Privacy Policy

Personal Data Protection Policy

– Personal data means any information relating to an identified or identifiable natural person who is the data subject. An identifiable person is one whose identity can be determined, directly or indirectly, in particular by reference to an identifier (such as an ID card, name, or location data).

– Health data are personal data related to the health of a natural person, including the provision of healthcare services, and reveal information about that person’s health status.

– Processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

– Data Controller is the person who determines the purposes and means of processing personal data in accordance with EU and national law.
Dr. Ilias Ch. Papadopoulos is the Data Controller for the personal data collected by the means and methods described in this Privacy Policy and processed within the context of your relationship with him.

Method of Collection

The data collected through this website come from the use of cookies and electronic contact forms. These include identification and contact details, as well as special category data related to patients’ health, including image data.
Such data are collected only if you choose to provide them, either by sending an email, using the contact form, or communicating with us by phone. This allows us to provide you with the information you need and offer the best possible service.
Processing is carried out solely by Dr. Ilias Ch. Papadopoulos and his clinic staff, and data are not shared or sold to third parties.

Method of Processing

Our clinic’s website processes your personal data lawfully and fairly. Under no circumstances does it collect or process more data than necessary for the intended purposes. Your data are stored securely and processed exclusively for the purposes described in this policy.

Data Retention Period

Personal data are retained until the data subject requests their deletion from our records or for as long as required by applicable law.

Access to Personal Data

Any individual whose personal data we hold has the right to request access to that data at any time.
For data protection reasons, anyone requesting access must appear in person at our clinic with official identification, or send us an email from their registered address along with a copy of an official document verifying their identity.

Deletion of Personal Data

If you wish to have your personal data deleted from our databases, you may submit a relevant request following the same identification procedure.
However, this right may be restricted where the healthcare provider is legally required to maintain medical records or for other lawful reasons.
Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

Rights of Data Subjects

Every individual whose data are processed by us enjoys the following rights:

1. Right to Information & Access
You have the right to be informed and to access your data and/or medical file, and to receive additional information about how they are processed.

2. Right to Rectification
You have the right to request correction, modification, supplementation, or updating of your personal data.

3. Right to Erasure (“Right to be Forgotten”)
You have the right to request the deletion of your personal data, unless restricted by legal obligations to retain medical records or other lawful limitations.

4. Right to Restrict Processing
You have the right to request restriction of processing of your personal data when:
(a) the accuracy of the data is contested, until verified;
(b) processing is unlawful and you request restriction instead of deletion;
(c) the data are no longer needed for processing purposes but are required for legal claims;
(d) you object to processing, pending verification of overriding legitimate grounds.

5. Right to Object to Processing
You have the right to object at any time to the processing of your personal data when it is not necessary for legitimate interests pursued by the Data Controller.

6. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller, where technically feasible.
This applies to data you have provided and where processing is based on consent or contract, and carried out by automated means.

7. Right to Withdraw Consent
You have the right to withdraw your consent for processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

8. Right to Lodge a Complaint with the Hellenic Data Protection Authority (HDPA)
You have the right to lodge a complaint with the Hellenic Data Protection Authority:
Website: www.dpa.gr