PRIVACY POLICY
COMPANY NAME: KYROS KAVASAKALIS & SIA E.E – FAMILYPHARMACY.GR
ONLINE STORE: https://www.familypharmacy.gr
HEADQUARTERS: 7 Dimarchou Angelou Metaxa St., Glyfada, Athens, Postal Code 16675
CALL CENTER: +30 211 411 0579 / +30 211 800 1410
EMAIL: [email protected], [email protected]
Personal Data
The COMPANY is obliged to protect and properly manage the personal data of visitors/customers of the online store in accordance with the General Data Protection Regulation (GDPR – 679/2016) and the laws of the Greek state.
Purpose of Data Processing
To carry out any transaction through the online store and to place an order for the company’s products, certain personal information will be requested from the customer.
What data is collected in the online store?
When placing an order, identification and contact data such as the following will be requested:
- Full name
- Billing address (if different from the shipping address)
- Shipping address
- Contact phone number (mobile and/or landline)
- Email address (optional for guest customers / mandatory for customers with an account)
During a phone conversation, your personal data is processed, including basic identification details, contact information, and order management data, which are recorded through relevant software.
The company processes customer data in accordance with Article 7A, paragraph 1(b) of Law 2472/1997 and the European regulatory framework on personal data protection (GDPR), for the purpose of fulfilling each customer's order. Under no circumstances will this data be disclosed, published, or sold to third parties, unless required by law (Law 2225/1994) or due to obligations arising from the national implementation of Directive 24/2006.
Data Collection From Third Parties
When a visitor or customer browses the online store, the platform stores the visitor’s public IP address and browser type for user experience improvement and security purposes.
The online store uses the Google Analytics service to anonymously collect user visit data for statistical purposes.
It also uses the Google Adwords Pixel service to anonymously collect data for statistical purposes related to the use of Google Adwords.
Additionally, the Facebook Ads Pixel service is used to anonymously collect data for statistical purposes related to the use of Facebook Ads.
Recipients Of Personal Data
To fulfill obligations related to receiving and processing customer orders, and with the customer's consent, the online store authorizes the following recipients to process the data:
A) Authorized employees of the online store responsible for order processing, invoicing, and fulfilling all obligations arising from the contract between the customer and the store.
B) The online store collaborates with payment and shipping service providers (e.g., banks, money transfer services like PayPal, courier companies, etc.) necessary for business operations, data security, or customer service.
Electronic payment service providers include:
- EFG EUROBANK, through which customers can pay via credit card
- PAYPAL Inc, through which customers can pay via their personal PayPal account
These providers have access to customer order data only to the extent necessary for their services. They are required to use this data in accordance with this privacy policy and Greek data protection laws.
Credit card details used by customers are NOT stored on the online store’s platform, as the entire transaction is processed through EFG EUROBANK’s secure system.
The online store also collaborates with courier companies for the delivery of online orders:
Courier service providers include:
- ACS COURIER
- DHL Express (Hellas) S.A. – International Courier Services
- SKYNET World Wide Express
- BOX-NOW
These providers have access to customer order data only to the extent necessary for their services and are required to use the data in accordance with this privacy policy and Greek data protection laws.
The online store uses customer information submitted during the ordering process to contact them regarding:
- Delivery of the order to the shipping address
- Order confirmation and customer identification
- Order processing/cancellation due to product unavailability
- Updates on new products
- Notifications about special offers from www.familypharmacy.gr
- Prize delivery following contest draws
You may choose whether or not to receive such communications by sending your request via email to: [email protected].
During phone conversations, your personal data is processed, including identification details, contact information, and order management data, which are recorded through relevant software.
Providing personal data implies the customer’s consent for the online store staff to use this data for the aforementioned purposes.
Under no other circumstances will the online store share your personal data without your prior consent, unless required by law.
The online store requires its employees and technical staff to provide users/customers with the level of security described in this Privacy Policy.
Legal Basis for Processing Your Personal Data
Depending on the case, the legal basis for processing your personal data may be:
- The necessity of processing your data in the context of fulfilling our contractual obligations or during the pre-contractual stage before entering into a service agreement.
- Compliance with a legal obligation, particularly those arising from tax legislation.
- The consent you provide under the specific conditions set by the regulatory framework, in order to receive updates about products, offers via third-party platforms (e.g., newsletters, etc.).
Please note that under certain conditions, the collection, use, and disclosure of your personal data collected online may be permitted or required by law or court order without your prior consent—for example, in the case of a request by judicial authorities.
The personal data provided by the customer to the online store is used exclusively by the store or its affiliated businesses for the purpose of supporting, promoting, and fulfilling the transactional relationship.
Data Retention Period
The COMPANY retains electronic order data for tax purposes in accordance with applicable tax law. Customer data is stored in the information system in compliance with current legislation, including provisions related to data security, confidentiality, and the principle of lawful processing.
Customer Rights
The customer, within the framework of telecommunications privacy legislation, has the rights to information and objection as provided in Articles 11 to 13 of Law 2472/1997.
