Website Privacy and Personal Data Protection Policy

The company under the name “BENNETT PHARMACEUTICAL S.A.”, with headquarters in Kifissia, Agias Kyriakis 20, VAT number 999644230 and D.O.Y. FAE ATHENS, (hereinafter: "Company"), acts as a "Processor" and processes personal data, as defined in the General Data Protection Regulation (EU) 679/2016 mainly of customers, visitors to the Company's website, employees and suppliers.

For definitions regarding the protection of personal data, as well as the entirety of the General Personal Data Regulation (EU) 679/2016, follow the link below:

https://eur-lex.europa.eu/legal-content/EL/TXT/?qid=1529570717319&uri=CELEX:32016R0679

The website http://www.bennett.gr/ is the website of the Company, of which it is the exclusive controller and is responsible for the personal data you submit to us, as well as for the management of your personal data in accordance with the current General Data Protection Regulation (EU) 679/2016 on personal data protection. The content of the website is informative about the Company's products.

By using our website, we may receive and process the personal data of our contact form, i.e. name, email address, as well as the free text you type, while the legal basis for processing said data is your consent.

In addition, the Company processes personal data for the following purposes:

1. Employee management,
2. Customer management,
3. Supplier management,
4. Third party management,
5. Find staff
6. Pharmacovigilance management
7. Sales promotion.

The processing of your above personal data is based either on the performance of a contract, or on the fulfillment of the Company's legal obligations, or on its legitimate interest.

The personal data processed are as follows:

1. Basic Data of a Natural Person (phone, address, email, name, job, etc.)
2. Unique identifiers (e.g. ADT, AMKA, VAT number, badges, etc.)
3. Financial data (eg IBAN, etc.)
4. Health data (e.g. sick leaves, etc.)

The above personal data will be accessed exclusively by the authorized employees of the Company, as well as collaborating companies for the support of the Company's website, which have been bound by confidentiality clauses.

We process the personal data we collect on our own and never dispose of, or share, or announce to third parties, or trade personal data. Recipients of your data may be third parties, i.e. official government and supervisory bodies (e.g. prosecuting and prosecuting authorities, supervisory authorities, etc.), when we are required to comply with the law.

Your personal data is kept by the Company only for as long as required by law

It should be noted that the Company does not do automated individual decision-making including profiling

We do not send your data outside the European Union (EU). Your personal data is stored and processed only within the EU

We protect and ensure your rights regarding the use of your personal data. In particular, you can:

1. be informed by us if we are processing your personal data and to receive a copy,
2. correct the personal data you have provided to us,
3. restrict the processing of your personal data (a) when you question the accuracy of the personal data and until we verify it, (b) when you object to the deletion of personal data but do not wish it to be deleted, (c) when the personal data is not necessary for the purposes of processing, they are however necessary for the establishment, exercise, support of legal claims, and (d) when you object to the processing and until it is verified that there are legitimate reasons that concern us and override the reasons for which you object to the processing.
4. request the transmission of your personal data to another Controller,
5. object at any time to the processing of your personal data when it is necessary for the purposes of legitimate interests, as well as to automated individual decision-making including profiling,
6. delete your personal data (note that if their deletion is impossible to fulfill regulatory obligations, we will inform you accordingly)
7. withdraw the consent you have given us at any time, without prejudice to the lawfulness of the processing that was based on your consent before you withdrew it.

You can exercise your rights by applying to the following address: bennett@bennett.gr.

Our response to your request will take place within (1) one month of receiving it. In case we need an extension of two (2) months to respond to your request, due to its complexity or the large number of requests we will inform you as soon as possible.

Our website is not addressed to minors under the age of 16. In case of use of products or services we offer you by a minor under 16 years of age, we require the express consent of the parent, before processing the personal data of the minor.

You have the right to appeal to the Personal Data Protection Authority for issues related to the processing of your personal data. For the Authority's competence and how to submit a complaint, you can visit its website (www.dpa.gr - > My rights -> File a complaint), where detailed information is available.

This Privacy Policy was posted on the company's website on 9/24/2019 and supersedes a previous posting/version.

4. How can I manage cookies?