Privacy Policy

1. Data controller

The controller of your personal data is:

2. Data we collect

When you book an appointment, we collect the following personal data:

• Full name: To identify your appointment
• Phone number: To contact you and confirm your appointment
• Email address (optional): To send confirmation
• Appointment date & time: To manage our schedule

3. Purpose & legal basis for processing

3.1 Purpose of processing

We use your data for:

• Booking and managing appointments
• Contacting you for confirmations, reminders or cancellations
• Improving our services
• Meeting legal obligations (tax records)

3.2 Legal basis

4. Data retention

After this period, your data is automatically deleted from our system unless we have a legal obligation to retain it (for example, tax records).

5. Your rights

Under the GDPR, you have the following rights:

5.1 Right of access (Article 15)

You may request access to your personal data.

5.2 Right to rectification (Article 16)

You may request the correction of inaccurate data.

5.3 Right to erasure — "Right to be forgotten" (Article 17)

You may request the deletion of your data at any time.

5.4 Right to object (Article 21)

You may object to the processing of your data.

5.5 Right to data portability (Article 20)

You may request the transfer of your data to another organisation.

6. Data security

We take appropriate technical and organisational measures to protect your data:

• SSL/HTTPS encryption for all communications
• Secure storage on protected servers
• Restricted access for authorised staff only
• Regular backups and security checks

7. Disclosure to third parties

We do NOT sell, share or transfer your personal data to third parties unless required by law.

Platform provider: The booking platform is managed by .RDev (my.rdev.gr), which acts as a Data Processor and complies with all GDPR requirements.

8. Cookies & Tracking

We use essential cookies to operate the booking platform. We do not use cookies for marketing or third-party tracking.

9. Right to lodge a complaint

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with:

10. Legislative references

This Privacy Policy is based on the following legislation:

• Regulation (EU) 2016/679 (GDPR) — General Data Protection Regulation
  Full text (Greek)
• Law 4624/2019 — Implementation of the GDPR in Greek law
  Government Gazette A' 137/29.08.2019

11. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy. Any changes will be published on this page.