+30 210 46 11 204
+30 210 46 11 204
Cosmoclinic’s primary goal is to protect the privacy of its website users, and it desires for personal data to be and remain confidential. This Website Privacy Policy explains what data we collect and how we collect, use, store, and protect it when you use our website, as well as your rights regarding your data, in accordance with national and European legislation on personal data protection, including the applicable General Data Protection Regulation – GDPR, as incorporated into the Greek legal order.
Processing of personal data is carried out according to the legal bases defined below. Where required by law, explicit user consent is requested.
Navigation Data
IP Address
Cookies (according to the Cookies Policy)
Device type
Browser
Access time
These data are used for security reasons and website operation.
Data via Contact Form
If the user chooses to contact the Clinic via the contact form and provides explicit consent, the following are collected:
Full Name
Telephone
Message content
The message may include information related to the sender's health. In this case, these data constitute a special category of data (health data) under Article 9 of the GDPR. Their processing is carried out exclusively for the purpose of responding to the contact request or scheduling an appointment.
Data via Job Application Form
If the user chooses to contact the Clinic via the job application form and provides explicit consent, the following are collected:
Full Name
Telephone
Job position of interest
Curriculum Vitae (CV) in file format
Their processing is carried out exclusively for the purpose of responding to the job application request.
Processing is based on:
The explicit consent of the user, where required (e.g., contact form).
The execution of a user request prior to entering into a contract.
The legitimate interest of the Clinic to ensure the operation and security of the website.
When processing concerns health data or other special categories of data, it is carried out in accordance with the GDPR, within the framework of providing health services by healthcare professionals and for purposes of medical diagnosis, provision of care, or treatment.
Personal data are used for the following purposes:
Management of contact requests and appointments.
Provision of information about services.
Statistical analysis and website improvement.
Compliance with legal obligations.
Improving the website user experience.
Advertising communication only if explicit consent has been given.
Automated decision-making or profiling is not performed.
Personal data are not transmitted to third parties, except in the following cases:
To professional service providers (e.g., website technical support, hosting) who act as Data Processors and are contractually bound to comply with applicable legislation.
To persons you indicate.
In case of a legal obligation.
To competent authorities when required by law.
No sale or commercial exploitation of data takes place.
Data are retained for as long as necessary to perform the services provided through the website and to comply with legal obligations. After the purpose of processing is fulfilled, the data are deleted. Specifically for job applications, data are retained for a period of one year.
Data Security
Appropriate technical and organizational measures are used to protect data from accidental or unlawful destruction, loss, alteration, or unauthorized access, such as:
Data encryption
Secure connection protocols (HTTPS)
Limited access to authorized personnel
Security audits
Secure servers and information systems
Users have the right to:
Access their data
Correct inaccurate data
Delete data
Restrict processing
Object to processing
Data portability
Submit a complaint to the Hellenic Data Protection Authority
Withdraw consent
To exercise their rights, they can contact the Data Protection Officer at dpo@cosmoclinic.gr or at +30 210 46 11 204 or fill out the Patient Rights Exercise Form at the Clinic’s secretariat.
Cosmoclinic does not allow access to minors without the consent of those exercising parental care. In the event that minor visitors visit the website voluntarily and without such consent, Cosmoclinic bears no responsibility.
Policy Update
The Clinic reserves the right to modify this Policy. Changes will be published on the website with an indication of the update date.
In case users are not satisfied with the management of their data, they may contact:
Hellenic Data Protection Authority
Kifissias 1-3, 11523 Athens
Tel.: +30 210 64 75 600
Email: contact@dpa.gr