The company MED PAP recognizes the importance of the issue of security of your Personal Data as well as your electronic transactions and takes all necessary measures, with the most modern and advanced methods, to ensure your maximum possible security. MED PAP has taken all necessary steps to fully comply with the General Data Protection Regulation 2016/679 (GDPR) and to be able to guarantee the security of all information related to your personal information and your transactions.
Personal data, according to the definition given in Article 4 of the GDPR, is the information that can be used to identify you and to contact and trade with you, mainly your name, your postal address, your email address, your phone number, and other information when combined with your personal information.
MED PAP, in the context of its business activities, processes the personal data of its customers and partners and is the Processor in accordance with the definition given in Article 4 of the General Regulation on Personal Data Protection 2016/679.
Personal data protection is governed by the new General Regulation on Personal Data Protection 2016/679, which is the new regulatory framework of the European Union (EU) in the field under consideration. The purpose of the law is to establish the conditions for the processing of personal data, the protection of the rights and freedoms of natural persons and in particular the right to the protection of personal data.
1.1 Collection of your personal data.
The med-pap.gr website is designed so that users can visit it without having to reveal their identity and without having to provide personal data unless they wish to do so. During your visit to the page of med-pap.gr we will need to collect and process some of your personal data in order to offer you specific services and to be able to adequately meet your needs. More specifically:
Personal data from the use of electronic services on our website.
We may also collect other information about you, your device or the use of the Services in the manner we describe at the collection point or otherwise with your consent. You may choose not to provide us with certain types of information, but your ability to use certain services may be affected.
Third part personal data
As part of the legitimate interest of MED PAP, it is of interest to its customers to purchase products and services. We may process information published on the Internet in search engines and social media applications (Google, LinkedIn, Facebook, Twitter, Instagram), in order to create personalized promoting and informing the potential customer by phone and / or email for the above commercial purpose. MED PAP has accounts on various social media sites such as Facebook,Instagram, etc., which often include functionality so that you can express your liking, share or comment on our posts, or participate in competitions through third-party social networking applications. These social networking applications can collect and use information about the use of our website by you. Any personal information you provide through such social networking applications may be collected and used by other members of that application to interact with your emails, and in general the messages you send us through social networking applications, details of your communication with our company. , such as date, time and reason for contacting us, device IDs or other unique IDs. and these exchanges are governed by the privacy policies of the companies that provide each social networking application. Legal basis is the voluntary publication of your information in search engines and your registration in socialmedia services where they are obtained as explicit consent for the publication of information depending on the settings of the applications you manage. MED PAP does not control or be responsible for the way in which these social networking applications collect and process your personal data. If you decide to take part in a competition run by MED PAP on a social networking platform, you may need to fill out some personal information in order to be eligible for the competition and let us know if you win.
Personal data for commercial transactions.
We keep in our information systems a file of your transactions with our company, contracts with our customers and suppliers, personal data on trade transactions (sales, purchases, payments, etc.), contact details for these processes and information about with the exhibitions we conduct.
In short, we only ask for as much information as we need to enjoy a unique shopping experience, consistent delivery of the products you ordered, secure payment of your order and personalized service based on your needs and preferences.
The legal basis for keeping and processing a file with your personal data from MED PAP is your explicit and free consent which is granted with the voluntary completion of your personal data, the execution of contractual obligations, the execution of legal obligations as well as the legal interest of MED PAP.
1.2 Access and Use of Your Personal Data.
Any personal data that you declare anywhere on the pages and services of the websites med-pap.gr, are kept exclusively for reasons related to your transactions with us, the improvement of the services provided and the assurance of the operation of the respective service and not may be used by any third party (except where provided by law to the competent authorities only). MED PAP cannot share your personal information with others without your consent, unless this is legally required. Please note that you may, under certain conditions permitted or required by law or on the basis of a court order, collect, use, and disclose your personal data, which has been collected online, without your consent.
The same basic principles that govern classic transactions apply in the case of e-commerce.
All information transmitted by the user / member to MED PAP is confidential and MED PAP has taken all necessary measures to use it only to the extent necessary in the context of the services provided. For your own safety, you should also handle all information provided by the service as confidential and confidential and not disclose it to third parties.
1.3 Basic principles of processing your personal data.
The processing of your personal data takes place in a legal, fair and transparent manner
The collection of your personal data takes place only for defined, clear and legal purposes
Gathering your personal data is sufficient and relevant
Personal data is accurate and up to date
Inaccurate personal data is corrected or deleted
Personal data remains confidential and securely stored
Your personal data will not be shared with third parties unless it is necessary to provide services for them by agreement
In case of violation of your personal data, MED PAP will notify the incident immediately to the Personal Data Protection Authority, and if necessary to you and will take all reasonable measures to prevent / limit your further damage.
