PRIVACY POLICY

Introductory note
a VIPharma International SA implements a privacy policy in accordance with the national law (Law 2472/1997) on personal data protection and the EU General Data Protection Regulation (2016/679). This privacy policy describes how your personal information is collected and processed and informs you of your rights in accordance with applicable national law and the General Data Protection Regulation (GDPR). The privacy policy applies to individuals, company partners in the past, present or future (potential partners) but also to individuals who send or communicate their personal data voluntarily. a VIPharma International SA is the owner, manufacturer, administrator and holder of the rights to the website as well as the person responsible for the processing of personal data declared by visitors to its website.


I. a VIPharma International SA
The company has been active in the pharmaceutical market since 2005. It is a representative of 10 European pharmaceutical companies. The proprietary medicines the company promotes are for rare diseases and are traded exclusively in Public and Private Hospitals.

Contact info:
a VIPharma International SA
Kifissias Ave 120 & Floias 10
151 25 Maroussi
Tel: 210-6194170
Fax: 210-6194189
e-mail: info@avipharma.gr
website: www.avipharma.gr


II. Collection and processing of personal data
Sources of Collection and Processing of Personal Data:

  • Past-present-potential future clients-partners, either by personal consent or through third parties with the consent of individuals
  • Public sources / publications where the acquisition and processing of personal data is lawfully carried out

III. Personal data of minors
The collection and processing of personal data of minors is carried out ONLY with the consent of the parents or legal guardian. a VIPharma International SA complies with the laws on the protection of minors and any relevant provision of law.


IV. Legal basis for the collection and processing of personal data

  • Protection of legitimate interest
    It relates to a business or commercial interest that does not adversely affect the well-being of the natural person
  • Legality of processing with the express consent
    The processing of personal data is governed by the consent of the individual. Withdrawal of consent is a right and may be exercised at any time, but does not affect the processing of personal data prior to the receipt of the request for revocation
  • Compliance with Legal or Regulatory Obligation
    Legal or Regulatory Obligations arising from relevant laws and / or regulatory / regulatory legal requirements-provisions-regulations.
  • Performance of contracts
    To carry out business – commercial transactions in accordance with the obligations, requirements and conditions of the products or services and their related purposes.

V. Recipients of personal data
When performing contractual, legal, regulatory obligations, personal data may be disclosed to various recipients such as:

  • parts of the company
  • service providers
  • foreign suppliers

in order to fulfill these obligations.

All the above through a contract with the Company undertake to respect the confidentiality and protection of personal data in accordance with national law and GDPR.
Our personal data processors have entered compliance with GDPR requirements and terms.
Potential recipients of personal data:

  • Public, regulatory authorities, where legally required
  • Credit and financial institutions
  • Legal advisors
  • Business consultants
  • Accountants and auditors
  • Conferences / travel companies etc.

VI. Transmission of personal data outside the EEA
Personal data may be transferred to countries outside the European Economic Area, either due to the cooperation (representation) of foreign companies or with the consent of the natural person. The controller or processors outside the EEA must comply with European standards of protection and provide the safeguards necessary for the transmission of personal data in accordance with Article 46 of the GDPR.


VII. Automated profile creation process
The company does not follow an automated decision-making process in its business. However, there is the possibility of automatic data processing in order to evaluate certain aspects (limited profiles) for the purpose of concluding or executing a contract with the natural person.


VIII. Marketing actions and creating relevant profiles
The processing of personal data for the purpose of updating products, services and contracts is possible. The use of personal data intended to promote products, services and cooperation requires either your express consent or, where a legitimate interest exists. The right to object to the processing of personal data for marketing purposes at any time is exercised either in person or in written communication.


IX. Retention time
The retention of personal data lasts as long there is a business, scientific or other relationship with the natural person or with an authorized person representing a legal entity.
Upon completion of the business it is ethical to hold personal data for up to 10 years, in accordance with data retention requirements:

  • Pharmacovigilance
  • Tax information
  • Regulatory compliance
  • Staff file

For legal or regulatory reasons, it is possible to keep personal data longer than 10 years


X. Privacy of personal data
By using technical measures such as:

  • Anonymization
  • Nickname
  • Encryption
  • Fire walls
  • And organizational measures, such as:
  • Strict access policy
  • Confidentiality
  • Education
  • Control procedures
  • Update / upgrade procedures

The company maintains a system of protection of privacy and personal data in accordance with this Privacy Policy.


XI. Rights of Individuals
Access to the Personal Data of the Individual
1. Submit a copy of the personal data to the email address …………………… ..
2. Submit a personal data correction request
3. Submission of a cancellation request (right to be forgotten)
4. Submission of opposition (right to object)
5. Applying for “direct marketing” purposes
6. Submit a request for restriction of the processing of personal data
7. Submit a data portability application
8. Withdrawal of consent for the processing of personal data at any time


XII. Right of complaint
Right to lodge a complaint at the email address …………………… and to the Privacy Authority


XIII. Amendments to the Privacy Policy
The Privacy Policy update refers to the site ………………… with the corresponding revision date at the end of the Policy


XIII. Cookies
Our site uses cookies
This Privacy Policy applies from …………….
The General Regulation (GDPR) 2016/679 shall apply from 25.5.2018