ForHealth S.A. (“ForHealth,” “we,” or “us”), a company organized and existing under the laws of Greece entered in the Commercial Register at the Registry Agency under following number 286626, with registered address at 29 Pentelis Avenue & Achilleos, GR 15235 Vrilissia, Athens, is specialized in providing high quality Support Services to patients, Healthcare professionals (HCPs) and Pharmaceutical Companies.
At ForHealth we believe that you, as patient, should always be at the center of our attention, deserving high level healthcare services, with main focus the improvement of his quality of life. By understanding your needs, we design and implement Patient Support Programs, comprehending the special demands of every therapeutic category.
Processing of your personal data is governed by these terms, by the relevant provisions of Greek and EU legal framework on data protection, including the General Data Protection Regulation (2016/679) and the relevant decisions, guidelines and regulation issued by the Hellenic Data Protection Authority.
This Policy may be modified by ForHealth, from time to time, in particular to adapt its terms to evolutions or changes of applicable legislations and/or to ForHealth’s practices. We advise you to regularly check our Data Protection Policy in order to remain informed and updated on any amendments.
“personal data” means any information relating to an identified or identifiable natural person;
“data concerning health” means personal data related to the physical or mental health of a natural person, including the provision of healthcare services, which reveals information about his or her health status;
“special category personal data” includes genetic data, biometric data and data concerning health;
“personal data processing” means any operation or set of operations which is performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction;
“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
We act as a data controller for use of your personal data to provide our healthcare programs. We also act as a controller and processor in regard to the processing of your data from third parties
ForHealth collects and processes personal data of the following categories of individuals:
a. Patients and individuals in general that request the provision of healthcare services.
b. Carer of patients,
c. Users of the website of ForHealth
What Data Do You Collect?
Forhealth collects and processes personal data (including name and address, date of birth and contact details; of you as patient, your carer for the following purposes, and to the extent absolutely necessary, to best serve these purposes.
Providing patient support programs ForHealth also collects and uses certain sensitive categories of information which refereed to your medical conditions, family medical history, and medications an individual may take, including the dosage, timing, and frequency),
ForHealth stores and processes the simple personal data and special category data, i.e. medical history, provided by you or another person on your behalf for the purpose of providing healthcare services based on your explicit consent. For Health obtain your written authorization before using or disclosing your personal and protected health information
Purposes of processing your Personal Data:
- To provide our Services to you, to communicate with you about your use of our Services, to respond to your inquiries,
- To manage and deliver healthcare to you to ensure that:
The staff involved in your care have accurate and up to date information to assess and advise on the most appropriate care for you.
Staff have the information they need to be able to assess and improve the quality and type of care you receive.
- As necessary to comply with a legal obligation:
For compliance with legal and regulatory requirements and related disclosures
For establishment and defense of legal rights
For activities relating to the prevention, detection and investigation of crime
- To send you updates for products and new services provided by us, aiming to ultimately improve your quality of life or/and to participate in research for the evaluation and improvement of our services
ForHealth processes and uses your personal data in a lawful and legitimate manner. Under no circumstances does it collect nor process a greater number of information or data than it is required to fulfill the processing purposes. Their collection and processing is exclusively being carried out for the purposes of their processing and use, which are notified to you.
ForHealth operates in compliance with strict and detailed policies and procedures and employs reasonable physical, electronic, managerial and technical procedures to safeguard and secure any personal information from loss, misuse, unauthorized access or disclosure, alteration or destruction, under the provisions of national, European law in connection with the individual’s protection against the processing of its personal data and particularly taking into account the provisions of the General Regulation on Data Protection. Applied information security management helps us not only to grow, innovate and expand our services, as well as identify the risks related to these information, and to put in place appropriate controls to mitigate and manage the risk thereof.
To get quality as an outcome, all our procedures are planned, executed, evaluated, reviewed and upgraded according to the highest standards We operate under Standard Operating Procedures and we have been certified according to ISO 9001 standards, since 2013. Moreover, we are currently in the process of being certified according to ISO 27001.
In some areas of our site, a cookie might be placed on your computer. A cookie is a small file that resides on your computer’s hard drive that allows us to improve the quality of your visit to our websites by responding to you as an individual.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, if you choose to decline cookies from the ForHealth then functionality, including your ability to log-in and participate, will be impaired.
Acceptance of cookies is implied if you continue to access our website without adjusting your browser settings.
Your Rights regarding your Personal Data
Under Data Protection regulations, you have a number of important rights regarding your personal data that you may exercise at any time by contacting us at firstname.lastname@example.org. These Rights are as follows:
- Right to information and access: You have the right to be informed and to have access to your personal data and to receive additional information concerning their processing. You are entitled to have access upon simple request to your personal data, in which case you may receive a copy of such data
- Right to rectification: You have the right to obtain the correction, amendment, addition and update of your personal data.
- Right to erasure (right to be forgotten): You have the right to obtain the erasure of your personal data in the cases that such right is not restricted by the obligation of the Clinic to retain your medical record under applicable law or otherwise.
- Right to withdraw the consent you had provided (with no retroactive effect) at any time for an issue relating to the protection of simple personal and health data.
- Right to data portability: This means that you request your personal data to be transferred to other providers on certain occasions
You may also file a complaint before Hellenic Data Protection Authority regarding the processing of your Personal Data. While we suggest that you contact us beforehand, if you wish to exercise this right, you should contact directly the above data protection authority.
Disclosure of your Personal Data
ForHealth does not provide to any third parties access to personal data that collects and processes as the data controller. By way of exception, it may provide access only if it is absolutely necessary for the herein described legitimate purposes, to your doctors.
Personal data must be transferred to pharmaceutical companies, which will be limited only at patient’s code and are exclusively related to the obligations that ForHealth has undertaken for the compliance with legislative framework on pharmacovigilance in accordance to article 23 of “SFEE’s Code of Ethics on the promotion of prescription only medical products .
Also anonymous aggregate data that are not reported to you may be distributed in the pharmaceutical companies, which will be used in order to analyze trends and to conduct research.
How long is your Personal Data held?
We will retain your personal data for as long as necessary to provide you with services, and to comply with our legal and regulatory obligations.
Questions and contacting us
If you have any request or question regarding this policy, you may email us or send us a written request, using our contact details set out below. If you wish to exercise any of the above rights, we advise you to ask for our “Data Subject Request Form” and submit it to the following contact details
Notification of Changes
We reserve the right to change the practices described in this Privacy Notice at any time. Please check here periodically.
If you decide to participate in ForHealth’s Patient Support Program, then your consent will be reflected in a separate consent form (written declaration) through which you will be informed about the purpose or purposes of the processing, your rights and the obligations of ForHealth regarding the protection of your personal data.
The request for consent is presented in an intelligible and easily accessible form, using clear and plain language.