Protecting your personal data is a priority for us and, as a medical practice, an obligation that also stems from medical confidentiality. This Privacy Policy explains what data we collect when you visit drpolyzos.gr or contact us through it, why we use it, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

Last updated: 20 October 2026

Data controller

The controller of your data is Dr. Panagiotis Polyzos, Obstetrician – Gynecologist Surgeon.

Dr. Panagiotis Polyzos, Obstetrician – Gynecologist Surgeon
Athens clinic (MED4WOMAN Athens): Kriezotou 4, Kolonaki, 106 71 Athens, tel. 210 3390838
Volos clinic (MED4WOMAN Volos): El. Venizelou 46, 382 21 Volos, tel. 24210 22988
Email: info@drpolyzos.gr

For any matter concerning your personal data, you can contact us using the details above.

What data we collect

Data you give us. When you fill in the contact form, call us or send us an email, we collect the details you provide: first name, last name, telephone, email address and the content of your message. If you choose to describe your health concern, your message may include health data, which is a special category of data and enjoys enhanced protection.

Browsing data. During your visit, the website server automatically records technical information such as your IP address, browser and device type, the pages you visited and the date and time of your visit. This information is used for the security and proper operation of the website.

Cookies and measurement tools. These are described in the “Cookies” section below.

Medical records. The website does not manage medical records. Medical data arising from your visit to the clinic is kept at the clinic, in accordance with the Code of Medical Ethics (Law 3418/2005) and medical confidentiality, and is not stored on the website.

Purposes and legal basis of processing

We process your data for the following purposes:

Responding to your request and scheduling appointments. Legal basis: taking steps at your request prior to entering into a contract for medical services (Article 6(1)(b) GDPR). Any health data you voluntarily share in your message is processed solely for medical assessment and planning your care, by a person subject to medical confidentiality (Article 9(2)(h) GDPR).
Security and operation of the website. Legal basis: our legitimate interest in keeping the website secure and functional (Article 6(1)(f) GDPR).
Traffic statistics and advertising measurement. Legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
Compliance with legal obligations, such as responding to requests from public authorities (Article 6(1)(c) GDPR).

We do not send newsletters and we do not make automated decisions concerning you.

The contact form

The details you submit through the contact form are emailed to the clinic and are also stored in the website’s database, so that no request is lost and we can document our communication. Data is transmitted in encrypted form (HTTPS). Only the doctor and the clinic’s authorized staff have access to the messages.

Please do not include more health information in your message than is needed for us to understand your request, and do not send details of third parties without their permission.

Cookies

Cookies are small text files stored on your device by the website you visit. On your first visit, a consent notice appears where you choose which categories of cookies you accept. You can change your choice at any time through the same tool.

Necessary: ensure the operation and security of the website and store your cookie preferences. They do not require consent.
Statistics: Google Analytics and Microsoft Clarity, to measure traffic and improve the website. They are activated only with your consent.
Advertising: Google Ads, to measure the effectiveness of the clinic’s advertising. They are activated only with your consent.

These tools are loaded through Google Tag Manager. More about processing by third parties in their policies: Google, Microsoft.

Third-party content. YouTube videos load only when you press play (privacy-enhanced mode, youtube-nocookie.com). Links to Google Maps, Google reviews and social media open the respective services only when you select them.

Managing cookies. You can also delete or block cookies in your browser settings.

Recipients of data

We do not sell or share your data with third parties for their own purposes. Access to it may be granted, to the extent necessary and subject to confidentiality obligations, to:

the website’s hosting provider and the clinic’s email service provider,
the company that develops and technically maintains the website, solely for maintenance and security tasks,
the providers of measurement tools and embedded content (Google, Microsoft), to the extent you have given your consent,
public authorities, where required by law.

Transfers outside the European Union

We aim to store the data we collect on servers within the European Union. Some providers we use, such as Google and Microsoft, may transfer data to countries outside the EU, applying the safeguards provided by the GDPR, such as adequacy decisions or standard contractual clauses.

Retention period

Contact form messages and emails: up to 24 months from our last communication, unless a visit to the clinic follows, in which case the necessary details become part of the medical record.
Medical record: for as long as the law requires, at least ten years from the last visit (Article 14, Law 3418/2005).
Server log files: up to 12 months.
Cookies: for the period stated in the consent tool for each cookie.

After these periods, data is deleted or anonymized, unless its retention is required for the establishment, exercise or defense of legal claims.

Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration, such as an encrypted connection (HTTPS), password-protected access control, regular security updates to the website and restricting access to messages to the necessary persons only. Health data is additionally covered by medical confidentiality.

Your rights

Under the GDPR you have the following rights:

Access: to find out what data of yours we process and receive a copy.
Rectification: to request the correction of inaccurate data or the completion of incomplete data.
Erasure: to request the deletion of your data, provided there is no lawful reason to keep it, such as the obligation to keep a medical record.
Restriction of processing and objection to processing based on legitimate interest.
Portability: to receive the data you gave us in a structured, commonly used format.
Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, email info@drpolyzos.gr or contact the clinic. We will reply within one month at the latest. We may ask you for identification details so that data is not disclosed to a third party.

If you believe your rights are being infringed, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, tel. +30 210 647 5600, www.dpa.gr).

Minors

The website and the contact form are intended for adults. For minor patients, the form is completed and the related rights are exercised by their parent or guardian.

Changes to this policy

We may update this Privacy Policy, particularly when the website’s services or the law change. The current version is always published on this page with the date of the last update. The website’s Terms of Use complement this policy.

Contact

For any question about this policy or your data, you can contact us:

Dr. Panagiotis Polyzos, Obstetrician – Gynecologist Surgeon
Athens clinic (MED4WOMAN Athens): Kriezotou 4, Kolonaki, 106 71 Athens, tel. 210 3390838
Volos clinic (MED4WOMAN Volos): El. Venizelou 46, 382 21 Volos, tel. 24210 22988
Email: info@drpolyzos.gr

Privacy Policy