Privacy Policy

KON/NOS A. STARANTZIS MON/PI IKE (hereinafter referred to as the “Company”), fully recognizes the necessity of ensuring the privacy of the personal data of the users of this website (hereinafter referred to as the “Website”) as well as their security and therefore takes all necessary actions to achieve these goals.

This Privacy Policy, which is an integral part of the Website Terms of Use, clearly describes the types of personal data of visitors/users that may be collected by the Company in the context of their entry into the online space.

In particular, it will describe the ways in which users’ personal data may be used, processed, stored, and for what purposes, always in compliance with the applicable legislation on the protection of personal data and in particular in compliance with the General Data Protection Regulation (EU 2016/679, GDPR) and Law 4624/2019. In the event that any user does not agree with these terms, he must not complete the relevant requested fields regarding his Entry and the Company’s Communication with him, but must use the other methods of communication with the Company’s Managers. This Privacy Policy does not cover in any way the relationship between users of the Website and any services that are not subject to its control and/or ownership.

PERSONAL USER DATA

The visitor/user may visit the Website maintained and managed by the Company, without revealing his identity and without providing any personal information. In specific areas of the Website, he may enter, if and when he wishes, the respective personal data requested, on the one hand in the case that he wishes to contact the Company, by completing the relevant Contact Form and on the other hand in the “Book an Appointment” field, if he wishes to schedule a service with a partner of the Company. At the same time, if he expressly agrees to this, he may fill in his e-mail address (e-mail) in the special newsletter field in order to receive news and updates from the Company.

In the context of using the Website, the Company may lawfully collect personal data for its users that fall into the following categories:

Personal data that the user (natural person) is asked to fill in when completing the Contact Form, in order to contact the Company. Specifically, the following personal data is required to complete the above contact form: Name and surname (mandatory), telephone number (mandatory), email address/e-mail (mandatory) and any data that the user includes in the message sent to the contact link.

Personal data that the visitor/user is asked to fill in the relevant fields, in order to schedule an appointment with the company in the “Book an Appointment” field. Specifically, when completing the relevant fields of the request submission, the visitor/user enters the following data: Name, e-mail, contact telephone number and any data included by the user in the box (Your message).

Personal data, such as the e-mail address, which the visitor/user is asked to fill in, in order to receive informative emails about the latest news and offers of the Company at his/her personal e-mail address.

Personal data that the visitor/user is asked to fill in the relevant fields, after connecting to the Website, using an e-mail address and password that the user creates either after connecting via a personal Facebook account or connecting via a Google account. The user, by connecting via one of the above methods, obtains a personal account on the Website and can now schedule an appointment with the Company through this account. In order to make an appointment, the user is asked to fill in personal data such as name and surname (mandatory), contact telephone number (mandatory), date of birth (mandatory) and to fill in whether or not they are a new patient (mandatory) as well as any personal data related to debit/credit bank cards, in the context of electronic payment of the services that the user has chosen. In particular, the user is asked to choose between the following payment methods, namely

Credit/Debit Card, Cash Payment at the Clinic, Payment by Bank Deposit.

The Company also uses Google’s service, “Google Analytics” in order to collect additional information regarding the user’s behavior within its software, such as the time spent in it and in its various functions as well as the recording of the use of some of them, information that, however, does not constitute personal data of the users of the application in accordance with the applicable legislation on personal data.

USE OF PERSONAL DATA

The Company is responsible for the protection of personal data collected through the Website, as well as for informing all involved personnel about the Privacy Policy.

The Company guarantees that all of its personnel as well as all of the member-partners that make up it will faithfully implement this Privacy Policy and will comply with the applicable legislation on the protection of personal data.

Specifically, the Company keeps a record of the above-mentioned personal data of users, in accordance with the requirements of the new General Data Protection Regulation (EU 2016/679, GDPR) and Law 4624/2019. The Website visitor/user Data registered in the Company’s Archive are those declared by the user himself (Subject) and with his explicit consent during his registration in the relevant fields of the Website, in accordance with the following.

The registration of the requested personal data by users is done voluntarily and the personal data collected by the Company are related to the purposes of identifying them for the purpose of communicating with them and interacting with them based on the particular needs of each user in the context of scheduling a medical appointment, or sending them informative newsletters. The Company undertakes not to process, publish or transmit the personal data of visitors/users which it lawfully collects in any other way or for any other purpose.

USER RIGHTS

Providing the above information is optional as you are only required to disclose it if you wish to contact the Company, receive newsletters or schedule a medical appointment. Failure to provide information and/or refusal to consent to the terms of data processing will result in the inability to collect your information and carry out the processing to achieve the aforementioned objectives.

The user retains the right to:

a) receive a written response to their query to the Company, if personal data concerning them are or have been the subject of processing,
b) be informed again without delay and in an understandable and clear manner, about all the data concerning them, their origin, the purposes of the processing, the recipients or categories of recipients, the progress of the processing for the period since their previous information or notification as well as the logic of the automated processing,
c) request the correction, deletion or blocking (locking) of data whose processing is not in accordance with the provisions of the new Regulation on the Protection of Personal Data (GDPR), in particular due to the incomplete or inaccurate nature of the data and the notification to third parties of the above correction, deletion or blocking provided that this is not impossible or does not involve disproportionate efforts, or if the reason for the processing of the data or the subjects withdraw their consent (if necessary), or when the data has been unlawfully processed, etc. subjects have the right to request the deletion of the data,
d) to withdraw their consent at any time,
e) to object at any time to the Data Controller for the processing of data concerning them, to submit a request for restriction of processing, to know the identity of the data controllers and their representative(s),στ) να υποβάλει καταγγελία σε περίπτωση αθέμιτης επεξεργασίας των προσωπικών δεδομένων του στην αρμόδια εποπτική αρχή,
f) to submit a complaint in the event of unlawful processing of their personal data to the competent supervisory authority,
g) to request the portability of their personal data as defined in the provisions of the General Data Protection Regulation (GDPR)(EU) 2016/679.

INFORMATION WE SHARE

The Company does not trade, share, disclose, transmit or distribute, in any way, the personal data of users to third parties outside the Company. Transmission of personal data to third parties is permitted by exception only when required by law or following a court or prosecutorial order.

DURATION OF PROCESSING

The personal data collected from users will be stored and retained by the Company for as long as necessary to complete the purpose for which they were collected, which in any case will be reasonable.

OPT-OUT PROCEDURE

The user reserves the right to request the Company to delete all data it holds about him, by communicating his request to the following email address info@osteon.gr.

Finally, the user can opt out of the collection of Google Cookies data by modifying his personal settings in Google’s Ads Settings.

CHANGES

Our Privacy Policy may change from time to time. Any change to the Website’s Privacy Policy will be published on this website.

COMPANY CONTACT DETAILS

Data Controller: KON/NOS A. STARANTZIS MON/PI IKE.

Contact person: Konstantinos Starantzis

For questions and/or communication requests regarding this information (or possible changes to data), data processing and/or the withdrawal of consent, you can contact the Company, which is the data controller, in writing at the following email address info@osteon.gr as well as at the number: 210 8020620.