Privacy and Data Protection Policy

I. Introduction-Controller

The respect for your privacy, the protection and security of your personal data are a top priority for Systegasmena Farmakeia Fourakis Theodoros & Fourakis Marios - Hi-Care pharmacy. This Privacy and Data Protection Policy sets forth the main principles regarding the relationship of your personal data when you visit and transact with us online at www.hicare.shop and applies to all the services of the Company and www.hicare.shop. The individual terms and conditions of use for our site are set out in the Terms and Conditions of Use, the acceptance and compliance of which is mandatory for the use of any online pharmacy service.

Through our website at www.hicare.shop, our company is committed to complying with applicable laws on the protection of individuals regarding the processing of personal data as set forth in the European Union's General Data Protection Regulation 2016/679 (known as GDPR), as applicable at any given time, and also the regulatory framework governing its implementation (Law 4624/2019 as applicable at any time), with the aim of protecting the personal data of its visitors, users and customers. Our Company has adopted this Policy and as the controller, informs the physical person who is a visitor, user and / or customer that they and / or third parties acting on its behalf, will process personal data relating to the person, in the context of a hicare.shop drug / paramedic / cosmetic product or service transaction, while taking appropriate technical and organizational measures to protect personal data.

Data Processor: Your personal data processor is the pharmacy under the name of “Systegasmena Farmakeia Fourakis Theodoros & Fourakis Marios Hi-Care”, which is also the owner of www.hicare.shop and is company of Theodoros Fourakis son of Stylianos & his sun Marios, Vat. Num 802272980 Tax Authority of Ag. Nikolaos, based in Agios Nikolaos Lasithiou, Crete, at El. Venizelou No 23, 72100, Tel & Fax: +30 211 800 55 89, 2841 600789 email: support@hicare.shop

If you would like any further information about this, please contact us, either by email at support@hicare.shop or by phone at +30 211 800 55 89 / 2841 600789 or by contacting the website www.hicare.shop via the inquiry form.

II. Data collected and used by the Company

Personal Data is any information that refers to you, or may be attributed to you. Our company may process / collect / store (simple storage is considered processing under the GDPR) personal data, such as:

ID card information and demographics (e.g. name, date of birth, age, spouse's name, gender, ID number, passport number, social insurance number, VAT number, place of occupation, etc.); data of a technical nature, such as email address, IP, username, password to our e-shop, etc.; third party data such as relatives’ information (e.g. name, last name, paternal last name, etc.) for delivery of your order (e.g. of your medication); contact details (e.g., mailing address, telephone and mobile phone numbers, e-mail address) for purposes of contact or sending of newsletters and brochures about services, news and offers; payment information, such as credit / debit card information; financial expense information; data about claims you have made to exercise your rights or submit complaints; your recorded phone call data in regards to attached CVs submitted as application to work with our company. Should we receive personal data of special categories (e.g. data relating to your state of health), we commit to keeping it if necessary, with even greater care and only with your explicit consent or in a manner permitted by applicable law. We may collect your data either by telephone (e.g. telephone order), or online (e.g. registration, online order), or physically (e.g. if you visit our store) as set out below. If you call us, and for the sole purpose of proving your telephone communications and / or orders, the telephone calls received and made by our call center may be recorded, which is legally disclosed to you as soon as you call us and before giving us any personal information.

