Privacy Notice

 HELP S.A. – Νοvember 2026

Welcome to the website of HELP S.A. (the “Website”). The Website provides information about HELP S.A. (hereinafter “HELP”, the “Company”, “we” or “us”) and its activities.

HELP S.A., 10 Valaoritou Street, Metamorfosi, Attica 14452, Greece, acts as Data Controller in relation to the processing activities described in this Notice. This Notice explains how personal data may be processed when you visit our Website or contact us through the communication channels made available on it, including for medical information and pharmacovigilance purposes, and informs you of your rights under Regulation (EU) 2016/679 (GDPR) and applicable Greek law.

Personal Data We Collect

Depending on your interaction with the Website and with the contact channels published on it, we may process:

  • Technical data, such as IP address, device and browser information, security logs, and information generated by strictly necessary cookies used to secure and operate the Website. For more details about the information collected through cookies and similar technologies, please visit our Cookies Policy.
  • General communication data, such as your name, email address, telephone number, professional capacity and the content of any message or attachment you choose to send to the Company using its published email addresses or other contact channels.
  • Medical information enquiry data: name, contact details, professional affiliation where relevant, the date, product concerned, question, response, follow-up correspondence and information voluntarily supplied in an enquiry received by email or telephone.
  • Pharmacovigilance data: Where you report a suspected adverse reaction or other medicinal product safety issue, we may process personal data relating to the reporting individual and the patient concerned. Such data may include the reporter’s name, contact details, limited patient identification details, age, sex, information about medicinal products, suspected adverse reactions, medical history, concomitant medication and other relevant health-related information.

This information may be provided directly by patients or indirectly by healthcare professionals, relatives or other persons submitting safety reports.

Why Do We Process Your Personal Data?

Legitimate interests (Article 6(1)(f) GDPR).

We process necessary technical data to maintain website availability and security, prevent abuse, troubleshoot incidents and protect our systems.

We may also process your personal data to manage and respond to general enquiries, medical enquiries, requests for information and enquiries concerning potential business collaborations, on the basis of our legitimate interests, provided that such interests are not overridden by your rights and freedoms.

Pharmacovigilance legal obligations and public health (Articles 6(1)(c) and 9(2)(i) GDPR).

We receive, record, assess, follow up and report suspected adverse reactions and other relevant safety information to meet applicable pharmacovigilance obligations and help safeguard medicinal-product safety.

With Whom Do We Share Your Personal Data?

Where appropriate and necessary, personal data may be made available to authorised Company personnel and to:

  • IT hosting, website administration and cybersecurity service providers;
  • providers of email and other business communications;
  • external pharmacovigilance service providers;
  • competent regulatory authorities and other competent authorities where required;
  • professional advisers and judicial or public authorities where disclosure is legally justified.

Where personal data is transferred outside the European Economic Area (EEA), we ensure that such transfers take place in accordance with Chapter V of the GDPR, including, where applicable, on the basis of an adequacy decision by the European Commission or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

How Does the Company Protect Your Personal Data?

We implement appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or unlawful disclosure. Access is limited according to professional duties and confidentiality requirements, with safeguards appropriate to the sensitivity of health data.

How Long Do We Retain Your Personal Data?

Your personal data is retained for as long as this is required for the fulfillment of each processing purpose. Upon expiration of these terms, your personal data will be deleted, unless otherwise required under the applicable legal and regulatory framework or for the establishment, exercise or defense of legal claims.

Your Rights

In any case, we would like to inform you that according to the applicable legislation, you have and can exercise the following rights:

the right to access your personal data, as well as information related to the processing;

the right to correct inaccurate and complete any incomplete data;

and in the cases expressly provided for by law;

the right to erasure (‘right to be forgotten’);

the right to restrict the processing of your data;

the right to object to processing based on the legitimate interests of the Company.

You may exercise your rights by submitting a request to the Company using the contact details provided below. We will respond without undue delay and, in any event, within one (1) month of receiving your request. This period may be extended by two (2) additional months where necessary, considering the complexity and number of requests.

Contact Details

For any questions or requests regarding the protection of your personal data, you can contact us via e-mail, [email protected].

Right of Complaint

In case you believe that we have not satisfied your request and the protection of your personal data is compromised in any way, you may lodge a complaint via a dedicated portal in the Hellenic Data Protection Authority website (Athens, 1-3 Kifissias Avenue, PC 115 23). Detailed instructions for filing a complaint can be found on the Authority’s website www.dpa.gr.