Business Associates Privacy

________________________________________

Information provided pursuant to articles 13-14 of the 2016/679 European Regulation (GDPR) to our Business Associates

We inform you that, Rafarm S.A. Pharmaceutical Industry processes information relating to you, which constitutes personal data.
Rafarm S.A. is located in 12 Korinthou Str., 15451, N. Psihiko, Athens.
Rafarm S.A. is data controller, since it determines the purposes for which and the means by which personal data are processed.

1./ Nature of data processed

The data, that are acquired directly from you or the company for which you are working and are processed by Rafarm S.A. shall include but not be limited to the following:

a. identification details (e.g. name, sex, address, E-mail address, phone number, tax number, relevant taxation authority)

b. professional status (title, position, company’s name). For health professionals: Curriculum vitae (education and training, medical specialisation, publications, awards)

c. personal data that you or your company provide Rafarm S.A. during events that are organized by our company

d. pricing details

2./ Legal basis for the processing of your personal data

Your data are being processed only in case:

a. you have given consent to the processing of your personal data

b. processing is necessary for the performance of our contractual relationship or in order to take steps at your request prior to entering into the contract

c. processing is necessary for compliance with the legal obligations to which Rafarm S.A. is subject

d. processing is necessary for the purposes of the legitimate interests of Rafarm S.A., except where such interests are overridden by your legitimate interests or fundamental rights and freedoms.

3./ Purpose of the processing of your personal data

a. performance of a contractual relationship with you or the company for which you are working

b. provision of appropriate and up to date information regarding our products and services

c. compliance with legal obligations regarding quality and safety of drugs, as well as complaints’ management

d. protection of economic interests of Rafarm S.A.

e. invitation to participate in events or meetings

f. offering support to you or the company for which you are working

g. billing

h. fulfillment of any obligations imposed by the current legislation

4./ Duration of the data processing

Rafarm S.A. will process your personal data for the time necessary to fulfill the aforementioned purposes or to comply with its legal/ regulatory obligations.
The contracts are being retained for each contract’s duration and till the expiry of the limitation period of the legal claims based on the contract.

5./ Who has access to your personal data?

a. personnel of Rafarm S.A., including the personnel of Rafarm group of companies

b. independent agents and brokers of Rafarm S.A. (if there are any)

c. suppliers and service providers of Rafarm S.A.

d. ΙT services providers

e. external legal counselors of Rafarm S.A., in any case their contribution is required

The above mentioned third parties have a contractual obligation to protect the confidentiality and safety of your personal data, in accordance with the current legislation.

Your personal data shall be transferred to any national or international authority, entity or court, where this is required by current legislation.

6./ Your rights

You have the rights to:

a. obtain confirmation as to whether or not your personal data are being processed, and, where that is the case, access to those personal data

b. obtain rectification of inaccurate personal data concerning you

c. obtain the erasure of your personal data (right to be forgotten), where certain grounds apply, as provided for in art. 17 of the Regulation (EU) 2016/679

d. obtain restriction of processing of your personal data, where certain grounds apply, as provided for in art. 18 of the Regulation (EU) 2016/679

e. receive the personal data concerning you and transmit those data to another controller, where certain grounds apply, as provided for in art. 20 of the Regulation (EU) 2016/679

f. object at any time to processing of your personal data which is based on consent

g. withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

h. lodge a complaint with a supervisory authority.

Should you have any further questions regarding the processing of your personal data, you may contact Rafarm S.A. at the e-mail address: privacy@rafarm.gr