Privacy Policy

The protection of our customer’s data is of primary importance to us. For this reason, we take all necessary technical and organizational measures to protect the personal data we process and to ensure that personal data processing is always carried out in accordance with the obligations provided by the legal framework, both by the company itself and third parties that process data on behalf of the company.

What is the GDPR?

The General Data Protection Regulation (GDPR) 2016/679 is the new relevant regulatory framework of the European Union. The objective of this law is to lay down the prerequisites for personal data processing in order to protect the rights and liberties of natural persons and in particular the right of personal data protection.

What data will be used by the Company?

The data collected, stored, and processed, as applicable, by the Company are:
• Personal data (e.g. name, surname, date of birth, ID card or passport, marital status, contact details).
• Special health data (e.g. genetic and biometric data).
• Payment details, card/bank account details.

What is the purpose of processing personal data?

The purpose of processing of personal data held by the company are the following, as applicable:
• To render the services you assign and you wish to receive from us, such as for example the purchase of products and services and therefore to fulfil our contractual obligations in this context.
• To analyse and characterise the sample submitted to the laboratory, as well as to performs genetic analyses and interpret their results for further analysis and for your knowledge, as well as for scientific research purposes (or statistical purposes).
• To contact you in relation with any requests you may have as well as to send you the genetic analysis reports.

For the processing of non-special category personal data of our customers, the Company relies on the following legal bases, depending on the purpose of processing:

1.To create an account

Personal data are collected when you create an account on the website, which is administered by iDNA Genomics. When creating this account, additional information may be requested from you; however, what is considered to be essential for the conclusion of the agreement will be marked as required.
To set up an account you need the following mandatory personal details: Full name, postal address, postcode, prefecture, town, region, country, landline number and email address. Then you must set a password and confirm it in a second field. To complete your registration, after reading the terms of use. you must tick Agree and fill in the text to verify your registration.
Your registration is complete. The username is now your email address and your password is your personal code.
The user should never disclose his/her password to third parties, nor keep in electronic or printed form, to prevent any unauthorised use. In case of disclosure of the password to third parties, the user has the obligation to notify iDNA Genomics immediately on
In case of breached data, iDNA Genomics bears no liability unless previously notified of the illegal use of such data. In addition, when setting up an account on our e-shop, you can process the data, add or remove data. These data will be used, to facilitate the process of completing the order, every time you visit your e-shop and choose to remain logged in.

2.To fulfil an order

Προσωπικά δεδομένα συλλέγονται και όταν πραγματοποιείτε παραγγελία στο e-shop μας, Για την ολοκλήρωση της παραγγελίας σας και της δημιουργίας λογαριασμού, μπορεί να σας ζητηθούν περισσότερα στοιχεία, ωστόσο θα είναι τα ελάχιστα που απαιτούνται, για τη σύναψη και εκτέλεση της σύμβασης. Τα εν λόγω στοιχεία έχουν τη σήμανση υποχρεωτικού πεδίου. Τα στοιχεία που υπάρχουν σε αυτό το λογαριασμό θα χρησιμοποιηθούν στη συμπλήρωση της παραγγελίας κι εσείς θα πρέπει να συμπληρώσετε ορισμένα επιπρόσθετα στοιχεία, όπως πληροφορίες για τον τρόπο πληρωμής, διαφορετική διεύθυνση αποστολής προϊόντων (προαιρετικά), στοιχεία για την έκδοση τιμολογίου (ΑΦΜ, ΔΟΥ, Επάγγελμα, επωνυμία), όπου είναι απαραίτητο.
Στα πλαίσια της ολοκλήρωσης της παραγγελίας, κάποια από τα δεδομένα αυτά διαβιβάζονται:
α) σε μεταφορικές εταιρείες, για τη μεταφορά και παράδοση των αγαθών σας. Οι μεταφορικές εταιρείες ενδέχεται να επικοινωνήσουν μαζί σας για να ζητήσουν διευκρινήσεις, αλλά και να σας ενημερώσουν για την παράδοση των προϊόντων σας.
β) κατά την εκτέλεση πληρωμής, σε παρόχους πληρωμών. Από την πλευρά μας χρησιμοποιούμε υψηλά συστήματα ασφαλείας, για την αποφυγή διαρροής των στοιχείων σας, από κακόβουλα συστήματα.

