Privacy Policy

The Website https://www.bioanalytica.gr, hereinafter referred to as the “Website”, is managed by the company under the name “BIOANALYTICA COMMERCIAL BIOTECHNOLOGICAL APPLICATIONS – RESEARCH SOCIETE ANONYME” (3A-5 Ilision St., P.C. 115 28, Athens), hereinafter referred to as the “Company”, which acts as the Data Controller for personal data.

The Company takes the protection of your privacy and personal data very seriously and has implemented all necessary measures to safeguard the security and confidentiality of the information concerning visitors/users of the Website.

Please read this Website Privacy Policy carefully to understand the types of information collected from you when you visit and use the online services of the Website, the information posted on it, how this information is used, and your rights.

This Policy serves as a notice to data subjects in accordance with Articles 13-14 of the General Data Protection Regulation (EU) 679/2016 and Law 4624/2019 (Government Gazette A’ 137/29.08.2019) regarding the personal data collected by the Company through its Website.

WHAT INFORMATION DOES OUR WEBSITE COLLECT?

Our Website is primarily informational, providing details about the Company’s activities and services. Therefore, simple browsing of our Website does not require visitors to provide or input personal data, as long as they do not wish to use the offered services.

INFORMATION COLLECTED FROM THE USE OF COOKIES (TRACKERS)

WHAT ARE COOKIES (TRACKERS)?

Cookies (trackers) are small files of information that a website stores on a user’s or visitor’s computer. Each time the user connects to the website, the site retrieves this information and provides relevant services. A common example of such information includes a user’s preferences on a website, as indicated by their choices on that site (e.g., language display preferences). The information stored may be transferred to our servers or the servers of related third parties during a subsequent visit.

Our Website uses cookies (trackers) to ensure that your visit to our site is as pleasant as possible and for advertising purposes during future visits to other websites.

Our Website uses the “Cookiebot” cookie management tool, which informs you about the cookies (trackers) in use. If certain cookies are not essential for your browsing experience, Cookiebot allows you to choose whether to accept their use. Detailed information about each cookie, including its name, category, purpose, storage duration, and provider, can be found by clicking “view details” on the second level of the consent dialogue.

Additionally, you can view and manage cookies (trackers) in your browser settings (note that mobile browsers may not offer this visibility). Below are links to information on managing cookies (trackers) for different browsers (Microsoft Edge, Internet Explorer, Mozilla Firefox, Google Chrome, Safari, Opera).

 

INFORMATION YOU PROVIDE DIRECTLY

We collect the following contact information to communicate with you regarding your requests.

Contact Form:

• Full Name
• Phone Number
• Email
• Message (free-text field for the user’s inquiry)

We collect the following details to have a representative contact you about the product or service you are interested in.

Expression of Interest Form:

• Full Name / Company Name
• Phone Number
• Email

We collect the following information to communicate with you regarding the resume you submitted.

Resume Submission Form:

• Full Name
• Phone Number
• Email
• Field for uploading your resume
• Description of the position you are applying for (free-text field)

Since free-text fields are used, we kindly ask you to keep your comments polite and non-offensive. Comments with racist or offensive content will be securely deleted immediately, with no possibility of recovery.

Forms must be submitted by the individual concerned or by their legally authorized representative.

 

COLLECTION OF EMAIL ADDRESSES FOR MARKETING PURPOSES

If a visitor/user of the Website wishes to receive newsletters from the Company, they are invited to fill in their details in the appropriate field on the website. The following information is collected:

• Full Name
• Email Address
• Organization (if applicable)

The Company collects and processes the above data to communicate with you regarding products, services, events, programs, and promotions (such as by sending notifications, promotional material, newsletters, and other marketing communications).

The above information can also be collected when you register for webinars and other events organized by the company.

PROCESSORS OF THE DATA

The processing of your personal data is carried out exclusively by the relevant employees of the company. The company may also utilize other parties (data processors) for processing purposes, who are obligated to perform only the processing that is requested in accordance with this policy and relevant legislation. The data processors are bound by Regulation 2016/679/EU (GDPR) and their contractual agreement with us, ensuring data security and processing in line with the consent you provide. If the transfer of data to processors located outside the European Union is required, our company follows the provisions of the Regulation concerning the transfer of data outside the EU to ensure that processing is conducted in compliance with the law and your consent. The company has taken all necessary measures to ensure that your data is secure and that access to it is restricted in accordance with the law.

CONSENT

In cases where the processing of personal data is based on your granted consent, as described above, a copy of the provided consent statement, including all the details contained therein, is retained as evidence of the consent granted and to facilitate any request for its withdrawal. Consent is given for specific, clear, and distinct purposes that have been communicated to you in advance, and from the moment you grant it, you are fully informed about these purposes.

