PERSONAL DATA PROTECTION POLICY (GDPR)

For the physician Georgios Mavropoulos, respecting and protecting your personal data is a commitment. We understand and take seriously the fact that you are aware of and concerned about your personal data.
This Privacy Policy describes the information we collect and explains how the physician processes this information, as well as how you can manage and control the use of your information, in accordance with the provisions of Greek law and European legislation on the protection of personal data, including the General Data Protection Regulation (EU) 2016/679, widely known as the “GDPR”, which became applicable on 25 May 2018.
1. DATA CONTROLLER
The Data Controller responsible for the maintenance, collection, storage, further processing and use of your personal data is:
Physician Georgios Mavropoulos
Tel.: 6906267320
Email: geo_mavropoulos@yahoo.gr

The purpose of this Personal Data Protection Policy is to inform you and provide you with relevant information regarding the maintenance, collection, storage, use and processing of your personal data, as well as to provide information regarding your related rights.
2. COLLECTION AND USE OF PERSONAL DATA
Personal data is information that identifies you, such as, indicatively, your name, email address or telephone number. The physician processes the following personal data for the purposes specified below:
When you visit my website, www.endokrinologos-mavropoulos.gr, I collect and store your IP address, information regarding the time of your visit and the name of your web browser.
When you send me messages through my website, www.kardiologos-georgiou.gr, I additionally collect and store your full name, email address and contact telephone number.

Please note that your consent may be withdrawn at any time and freely.
3. Method of collecting your personal data
I collect your personal data when you express interest and I provide my services to you directly, or when you enter your data online while visiting my website or subscribing to my newsletter.
4. Recipients of your personal data
I do not transfer your personal data to third parties, except after
your consent: a) to make use of the access provided by the
electronic prescription system of the IDIKA in order to draw
information regarding the history of all types of prescribed medications
medicines and tests, b) for obtaining ultrasound scans and other
imaging tests for the thorough monitoring of his progress
patient, c) to send your medical information to a third party doctor for
monitoring of your health (right to data portability), d)
for telephone or email communication with patients about the
organization of the next visit, e) Notification by telephone or notification via
email regarding patients’ health issues, f) for sending via email
ultrasound examinations and X-rays; and g) for promotional purposes, such as emails that we periodically send to those who have subscribed to our newsletter, always under conditions that fully ensure that your personal data is not subject to any unlawful processing, meaning processing other than for the purpose of transmission as described above.
I hereby inform you that the aforementioned categories of recipients of your personal data do not process your data for any purposes other than those stated above in relation to its transmission.
In any case, the physician Stylianos Georgiou guarantees that he will not transfer, disclose, make available, etc. your personal data to third parties without your consent, for any purpose or use. However, I reserve the right to disclose information concerning you if required to do so by law or if such disclosure is required by the competent governmental bodies, administrative authorities or law enforcement agencies.
Please note that access to your personal data by unauthorized persons, including my employees, is expressly prohibited.
5. PURPOSES OF PROCESSING
The physician Georgios Mavropoulos collects, retains and processes only the minimum personal data that is strictly necessary to achieve the respective purpose of processing.

I use your personal data for the following purposes:
• To utilize the access provided by the IDIKA electronic prescribing system in order to retrieve information regarding the history of all types of prescribed medications and medical tests,

• For obtaining ultrasound scans and other imaging tests to
thoroughly monitor the patient’s progress

• To have your medical data transmitted to a third-party physician for the
monitoring of your health (right to data portability),

•For telephone or email communication with patients to organize the next visit,

• For information regarding patients’ health issues, provided via telephone or email.

• For promotional purposes, such as emails we send periodically to those who have subscribed to our newsletter. By subscribing to my newsletter, you agree to be included in the personalized recipient list and to receive my newsletter and all the information contained therein. For this purpose, I will communicate with you solely via email.

• For cases where the processing of your personal data is necessary for the purposes of our legitimate interests or for the purposes of our compliance with national and/or European legislation.

6. PERIOD OF STORAGE OF YOUR DATA
The data provided by you will be retained/stored by me only for as long as necessary to fulfil the purpose for which you have provided your data to me and in compliance with the applicable legal provisions.
7. INFORMATION STORED AUTOMATICALLY WHEN YOU VISIT OUR WEBSITE / USE OF COOKIES
To facilitate the use of my website, I use “cookies”. Cookies are small data/text files that are stored on the hard drive of your computer or device by your browser and are necessary for the use of my website.
I use cookies to better understand how my website is used and to provide a better browsing experience. The cookies I use do not store personal data or personal information capable of identifying the person to whom they relate and which has been collected by other means.
If you do not wish information to be collected through cookies, please configure your web browser to delete all existing cookies from your computer’s hard drive, to…

block all cookies in the future and receive a warning before a cookie is stored.
8. Your rights
You may exercise the following rights in accordance with the terms and
specific provisions of the GDPR:
The right of access to your personal data that I process,
as well as to information regarding their processing.
The right to have your personal data corrected, in the event of any inaccuracies or if you wish to update your data.
The right to object to the processing of your personal data where there is a legitimate interest, including the right to object to the automated processing of your data and to its processing for direct marketing purposes.
The right to restrict the processing of your personal data—meaning you may request the restriction of such processing if you contest the accuracy of the data, object to its processing, or if another ground provided for in relevant Greek or European personal data protection legislation applies.
The right to have your personal data erased without undue delay upon your request, subject to the conditions set out in the applicable Greek and European legislation on personal data protection.
Withdrawal of Consent. In cases where we process your personal data on the basis of your consent, you also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal of your consent.
Right to be informed of data breach incidents, where applicable.
Right to lodge a complaint with the competent independent Greek authority, namely the Hellenic Data Protection Authority, in the event of unlawful processing of your personal data (www.dpa.gr).
For all of the above cases, as well as for any further information, you may send me an email with your relevant request at the following email address: geo_mavropoulos@yahoo.gr

Withdrawal of Consent. In cases where we process your personal data on the basis of your consent, you also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal of your consent.
Right to be informed of data breach incidents, where applicable.
Right to lodge a complaint with the competent independent Greek authority, namely the Hellenic Data Protection Authority, in the event of unlawful processing of your personal data (www.dpa.gr).
For all of the above cases, as well as for any further information, you may send me an email with your relevant request at the following email address: geo_mavropoulos@yahoo.gr