3.To send information and promotional material/company news

When visiting our website,, you can fill in the contact form providing your email address to join our newsletter mailing list.
The data collected from our website may be used to contact you for promotional and advertising reasons, to inform you about products and offers that may be of interest to you, by email, provided you have given your consent and subject to the conditions set by the legal framework.
It is within the legal rights of iDNA Gemomics to create interest for potential buyers of its products and services; we may process information that is published online, in search engines and social media applications (Google, LinkedIn, Facebook, Twitter, Instagram), in order to set up personalised promotion and inform potential customers by telephone and/or email for the above commercial purpose. The legal basis is the voluntary publication of your information in search engines and your registration in social media services, taken as an express consent for publication of information, depending on the application settings administered by you.s
The legal bases for the above processing are both the performance of our contractual obligations (GDPR, Article 6, par. 1b), as well as our company’s legitimate interest (GDPR, Article 6, par. 1f).


Wishing to provide you with the best possible experience, personal data collected from our website may be used to send personalised information, provided you have given your consent and subject to the specific conditions set by the legal framework. Personalisation based on your needs and preferences (profiling) is a result of elements derived from your personal data, such as occupation, region of residence, etc, as well as based on your purchases.

5.Setting up a profile

Setting up a profile means any form of automated processing of personal data, which consists in using personal data to evaluate certain personal aspects of a natural person, in particular to analyse or predict aspects concerning personal preferences and interests or travelling of the person in question.
Please be advised that your profile will be set up for purposes of commercial promotion when you give your consent to receive updates on our services and offers, tailored to your preferences and interests.

Who is the confidentiality and protection of my personal data ensured?

Processing of personal data is confidential and the company takes all reasonable technical and organisational measures to safeguard their confidentiality and protection. Personal data are subjected to processing by authorised employees of the company, qualified staff, partners either private individuals and/or nutrition companies that are involved in any way in the provision of these services, irrespective of their legal form, healthcare professionals, and collaborating laboratories. All these parties are committed to confidentiality, protection and professional secrecy.

Who processes my personal data?

Personal data processing may also be carried out by affiliated companies, as well as their staff under their responsibility (specifically, IT companies, medical equipment software and operators, medical device companies and diagnostic centres).

Who is your personal data disclosed to?

iDNA Genomics when processing transfers personal data provided by natural persons, upon their consent, to third companies, which render automation services, for the purpose of sending bulk emails. In addition, to complete an e-shop, order some of these data are transferred to collaborating companies. Therefore, they are transferred to courier companies which transport and deliver your goods. These courier companies may contact you to request clarifications, but also inform you about delivery of your products.
Moreover, these data are accessible to IT companies that provide support and marketing to the e-shop, where iDNA Genomics ensures their protection subject to the strictest confidentiality terms and constant control of appropriate and organisational measures taken by such companies.
Finally, the data are transferred when payment is made to payment providers. We on our part use high standards of security to avoid any breach of data by malicious systems.

How long will the company hold my personal data?

The above data will be maintained for the period of time allowed or required by current legislation in accordance with the legal context, depending on the nature of the service. In any case, the limitation period provided for by current legislation extends up to 20 years (Article 5, paragraph 1, subparagraph e and recital 39 of the GDPR).

How long is my genetic material kept?

The minimum period of storing your genetic material has been set by the laboratory to one month.

What rights do I have regarding data protection?

You can submit a request to iDNA Genomics if you would like to have access, to correct, to delete or to restrict processing of your data or other related information. You have the right to object to the alteration and transfer of data as well as the right to revoke your consent.

Who should I contact for more information?

For any information please contact iDNA Genomics on tel 211-1021821 or by e-mail at