Privacy Policy

Information on the Processing of Personal Data

We would like to inform you that for DOMI MEDICAL SMPC the protection of personal data is of primary importance. For this reason, we take the appropriate technical and organizational measures to protect the personal data that we process and to ensure that their processing is always carried out in accordance with the obligations set by the legal framework, both by the company itself and by third parties who process personal data on behalf of the company. This Privacy and Personal Data Protection Policy applies to the services we provide to our customers, to communications and promotional actions for every interested party and to the website www.domi.gr and its electronic services.

What is GDPR

The General Data Protection Regulation – GDPR 2016/679 constitutes the new regulatory framework of the European Union (EU) in the field under examination. The object of the law is to establish the conditions for the processing of personal data, the protection of the rights and freedoms of natural persons and in particular the right to the protection of personal data.

Controller or Processor

The company “DOMI PLIROFORIKI MIKE” under the name «DOMI MEDICAL SMPC», based at L. Athinon 233, Chaidari Attica, P.C. 12461, with contact e-mail info@domi.gr and tel: +302104137123 as legally represented, informs that, for the purposes of carrying out its business activities, it processes personal data of its customers in accordance with the applicable national legislation and European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter the «Regulation») as in force. The company DOMI MEDICAL SMPC, depending on the particular characteristics of each contract it signs with its customers, may act sometimes as controller and sometimes as processor. When the company DOMI MEDICAL SMPC itself determines the purpose and manner of processing the personal data it manages (e.g. in its relations with its employees, in the manner of processing the contact details of its customers) then it acts as controller, according to article 4 para. 7 of the GDPR. When the company DOMI MEDICAL SMPC operates as a service provider to the customer offering implementation and support services for information systems and thus processes personal data on behalf of its customer, then it is considered as processor according to article 4 para. 8 of the GDPR, while its customer is considered controller of the processing of personal data. The company DOMI MEDICAL SMPC, when acting as processor, undertakes towards its customer-controller to take the required technical and organizational measures, so as to be able to guarantee the protection of the personal data it processes, in accordance with the requirements of the GDPR. For any matter regarding the processing of personal data you may contact the Personal Data Protection Department and the Data Protection Officer (DPO) of DOMI MEDICAL SMPC, at the following contact details: email: dpo@domi.gr Telephone: +302104137123

What categories of personal data we process and for what purpose

1. Personal data that you provide to us for products and the implementation of Demo or Presentation services: service during which you provide us with the possibility to contact you, in order to organize a presentation of our business solutions (as controller or as processor). The personal details entered in our information systems for the above purpose are: full name, email, mobile/landline telephone. Legal basis for the above processing is the performance of our contractual obligations (GDPR article 6 para.1΄b), in the event that there is a contract between us and the above service is provided within its framework or in the event that we are in negotiations for the conclusion of a contract between us or your explicit and free consent (GDPR article 6 para.1a).
2. Periodically DOMI MEDICAL SMPC organizes surveys, promotional actions, business meetings for the presentation and evaluation of its products and services. Also, it participates in exhibitions, conferences, business events in Greece and abroad (as controller). The personal details provided to us within the framework of business cooperation (business cards, contact details forms) may be entered in our information systems, for the purposes of communication and information about the products – services and activities of the company, by telephone and/or email. Personal data for the above purposeare: full name, email, mobile/landline telephone, profession, job position. Legal basis for the above processing is the performance of our contractual obligations (GDPR article 6 para.1΄b), in the event that there is a contract between us and the communication takes place within the framework of the contract and the legitimate interest of our company (GDPR article 6 para.1΄f), which consists in the need for commercial promotion of its activity, when the communication takes place towards our potential customers.
3. In the services of implementation and support of information systems (as processor), our executives may gain access to personal data of our customer’s database, and/or applications and connections may be used which allow remote communication and provision of services. These services are implemented by taking all appropriate organizational and technically feasible measures for the protection of personal data. This access is implemented by taking the best possible information security measures that are feasible. Legal basis for the above processing is the performance of our contractual obligations (GDPR article 6 para.1΄b).
4. In the services of implementation and support of information systems (as processor), transfer-transmission of personal data may be required by transferring the customer database to the facilities of DOMI MEDICAL SMPC for the provision of specialized technical services. In this case, the best international practices for Information security are followed and explicit consent of the customer is required. Legal basis for the above processing is the performance of our contractual obligations (GDPR article 6 para.1΄b).
5. Newsletter Registration Your registration to the Newsletter is done through a double opt-in process, where your explicit consent is ensured for the sending of newsletters for products-services, company news and trends in the Information and Communications Technology sector (as controller). The personal details entered in our information systems for the above purpose are: full name, email, mobile/landline telephone. Legal basis for the above processing is your explicit and free consent (GDPR article 6 para.1a)). Personal data from the use of electronic services on our website
6. DOMI MEDICAL SMPC uses cookies (small text files placed on your device) and similar technologies and services that use the IP address for the provision of its web locations as well as its mobile applications and electronic services (as controller).

