The purpose of this Data Protection Statement (“Statement”) is to provide information about the way and terms, under which “Dimitrios G. Louloudis — Rhinoplasty Athens Clinic by Dimitris Louloudis, M.D., ENT” (“Rhinoplasty Athens Clinic”, “we”, “us”, or “our”) may collect, use, disclose or otherwise process personal data of individuals visiting, using or contacting us through our website and/or individuals accepting our promotional activities (collectively “you” or “yours”).
- Who is responsible for processing your Personal Data?
- Why do we collect and use your Personal Data?
- What is the legal basis for the use of your Personal Data?
- How do we share your Personal Data with third parties?
- How do we protect your Personal Data?
- What are your rights on your Personal Data?
- How can you exercise your rights?
- How long do we hold your Personal Data?
- How do we treat international data transfers?
- Where can you submit your complaints about the manner we process your personal data?
- Amendments to the Data Protection Statement
1. Who is responsible for processing your personal data?
The following sole proprietorship is responsible for processing your personal data:
Company name: Dimitrios G. Louloudis (“Rhinoplasty Athens Clinic”)
Postal Address: 27, Marathonos Ave., P.C. 15351, Pallini
Telephone Number: (+30) 210 661 4140
E-mail address: info@drlouloudis.gr
Contact person: Dimitrios Louloudis
2. Why do we collect and use your Personal Data?
- In order to communicate with you or to make an appointment
We use the identification and contact data we collect from you (such as name, surname, telephone, e-mail) through the “CONTACT US” or “DO YOU HAVE ANY FURTHER QUESTIONS” form, in order to process and respond to your requests, comments and questions or to make an appointment with you.
- In order to send you informational-promotional material (e.g. newsletters, offers etc.)
Provided you agree, we may use your personal data (such as name, surname, telephone, e-mail) to send you our newsletters, invitations and informative-promotional material about our services.
- In order to improve the functionality and quality of our web presence
We may collect location data and online data, in order to analyze and monitor the number of visits to our website, the public’s response to our newsletters, invitations and other informational — promotional material (e.g. number of views), as well as enhance our understanding of your preferences in order to improve our services.
When we record and analyze your use or interest in our website, services, newsletters, invitations, informational and promotional content, we may collect additional information, such as your location, IP address, usage data, navigation data (browser). In general, we do not associate or attempt to associate your IP address with any other data held by third parties. We do not associate or attempt to associate your IP address with the user ID of a device. The collection of this information allows us to adapt your browsing on our page to your needs, to improve the performance, usability and effectiveness of our web presence.
- In order to find out your opinion on our services
We use and collect the identification and contact data that you register to our website in the field TESTIMONIALS/“TELL US YOUR OPINION” (such as name, surname, e-mail, age, occupation, photo you may have on your Google Account) to find out your opinion on our services, in order for you to share the experience you had with us or to evaluate us for the services provided. Regarding any other publication or evaluation registered through Google, which automatically appears on our website, we do not bear any liability and we cannot control it.
3. What is the legal basis for the use of your Personal Data?
Consent: To process your personal data as described above, we rely on the consent, which you have given us in the respective fields of our website, where we have requested it.
You can withdraw your consent anytime by contacting us at the details mentioned at the beginning of this Data Privacy Statement (Who is responsible for processing your Personal Data?). Withdrawal of your consent to the processing of certain personal data may limit your ability to receive updates on our services and privileges.
Legal obligation: We may disclose your personal data where such disclosure is necessary for our compliance with the law or the establishment, exercise or defense of legal claims, whether in court proceedings or not or in out-of-court procedure.
Legitimate Interest: We may process data about you when we have a legitimate interest in carrying out a lawful activity in order to ensure the continuity of that activity, as long as it does not outweigh your interests.
4. How do we share your Personal Data with third parties?
We may share your personal data with:
- Service providers. We may share your personal data with third parties — service providers that perform certain services on our behalf. These services may include webhosting services and maintenance of our website, data storage services (cloud services), analytics and monitoring of the website, e-mail and newsletter distribution and other related services. Service providers may have access to personal data needed to perform their obligations and are not allowed to disclose or use such information for any other purposes. In any case, we will share with these service providers only the minimum amount of personal data that they need to perform their tasks. These service providers are also subject to written clauses of confidentiality and secrecy and present adequate guarantees for the safety of your personal data.
