Privacy Policy of EVINOR Diagnostic Laboratory

Purpose of the Privacy Policy of the EVINOR Diagnostic Laboratory

The purpose of the Privacy Policy of the EVINOR Diagnostic Laboratory is to set and communicate to any interested party the principles and rules for the protection of personal data processed by the private diagnostic laboratory EVINOR as Data Controller in accordance with the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016.

​

Data Controller-information

​

The private diagnostic laboratory with the name "EVINOR" (hereinafter referred to as the Center) located at Iraklitou - Giannouzi Street, P.C.: 31100, Telephone: (+30) 26410 69800, Email: gdpr@evinor.gr | Operating Hours: Monday - Friday: 07:00 - 21:00, Saturday 08:00 - 14:30. For any information regarding issues concerning personal data, as well as for any of your requests, you can contact the above address and telephone numbers.

Data we collect and sources

 

The center, within the framework of its activities, processes personal data that it has collected from you and concerns, among other things, your identification data (name and surname, ID number, AMKA, VAT number, etc.), contact data (home address, telephone numbers, email) and special category data exactly as described in the General Data Protection Regulation in article 9 paragraph 1 and in particular data concerning health. In the event that we need to collect data from other sources, you will be informed within a month of their collection of both the relevant data categories and their source of origin. The Center collects only those data that are absolutely necessary for the purpose of processing and these data are used only for the purpose for which they are collected. In any case, the Center collects only those data that are absolutely necessary for the purpose of processing and these data are used only for the purpose for which they are collected.

 

Purposes and legal basis for processing personal data

​

Provision of health services

 

The Center processes personal data and special categories of data for the purpose of providing medical diagnosis, health care and treatment services based on its operating license, as well as for the necessary communication with its clients in the context of providing these services. Specifically, for the processing of special categories of personal data, the legal basis is Article 9, paragraph 2, letter h, which describes how "processing is necessary for the purposes of preventive or occupational medicine, assessment of the employee's capacity for work, medical diagnosis, provision of health or social care or treatment or management of health and social systems and services under Union law or Member State law or pursuant to a contract with a health professional and subject to the conditions and guarantees referred to in paragraph 3. With regard to paragraph 3 of Article 9 of the General Data Protection Regulation which allows the processing of data under paragraph 1 of Article 9 of the Regulation, the diagnostic laboratory is supervised by a doctor scientifically responsible for the overall operation of the center as well as other collaborating doctors scientifically responsible for the proper functioning of individual services of the center such as the diagnostic machines and the chronic hemodialysis unit.

​

Other purposes

​

The center processes the necessary data in accordance with applicable legislation for the recruitment and execution of employment contracts of its staff and associates or contracts for the internship of personnel from OAED programs, for the necessary communication within the framework of these contracts, for the formation, observance and execution of payroll or the payment of remuneration, for its compliance with its legal obligations (employment, insurance and tax), for the management, planning and organization of paid work as well as for the purposes of administration of the staff, etc. of associates within the framework of the above contracts.

 

The center may collect and process specific data, namely name, surname, email or other contact address, professional CV details, etc. to inform each interested party, after a relevant declaration of interest, in relation to the filling of a job position. For the above purpose, the legal basis for processing is the legitimate interest of the controller in the context of its lawful operation, provided that the rights and freedoms of the data subjects are not affected, otherwise, if deemed necessary, their explicit consent is requested, which in this case will constitute the legal basis for the specific processing.

​

The center may process personal