DYFAB Pharma Ltd (“DYFAB Pharma”, “we”, “us” or “our”) is committed to respecting and protecting the privacy and personal data of visitors to this website.

This Privacy Policy explains how we collect, use and protect personal data when you visit our website or communicate with us through our contact form.

1. Data Controller

The data controller responsible for personal data processed through this website is:

DYFAB Pharma Ltd
Cyprus

You may contact us regarding privacy matters through the contact form available on this website.

2. Personal Data We Collect

We may collect personal data that you voluntarily provide when contacting us through the website, including:

• Your name
• Email address
• Telephone number, where provided
• Company or organisation details, where provided
• The content of your message or enquiry

We may also process limited technical information necessary for the secure and proper operation of the website, such as IP address, browser information, device information and server logs.

We do not intentionally collect personal data that is not necessary for responding to your enquiry or operating the website.

3. How We Use Your Personal Data

Personal data submitted through the website may be used to:

• Respond to enquiries and requests
• Communicate with prospective or existing business partners
• Provide information about our activities and services
• Assess potential business or professional relationships
• Maintain the security and functionality of the website
• Comply with applicable legal, regulatory or pharmaceutical obligations

We do not sell or trade personal data.

4. Legal Basis for Processing

Depending on the nature of the interaction, we may process personal data on one or more of the following legal bases:

• Our legitimate interest in responding to enquiries and managing professional and business communications
• Taking steps at your request prior to entering into a contractual relationship
• Performance of a contractual relationship
• Compliance with legal or regulatory obligations
• Consent, where consent is specifically required

Under Article 13 of the GDPR, individuals must be informed about the identity of the controller, the purposes and legal basis of processing and other relevant information when their data is collected. EUR-Lex

5. Health and Pharmacovigilance Information

The general contact form is not intended for the routine submission of medical records or confidential patient information.

However, because DYFAB Pharma Ltd operates within the pharmaceutical sector, communications may occasionally contain information relating to adverse events, product safety or health.

Where such information is received, it may be processed where necessary to comply with applicable pharmaceutical, pharmacovigilance, safety or legal obligations.

Health information constitutes a special category of personal data under the GDPR and is subject to additional safeguards. Αρχή Προστασίας Δεδομένων

Visitors should avoid including unnecessary medical or patient-identifying information in general enquiries.

6. Sharing of Personal Data

Personal data may be accessed only where necessary by:

• Authorised personnel of DYFAB Pharma Ltd
• Website, hosting, email or IT service providers
• Professional advisers
• Regulatory or governmental authorities where disclosure is legally required
• Other service providers acting on our behalf where necessary for legitimate business operations

Where third-party service providers process personal data on our behalf, they are expected to process such information only for the agreed purposes and in accordance with applicable data protection requirements.

7. International Transfers

Where personal data is processed or stored outside the European Economic Area, appropriate safeguards will be used where required by applicable data protection law.

These may include recognised contractual or legal transfer mechanisms.

8. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected.

General enquiries will normally be retained until the enquiry has been addressed and thereafter only for as long as necessary for legitimate business record-keeping, legal claims, regulatory requirements or other applicable obligations.

Information that must be retained due to pharmaceutical, regulatory or pharmacovigilance requirements may be stored for longer periods where required by law.

9. Data Security

DYFAB Pharma Ltd takes appropriate technical and organisational measures designed to protect personal data from:

• Unauthorised access
• Accidental loss
• Disclosure
• Alteration
• Misuse
• Destruction

Although reasonable measures are taken to safeguard information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. Your Rights

Under applicable data protection law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data where applicable
• Request restriction of processing
• Object to certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with the competent supervisory authority

The GDPR also requires information about retention periods or the criteria used to determine those periods and the rights available to data subjects. EUR-Lex

To exercise any of these rights, please contact DYFAB Pharma Ltd through the contact form available on this website.

We may request sufficient information to verify your identity before processing a request.

11. Complaints

You have the right to lodge a complaint with the competent data protection supervisory authority.

For organisations established in Cyprus, the relevant supervisory authority is the:

Office of the Commissioner for Personal Data Protection of Cyprus

You may also contact DYFAB Pharma Ltd first so that we have the opportunity to address your concern.

12. Third-Party Websites

This website may contain links to websites operated by third parties.

DYFAB Pharma Ltd is not responsible for the content, security or privacy practices of third-party websites.

Visitors are encouraged to review the privacy policies of any external websites they visit.

13. Automated Decision-Making

Personal data submitted through this website is not used for automated decision-making or profiling that produces legal or similarly significant effects on visitors.

14. Changes to This Privacy Policy

DYFAB Pharma Ltd may update this Privacy Policy when necessary to reflect changes in legal requirements, website functionality, services or data-processing practices.

The latest version will always be published on this page together with the date of the most recent update.

15. Contact

For questions regarding this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, please contact:

DYFAB Pharma Ltd
Cyprus

through the Contact section of this website.