1.4 Duration of processing your personal data.
processing is required by provisions of the applicable legal framework, your
personal data will be stored for as long as the relevant provisions require.
When processing is performed under a contract you have entered into with us (eg
ordering, selling), your personal data will be stored for as long as is
necessary for the performance of the contract and for the establishment,
exercise, and / or support of legal claims based on the contract. For the
purposes of promoting products and services (marketing activities), your
personal data is kept until the Opt-out of your consent, which can be made by
you freely and at any time.
1.5 Your rights.
Right to information:
You have the right to be informed about the identity and contact details of us or our representatives, the contact details of the Data Protection Officer (DPO), the processing purposes for which the personal data is intended, and the legal basis for the processing. , recipients or categories of recipients of personal data. As part of the principle of transparency governing the operation of MED PAP, you can contact us by requesting further information on how to process your personal data and how to exercise your rights, by submitting the relevant requests. The answer to your requests will be made without delay and in any case within one month from the receipt of the request. This period may be extended by another two months, if required, taking into account the complexity of the request and the number of requests.
Right of access:
You have the right to be aware of and verify the legality of the processing and to request copies of the personal data submitted for processing. So you have the right to access the data and receive additional information about its processing. You also have the right to access more specific information about the content and manner of exercising your individual rights.
Right of correction:
You have the right to study, correct, update or modify your personal data.
Right of deletion:
You have the right to request the deletion of your personal data when we process it with your consent or in order to protect our legitimate interests. In all other cases (such as when there is a contract, an obligation to process personal data required by law, in the public interest), this right is subject to certain restrictions or does not exist depending on the case (eg we have the right to refuse to delete personal data). your data for the purpose of establishing, exercising or supporting our legal claims).
Right to restrict processing:
You have the right to request the restriction of the processing of your personal data in the following cases: (a) when you question the accuracy of personal data and until verified, (b) when you object to the deletion of personal data and request instead of deleting the restriction on its use, ( c) when personal data is not required for the purposes of processing, however you are required to establish, exercise, support legal claims, and (d) when you object to the processing and until it is verified is that there are legitimate reasons that concern us and supersede why oppose the processing.
Right to object to the processing:
You have the right at any time to object to the processing of your personal data in cases where, as described above, this is necessary for purposes of legitimate interests that we seek as editors, as well as for the purposes of direct information promotion. In particular, you have the right to oppose any decision taken solely on the basis of automated processing, including the preparation of a profile, which produces legal effects that affect or significantly affect you. Exceptionally, you may not object to the automatic decision-making of you when that decision is either necessary for the conclusion or performance of the contract we have entered into with you, or is based on your express and free consent.
Right to portability:
You have the right to receive your personal data free of charge in a form that will allow you to access, use and process it with the commonly used processing methods. You also have the right to ask us, if technically possible, to transfer the data directly to another controller. This right exists for the data that you have provided to us and their processing is carried out by automated means based on your consent or in execution of a relevant contract.
2. The security of our e-shop.
2.1 Customer Recognition.
There are two codes used for your identification: the E-mail code and the Personal Secret Code, which provide you with absolute security in your personal information every time you register them.
You are given the opportunity to change your Personal Secret Code and your e-mail address as often as you wish. The only one who has access to your data is you through the above codes and you are solely responsible for maintaining its confidentiality and concealment from third parties. In case of loss or leakage, you must notify us immediately, otherwise the online store of MED PAP is not responsible for the use of the secret code by an unauthorized person. For security reasons, we recommend that you change your password at regular intervals and avoid using the same and easily detectable passwords (eg date of birth). We also suggest that you use not only letters and numbers but also symbols and password creation.
2.2 Controlled Access (firewall).
Access to MED PAP systems (servers) is controlled by a firewall, which allows the use of specific services by customers / users while prohibiting access to systems and databases with confidential information and company information.
3. Renewals and changes.
The website med-pap.gr is constantly updated and expanded both functionally and in terms of products and services, thus renewing the current privacy protection policy of transactions. We recommend that you read this page at regular intervals in order to be informed of any changes in the content of this Civil Protection. Unfortunately, no security system is 100% secure. Therefore, we do not assume responsibility for access, alteration or loss of your personal data due to external factors beyond our sphere of influence or for reasons of force majeure. By using this website, or by providing us with personal information in any way, you agree that we may contact you electronically regarding security, confidentiality and administrative matters relating to the use of the Website by you.