Privacy Policy

The purpose of this document is to inform the user of the website of SPINE ACTION LTD, as well as all natural persons who have transactions with the company (data subjects), directly or indirectly, about the acts of collection, processing, and storage of their data conducted by the Company, based in Athens, 25 Vrana Street, in accordance with Articles 7 and 9 of the General Data Protection Regulation (GDPR/EU/679/2016).

Our Company “SPINE ACTION LTD,” based in Athens, 25 Vrana Street, (Phone: 210 67 54 577 – email: info@spineaction.gr) collects personal data that it processes through either the website or third-party collaborating entities (public hospitals, private clinics, healthcare professionals, etc.).

The collection, processing, and storage occur within the framework of the company’s activities in importing, marketing, and distributing medical devices for neurosurgery, otorhinolaryngology, orthopedics, general surgery, and their consumables. Additionally, it includes the import, storage, and distribution of human bone grafts, as well as the provision of intraoperative neurophysiological monitoring services for ensuring “traceability” and protecting patient health.

The Company collects personal data either from the SPINE ACTION Ltd website or from public healthcare institutions, private clinics in Greece, professional physicians, etc.

The collection, processing, and protection of the data by the Company include, as applicable, some of the following categories:

A. Identification Data: Name, Surname, ID card, Tax Identification Number (TIN), Tax Office, Social Security Number (AMKA), Medical Record Number (AMΑ)
B. Contact Data: Email address/mailing address, phone/fax numbers
C. Professional Data: Physician’s specialty, Client’s profession
D. Sensitive Data: Medical history, Disease

The collection, processing, and protection of the data collected through the website include the following categories:

A. Identification Data: Name, Surname
B. Contact Data: Email address

Data is transmitted only to entities mandated by law.

The Company collects, stores, and generally processes the data for the period dictated by the applicable legislation.

We collect all the aforementioned categories of information in the following ways:

  • From public healthcare institutions, private clinics in Greece, professional physicians.
  • Through charges for special materials, consumables or implants deemed necessary during the patient’s hospitalization or for their surgical operation by public healthcare institutions, private clinics in Greece, or the treatment or examination by professional physicians.
  • By providing personal identification details, tax identification number, and other personal information for the issuance of relevant documents concerning special materials, implants, consumables, or services that the patient received from our company.
  • From authorized persons who have legal authority to act on behalf of the patients (their legal representatives) if they are under 16 years old or are unable to provide this information themselves.

The data subject also has the following rights, as defined by the provisions set out in the General Data Protection Regulation (GDPR/EU/679/2016). Specifically:

  • They have the right to access their personal data held, owned, and processed by the Company.
  • They have the right to request corrections of inaccuracies or outdated data concerning them or the completion of incomplete data.
  • They have the right to request the deletion of their data from the Company’s records if the processing is no longer necessary for the purposes for which they were collected.
  • They have the right to request a restriction on the use of their data if they contest their accuracy.
  • They have the right to receive the data they have provided in a structured, commonly used format.

Our company processes personal data only in accordance with this privacy statement and relevant data protection laws. Exercising the above rights requires sending your request to the Company at the email: info@spineaction.gr or via fax 210-6090898 or by regular mail to the address Vranas 25 to receive the corresponding Personal Data Processing Request Form.

If you wish to express a complaint regarding the processing of your personal data, you have the right to submit a complaint to the email address of our Data Security Officer: hardalias@spineaction.gr.

You also have the right to file a complaint with the Hellenic Data Protection Authority (HDPA) [1-3 Kifisias Avenue, 115 23 Athens, tel: +30 2106475600, email: contact@dpa.gr] if you believe your rights to the protection of your personal data are being infringed. Additionally, you have the right to appeal to the competent judicial authorities for the protection of your personal data.

In the event of exercising any of the aforementioned rights, the Company will take all possible measures to fulfill the request within thirty (30) calendar days from receipt of the relevant application, notifying in writing either the fulfillment of the request or the reasons preventing its exercise.