Privacy Policy

PRIVATE MULTI-MEDICAL CLINIC OSTEON MEDICINE IKE (hereinafter the “Company”) fully recognizes the necessity of safeguarding the confidentiality and security of the personal data of the users of this website (hereinafter the “Website”) and therefore takes all necessary actions to achieve these goals.

This Privacy Policy, which forms an integral part of the Website’s Terms of Use, clearly describes the types of personal data of visitors/users that may be collected by the Company when accessing the online platform.

In particular, it outlines the ways in which users’ personal data may be used, processed, stored, and for which purposes—always in compliance with applicable personal data protection legislation, and specifically in accordance with the General Data Protection Regulation (EU 2016/679, GDPR) and Law 4624/2019. If any user does not agree with these terms, they must refrain from filling in the relevant requested fields concerning their login and communication with the Company and instead use alternative methods of contacting the Company’s representatives. This Privacy Policy in no way covers the relationship between Website users and any services not controlled and/or owned by the Company.

USER PERSONAL DATA

A visitor/user may access the Website managed by the Company without revealing their identity or providing any personal details. In specific sections of the Website, users may voluntarily enter the requested personal data if they wish:

• To communicate with the Company via the Contact Form.
• To schedule an appointment through the “Book Appointment” section.
• To subscribe to the newsletter (with their explicit consent) by entering their email address to receive news and updates from the Company.

Within this context, the Company may lawfully collect personal data in the following categories:

1. Contact Form Data: Full name (mandatory), phone number (mandatory), email address (mandatory), and any additional information voluntarily included in the user’s message.
2. Appointment Data: Full name, email, phone number, and any optional message.
3. Newsletter Subscription Data: Email address.
4. Account Registration/Login Data: Users may log in using their email and password or via their Facebook/Google account. This creates a personal account through which appointments can be scheduled. To book an appointment, users are required to provide:
   • Full name (mandatory),
   • Contact phone (mandatory),
   • Date of birth (mandatory),
   • Indicate whether they are a new or returning patient (mandatory),
   • And if paying online, debit/credit card details.
     Payment options include:
   • Credit/Debit Card,
   • Cash at the Clinic,
   • Bank Transfer.

The Company also uses Google Analytics to collect additional information about user behavior (e.g., time spent on the site, usage of functions). These do not constitute personal data under current legislation.

USE OF PERSONAL DATA

The Company is responsible for protecting the personal data collected via the Website and for informing all relevant personnel about this Privacy Policy.

It guarantees that all staff and partners will strictly comply with this Policy and applicable data protection laws.

The Company maintains records of the above-mentioned personal data, with the explicit consent of users when registering on the Website. Data collection is voluntary and used for:

• Identifying users for communication,
• Scheduling medical appointments,
• Sending newsletters.

The Company undertakes not to process, disclose, or transfer collected personal data to third parties for other purposes.

USER RIGHTS

Providing personal data is optional and only required if users wish to contact the Company, receive newsletters, or book appointments. If users decline, the Company cannot process their requests.

Users have the following rights:
a) To receive a written response confirming whether their personal data is being processed.
b) To be informed clearly and promptly about the data collected, its origin, purpose, recipients, and the logic of automated processing.
c) To request correction, deletion, or restriction of processing if data is inaccurate, incomplete, unlawfully processed, or no longer necessary.
d) To withdraw consent at any time.
e) To object to data processing, request restriction, and know the identity of data controllers.
f) To file a complaint with the competent supervisory authority.
g) To request data portability as per GDPR.

DATA SHARING

The Company does not sell, share, transmit, or distribute users’ personal data to third parties. Data transfer to third parties is permitted only when required by law or by judicial/prosecutorial order.

DATA RETENTION

Collected personal data will be stored by the Company only for as long as necessary to fulfill the purposes for which it was collected, within a reasonable timeframe.

OPT-OUT PROCEDURE

Users may request deletion of all their personal data by contacting: info@osteon.gr