Personal data published by third parties

Within the framework of the legitimate interest of DOMI MEDICAL SMPC to create purchasing interest for its products and services, we may process information that is published on the internet in search engines and social media applications (Google, LinkedIn, Facebook, Twitter, Instagram) (as controller). Legal basis for the above processing is the legitimate interest of our company (GDPR article 6 para.1΄f).

Personal data for commercial transactions

We maintain in our Information systems and in the contracts with our customers and suppliers, personal data for commercial transactions (sales, purchases, payments etc.), contact details for the said procedures (as controller). The legal basis for this specific processing is the company’s compliance with a legal obligation (GDPR article 6 para.1΄c) and specifically with a tax obligation

Call recording

When you call our customer service call center, regarding your order, you receive information from us that part of your call may be recorded for reasons of proof of the transaction. That is, the call is not recorded in every case, but only if we identify that you submit to us verbally a request that is important for your order (e.g. change of postal address, cancellation etc.), so that we are able to prove what was agreed verbally, in case of dispute. When the recording needs to start, you will hear the characteristic sound. If you do not wish the recording of your voice, you can always choose to contact us in writing, through the available contact form. Calls are deleted after the lapse of 6 months.

Children

By providing your consent you responsibly declare that you are over 16 years old. If you are under 16 years old, you may use our website and its services only with the participation and approval of a parent or guardian.

How and why we use your personal data

We may use the information we collect for the following purposes:

Registration to this website or to one of its services
Sending of passwords (username, password) for demo presentations.
Sending newsletters or telephone information about products-services, actions and news of DOMI MEDICAL SMPC
Implementation of DOMI MEDICAL SMPC services contract

Where your personal data are disclosed

DOMI MEDICAL SMPC may transmit the personal data provided by natural persons to third parties in the following cases and for specific purposes.

Certified partners of DOMI MEDICAL SMPC (Processors). These are companies with certified implementation and support consultants in the products and services of DOMI MEDICAL SMPC, who may use the necessary information to provide the said services. There is always a contractual relationship between DOMI MEDICAL SMPC and the Certified Partner with the necessary confidentiality commitments and taking the appropriate organizational and technical measures for the protection of personal data.

Other third parties, due to legislation: We may disclose your necessary personal data to third persons, such as in particular police, judicial or prosecutorial authorities, tax authorities and insurance bodies, in order to comply with legislation or to respond to a mandatory legal procedure, to protect the rights or safety of the company DOMI MEDICAL SMPC.

Other third parties, for the implementation of DOMI MEDICAL SMPC services: There are cases where we will have to disclose the necessary personal data for the smooth operation of certain electronic services (datacenter, hosting, etc.).

Other third parties with your consent. Apart from the disclosures described in this Privacy and Personal Data Protection Policy, we may share information about you with third parties, provided that you give your free and explicit consent.

To the Personal Data Protection Authority, in the event that an incident of breach of your personal data arises.

Storage Period

The storage period of the data is decided based on the following specific criteria depending on the case: When the processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions impose. When the processing is performed on the basis of a contract, your personal data are stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract. When the processing carried out is based on your consent, your personal data are kept until its withdrawal. This can be carried out by you at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent during the period before its withdrawal.

