This Privacy Policy concerns the processing of your personal data when using the

HDCORNER Application (hereinafter the "Application")

1. Controller – Contact details

" KARABINIS MEDICAL SA-Manufacture –Sale of Technological Products and Providing

Services ", based in Peania Attica, on Lavriou Avenue, no. 151, with A.F.M.: 099052507

– D.O.Y.: FAE Athens- LOT NO. 87183102000, tel. 2106645751 (hereinafter the

"Company")

2. What personal data of mine is collected and how?

When you register in the Application (sign up) as a user, you provide the following

personal data: :

• Name

•Date of birth

• Gender

•Contact info

When you register in the Application (sign up) as a health professional, you provide

the following personal data:

• first and last name,

• specialty,

•VAT NUMBER,

• address, number, zip code, area,

• contact phone number and email address

When using the services of the Application as a user you have the possibility to enter

the following data:

• Health data (e.g. diabetes readings, blood pressure, diagnostic tests, etc.) that you

enter into the platform if you wish

• Information regarding sports activities, eating habits

• The details of your credit card (number, name of the holder, security code) that you

provide to us when paying for the service are not collected by the Application, but are

provided directly to the authorized provider to which you are redirected during the

payment process.

3. For what purposes is the processing carried out and what is its legal basis?

Your data is processed to provide you with access to HDCORNER services. The legal

basis for this processing is the performance of a contract (a. 6 par. 2 b' GDPR).

For the health data you provide us, the legal basis is the performance of a contract

and a. 9 par.1 para. h'

4. Who are the recipients of my personal data?

Access to your personal data is given to the platform provider acting as data processor

as well as to the doctor or pharmacist or other healthcare professional to whom you

choose to give access to your data. The healthcare professional will be able to see the

data you enter on the platform, only if you yourself give him access.

5. How long is my data kept?

Your data will be strictly maintained for as long as you are registered with the service.

If you are deleted from the service, your data will be deleted immediately. They will

also be deleted if you submit a deletion request to us.

6. Cookies

The application does not use cookies when the user enters it, either through the

mobile phone or through the web platform.

7. How is my data protected?

Your data is kept on an external server with all the necessary security measures.

Especially for the health data you enter on the platform, these are subject to

encryption and pseudonymization, therefore no recipient can associate them with

your person, except for the health professional to whom you give access.

8. What are my rights?

As a data subject you have the following rights:

Right to information

You have the right to be informed about

the collection, processing and storage of

your personal data.

Right of access

You have the right to receive

confirmation as to whether or not your

data is being processed and, if this is the

case, you have the right to access your

data in a short, understandable,

transparent and easily accessible form.

Right to rectification

You may request the rectification of

inaccurate or incomplete personal data

concerning you.

Right to erasure

You have the right to request the erasure

of the data concerning you, if you

consider that it is being held in an

unlawful manner and the Company is

obliged to proceed with the erasure

unless there is a legal reason for its

retention

Right to data portability

You have the right to receive the

personal data concerning you and which

you have provided to the Company in a

commonly used and machine-readable

format, as well as the right to request

the transmission of said data to another

data controller, under the conditions set

by law

We will respond to your request without delay and in any case within one month of

receiving it. This deadline is extended for another two months, if necessary, taking

into account the complexity of the request and the number of requests. We will

inform you of said extension within one month of receiving the request, as well as

the reasons for the delay.

The company has the right in any case to refuse to comply with your request to limit

the processing or delete your personal data, if this processing is necessary for the

establishment, exercise or support of its legal rights or the fulfillment of its

obligations.

10. How you can exercise your rights:

In order to exercise your above rights, you can contact the Data Protection Officer at

the email address dataprotection@karabinismedical.gr or by phone at 210-6645751

or by post at the company address KARABINIS MEDICAL SA, Lavriou Ave. 151, 19005

Peania – Att: Data Protection Officer .

11. Personal Data Protection Authority

You have the right to file a complaint with the Personal Data Protection Authority

(www.dpa.gr), which is the competent supervisory authority for the protection of

the fundamental rights and freedoms of natural persons against the processing of

their personal data, if you consider that they are being violated your rights in any

way.

Last update 08/01/2024