Company’s Data Protection Officer (DPO):
- Email: sales@allaboutmedicals.gr
- Telephone: 2110084819
For further clarifications regarding personal data protection issues, you may also contact our customer support line at +30 211 0084819.