Privacy Policy

How MD Hellas collects, uses and protects your personal data in compliance with GDPR.

Introduction

Company Zoumi Georgia., with Trade Name MDHellas, is committed to protecting your personal data which are disclosed to the company by any source such as emails, fax, business cards, the company's website and other sites, databases, etc., in accordance with Law 2472/1997 as amended and the General Data Protection Regulation (GDPR – EU 2016/679).

Personal data that our company collects typically includes the following:

Category	Details
Personal Data	Identifiable and contact information such as: Name, surname, date of birth, nationality, mobile and landline numbers, e-mail, address details, proof of address, marital status, military obligations, copy of ID/passport, driving licence, VAT number, CV with photo, criminal record, degrees, certificates, letters of recommendation, professional experience, bank account details, airline tickets, payment copies, etc. Health data (dermatological conditions, nutritional habits, allergies, special needs) and biometric data (height, weight, etc.) Contracts (placement, education, trainee and rental agreements)
Use of Personal Data	Recruitment services Newsletters Educational services including video Internal use by our company

Category

Details

Personal Data

Identifiable and contact information such as:

Name, surname, date of birth, nationality, mobile and landline numbers, e-mail, address details, proof of address, marital status, military obligations, copy of ID/passport, driving licence, VAT number, CV with photo, criminal record, degrees, certificates, letters of recommendation, professional experience, bank account details, airline tickets, payment copies, etc.
Health data (dermatological conditions, nutritional habits, allergies, special needs) and biometric data (height, weight, etc.)
Contracts (placement, education, trainee and rental agreements)

Use of Personal Data

Recruitment services
Newsletters
Educational services including video
Internal use by our company

MDHellas ensures all legal and appropriate processes for the protection and confidentiality of personal data it collects, in order to prevent any unauthorised access to such data as well as to the equipment used for their processing and archiving. Our company guarantees that your personal data will not be used for purposes other than those mentioned in this policy, without prior notice and, when required, your approval. We do not share personal data with unrelated third parties unless required by our legal or professional purposes or imposed by law.

Time Period of Conservation and Use of Personal Data

We are committed to keeping your personal data in a safe space with controlled access for as long as required. You may submit a deletion request at any time; we will satisfy your request after checking the processing legal basis and our obligations under the law and/or the agreement between us.

Disclosure of Personal Data

We may disclose your personal information to third parties who process data on behalf of our Company, including, but not limited to, data processing systems support providers. Transmission to such third parties will take place only under the legal preconditions provided in Articles 24 and 28 of the Regulation.

In the case of data transmission to non-European countries, the Company shall inform the data subject in advance and ensure that adequate safeguards are in place, that all appropriate technical and organisational measures are implemented, that processing is lawful, and that the rights of data subjects are protected.

Safety and Protection of Data

Our company applies all the necessary technical and organisational security policies and processes to protect your personal data from being lost, altered, damaged, misused or accessed by an unauthorised person. Company executives who have access to the data are required to maintain its confidentiality at all times.

Rights on Personal Data

You have the right to apply for:

Access to your data
Review of the personal data we hold
Rectification of false or inaccurate information
Completion of incomplete information
Erasure of your personal data
Portability of your data
Restriction of data processing
Opposition to data processing (per Article 21 GDPR)

We handle your requests with the utmost care to ensure that your rights are protected. We may ask for proof of identity to ensure we do not share your personal information with someone else. You will receive a response to your request within one month of submission.

You always have the right to submit a complaint by contacting the Data Protection Officer of MDHellas — by letter to Monis Agarathou 7, 71201 Iraklion, Crete or by email to dpo@md-hellas.gr, including your full personal details and the reason for your contact.

Withdrawal of Consent

You may, at any time, withdraw the consent you have granted to our company for the processing and disclosure of your personal data. However, withdrawal does not affect the legitimacy of any processing that took place based on your consent before the withdrawal. Your right to withdraw is also subject to applicable law or any contractual obligations.

To withdraw your consent, please send a signed declaration to the Data Protection Officer of MDHellas — by letter to Monis Agarathou 7, 71201 Iraklion, Crete or by email to dpo@md-hellas.gr, including your full personal details and the reason for your contact.