OUR COMPANY’S POLICY FOR THE PROTECTION OF PERSONAL DATA
In MEDITRUST LTD, whose subject is the dealing, maintenance, repair and generally the support of medical technology equipment, although the amount of personal data is limited, our purpose is the assurance of the maximum protection of our clients’ personal data, our clients’ representatives (their employees’ etc.), the premises’ visitors and our employees, the only people who process their personal data and we consider this our duty to inform not only on our practices but also on our choices and the rights they have concerning the collection and the processing of their personal data.
I. Our principles and values
- We respect our clients, their representatives, our premises’ visitors and our employees and make the protection of their privacy a priority of our company
- We apply full transparency in the way we handle their personal data
- We collect and process their data with lawful, appropriate, clear and predetermined purposes
- We handle all their information as confidential, applying every necessary technical and organisational means for their protection
- We don’t make known and forward their personal data to third parties without their consent, unless this is permitted by law or contract
- As a whole we follow the law and comply with all our duties that derive from it, as responsible for processing
II. Which are the personal data we collect
The type of personal data we collect are the following:
Our clients’:
Their full name and father’s name, the number of their ID, VAT ID and their contact details (phone number, FAX, address and email of their company).
Our clients’ representatives:
Their full name, their position within the client’s company, their phone number and the email address that they use while exercising their duties at our clients’ company.
Our employees:
Their full name, their father’s and mother’s name, their ID number, their VAT ID, their Social Security Number , their home address, their email, the Tax Authority they fall under, their home phone address, their date of birth, their family status, their recruitment date, their specialisation and the department they fall under, the duration of their employment, their insurance category, the group of insurance fund and evidence regarding their insurance and their bank account that use for their payroll.
Other personal data:
Furthermore, in the premises of the company (excluding the WC), in which there is equipment of high value as well as goods and where our staff and the company’s visitors attend, there is a CCTV in operation which collects imaging data. We also collect data in relation to the entrance of any person in our premises, their stay and their exit from them.
III. How we collection our client’s, their representatives and our employees’ personal data and how we store them.
We collect the personal data of our clients, their representatives as well as our employees’ in various ways, for example:
- At the beginning of hiring of our employees and the occasional update of their data, following their request
- At the beginning of our cooperation with our clients, when they are asked of the above information, for our communication with them, the delivery to them of our products and the provision of our services, the issuance of the legal tax data
- From the official websites of our clients and the telephone directories as well as from their documents, where the person in charge of the transaction with our company is mentioned
- The abovementioned personal data are registered in the electronic system of our company, in the relevant programmes (for example in the payroll programme the data of our employees, in the accounting programme the details of our customers, etc.), where each time only the competent employees have access, based on a security system that excludes access to unauthorised third parties. The stores material, which comes from the electronic surveillance system, is only accessible by the competent/ authorised person of the company, which is in charge of the security of the premises.
IV. For which purposes we collect and process the personal data of our clients, their representatives and our employees
We collect the abovementioned personal data and use it for our contact with clients, the execution of transactions between us, the issuance in their name of invoices and other tax documents, their information through email for our offers in other products and services that we believe may be of interest to them, informing the competent authorities about the working conditions of our employees, the payment of salaries and insurance, our communication with our employees and the exchange of information in the context of their work, the protection of life, the physical integrity, the health as well as the assets of all those who enter and are in the premises of our company and the goods of our company, from illegal acts (for example thefts and robberies).
V. To whom we disclose and/or forward the personal fata of our clients, their representatives and our employees
- Public authorities, police, prosecution and judicial authorities, when they contain information necessary to investigate a criminal act, which concerns people or goods of the company or when they legally request during the performance of their duties, to the victim or the defendant of a criminal offense, when it concerns data which may constitute evidence of the performance or the non-performance of the act, regulatory bodies, given that this is required by Law, Regulation, Directive, mandate, opinion, bulletin, etc.
- Auditors, accountants, notaries, lawyers, bailiffs or other financial or professional advisers, given that our company is going to exercise a legal rights in relation to the contacts it concludes with its clients and the employment relationship of its employees.
VI. How we safeguard the protection of the personal data of our clients, their representatives and our employees
Our company in order to safeguard the correct use and integrity of the personal data it collects, as well as to prevent the unauthorised or accidental access, processing deletion, alteration or the use of them, it implements various internal policies, while receiving all the appropriate organisational, technical, physical, electronic and procedural security measures, as well as technological standards with applicable Laws and Regulations.
VII. For how long we maintain the personal fata of our clients, their representatives and our employees
We maintain the personal data, mentioned above for as long as the purposes of which they were collected continue and in any case for a period not exceeding twenty years from the annulment or termination of the contract, except in the case of pending litigation or administrative proceedings, when the maintenance is extended until the issuance of an irrevocable decision or the completion of the procedure before the relevant Administrative Authority. Then they are destroyed from our records and systems, in accordance with our company policy and given that their maintenance is no longer required to fulfil our abovementioned purposes, or to cover business, tax or our business, tax or accounting requirements or to defend our rights before any competent Court or any other Authority. The reserved material, concerning the data described above under the title “Other personal data” is kept for thirty days, after which it is deleted. Especially for the imaging data, in case that during this period the company discovers an incident, it isolates part of the video and keeps it for up to another month, in order to investigate the incident and initiate legal proceedings to defend its legal interests, while if the incident concerns a third party, it keeps the video for up to three months.
VIII. Which are the rights of our clients, their representative and our employees
Our clients, their representatives and our employees have the right to request the deletion of their personal data provided that (a) these are no longer necessary for the fulfilment of the purposes of the contractual relationship between us (b) these were processes illegally and beyond the purposes as described in detail herein (c) it is required by law.
They also have the right to revoke (in whole or in part) their consent and to object to the collection and the processing of their personal data by our company. In this case they should take into consideration that any revocation of their consent and opposition to the processing may result in the termination of the contractual relationship, if such has been concluded.
They have also the right to have access to their personal data that the company maintains and request the company of copies of their personal data that it maintains and request from the company to correct every detail they believe it is inaccurate as well as to register completely every information, they believe its registration is imperfect.
If ant of the above are requested, our company has a month to respond. If they want to exercise one of the above rights, please contact us by email: This email address is being protected from spambots. You need JavaScript enabled to view it. or call us at: 2108810567 or write to us at: Kifissias Ave. 154, 11525, Athens.
In any case, they have the right to appeal to the Personal Data Protection Authority (www.dpa.gr) if they deem that they are affected by the processing of their personal data.
IX. How to contact us.
For more information or clarifications concerning the policy followed by our company, for the protection of the personal data of our customers, their representatives and our employees, they can contact us either by post at the following contact details: MEDITRUST LTD, to the Personal Protection Officer (DPO), Kifissias 154, 11525, Athens either by phone at 2108810567, or by email at This email address is being protected from spambots. You need JavaScript enabled to view it. and we will be happy to serve them.