Privacy and Personal Data Protection Policy & Statement

Introduction

FoodOxys is a legal entity that operates through established procedures, governance structures, and technical systems. This Privacy Statement applies to all operations and services provided by FoodOxys.

As part of its activities, FoodOxys:

• collects personal data from you in order to conduct nutritional analyses and provide relevant information and clarifications
• fully complies with its obligations under applicable Greek and European data protection laws, as well as with all relevant regulatory guidelines on the management of personal data
• is committed to respect your privacy and is fully aligned with the General Data Protection Regulation (EU GDPR) 679/2016.

We encourage you to read this Privacy and Personal Data Protection Policy & Statement (hereinafter the “Statement”) to understand what types of information we collect about you, how we use them, and how we protect them.

If you are unsure whether it is necessary or appropriate to provide FoodOxys with sensitive personal data for specific purposes, please do not hesitate to contact us through the phone numbers listed on our website or by emailing us directly at dpo@foodoxys.com.

Purpose of Data Collection and Use of Personal Information

FoodOxys:

• collects, processes, and uses personal information in order to serve you better. This collection is carried out following appropriate notification and with your informed consent, as required by applicable data protection authorities and legislation
• collects personal data to carry out microbiological analyses and to provide relevant information and clarifications. The types of personal data you may provide include: contact details such as name, address, phone number, and email address; ID number, tax identification number (TIN), social security number, medical history, family status, and other unique identifiers such as service preferences, communication preferences, educational and employment background, and data related to your interest in employment opportunities, etc.
• generally collects only the personal information necessary to fulfill your requests. If additional, optional information is requested, you will be informed at the time of data collection
• collects sensitive personal data only when it is voluntarily provided by the data subject, or when such data is necessary for the provision of the requested service, or when permitted by law. We kindly ask that you do not provide sensitive personal information to FoodOxys unless it is essential for the specific service you are requesting. By submitting such data, you explicitly consent to FoodOxys processing and storing it for legitimate service purposes in our secure databases.

Disclosure and Transfer of Personal Data

FoodOxys:

• does not share personal data with third parties, unless this is required for legitimate operational purposes, in order to fulfill your requests, and/or where such disclosure is required or permitted by law
• does not sell personal data to any third parties, nor will it transfer any personal information you provide to third parties for marketing or commercial purposes.

In certain circumstances, FoodOxys may:

• share your personal data with service providers acting on our behalf, strictly for the purpose of fulfilling your requests — but only after we have informed you and obtained your consent
• disclose personal data in response to requests from government authorities or law enforcement agencies, or when required to do so by applicable laws, court orders, or legal regulations. Such disclosures may also be necessary for data protection audits, security checks, or to investigate or respond to complaints or threats to safety

Your Rights

You have the right to:

• access, correct, request deletion of, or request restriction of processing of any personal data collected by FoodOxys
• request a copy of the personal data we hold about you, review it, and generally exercise any right granted to you under applicable personal data protection laws

If you have any concerns regarding whether the provision of sensitive personal data to FoodOxys is necessary or appropriate for specific purposes, please contact us via the phone numbers listed on our website or directly at dpo@foodoxys.com.

Data Security

FoodOxys applies appropriate technical and organizational security policies and procedures to protect personal data against loss, misuse, alteration, or destruction.

Access to your personal data is strictly limited to individuals who need to know this information for the purpose of providing services.

All individuals with access to personal data are bound by confidentiality obligations, as documented in form ORG01-01 (ISO 9001).

Our ISO 9001 Quality Management System includes all necessary documentation for GDPR compliance and data protection.

This system is subject to an internal and third-party audit schedule, in collaboration with SWISS Global Cert.

Changes to This Statement

FoodOxys regularly reviews this Statement and may modify or update it at its discretion.

We encourage you to periodically consult this page to stay informed about how we manage your personal data.

This is Version 1.0, issued on 01-06-2020.
Any updates or revisions are governed by internal procedure QAS 01.

Our ISO 9001-certified Quality Management System maintains full documentation related to GDPR compliance and data security, monitored through a structured plan of internal and external audits.

Contact Us

If you have any questions, comments, or complaints regarding the handling or protection of your personal data by FoodOxys, or if you wish to update or modify your personal information or exercise any of your rights as a data subject,

please contact us via the phone numbers listed on our website or directly at dpo@foodoxys.com.

Consent

By registering with us and/or submitting your personal data to FoodOxys, you consent to the use of this information in accordance with this Statement.

Your personal data will not be used for any other purpose unless we have your express permission, or unless such use is required or permitted by law, or necessary for the legitimate operation of our services.