You have the right to withdraw your consent at any time, as described in the section “YOUR RIGHTS.” The withdrawal of consent does not affect the legality of processing based on consent before its withdrawal.

RETENTION PERIOD OF INFORMATION

The Company will retain the personal data collected through its Website for the strictly necessary period to fulfill the purposes of processing outlined above and to comply with its legal obligations, in accordance with legislative requirements. If you withdraw your consent for the collection and processing of your personal data, we will delete your data from our electronic and physical records, unless its retention is necessary to comply with a legal obligation according to the aforementioned, or for the establishment, exercise, or defense of our rights or legal interests before judicial or other authorities.

The company retains the data collected from the use of Cookies (trackers) according to the periods specified in the “Cookiebot” tool in the respective cookie logging tables.

The Company retains personal data from the newsletter registration form for a period of six (6) months from the last newsletter sent, unless the law provides otherwise. You may, if you wish, unsubscribe from the newsletter service easily by clicking the unsubscribe link at the bottom of the newsletters.

The Company retains personal data from the Contact Form and the Expression of Interest Form for a maximum period of one (1) year.

The Company retains data from the CV submission form for six (6) months from the last communication with the applicant.

These data can be deleted earlier if the applicant/interest party requests their deletion and if their retention is not necessary to comply with a legal obligation as data controllers.

The Company is committed to the secure destruction of your personal data without the possibility of recovery once the retention period has expired or after you submit a deletion request.

SECURITY OF INFORMATION

The security of your personal data is an absolute commitment for us. To achieve this, we implement all modern and appropriate technical and organizational measures suitable for the purposes of processing. We regularly monitor the effectiveness of these measures, including:

• SSL Protocol (Secure Sockets Layer): The SSL Protocol used by our Website is currently the global standard for the authentication of websites to users and for encrypting data between users and web servers. An SSL-encrypted communication requires that all information sent between a client and a server be encrypted by the sending software and decrypted by the receiving software, thus protecting personal information during transmission. Additionally, all information sent via the SSL protocol is protected by a mechanism that automatically verifies whether the data has been altered during transmission.
• Secure Data Handling: Personal data collected from the communication forms is sent encrypted and stored in the Company’s email or in a special program that our website uses to maintain a history of communications that have taken place. The processing of this data is carried out only by members of the Company and is not shared with third parties.

By implementing these measures, we aim to ensure the integrity and confidentiality of your personal data against unauthorized access, loss, or misuse.

YOUR RIGHTS

You have the right to exercise, as applicable, the following rights regarding your personal data:

• Right of Access/Information: To know if we are processing your data, which data we are processing, for what purpose, and who the recipients are.
• Right of Rectification: To correct any inaccuracies or incomplete data about you.
• Right of Erasure (Right to be Forgotten): To request the deletion of your personal data from our records, provided the processing is no longer necessary, or the retention of your data is not required to comply with legal obligations or to protect our legal interests before the courts.
• Right to Restrict Processing: To limit the processing of your data when there is a dispute over the accuracy of your data.
• Right to Data Portability: To receive your data in a structured, commonly used format or to have it transmitted to another controller.
• Right to Object: To oppose the processing of your data under specific conditions.
• Right to Withdraw Consent: To withdraw your consent at any time, without affecting the legality of the processing based on consent prior to the withdrawal.
• Right to be Informed: To be notified of any unauthorized or malicious activity within the Company’s data systems that may lead to unauthorized access to your personal data.

The Company does not use automated decision-making methods, including profiling.

The Company will make every effort to respond to your request within thirty (30) days from receipt. However, if the complexity of your request or the volume of information makes it impossible to satisfy your request within 30 days, the Company is committed to informing you in writing within this period of the reasons for the delay and to make every effort to fulfill your request as soon as possible, and in any case within two (2) additional months.

The Company reserves the right not to satisfy your request if it is deemed clearly unfounded or excessive and will inform you of the reasons for this.

In any case, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr, Tel: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr.

CONTACT

If you have any questions regarding this Policy or our privacy practices, or if you wish to exercise any of your rights, you can contact us at the following email address: dpo@bioanalytica.gr

CHANGES TO THIS POLICY

The Company reserves the right to modify this Policy in accordance with applicable privacy and data protection laws. Visitors to our Website should regularly review this Privacy Policy to stay informed about any updates. The Company is committed to notifying visitors and users through appropriate channels in compliance with the requirements set by the EU General Data Protection Regulation (GDPR) 679/2016.

Last modified on: 25/09/2024
Version: 1.0