- Public authorities. In cases where we believe disclosure is necessary in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing or when we are required to do so by applicable law or a judicial proceeding, court order or legal process, we may share your personal data with the competent public authorities.
- Third party independent processors (e.g. Google), who are solely responsible for processing your personal data which they use for their own purposes. We are not responsible for the processing performed by these independent processors. For example, when you want to post your comment, opinion, or testimonial in the Testimonials/“Tell us your opinion” section, you will be asked to sign in with your Google email account, which is an independent processor responsible for the use of your data for any of its own purposes.
5. How do we protect your Personal Data?
We have internal policies and controls in place to ensure, to the extent possible, that your data is not lost, destroyed, compromised or disclosed, and that it is only accessible to our associates and employees for the performance of their duties and the third parties mentioned above.
6. What are your rights on your Personal Data?
Your rights regarding your personal data are: Right of information and access, Right of correction, Right of objection to processing, Right of withdrawal of consent, Right of deletion, Right of restriction of processing and Right of data portability. Particularly:
- Right of information and access: You have the right to request detailed information from us (e.g. processing purposes, recipients, processing methods, etc.) regarding the processing of your data. You also have the right to receive a copy of your processed data.
- Right of correction: You have the right to request the correction of inaccurate data or the completion of incomplete data concerning you.
- Right of objection to processing: You have the right to object to the processing of your data.
- Right of withdrawal of consent: When the processing of your data is based on your consent, you have the right to withdraw this consent at any time, at no cost and without prejudice to the legality of the consent-based processing prior to its withdrawal.
- Right to delete your data («right to be forgotten»): You have the right to request the deletion or abolishment of your personal data, under certain conditions and after the expiration of the decade mentioned below.
- Right to restrict the processing of your data: You have the right to request the restriction of the processing of your personal data when certain conditions are met.
- Right of data portability: You have the right to receive your data in machine-readable form or to request that it be transmitted in machine-readable form by us to another processor under certain conditions.
7. How can you exercise your rights?
In order to exercise your above rights, you can contact us by any means of communication (see our contact details above: Who is responsible for the processing of your Personal Data?). We will process and respond to your request within a reasonable period of time.
8. How long do we hold your Personal Data?
Identification and contact data (name, surname, telephone, e-mail etc.) is stored and held electronically for two (2) years for the purpose of processing of requests submitted through our “CONTACT US” or “DO YOU HAVE ANY FURTHER QUESTIONS” form.
Your location and online data is stored for two (2) years.
In case you have agreed to receive our newsletters and in general promotional material, your identification and contact details will be stored for two (2) years.
9. How do we treat international data transfers?
Rhinoplasty Athens Clinic may transfer data to a third country outside the EEA, mainly in cases where the facilities (servers) where personal data is processed are located abroad (outside the EEA). Rhinoplasty Athens Clinic will ensure that the transfer of personal data to third countries outside the EEA (including the U.S.A.) takes place only in cases where these third countries have adopted legislation or mechanisms for the protection of personal data which provides an adequate level of protection in accordance with the requirements of the European Union. Rhinoplasty Athens Clinic has taken adequate measures to appropriately protect data transferred to third countries, which have adopted mechanisms approved by the European Commission or other statutory authority, that are appropriate to ensure the legal transfer of personal data to third countries outside the EEA.
10. Where can you submit your complaints about how we process your Personal Data?
You may file a complaint regarding this Data Protection Statement by contacting us at the above contact details. Additionally, you have the right to submit any complaints about how we process your personal data to the relevant authorities:
Hellenic Data Protection Authority (HDPA)
Postal Address: 1-3, Kifissias Ave., 115 23 Athens, Greece
Tel: +30 210 6475600
Fax: +30 210 6475628
E-mail: contact@dpa.gr
Website: http://www.dpa.gr/
11. Amendments to the Data Protection Statement
This Data Protection Statement may be amended from time to time. We will post amendments to the Data Protection Statement on this website and, if the amendments are significant, we will provide visible notice to our website visitors.
