Privacy Policy

1. Data Controller

The data controller for your personal data is Dr. Andreas Artinopoulos, Orthopedic Surgeon, reachable at info@artinopoulos.gr and 216 808 9878.

2. Data We Collect

• Contact information: Name, email, phone number — when you contact us via the contact form, phone, or email.
• Medical data: Health history, examination results, diagnoses, and treatment plans — as part of your medical care.
• Technical data: Cookies and browsing data when you visit our website.

3. Purpose of Processing

Your personal data is used exclusively for:

• Providing medical services and care
• Scheduling and managing appointments
• Communication regarding your treatment
• Maintaining medical records as required by law
• Improving the website browsing experience

4. Legal Basis

Processing is based on your consent, the performance of a medical services agreement, and legal obligations to maintain medical records (Greek Law 3418/2005, General Data Protection Regulation — GDPR, EU Regulation 2016/679).

5. Data Recipients

Your personal and medical data is not shared with third parties unless required by law or necessary for your treatment (e.g., referral to a collaborating physician or hospital).

6. Data Retention

Medical data is retained for at least 10 years after your last visit, in accordance with Greek legislation. Contact data submitted through the website form is retained for as long as necessary to respond to your inquiry.

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (where no legal obligation to retain exists)
• Restrict processing
• Data portability
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr)

To exercise your rights, contact us at info@artinopoulos.gr.

8. Cookies

Our website uses only strictly necessary cookies for proper functionality. We do not use tracking or advertising cookies.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or destruction.