Security of Personal Data

DOMI MEDICAL SMPC applies appropriate technical and organizational measures aiming at the secure processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or unlawful access to them, use, modification or disclosure. In any case, the way the internet operates and the fact that it is free to anyone, does not allow guarantees to be provided that unauthorized third persons will never be able to breach the applied technical and organizational measures, gaining access and possibly proceeding to use personal data for unauthorized and/or unfair purposes. In cases where, either due to the use of new technologies, or due to large-scale processing of special categories of data, it may pose a high risk to the rights and freedoms of our customers, DOMI MEDICAL SMPC before carrying out such processing, proceeds to an assessment of the impact of the planned processing operations on the protection of personal data (DPIA).

Actions in case of breach of your personal data.

In the event that a breach of your personal data is found and this breach may cause risk to your rights and freedoms, DOMI MEDICAL SMPC, when acting as controller, undertakes to notify without undue delay and, where possible, within 72 hours from the moment it becomes aware of the fact of the breach, the Personal Data Protection Authority. When DOMI MEDICAL SMPC acts as processor, it undertakes to notify the incident of breach of your personal data to the controller without undue delay. If indeed it concerns an increased risk to your rights, DOMI MEDICAL SMPC will hasten to inform you accordingly, unless by using the appropriate technical and organizational means it has available, it manages to overcome the risk.

What are your rights in relation to your personal data

Every natural person whose data are subject to processing by DOMI MEDICAL SMPC has the following rights:

Right to information:

You have the right to information regarding our identity and contact details, or those of our representatives, the contact details of the data protection officer (DPO), the purposes of the processing for which the personal data are intended, as well as the legal basis for the processing, the recipients or categories of recipients of the personal data. Within the framework of the principle of transparency that governs the operation of our company, you can contact us requesting further information about the way your personal data are processed and the way your rights are exercised, by submitting the corresponding requests. The response to your requests will be made without delay and in any case within one month from receipt of the request. This deadline may be extended by two more months, where required, taking into account the complexity of the request and the number of requests.

Right of access:

You have the right to be aware of and verify the lawfulness of the processing and to ask us for copies of the personal data undergoing processing. Thus, you have the right to have access to the data and to receive supplementary information regarding their processing. You also have the right of access to more specific information regarding the content and the way of exercising your individual rights.

Right to rectification:

You have the right to study, correct, update or modify your personal data

Right to erasure:

You have the right to submit a request for erasure of your personal data when we process them on the basis of your consent or in order to protect our legitimate interests. In all other cases (such as indicatively when there is a contract, obligation to process personal data imposed by law, public interest), this right is subject to specific restrictions or does not exist depending on the case (e.g. we are entitled to refuse the erasure of your personal data aiming at the establishment, exercise or support of our legal claims).

Right to restriction of processing:

You have the right to request restriction of the processing of your personal data in the following cases: (a) when you dispute the accuracy of the personal data and until verification is carried out, (b) when you oppose the erasure of personal data and request instead of erasure the restriction of their use, (c) when the personal data are not needed for the purposes of processing, however they are necessary for you for the establishment, exercise, support of legal claims, and (d) when you object to the processing and until verification is carried out that there are legitimate reasons concerning us which override the reasons for which you object to the processing.

Right to object to processing:

You have the right to object at any time to the processing of your personal data in cases where, as described above, it is necessary for purposes of legitimate interests pursued by us as controllers, as well as to processing for purposes of direct informative promotion. In particular, you have the right to object to any decision taken solely on the basis of automated processing, including profiling, which produces legal effects concerning you or significantly affects you. By exception, you may object to automated decision-making concerning you, when this decision is either necessary for the conclusion or performance of the contract we have concluded with you, or is based on your explicit and free consent.

Right to portability:

You have the right to receive without charge your personal data in a format that will allow you to have access to them, use them and process them with commonly used processing methods. Also, you have the right to ask us, if technically feasible, to transmit the data directly to another controller. This right of yours exists for the data you have provided to us and their processing is carried out by automated means on the basis of your consent or in performance of a relevant contract.