III. Lawful processing of your data

We do not process your data without it being necessary and lawful. The collection of personal data is carried out for example when accessing or using our site, or when you when you register as a member or when you place an order through our online store at www.hicare.shop or when you request a newsletter. In addition, our Company will not receive any additional personal data from you for any purpose other than that for which it is collected, nor will it disclose your data to third parties, unless this is strictly necessary for us to perform any service, the provision of which you have requested and relates to a contract of sale between us (e.g. product delivery); or should processing by a third party be necessary for the purposes of our legal interests (e.g. credit check); or if you have previously provided your consent, and / or when required by law (e.g. the execution of a legal judgment, court order, etc.). Finally, our Company does not sell, lease or transfer your personal data to third parties, with the exception of the application of relevant legal requirements and to the appropriate authorities only, and does not collect and process personal data of underage children without the explicit consent of their parents. Whenever and wherever we collect, process and use your personal data, we take all appropriate measures to ensure that this data is treated securely and in accordance with our personal data protection policy in compliance with the European legislation Regulation [EU] 2016 / 679 known internationally as GDPR. All of the personal data mentioned above which is provided to us compulsively or voluntarily or collected from third parties or is produced by automated means, is used for the following legitimate purposes. Please note that in the event that any european or national law restricts or prohibits certain Company actions for which we use your data, we will cease the use of any information that is relevant to you for these purposes. In particular, our Company collects and uses the following categories of personal data:

IV. Categories of Personal Data

1. Regarding Account Registration at www.hicare.shop, Member Registration and Client Identification:

This includes:

All Client ID details i.e. name, gender, home address, billing address, date of birth, email address, password, all of which are voluntarily provided by oneself (or by a person acting on one’s behalf, by payment providers (Banks, PayPal), and / or from publicly accessible sources (such as social networking sites) and which we encrypt for the security of your data.

Purpose of Collection and Use: Firstly, for the opening of an account through which a transaction history can be seen, for the identification of the Customer and, secondly, for communication in the case of a transaction, pre-contractual or contractual relationships with the Customer (e.g. for order placement or shipment of products, issue of sales documents, etc.). If you are under 16, you MUST have your parents' consent before registering at www.hicare.shop.

The lawful basis for the processing is:

A. your consent to register and create an account and voluntary disclosure of optional data for this purpose.

B. our legitimate interest in securing your account and identifying you where appropriate, which is for your benefit in avoiding fraud or security incidents.

C. performance of the terms of our contract for creation, management and operations of your Account.

2. Regarding contact with the Customer:

Including:

Contact numbers (landline or mobile), addresses (postal and electronic), as well as any communication information through the Customer's social networks, voluntarily provided by themselves (or by a person acting on their behalf, by payment providers (Banks, PayPal), from Shipping Companies and / or from publicly accessible sources (such as social networking sites).

Purpose of Collection and Use: Generally any communication with the Customer in any transaction, such as the indication of the sale and delivery of products for the receipt, management and execution of an order submitted electronically, the provision of pharmaceuticals or cosmetics and related advice and sale suggestions.

The lawful basis for the processing is:

A. the performance of the contractual relationship that the Company assumes to fulfill for you under the contract of sale or the sale of pharmaceutical services (indicatively, advice).

3. Receiving, Managing and Executing Your Order Submitted to hicare.shop 

Including:

Data that is voluntarily entered or provided to us by the Customer regarding his / her identity and communication with him / her (name, surname, mobile or landline numbers, email, delivery address) as well as the record by order of each item relating to it, i.e. shipping and billing addresses, payment methods (such as payment and card details), date, time and place of order, product description (quantity, pricing, etc.), shopping cart and total value of products, place of delivery, processing and general order management, messages and / or customer notifications about the order or service as well as past service / order history, rejected products, shopping cart products for reminders, products when they become available for pre-order.

Purpose of Collection and Use: The execution of the order services and contracts requested by the Customer, as well as the compliance of the Company with applicable law. The purpose of collecting and using the history is to provide quicker service to the Customer (easy re-ordering of products) but also to better serve the customer by personalizing services by customer (e.g. Loyalty rewards to frequent Customers or those who buy specific products that may be on offer, etc.).

The lawful basis for the processing is:

A. The performance of our contractual relationship that the Company undertakes to fulfill for you under the purchase contract.

B. compliance with the legal obligation of the company to comply with tax regulations and provisions.

C. legitimate interest in collecting a purchase price, detecting fraud which also benefits you in the event that someone tries to illegally use your payment data.

