Legal
How we handle your data
Who we are
Alvion Pharmaceuticals S.M.S.A. is the data controller for personal data processed through alvionpharma.com. We are registered at 91 Leoforos Marathonos & 2 Elaionon Street (corner), Pallini, Attika, 15351, Greece.
This website is a static, informational site. It has no user accounts, no comments and no login area. The only form is an event sign-up form that we offer at trade shows, described below. It uses no advertising or cross-site tracking. Analytics cookies are used only if you accept them in the cookie banner, and nothing of that kind runs before you choose.
Fonts and every other asset are served from our own domain, so simply reading these pages does not disclose your visit to any third party, unless you choose to accept analytics cookies as described below.
Our hosting provider records standard server logs when you request a page. These contain your IP address, the time of the request, the page requested, and your browser's user agent string. They are used only to operate the site, diagnose faults, and protect against abuse and attacks.
The legal basis is our legitimate interest in keeping the website secure and available (Article 6(1)(f) GDPR). Logs are retained for a short period and then deleted or aggregated. We do not use them to build profiles or to identify individual visitors.
The first time you visit, a banner asks whether you accept analytics cookies. Accepting and declining are equally easy, and the site works in full either way.
Strictly necessary. One cookie, alvion_consent, records the choice you made so the banner does not reappear on every page. It holds only the word "granted" or "denied", is kept for six months, and is never shared. Because it is needed to honour your choice, it does not require consent.
Analytics, only with your consent. If you accept, we use Google Analytics to measure how many people visit and which pages they read, so that we can improve the site. It sets cookies named _ga and _ga_<ID>, kept for up to two years, and sends usage data, including a shortened IP address, to Google Ireland Limited, which may transfer it to the United States under the EU–U.S. Data Privacy Framework. The legal basis is your consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006). If you decline, none of this is loaded.
You can change your mind at any time using the Cookie settings link at the foot of every page. Withdrawing consent removes the analytics cookies from your browser.
The email addresses and telephone numbers published on this site connect you directly to us. If you write or call, we process the contact details and the content of your message so that we can respond and, where relevant, manage the resulting business relationship.
The legal basis is our legitimate interest in responding to enquiries, or the steps taken at your request before entering into a contract (Article 6(1)(b) and (f) GDPR). We keep correspondence only for as long as it remains necessary for the purpose it was sent.
At trade shows such as CPHI we display a QR code that opens a short form. If you complete it, we collect your first name, last name, email address, company and any message you choose to write, together with the date and time of submission.
We use these details only to reply to your enquiry and to follow up on the conversation we had at the event. You will receive one confirmation email, and our Business Development team receives a notification. The legal basis is your consent (Article 6(1)(a) GDPR), which you give by ticking the box on the form. We do not add you to a newsletter or marketing list on the basis of this form.
The form is received by our website hosting provider, Netlify. The details are then stored in a spreadsheet in Alvion's Google account and in our contact list at Brevo (Sendinblue SAS, France), which also sends the emails. All three act as our processors under data processing agreements. Google may process data outside the European Economic Area under the EU–U.S. Data Privacy Framework and standard contractual clauses.
We keep event sign-ups for up to 24 months after the event, unless a business relationship follows. You can withdraw your consent and ask us to delete your details at any time by writing to dpo@alvionpharma.com.
If you contact our pharmacovigilance or quality lines to report an adverse event, a safety concern or a product quality issue, we process the information you provide, which may include health data concerning you or another person.
We are legally obliged to collect, assess and report this information under European Union and Greek pharmacovigilance legislation. The legal bases are compliance with a legal obligation (Article 6(1)(c) GDPR) and the public interest in the area of public health (Article 9(2)(i) GDPR).
Safety reports may be shared with competent authorities such as the National Organisation for Medicines (EOF) and the European Medicines Agency, and with our licensing and manufacturing partners where they hold parallel reporting duties. They are retained for the period required by applicable pharmacovigilance legislation. Reports are handled by trained personnel and are used only for safety and quality purposes.
If you apply to us by email, we process the personal data contained in your application in order to assess your candidacy. The legal basis is the steps taken at your request before entering into a contract, and our legitimate interest in recruiting for open roles. We retain applications only for as long as necessary for the recruitment process, unless you agree that we may keep them on file for future openings.
We do not sell personal data and we do not share it for advertising. We disclose it only to service providers who process it on our behalf under a written contract, principally our website hosting provider and our corporate email provider, and to competent regulatory authorities and business partners where we are required or entitled to do so, as described above.
Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, together with any additional safeguards required.
This site links to external websites, including our LinkedIn page. We do not control those sites and this policy does not apply to them. We encourage you to read the privacy notice of any website you visit.
Subject to the conditions in the GDPR, you have the right to request access to your personal data, to have inaccurate data corrected, to request erasure or restriction of processing, to object to processing carried out on the basis of legitimate interests, and to receive certain data in a portable format.
To exercise any of these rights, write to our Data Protection Officer at dpo@alvionpharma.com. Please note that rights relating to safety reports are limited where erasure would prevent us meeting our pharmacovigilance obligations.
If you believe we have handled your data improperly, you may lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or with the supervisory authority in your country of residence.
We review this policy periodically and will publish any update on this page. This version was last updated on 30 September 2026.