Right to withdraw consent:

Finally, DOMI MEDICAL SMPC informs you that where the processing is based on your explicit and free consent, you have the right to withdraw it freely, without affecting the lawfulness of the processing based on your consent before you withdrew it. To withdraw your consent you can contact the Personal Data Protection Department of DOMI MEDICAL SMPC, at the following contact details: email: info@domi.gr. In case you want to contact the Data Protection Officer (DPO) email: dpo@domi.gr and telephone: +302104137123

Right to lodge a complaint with the HDPA

In case of breach of your personal data you have the right to lodge a complaint with the Personal Data Protection Authority (www.dpa.gr): Telephone Center: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr.

Cookies and Similar technologies

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the website. DOMI uses cookies (small text files placed on your device) and similar technologies and services that use the IP address for the provision of its web locations as well as its mobile applications and electronic services. Cookies allow us, among other things, to store your preferences and settings, allow you to log in, provide advertisements based on interests, provide notifications, contribute to combating fraud, while also analyzing the performance of our web locations and our electronic services. For the above purposes, services such as Google Analytics, Google Firebase and OneSignal are also used, services which are fully compatible with GDPR. Also, we use web beacons to provide cookies and to collect usage and performance data. Our web locations may also include web beacons and cookies from third-party providers.

Changes to this policy

You have at your disposal a variety of tools to control cookies, web beacons and other similar technologies, such as browser controls for blocking and deleting cookies and controls from certain third-party analytics providers to opt out of data collection through web beacons and similar technologies. Your browser and other choices may affect your experience with our products. DOMI may modify this Personal Data Protection Statement in order to respond each time to the applicable personal data protection practices. When we make changes to this statement, we will update the “update date” at the bottom of this page. We encourage you to periodically study this Personal Data Protection Statement in order to be informed regarding the way DOMI protects your data.

Terms of Use – Domi Cloud

The activation of the Domi Cloud Online service (hereinafter referred to as “Domi Cloud”) constitutes an agreement and confirmation that you have read, understood, approved and fully accepted all the Terms of Use and the conditions of the service. If you disagree with the Terms of Use, you must uninstall or discontinue the use of the application on your electronic device (PC, Mac, mobile phone, tablet, etc.), thereby preventing access to or use of its services. Furthermore, in case we require it, you agree to sign a non-electronic version of these Terms of Use.

This agreement is binding between the Private Capital Company (I.K.E.) “DOMI PLIROFORIKI M.IKE” with the distinctive title “DOMI MEDICAL SMPC” (hereinafter “DOMI MEDICAL SMPC”) and you or your business (hereinafter referred to as “User”), and defines the Terms of Use of the services of the Domi Cloud application. The User declares that they accept and must absolutely comply with the Terms of Use of the Services, that they are over 18 years old and that they act individually for themselves or, if representing a company, that they have the necessary authorization and legalization to do so.

1. Domi Cloud Services

We offer a wide range of services, including electronic invoicing, management of financial matters and a variety of supplementary functions.

Our services are described below Indicatively:

General Details-Medical History (Detailed for children)
Odontograms Initial Status – Treatment Plan – Work Diary (2D – 3D)
Endodontic Measurements- Notes – Shade Guide (Per tooth)
Entry of works to Laboratories
Financials (and family)
Images – Digital-Graphic Notes
Prescription – Printouts (certificates, instructions) – Questionnaires
Periodontogram
Connection with electronic prescription and e-DAPY.
Easy creation of visit and prescription in electronic prescription through Domi Cloud.
Issuance of receipts/invoices for provision of services and sending them to MyData of AADE.
Ability to send individual and group SMS (with pre-purchase of sms credits package).
Appointments Multiple Doctors (chairs) per day – week
Import – Export Outlook.
Colorings-Reminders-Printouts
Synchronization with all mobile phones (GoogleCalendar) direct connection and with IPHONE
Income – Expenses
Technicians-Suppliers
Income – Expenses-Statistics
Clinic Organization
Re-examinations- SMS-Balances
Personal File
Printouts – Label printers
Materials File
Pharmacology
Work Catalog – Work Statistics
Name Day Calendar – SMS (with proprietary Gateway by Domi that ensures medical confidentiality)
Operators – Rights gradation

