Privacy Policy

PANTOS PANAGIOTIS IATRIKI EE (hereinafter the “Company”) fully recognizes and respects the need to protect the privacy and personal data of users of this website (hereinafter the “Website”) and is committed to the secure and lawful processing of such data.

This Privacy Policy, which constitutes an integral part of the Website’s Terms of Use, describes the types of personal data that may be collected, the purposes of processing, as well as the rights of data subjects, in accordance with the General Data Protection Regulation (EU 2016/679 – GDPR) and Law 4624/2019.

1. What Personal Data We Collect

Users/visitors may browse the Website without being required to disclose their identity. Personal data is collected only through their own action and consent, in the following indicative cases:

• Contact Form: Full name, telephone number, email address, and message content.
• Appointment Booking: Full name, telephone number, email, date of birth, patient status (new/existing), preferred payment method, and possibly card payment details.
• Newsletter Subscription: Email for receiving informational material.
• Login via Social Networks or Email: Identification data provided via Google or Facebook platforms.
• Google Analytics: Collection of browsing information (cookies, time spent, actions on the site) that does not directly identify the individual.

2. Purpose of Processing

Collected data is processed exclusively for the following purposes:

• Communication with users upon their request.
• Facilitation of medical service procedures/appointment scheduling.
• Provision of updates and promotional activities via newsletter (only with consent).
• Aggregated analysis of Website usage to improve user experience.

The Company does not transfer personal data to third parties, unless required by law or judicial order.

3. Legal Basis for Processing

The Company processes personal data only:

• Based on user consent (Article 6(1)(a) GDPR).
• In the context of fulfilling contractual obligations (Article 6(1)(b) GDPR).
• To comply with a legal obligation (Article 6(1)(c) GDPR).
• For purposes of legitimate interest (Article 6(1)(f) GDPR), where applicable.

4. Data Subject Rights

Users retain the following rights:

• Right of access to their personal data.
• Right to correct inaccurate or incomplete data.
• Right to erasure (right to be forgotten), under the conditions of the law.
• Right to restrict processing.
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent, without affecting the lawfulness of processing based on consent prior to withdrawal.
• Right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

To exercise the above rights, users may contact: pantos@osteon.gr or by phone at +30 210 8020620.

5. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes of processing and comply with legal obligations. After this period, data is securely deleted.

6. Cookies & Analytics Tools

The Website uses cookies and analytics tools (such as Google Analytics) to collect statistical visitor data. Users can opt out of these services via their browser privacy settings or their Google account (Google Ads Settings).

7. Data Security

The Company implements appropriate technical and organizational security measures to protect personal data from loss, alteration, unauthorized access, disclosure, or other forms of unlawful processing.

8. Policy Updates

This Policy may be revised periodically. Any material changes will be announced on the Website, with a clear indication of the date of the last update.

9. Contact Information

Data Controller:
PANTOS PANAGIOTIS IATRIKI EE
Email: pantos@osteon.gr
Phone.: 210 8020620