Data protection

MEDCAN Investments S.A. LICENSE PRIVACY STATEMENT

for Providers of Products and Services / Suppliers

 

This Privacy Policy (the Policy) applies to MEDCAN Investments S.A. Katerini (hereinafter referred to as MEDCAN S.A.) with its registered office in Katerini (Marinou Antupa 23

Postal code: 60100) and the personal data (the Data) that MEDCAN S.A. holds about natural persons who are providers of products and services/suppliers. Information about companies and other entities is not covered by the purpose of this policy.

 

WHO IS THE DATA CONTROLLER?

MEDCAN S.A. is the data controller for the data of its product and service providers/suppliers. MEDCAN S.A. collects and processes this data.

 

WHAT KIND OF DATA WE COLLECT

MEDCAN S.A. collects and processes the following categories of data:

 

(a) Contact data (e.g. full name, address, telephone number, email address, etc.),

(b) Contract data (e.g. type and number of contracts, etc.),

(c) Personal and account data (e.g. VAT number, bank details, billing details, etc.),

(d) Social and demographic data (e.g. occupation, etc.),

(e) Transactional behaviour data (e.g. financial transactions, payments, complaints, recorded calls, etc.),

(f) data on politically exposed persons (PEPs) and criminal convictions and offences, seizures, confiscations and attachments of assets, solely in accordance with the law. 4557/2018 on the Prevention and Combating of Money Laundering and Terrorist Financing (Official Gazette A‘ 139/20.07.2018) and any other relevant legislation.

 

WHAT ARE THE PURPOSES OF THE PROCESSING AND THE LEGAL BASIS FOR THE PROCESSING OF THE DATA?

MEDCAN S.A. processes the data itself and/or third parties at the request and on behalf of MEDCAN S.A. for the following purposes:

(a) Conclusion and performance of a contract with MEDCAN S.A., including communications related to purchasing procedures, tendering procedures and negotiations [Article 6(1)(b) of the General Data Protection Regulation – GDPR],

(b) Compliance with MEDCAN S.A.’s legal obligations and compliance with MEDCAN S.A. Group rules, in particular in relation to tax laws and anti-corruption, anti-fraud and anti-money laundering laws [Article 6(1)(c) of the GDPR],

(c) to prevent, deter and prosecute unlawful activities [Article 6(1)(c) of the GDPR],

(d) to safeguard the legitimate interests of MEDCAN S.A. and to establish, exercise or support legal claims in connection with procurement processes, tendering procedures and the conclusion and performance of contracts with MEDCAN S.A.. (Article 6(1)(f) DSGVO).

 

WHO ARE THE RECIPIENTS OF THE DATA

The data collected by MEDCAN S.A. will be transferred to the following categories of recipients, provided that the lawfulness of the transfer is justified:

(a) Any person who entrusts MEDCAN S.A., in its capacity as data controller within the meaning of the General Data Protection Regulation and the relevant national legislation in force from time to time, with all or part of the processing of the data on its behalf and at its request in accordance with the law,

(b) lawyers, notaries and bailiffs in the performance of their duties and auditors and accounting firms,

(c) companies affiliated with MEDCAN S.A., including and the other companies of the MEDCAN Group that provide services to MEDCAN S.A. in connection with purchase transactions, within the scope of their competences and in accordance with the provisions of the Law on the Transborder Circulation of Personal Data, where applicable,

(d) any supervisory authority required under the applicable supervisory framework,

(e) any public or judicial authority where required by law or court order.

 

TRANSFER OF DATA TO THIRD COUNTRIES

MEDCAN S.A. processes data within the European Union. If the data is processed in countries outside the European Union, MEDCAN S.A. shall ensure that the data is processed in accordance with the European level of data protection, applying the conventions in force in the European Union, including appropriate technical and organisational measures.

 

HOW LONG WE STORE THE DATA

MEDCAN S.A. will retain data for as long as the relevant processing purpose and any other permissible related purpose requires (e.g. if it is to defend a lawsuit brought against MEDCAN S.A.). Information that is no longer necessary will either be irretrievably anonymised (and anonymised information may be retained) or securely destroyed.

Specifically, information will be retained throughout the duration of your business relationship with MEDCAN S.A. and after its expiration or termination for as long as claims may be brought by the parties under applicable law or, in the event of a claim, until a dispute is irrevocably resolved.

 

WHAT RIGHTS YOU HAVE AS A DATA SUBJECT AND HOW TO EXERCISE THEM

You have the right to request access to your data, rectification/deletion and/or restriction of the processing of your data at any time, as well as the right to object to the processing and/or exercise your right to data portability.

MEDCAN S.A. will consider your request and respond to you within one (1) month of receipt of the request or, taking into account the complexity of the request and the number of requests, within three (3) months at the latest.

If you have a complaint about MEDCAN S.A.’s use of your data, you can contact the Data Protection Authority (1-3 Kifissia Avenue, Athens 115 23, Athens 115 23, telephone: +30 210 6475600, e-mail: contact@dpa.gr, www.dpa.gr).

To exercise your rights, you can contact MEDCAN S.A. at the contact details below.

 

CONTACT INFORMATION OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER

If you have any questions about the processing of your data or wish to exercise any of the above rights, you may contact MEDCAN S.A. by email at info@medcan.gr and/or by post at:  MEDCAN INVESTMENTS S.A., Marinou Antupa 23, Postal code: 60100

Katerini, Greece

You may also contact the MEDCAN S.A. Data Protection Officer directly.

 

The provision of data is voluntary. However, if you do not provide it, you will not be able to participate in purchasing and/or tendering procedures or enter into a contract with MEDCAN S.A..

 

© MEDCAN S.A. 2021