We also believe that we have a legitimate interest in creating a profile with the information we have about you (e.g. your shopping history, your preferences when browsing the e-shop, the products you have rejected, the products you have in your cart ) and based on your purchases and your interaction with your newsletters, your age, gender, place of residence, as we understand that processing this data is beneficial to you as well as facilitating us to provide you with personalized and specialized information as well as points or bonuses based on your purchase, the terms of which are disclosed on our site.

4. Concerning payment verification:

Including:

The data provided by the Customer's payment provider (e.g. Bank or PayPal) to hicare.shop, and in the case of payment by cash, the Carrier responsible. Indicatively, payment by PayPal provides the name and address of the account holder and the email of the account that made the payment; credit card payment provides the partial credit card number; and payment by cash provides the customer’s contact information as well as if and when the payment was completed.
Purpose of Collection and Use: The verification of payments and the security of transactions in general (fraud prevention etc.), as well as the Company's compliance with applicable law.

The lawful basis for the processing is:

A. the execution of the contractual relationship that the Company undertakes to fulfill for you under the purchase contract.

B. compliance with the legal obligation of the company to comply with tax regulations.

C. legitimate interest in the collecting payment, detection of fraud that may benefit you in the event that someone attempts to use your payment data.

5. Regarding the Client's Relationship with the Services or Staff of the Company

Including:
Any message, in digital format, with all the information it may contain, which has been logged via email, telephone, through the Company's website (e.g. on contact forms, reviews etc.) or made on third-party sites or online applications or services that may include but are not limited to: comments, requests, complaints, ratings, suggestions, questions, etc. These data contain identification data, contact data, transaction data, and information about your requests or advice which is voluntarily provided by the Customer before or during the order, or by contact of the latter with Company staff, shipping companies or product manufacturers.

Purpose of Collection and Use: The processing of Customer requests, the improvement of company services and hicare.shop, as well as the overall security of transactions (fraud prevention etc.).

The lawful basis for the processing is:

A. compliance with the Company's legal obligation to adopt pre-sale and after-sale customer service tools for our response to your queries related to exercising of your rights.

B. the legitimate interest of the Company to respond to your requests through various communication channels, to optimize its customer service and management services and to provide its clients with the opportunity to communicate with and manage any issue they may have in the best possible way, based on their needs and their benefit and reasonable expectations. With respect to the use of our site, any user may opt-out at any time by accessing their personal information for this purpose, such as e.g. the data on their purchases tab for their service, by reporting so to customer service personnel or by contacting the Company on all media outlets for any of the aforementioned.

C. performance of a contract in the event of contacting us specifically for the management of issues relating to your order.

D. The customer's consent to receive communication from the Company for this purpose, when they themselves request that the Company contact them.

6. Accessing or using the hicare.shop site

May include:
The IP address for each access or use, the type of network connection (e.g. Wi-Fi, 3G), and the ISP or electronic path from the server, data provided through the devices used by the Customer such as location identifiers (e.g. web browser, device operating system), date and time of site entry, volume of data sent in bytes collected by the Company's servers, or computers used by hicare.shop staff or generally from publicly accessible sources, including social networks and search engines. These data are in principle anonymous usage and traffic statistics, but which, in combination with other actions or Customer information or individually, can lead to the identification of the Customer.

Purpose of Collection and Use:  The protection of the rights of the company and its staff, the security of transactions in general (fraud prevention, etc.).

The lawful basis basis for processing is: 

A. compliance with the legal obligation for information security and confidentiality.

B. a legitimate interest in network security and in preventing fraud and unauthorized access to data, in our business continuity, in upgrading our systems and those of our partners, in developing our business and in managing and optimizing technical systems, our business processes, processes that take precedence over the rights and freedoms of individual who reasonably expect that the processing can be performed for this purpose.

7. Concerning Delivery or Return of Products to / from Customer 

Including:
Any information necessary for the delivery or return of the products to / from the Customer by Shipping Companies and voluntarily provided by the Customer, the Shipping Companies and / or the Customs or Tax Authorities in Greece or other countries.

