Privacy Policy | Dr Maria Polykarpou

Data controller

The controller of your personal data is Dr Maria Polykarpou — Dermatology Clinic, Αριστοτέλους 4, Θεσσαλονίκη, email info@drpolykarpou.gr. This policy describes how we collect and process data through this website, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

What data we collect

Through the appointment form: full name, telephone, email, treatment of interest, preferred day and time, and your message. This data is provided by you and is necessary for us to contact you.

Automatically: technical data (IP address, device and browser type) logged by the server for security purposes and, only with your consent, anonymous visitor statistics and advertising measurement data (see the Cookie Policy).

Purpose and legal basis

Contacting you to schedule an appointment: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Security and operation of the website: legitimate interest (Article 6(1)(f)).

Statistics and advertising measurement: consent (Article 6(1)(a)), which you can withdraw at any time.

Any health data you mention in your message is processed solely to prepare your visit, on the basis of your explicit consent (Article 9(2)(a)) and medical confidentiality.

Recipients

Form data is sent to the clinic's email and stored on the website's hosting server. Providers that may access data as processors: the website hosting provider and, if you consent, the providers of statistics and advertising services (Google, Meta). We do not sell or transfer your data to third parties for their own purposes.

Retention

Appointment requests are kept for as long as needed to contact you and schedule the visit, and for no longer than 12 months, unless a medical record is created, which is kept in accordance with applicable law.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent. To exercise them, contact info@drpolykarpou.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Security

The website operates exclusively over an encrypted connection (HTTPS). Access to request data is restricted to the clinic's authorised staff.

Changes

This policy may be updated. The date of the latest update is shown at the top of the page.