The website www.demo.gr (hereinafter “Website”) is committed to the protection of your personal data. Therefore, it takes any necessary and proportionate measures to protect, secure and maintain the integrity and availability of your data.
By using www.demo.gr, you accept the terms of this Privacy Policy. If you do not agree to the terms of this Privacy Policy, you should not use the Website. Your use of our website following any changes to this Privacy Policy constitutes your acceptance of those changes.
The Data Controller for the personal data collected and processed based on this Policy is the company DEMO S.A. Pharmaceutical Industry headquarted in the 21st km National Road Athens-Lamia, 14568, Kryoneri, Attica and VAT Nr. 094041553 (hereinafter “the Company” or “we”)
This Policy applies both to the website www.demo.gr and the microsite www.supplements.demo.gr.
Data that we collect about you
We collect personal data from you only under 3 occassions:
- When you subscribe to our newsletter, we collect your e-mail address.
- When you send your CV willing to work with the Company, we collect all personal data you have chosen to include in your CV.
- For health professionals, who wish to sign up as users in our Website, we collect their full name, phone number, email address and occupation.
Data we collect by automated means
When you use our website, your device automatically provides us with data so that we can serve and tailor our response to you. The type of information we collect via automated means generally includes technical information about your device, such as the IP address or other device identifier, the type of device you are using, and the version of the operating system.
The data we collect may also include usage information and statistics about your interaction with the website.
We encourage you to read our Cookies Policy carefully to learn more about Cookies, how to use them and how you can control their use.
Purpose and legal bases of personal data processing
We use data for the following purposes: website function, improvement of website services, assessment of job candidates, newsletter promotion and health professionals access to medicine provided only under medical prescription. We also collect some information for the development of statistics related to the use of our website.
The legal bases for the processing of your personal data under the General Data Protection Regulation (EU 2016/679) are the following:
- Contract: processing is necessary to take action at the request of the prospective contractor prior to the signing of the contract. This legal basis is used for the processing of CVs.
- Legitimate Interest: processing is necessary in order for the website to protect its legal interests (i.e. to safeguard its prompt operation and security).
- Consent: When none of the above legal bases applies, demo.gr will process personal data of visitors based on their legal consent (i.e. for sending a newsletter).
- Legal obligation: The Company shall not promote or advertise medicine which may be provided solely with medical prescription, according to Greek Governmental Decision 32221/2013, article 120. For this reason, the Company provides access to this medicine only to health professionals, who create an account at the website for this reason. The personal data provided by the health professionals to the Company for the creation and use of the account, is processed by the Company based on its legal obligation.
Data Retention
We keep your personal data for the following time:
- When you subscribe to our newsletter or/and as a health professional-user at our Website, we keep your data until you decide to withdraw your consent for the newsletter subscription, delete your user account or ask us to delete your data.
- When you send us your CV, we keep it according to our CV Policy to contact you in case a future job opening is suitable for you.
- For the data we collect using automated means, please consult our Cookies Policy.
We keep your personal data for as long as your contractual relationship with demo.gr lasts. As soon as you do not renew your subscription, your profile will be deleted from the website after two years. This will be done in order to comply with any possible legal obligation and in addition, in case you want to re-contract with the services of the website you will not have to submit your answers to the questionnaire, unless there has been a significant change.
The comments and opinions of users that they share with the website demo.gr, we can maintain without time-bound restrictions for the purposes of improving the provision of our services and our marketing.
We shall retain additional communication data, that the data subject has provided with his consent, in order to receive informative material from the website, until the relevant consent is revoked.
Recipients of your data
We transfer your data only to third parties-data processors, when it is necessary for the sole purpose of providing our services. Your data may need to be available to the staff of the Company, and the website developers, namely Brands Lab, which is an external partner. Brands Lab acts as a data processor in these cases.
The Company’s staff access is graded based on their role and duties in the Company. All persons with access to personal data are bound by the obligation of confidentiality and due process.
Moreover, we process your CV through the platform of Workable Software Limited, which provides us with personnel management services. Workable Software Limited acts as data processor. It retains and transmits your personal data in servers based in the USA, having standard contractual clauses in place with the Company for such data processing activities.
Please note that your personal data may be disclosed, in any case where we are required to do so under the applicable law or when necessary for the purposes of our legitimate interests or in case which it is processed by our partners or third parties (such as cloud services), always ensuring that the guarantees for their security and protection are met.
Contact with the Company
The communication with the Company can be done either through post or email at the addresses provided in our Website.
Only our authorized staff, who is bound by confidentiality clauses or by a regulatory obligation of confidentiality, have access to the letters and emails. We keep the letters and emails for archiving purposes unless you ask us to delete them.
We do not forward messages to third parties which we receive on our platform without the explicit consent of the sender.
Cases in which forwarding to third parties or not deleting the emails we receive is necessary to comply with our obligations arising from the law or to establish, exercise or support legal claims, shall be regarded as the only exception.
We use email service providers based in Greece. Therefore, our emails are subject to the legal access allowed under the Greek law.
Technical Measures of the Website
We work with the domain and email service provider, Brands Lab, to ensure that your personal data is protected. Brands Lab keeps the data of our website in European Territory, therefore the data protection is governed by the European legislation.
Brands Lab operates as the processor of your personal data, while demo.gr is the data controller.
Our website uses an encryption system (SSL) to ensure greater security during your navigation.
Our website may include hyperlinks, which redirect to third-party websites. These websites are not subject to the control of our website and therefore, we cannot guarantee that the privacy policy of these websites is in line with ours. We encourage you to carefully read the policies and terms of usage of these websites.
Social Media
The Company uses social media to promote its services.
This policy does not apply when you use social media to get in touch with our website. Instead, the processing of your personal data is subject to the privacy policy of the said social media. We advise you to read the social media privacy policy carefully before using them.
Your rights
| You have the following rights regarding your personal data | |
| Right to information | You have the right to be informed about the collection and processing of your personal data |
| Right to access | You have the right to receive confirmation from us as to whether or not your personal data is being processed and, if so, you have the right to access your personal data in a concise, comprehensible, transparent and easily accessible form. |
| Right to correction | You can request and we will ensure that without undue delay we will correct inaccurate or incomplete personal data, including via a supplementary statement. |
| Right to erasure | You have the right to ask us to delete the personal data that concern you, without undue delay and we will proceed with the deletion, under the conditions set by the law. |
| Right to processing limitation | You have the right to ask us to limit processing activities to specific purposes only, subject to the conditions set by the law. |
| Right to object | You have the right to object, at any time and for reasons related to your particular situation, to the processing of personal data concerning you. We will no longer process personal data unless there are compelling and legitimate reasons for processing that override your interests, rights and freedoms or to establish, exercise or uphold legal claims. |
| Right to data portability | You have the right to receive the personal data concerning you, which you have provided us with, in a structured, commonly used and machine-readable format, as well as the right to request the transfer of such data to another processor without objection from us under the conditions set by the law. |
| Right to human interference | You have the right to not be subject to a decision made solely on the basis of automated processing, including profiling, which produces legal effects that concern you or significantly affect you in a similar way. |
If you have any questions about this privacy policy or would like to request clarification or would like to exercise any of your rights, please contact us at dpo@demo.gr
We will respond to your request within thirty (30) days of receipt. In case an extension of the above deadline is required for the investigation and / or processing of your request, we will inform you, explaining the reasons why the extension of the deadline is necessary.
In any case, if you feel that the protection of your personal data has been violated in any way, you have the right to file a complaint to the Hellenic Data Protection Authority (www.dpa.gr).
Last Amendment: 22/3/2021