Purpose of Collection and Use: The processing of Customer's orders, the improvement of the Company's services and the Company's compliance with applicable law.

The lawful basis for processing is:

A. compliance with the Company's legal obligation to comply with applicable law related to exercising your rights.

B. Performance of contract in the event that you contact us specifically to manage issues related to your order.

8. Concerning Customer Promotions 

Including:

 Communication and historical identification data as provided above by the Customer (with their consent) or social networks that have a Customer Advertising Profile (identity and contact information, purchase and transaction data, profile data, demographic data , cookies, and / or a combination of the above). With your explicit consent when you subscribe to the hicare.shop newsletter service you may receive updates, if you so choose, via email address or sms (or both) on your mobile phone or through a mobile application about products, our offers and services.

Purpose of Collection and Use: The overall promotion and advertising of products (paramedical or cosmetic and related products - not pharmaceutical prescriptions) and services of the Company. In the event that the Customer does not provide or even withdraws their consent at any stage, by means of relevant links in the promotional messages or through the contact form, the promotional communication is terminated. In any case, when Customer / User consent is given for the automated processing of personal data (profile training), our Company collects and processes information based on personal preferences and interests, for the purpose of providing personalized information and / or notifications about the Company's services and activities through direct promotional activities.

If you are under 16, you MUST have your parents' consent before subscribing to our email newsletter.

The lawful basis for the processing is:

A. the legitimate interest of the Company to process the data of its customers granted to us in the context of a purchase or other transaction with us for the purpose of direct commercial communication about related products or services. In these cases you can request to opt-out by pressing the unsubscribe button on the email or message on your mobile phone or by contacting us or requesting we do so via the contact form at www.hicare.shop.

We also believe that we have a legitimate interest in creating a profile with the information we have about you (e.g. your shopping history, your preferences when browsing the e-shop, the products you have rejected, the products you have in your cart ) and based on your purchases and your interaction with your newsletters, your age, gender, place of residence, as we understand that processing this data is beneficial to you as well as facilitating us to provide you with personalized and specialized information.

B. explicit consent in cases where you voluntarily provide us with your data, authorizing us to send you newsletters and personalized information via email, SMS, applications (e.g. Viber) and other media or through the membership card of our physical store by filling in the appropriate form.

9. Website Browsing - Cookies Policy

As with most sites, you browse www.hicare.shop, register with our Online Store, register with the newsletter service, order and buy online, our Store collects and processes personal data and information about you, either through cookies or directly from you providing this data to us.

a) What is Cookies and how are used by Hicare?

A cookie is a small string of text that a site sends to the browser and saves on your computer when you visit Internet sites. Cookies are used to allow the website to operate more efficiently and improve its performance, but also to supply the site’s owner with information.

b) Our site uses various types of cookies, each of them with a specific function, as described in the table below:

- Navigation cookies: These cookies enable the site to function correctly and are used to gather information about how visitors use the site. This information is used to compile reports and help us to improve the site. Cookies gather information in anonymous form, including the number of visitors to the site, where visitors came from and the pages they viewed.

- Analytical cookies: These cookies are used by Google Analytics, for example, to produce statistical analyses of the way users navigate the site (using computers or mobile devices), the number of pages viewed, or the number of clicks made on a page during navigation of a site. Click here for a general view of the Google privacy policy

- Third-party cookies: These cookies are used by outside companies. The use of these cookies does not normally imply the processing of personal data.Third-party cookies derive from flags for other sites, such as advertising messages, present on the website viewed. They may be used to record use of the website for marketing purposes.

c) How can I disable cookies?

Most browsers (Internet Explorer, Firefox, etc.) are configured to accept cookies. However, most browsers allow you to control and also disable cookies using the browser settings. All the same, please remember that disabling navigation or functional cookies may cause the site to malfunction and/or limit the service offered. To change the settings, follow the procedures provided by the various browsers, in the “Options” or “Preferences” menus.