By accepting this policy, you explicitly consent to the collection and processing of your personal data as described above. Without this consent, we cannot provide our services. You may withdraw or modify your consent at any time (Article 2(i) of Law 2472/1997 and Article 7 of Regulation 679/2016). We reserve the right to amend the terms of this privacy policy without prior notice, in accordance with the applicable regulatory framework.
If you wish to contact the Data Protection Officer, please email: [email protected].
Data Transfers to Third Parties
The company transfers personal data to third parties who are assigned to process data on its behalf. Specifically, and depending on the case, it may transfer information such as full name, address, phone number, etc., to third-party partners for the purpose of fulfilling the transactional relationship.
In such cases, the company remains responsible for the processing of your personal data and defines the specific terms of processing. It also signs a special agreement with the third parties to ensure that processing is carried out in accordance with the applicable legal framework.
By providing your consent, you declare that you are over 16 years of age. If you are under 16, you may use our website only with the participation and approval of a parent or guardian.
Customer Rights Overview
Customers who have created a profile or placed orders through the online store have the following rights:
-
Right to Data Correction – Customers can log in with their credentials and, via the "MY ACCOUNT" menu, update their personal data (name, surname, email, phone numbers) and change their password.
-
Right to Object to Data Processing – If a customer objects to the processing of their data, the COMPANY reserves the right not to proceed with the execution or delivery of any order, as the data is necessary for the formation and operation of the contract.
-
Right to Data Portability – Customers can log in and export their personal data, addresses, orders, and GDPR requests in CSV format via the "MY ACCOUNT" menu.
-
Right to Access Personal Data – Customers can request a report of all personal data stored by the online store. After submitting the request, a confirmation email will be sent, and upon confirmation, a second email will be sent with all the requested information.
-
Right to Data Deletion (Right to be Forgotten) – Customers can request the deletion/anonymization of their personal data via the "MY ACCOUNT" menu. This process will permanently delete the customer’s account and revoke access.
Data Disclosure
Stored data may be disclosed to competent judicial, police, and other administrative authorities upon lawful request and in accordance with applicable legal provisions.
COOKIES
Cookies are small text files placed on your computer by websites you visit. They are widely used to make websites work more efficiently, to remember information relevant to you, and to improve and/or enhance your experience on the website you are visiting.
They can also help ensure that the advertisements you see on the website are more relevant to your preferences and interests.
We do not use cookies to identify you personally, but only to help the website function better in a way that serves you.
ESSENTIAL COOKIES
- __cf_bm – Placed by Cloudflare on end-user devices accessing customer sites protected by Bot Management or Bot Fight Mode.
- cf_clearance – Cloudflare clearance cookie that stores proof of challenge passed. It is required to access the origin server.
- rc::a – Used to track and analyze user behavior to distinguish humans from bots or automated software.
- PHPSESSID – A cookie generated by PHP-based applications. It is a general-purpose identifier used to maintain user session variables, such as keeping a user logged in between pages.
STATISTICS COOKIES
- ga# – Used to distinguish individual users by assigning a randomly generated number as a client identifier, allowing calculation of visits and sessions.
- _ga – Records a specific ID used to generate data about website usage by the user.
ADVERTISING COOKIES
- _gcl_au – Used by Google AdSense to experiment with advertisement efficiency across websites using their services.
- lastExternalReferrer – Detects how the user reached the website by recording their last URL address.
- lastExternalReferrerTime – Records the time the user last accessed the website from an external source.
- test_cookie – A session cookie used to check if the user’s browser supports cookies.
- landing – Used to track user interactions with online advertisements.
- _fbp – Facebook tracking pixel used to identify visitors for personalized advertising.
MISCELLANEOUS COOKIES
- os_pageViews
- fmlcsr
- onesignal-pageview-count
- popupDisplayed
- consent_personalization_storage
- consent_ad_storage
- consent_functionality_storage
- consent_analytics_storage
Our eShop and advertising partners (including social media platforms such as Google, Facebook, and Instagram) use tracking to provide personalized offers and deliver the full eShop experience. This includes sending customers “targeted messages on third-party advertising platforms.” If you do not accept this tracking, you will continue to see random eShop ads on other platforms.
DISABLING / DELETING COOKIES
You can disable cookies by adjusting your browser settings to refuse the setting of certain cookies. However, if you use your browser settings to disable all cookies (including essential cookies), you may not be able to access all areas of our website or other websites you visit.
Disabling a cookie or a category of cookies does not delete the cookie from your browser. You must do this manually through your browser settings.
CONTACT
If you have any questions or complaints about this policy or how we handle your personal data, please contact us:
- By email: [email protected]
- By post: Kyros Kavasakalis & SIA E.E Pharmacy, 7 Dimarchou Angelou Metaxa St., Glyfada, 16675, Athens, Greece
CONTACTING THE DATA PROTECTION AUTHORITY
You have the right to file a complaint with the Hellenic Data Protection Authority.
