Privacy & Personal Data Protection Policy

FoodOxys P.C. is a legal entity operating with structured management systems and technical infrastructure for the provision of scientific services related to the analysis of biological and genetic data. The protection of privacy and personal data constitutes a fundamental priority for our company.
This Policy applies to all operations and services of the company, whether through the website www.foodoxys.com or during the provision of its laboratory or scientific services.

FoodOxys P.C.:

• Collects personal information from you for the purpose of performing biological, nutritional, or genetic analyses and providing personalized scientific reports.
• Fully complies with the General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and Greek Law 4624/2019.
• Respects the confidentiality, security, and integrity of all data collected.

For any questions regarding the provision or processing of personal data, you may contact dpo@foodoxys.com

1. Purpose of Data Collection and Use of Personal Data

FoodOxys P.C. collects, processes, and uses personal data exclusively for the following purposes:

• Conducting biological, microbiological, and genetic analyses,
• Providing related information and scientific reports,
• Improving the quality and effectiveness of its services,
• Complying with legal and regulatory obligations.

Data collection is carried out transparently, following prior information and, where required, with your explicit consent.

Categories of Data Collected

• Identification and contact details (full name, contact information, address, tax identification number, social security number),
• Medical or nutritional history (where required for analysis purposes),
• Biological samples (e.g., blood samples, buccal swabs),
• Preferences related to communication or services.

FoodOxys P.C. collects only the data strictly necessary and solely for specific, clearly defined purposes.

2. Special Provisions for Biological and Genetic Data

During the collection of biological samples:

• The microbiology laboratory acts as a Data Processor and receives only the strictly necessary data (full name and blood sample).
• Samples are transferred to the laboratory facilities of FoodOxys P.C., where they are anonymized and assigned a unique sample code.
• Identification data are retained only in a protected file, accessible exclusively to authorized FoodOxys P.C. personnel.

Biological samples are used exclusively for analytical purposes and are securely destroyed upon completion of the analysis, unless explicit consent has been provided for their retention.

3. Disclosure and Transfer of Data

FoodOxys P.C.:

• Does not sell or transfer personal data to third parties.
• Shares data only with trusted partners or service providers (e.g., microbiology laboratories, IT service providers) acting under its instructions and bound by Data Processing Agreements, in full compliance with the GDPR.
• May disclose data to competent authorities when required by law or by court order.

No transfer of personal data to third countries takes place without the safeguards provided by the GDPR.

4. Data Security and Management

FoodOxys P.C. implements technical and organizational security measures in accordance with ISO 9001 standards and GDPR requirements.

These measures include:

• Restricted access to authorized personnel only,
• Data encryption and pseudonymization,
• Security incident management and notification of the Data Protection Officer (DPO),
• Regular internal and external audits (SWISS Global Cert),
• Staff training and strict confidentiality obligations.

5. Your Rights

You have the right to:

• Access your personal data,
• Request correction or completion of inaccurate or incomplete data,
• Request deletion (“right to be forgotten”),
• Restrict or object to data processing,
• Data portability,
• Withdraw consent at any time.

For any request, please contact dpo@foodoxys.com.

6. Data Retention and Deletion

FoodOxys P.C. retains personal data only for as long as necessary:

• To complete the requested services,
• To comply with legal or regulatory obligations,
• Or as required by applicable legislation.

Biological samples and personal data are securely deleted or destroyed once the purpose of processing has been fulfilled.

7. Consent

By registering, communicating with FoodOxys P.C., or submitting your personal data, you consent to their processing in accordance with this Policy.

8. Policy Amendments

FoodOxys P.C. reserves the right to amend this Policy for compliance or service improvement purposes.
The date of the most recent update is indicated at the bottom of this page.
Last updated: October 2025

9. Contact

For any questions or requests regarding your personal data, please contact dpo@foodoxys.com.