We assure you and guarantee that no Cookie files from those used on the Website will collect information and will not access any documents or files from your computer. The information that cookies collect for the above purposes may include the type of browser you are using, the type of computer, its operating system, online service providers, the sites you visit, and links to third-party websites. which you may choose through our Site, the products and advertisements you see, the IP address of your PC access to our Website, User Name, User ID & Password, operating system and program settings As a browser, demographic information about you such as gender, age, place of residence and your other shopping habits and online behaviors.
By browsing the Site and making purchases through our Online Store, you consent to the processing by our Company of the information it collects from you using the Cookies. You can, however, edit your preferences through our special Cookies site settings as already m,entioned above.

The lawful basis for processing is:

A. compliance with a legal obligation for information security and confidentiality

B. a legal interest in network security and in preventing fraud and unauthorized access to data, in our business continuity, in upgrading our systems and those of our partners, in developing our business and in managing and optimizing technical systems, our business processes, processes that take precedence over the rights and freedoms of individual who reasonably expect that the processing can be performed for this purpose

IV. Who are the recipients of personal data?

Those with access to the personal data collected as set forth above may include:

- The staff of www.hicare.shop who are bound by the confidentiality clause with the Company, concerning all the aforementioned data.

- External partners of the Company providing hardware and / or software support services, as well as online store and site management services bound by a confidentiality agreement with the Company, may have partial access to the aforementioned data.

- Partnered Transport Companies executing the processing of an order and on behalf of our Company, manage and process shipments of your orders and receive the money on our behalf if you pay by cash, may have access to aforementioned data categories 1, 3, 7 and partially to category 5. They also carry out the transport and delivery to you of products you return due to withdrawal or refund.

- Services used to communicate with the Customer, such as e-mail providers, SMS providers, telephone providers and social media / messaging services, may have partial access to the aforementioned data categories 1-8.

- Payment providers (Banks, PayPal, etc.) may have access to the data categories 1, 2, 3, 4, 5 as mentioned above.

- The services used to control and / or improve the services of the Company may partially access the data in categories 2 and 5 as mentioned above.

- Advertising and marketing companies.

- Fraud Detection and Prevention Agencies.

Your confidential data may be disclosed to the relevant judicial, legal and other administrative authorities upon their lawful request and in accordance with any applicable laws. In addition, in the event of a statutory order, judicial order or formal preliminary examination, the Company has the right to make the relevant information available without delay.

V. Personal Data Subject Rights (Customer / User)

The Company provides data subjects with full information on their rights as provided for in the GDPR. In particular, data subjects have the right to request:

1. Access to their rights (processing information)

2. To obtain a copy of their personal data (Article 15 GDPR)

3. Rectifiaction of inaccurate personal data

4. Erasure of their personal data (Article 17 GDPR)

5. Restriction of processing of their personal data

6. The portability of their personal data

7. Their objection to the further processing of their personal data

8. The withdrawal of their consent, if any, at any time without prejudice to the legality of the consent-based treatment prior to its withdrawal

To exercise these rights, the Customer may contact hicare.shop:

• By email at: support@hicare.shop

• By phone or fax: +30 211 800 55 89 / 2841 600789

• Contact information listed on the hicare.shop page by filling in the contact form

The Company will make every effort to respond to the Customer within thirty (30) days. If the Customer considers that his rights are infringed on in any way, they shall be entitled to file a complaint with the Data Protection Authority, as the relevant supervisory authority for the protection of their rights (Website: www.dpa.gr, Postal Address: 1-3 Kifissias Avenue, PC 115 23, Athens, Call Center: +30 210 6475600, fax: +30 210 6475628 e-mail: contact@dpa.gr)

VI. Personal Data Subject Obligations (Customer / User)

The User or Customer of hicare.shop, accepts the terms of data use in accordance with this Privacy Policy through the disclosure of his / her personal data in any manner as set forth above. The Customer / User agrees that they are obliged to provide our company with correct and accurate data and information, and in the event of any change, are obliged to immediately disclose such to us by contact through one of the aforementioned channels.

