Privacy Policy

Controller

Dimitrios Kountouris, sole proprietor trading as ELVIORUM Medical

Address

Frinis 55, 11633 Athens, Greece

VAT No.

162642797

G.E.MI. No.

196301203000

Privacy contact

privacy@elviorum.gr

Phone

+30 698 108 8283

Given the size and nature of our processing activities, we are not required to appoint a Data Protection Officer (Art. 37 GDPR). All data protection requests can be sent to the privacy contact above.

Website visits. When you access this website, our hosting provider automatically processes technical data required to deliver the site securely: IP address, date and time of access, requested URL, referrer, browser and operating system. This data is processed on the basis of our legitimate interest in operating a secure and stable website (Art. 6(1)(f) GDPR) and is retained in server logs for a limited period.

Inquiries. When you contact us by email, phone or via the inquiry form, we process the information you provide — such as your name, company or practice, email address, phone number and message — to respond and, where applicable, to take steps prior to entering into a contract (Art. 6(1)(b) GDPR) or on the basis of our legitimate interest in handling business correspondence (Art. 6(1)(f) GDPR).

Business relationships. For customers and suppliers, we process contact and transaction data necessary to fulfil contracts and to comply with legal obligations, including tax and accounting retention requirements (Art. 6(1)(b) and (c) GDPR).

We do not intentionally collect special categories of data, including patient health data.

We use Vercel Web Analytics to understand aggregate website usage. It operates without cookies and without storing personal identifiers; visitors are counted using a hash of the incoming request that is discarded after 24 hours, so individual users cannot be identified or tracked across websites. Processing is based on our legitimate interest in improving our website (Art. 6(1)(f) GDPR).

We share personal data only where necessary, with:

• Vercel Inc. (USA) — website hosting and analytics, under a Data Processing Agreement and the EU–US Data Privacy Framework / Standard Contractual Clauses.
• Email service provider — for receiving and responding to inquiries.
• Accountants, tax and public authorities — where required by law.
• Manufacturers and logistics partners — only to the extent necessary to fulfil an order or meet regulatory traceability obligations (e.g. vigilance under the MDR).

We do not sell personal data.

Where data is transferred outside the European Economic Area, we ensure an adequate level of protection through an adequacy decision (such as the EU–US Data Privacy Framework) or Standard Contractual Clauses approved by the European Commission (Art. 44 et seq. GDPR).

• Inquiries that do not lead to a business relationship: deleted after 24 months.
• Contract, invoicing and accounting records: retained as required by Greek tax law (generally 5 years, up to 20 years in specific cases).
• Server logs: retained for a short period for security purposes and then deleted.

Under the GDPR you have the right to:

• Access your personal data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time, where processing is based on consent (Art. 7(3))

To exercise your rights, email privacy@elviorum.gr. We respond within one month. You also have the right to lodge a complaint with the supervisory authority: Hellenic Data Protection Authority (HDPA), Kifissias 1-3, 115 23 Athens, www.dpa.gr.

We protect data with appropriate technical and organisational measures, including encrypted HTTPS connections, strict security headers and access controls (Art. 32 GDPR).

This website does not use advertising or tracking cookies. See our Cookie Policy for details.

We may update this policy to reflect changes in law or our services. The current version is always available on this page.