Subscriptions and Charges

DOMI MEDICAL SMPC reserves the right to modify the Terms vUse and the Conditions as it deems necessary, either with or without notice. In the event that these changes affect the contractual obligations, the company will proceed with the necessary notification as soon as possible. Continued access to or use of the services after such changes constitutes acceptance of the modified terms. Furthermore, we reserve the right, at our discretion, to modify, suspend, or even discontinue the provision of all or any part of our services, at any time, with or without notice.

If you do not agree with the modified Terms of Use, you must avoid entering the services using your codes and not use our services.

Price List

The pricing of the subscription packages is determined based on the current price list at the time of purchase, as it is available at the address http://www.domi.gr

In case of addition of new functionalities to the subscription, the charge is made proportionally to their price for the remaining time period of the current subscription.

Duration/Renewal/Expiration

After the expiration of the subscription to Domi Cloud (except for the trial period), the Customer has the option to request access to their data within 30 days. After this period, the data will be permanently deleted. During this period, the Customer also has the option to receive their data in a readable file format (excel, txt etc.).

Usage Restrictions

DOMI MEDICAL SMPC reserves the right to interrupt or restrict access to and use of Domi Cloud, in whole or in part, by the Subscriber at any time. This may occur in case of violation of third-party rights or when there are indications of violation of such rights. DOMI MEDICAL SMPC also has the authority to place restrictions on the use of Domi Cloud by the Subscriber or to take other measures to ensure the normal use of the service by other subscribers, if it is found that the Subscriber prevents the use of Domi Cloud by other users.

DOMI MEDICAL SMPC reserves the right to proceed with unannounced and permanent interruption of its services, if a violation of the terms of the Fair Use Policy of the Domi Cloud services occurs.

Data backup – Mobile devices

DOMI MEDICAL SMPC beyond the Domi Cloud service has developed the Dentalwin mobile application on operating systems (adroid,iphone) which constitutes an extension of the service.The user must check for the completion of synchronization with the service to avoid any malfunctions that may occur due to the particularity and nature of the internet. Daily checking is recommended as well as backup of the mobile device by the user.

Obligations of DOMI MEDICAL SMPC

DOMI MEDICAL SMPC provides the Domi Cloud service taking possible means for its uninterrupted operation. However, temporary interruptions may occur due to technical difficulties, maintenance, tests, updates, upgrades, or due to third-party services, such as telecommunications providers. In the event of direct or indirect damage or harm related to the Domi Cloud services, DOMI MEDICAL SMPC is liable only in cases of intent or gross negligence and up to the amount of its fee for the provision of the said services, as stated in the issued tax document for a one-year subscription. The customer expressly accepts that the liability of DOMI MEDICAL SMPC is limited to this amount and does not extend to any other damage that may be caused.

The Domi Cloud services of DOMI MEDICAL SMPC are hosted on servers of the company located in a Cloud environment, thus ensuring the maximum possible security. The data are specifically stored on privately owned servers located in Europe, and are stored on encrypted disks, thus offering an additional level of security.

DOMI MEDICAL SMPC is not liable for inability to perform the terms hereof, in the event of strike, social unrest, other accidental incidents or events of force majeure.

Confidentiality

The Customer of DOMI MEDICAL SMPC is expressly prohibited from disclosing or appropriating any information related to intellectual property rights, database rights, confidential information (whether protected or not), know-how, or other important information acquired through their cooperation with DOMI MEDICAL SMPC or from the use of its services.

Assignment

According to this Agreement, DOMI MEDICAL SMPC has the exclusive authority to assign the rights and claims arising from it. This means that only DOMI MEDICAL SMPC has the ability to transfer the rights or obligations arising from this contractual relationship.