VII. Data Retention Time

The retention time of the Client's personal data as referred to above is determined by both the period during which the Company's services are rendered to the Customer and the Company's related obligations under the applicable Law (taxation, etc.). In any case, this period may not exceed ten years. This time limit shall not apply:

1. For as long as the Customer maintains an account at hicare.shop. In the event of any outstanding dispute with the Customer, the Company will retain the necessary personal data until such time as it is resolved.

2. If required so by applicable law for legal, tax, auditing and accounting purposes.

3. For the general protection of the legitimate interests of the company as well as the security of transactions (prevention of fraud, etc.), as well as the compliance of the Company with applicable law. All data we hold about you will be deleted if you choose to delete your Account from hicare.shop or if you request that we do so (by phone or email) or if you request that we terminate your membership card unless by law we are required to retain all or part of it for a longer period (e.g. regarding sales documents).

VIII. Transfer of data to a third-party country or international organization

The Company may need to transfer its Customer's personal data to third-party countries or to an international organization, provided that the legal requirements are met and the Customer's explicit consent is given to the Company, or it is required by a legal / international agreement, or if required by law for the execution of the contract, and in any case that ensures the protection of the Company's rights.

IX. Security of Your Data

Our company has taken the appropriate technical and organizational measures to ensure compliance with personal data protection laws, to achieve the appropriate level of security of the personal data of its clients and third parties whose data is processed, as well as of the personal data of users of its website, and has taken all necessary security measures to prevent access to personal data by anyone other than the persons authorized to do so and only for the processing purposes mentioned above. Once the company receives your information, procedures and security measures are in place to prevent unauthorized access to it.

Physical Storage of Files: Our company may keep files in a hard copy, physical format containing your personal data (such as invoices, consent forms, etc.). We keep these files in lock-protected safe spaces accessible only to those employees or associates for the purposes described in their employment contract. Finally, we use document shredders to destroy physical files, so that no person can access them without our authorization.

Online Storage: Some of your personal information will be stored in the database of websites we maintain. We have implemented graded access to files containing personal data in our network, which is protected by VPN (Virtual Private Network).

File Transfer: All web traffic (file transfer) between this site and your browser is encrypted and transmitted over 128-bit SSL protocol. Encryption is essentially a way of encoding information until it reaches its designated recipient, who can decode it using the appropriate key.

Card Details: In addition, we do not store card details that you use over the web. Your card details are not visible to our company because you are automatically transferred to a secure banking environment to complete your order. At the same time, you should also take all possible measures to prevent third parties from accessing your account, such as not disclosing your password. We will report any unlawful infringement of this site's database or any third party's database information to all stakeholders, as well as to authorities, within 72 hours of the breach, provided that it is obvious that personal data stored in identifiable form has been stolen.

X. Changes to privacy policy

This privacy policy may be updated from time to time in accordance with legal or industry developments without prior notice. For this reason we invite you to check this page regularly.

XI. Contacting us

Before navigating the Site or making any transaction with us, such as subscribing to the Newsletter Service, requesting a membership card from our pharmacy, creating a Member Account or purchasing from our Online Store, we invite you to consult this Policy and to please ensure you agree to the terms and conditions concerning the collection and processing of your personal data. However, if you require any clarification or information regarding the terms of this Policy, or if you have any disagreement, reservation or question, you can contact our Company by phone & fax: +30 211 800 55 89 / 2841 600789 or by email at support@hicare.shop or using the contact details listed on the www.hicare.shop website via the inquiry form or via our mailing address: 23 Venizelou Square, Agios Nikolaos, Lasithi, Crete, 72100, Greece.

Yours faithfully,     

Fourakis Theodoros & Fourakis Marios