The Company operates a pharmacy with a compounding laboratory (part of Eva Mitsaki Pharmacy) and applies enhanced data protection standards, particularly when processing health-related data.

Data Controller

The Data Controller responsible for the processing of personal data is:

PHARMACIES MITSAKI E.–CHONDROS CH. & CO G.P.

Registered Address: Paraliakos Stalidas–Malia, 700 07, Crete, Greece
Email: info@cocoonlab.gr
Phone: +30 28970 32132
Tax Identification Number (VAT): 802340410

Categories of Data Subjects

The Company processes personal data relating to the following categories of individuals:

• Website visitors
• Patients / Pharmacy customers
• Healthcare professionals

Processing is carried out only to the extent necessary for each specific purpose and in accordance with the principle of data minimization.

Types of Data That May Be Collected

If You Are a Patient

We collect and process personal data primarily for the purpose of executing medical prescriptions issued by your physician and provided to us.

For the registration, archiving, and execution of prescriptions, as well as for the delivery of the corresponding formulations, the Laboratory may process the following personal data:

• Full name
• Prescription number and content
• Address
• Contact details (phone/email)
• Social security number (AMKA)
• Medical diagnosis accompanying the prescription
• Other relevant medical information
• Copy of the medical prescription

Where the prescription concerns a child, we may require the child’s age and body weight.
Where the prescription concerns an animal, we record the species of the animal.

If You Are a Healthcare Professional

For the purpose of executing prescriptions you issue or provide to us, we may process personal data such as:

• Full name
• Prescription number and content
• Medical diagnosis
• Professional registration number
• Contact details (phone/email)
• Signature and stamp
• Billing information (VAT number, tax office, company name, address, etc.)

When You Visit Our Website (www.cocoonlab.gr)

Each time you visit our website, cookies are used to ensure proper functionality, continuous improvement, and optimal user experience.

When you use the contact form or communicate with us via email, we collect the data you provide in the required fields, as well as any files you may attach.

If you subscribe to our newsletter, we will collect your full name and email address to send updates about Cocoon Lab services and news.

Purposes of Processing

Personal data is processed for the following purposes:

• Communication and response to user inquiries
• Provision of general pharmaceutical information and counseling
• Support of pharmacy and compounding laboratory services
• Compliance with legal obligations under pharmaceutical, healthcare, and tax regulations
• Ensuring the security and proper functioning of the website

Legal Basis for Processing

Processing is based on the following legal grounds:

• Consent of the data subject
• Performance of a contract or pre-contractual measures
• Compliance with a legal obligation
• Legitimate interests of the Company (e.g. system security)

Processing of health data is carried out in accordance with Article 9(2) GDPR, within the framework of providing healthcare services by professionals bound by confidentiality obligations.

Health Data – Special Considerations

Health-related data:

• Is used exclusively for pharmaceutical purposes
• Is not used for advertising or commercial purposes
• Is not disclosed to third parties without a legal basis

Submission of such data through the website is the responsibility of the user and does not replace medical examination or diagnosis.

Cookies

The website uses cookies for:

• Essential functionality
• Statistical analysis of traffic
• Improvement of user experience

Users may manage or disable cookies through their browser settings.

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes of processing or as required by applicable law.

After this period, data is securely deleted or anonymized.

Data Sharing with Third Parties

Personal data is not sold or shared for commercial purposes.

Data may be disclosed only:

• To technical support and website hosting providers
• To competent public authorities, where required by law

All partners are bound by confidentiality obligations.

Data Security

The Company implements appropriate technical and organizational measures to protect personal data from loss, alteration, or unauthorized access, in accordance with applicable security standards.

Data Subject Rights

Each data subject has the right to:

• Access
• Rectification
• Erasure
• Restriction of processing
• Objection
• Data portability
• Withdrawal of consent

Without prejudice to any other rights, you may contact the Hellenic Data Protection Authority.

Policy Updates

This Privacy Policy may be updated. The current version is published on the website and becomes effective upon publication.