Privacy Policy & Data Protection
Welcome to our website. The protection of your personal data is a top priority for us, especially given the sensitive nature of the medical services we provide.
This Privacy Policy explains how we collect, use, protect, and manage your personal data when you visit our website, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek legislation.
1. Data Controller
For the purposes of applicable data protection laws, the Data Controller is our gynecological practice, with the following contact details:
Address: 32 Voukourestiou Str., Kolonaki (4th floor), Athens
Phone: +30 210 6528046
GDPR Contact / DPO: Ioannis Koutoulakis
Email: info@sillipsis.com
For any questions or to exercise your rights regarding your personal data, you can contact Mr. Koutoulakis directly.
2. What Data We Collect
While you browse our website, we may collect the following categories of data:
Identification & Contact Data: If you use our contact form or send us an email, we will collect your name, email address, phone number, and the content of your message.
Special Categories of Data (Health Data): If you disclose information regarding your health, medical history, or gynecological needs in your message, this data is considered “sensitive.” It is processed with strict confidentiality, exclusively for providing medical advice/services and managing your request.
Usage & Technical Data: IP address, browser type, time spent on the site, and the pages you visited. This information is collected via cookies and tracking technologies (see Section 5).
3. Purpose and Legal Basis for Processing
We process your data for the following purposes:
Providing Medical Services & Communication: To respond to your messages and schedule your appointments. (Legal basis: Consent and Provision of health or social care – Article 9 GDPR).
Improving our Website: Through traffic analysis using Google Analytics 4. (Legal basis: Consent).
Targeted Advertising / Marketing: Through the Meta Pixel. (Legal basis: Explicit consent via the cookie banner).
4. Who Has Access to Your Data?
Your data remains strictly confidential. Only authorized practice personnel have access to it. We may share browsing information (technical data) with:
Google (Google Analytics 4) for statistical analysis of our website’s performance.
Meta (Facebook/Instagram) via the Meta Pixel for marketing purposes and ad measurement.
Technical support and website hosting providers, who are bound by Data Processing Agreements (DPAs) and strict confidentiality clauses.
We never sell or transfer your medical and personal data to third parties for commercial purposes.
5. Cookies & Tracking Policy
Our website uses cookies. Aside from the strictly necessary cookies required for the site to function properly, we use:
Google Analytics 4 (GA4): Used to understand how users interact with our site. GA4 automatically anonymizes IP addresses, offering an additional layer of protection.
Meta Pixel: This tool by Meta tracks user behavior on our website so we can show you relevant ads on Meta’s platforms and measure their effectiveness.
Note: Analytics cookies (GA4) and marketing cookies (Meta Pixel) are activated only if you provide active consent through the pop-up window (Cookie Banner) upon entering our website.
6. Data Retention Period
Messages from the contact form are kept for as long as necessary to fulfill your request or as required by medical record retention laws.
Data collected by GA4 is retained for the period configured in our settings (e.g., 2 to 14 months).
Meta Pixel data is retained according to Meta’s policy (typically up to 180 days).
7. Data Security
As a medical practice, we take privacy very seriously. We implement modern technical and organizational measures (such as SSL encryption and secure servers) to protect your personal data against unauthorized access, loss, or alteration.
8. Your Rights (GDPR)
Under the GDPR, you have the following rights:
Right of Access: To request a copy of the data we hold about you.
Right to Rectification: To request the correction of inaccurate information.
Right to Erasure (“Right to be Forgotten”): To request the deletion of your data, provided there is no legal reason (e.g., medical record legislation) to retain it.
Right to Restriction / Objection: To object to the processing of your data.
Withdrawal of Consent: You can withdraw your consent for cookies (via the website settings) or other processing at any time.
To exercise your rights, please send an email to info@sillipsis.com, to the attention of Mr. Ioannis Koutoulakis.
9. Right to Lodge a Complaint
If you believe your rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr | 1-3 Kifissias Ave., 115 23, Athens | Tel: +30 210 6475600 | Email: contact@dpa.gr).
Important Advice (for the Developer/Owner): Because this is a medical website (providing health services) and you are using Meta Pixel & GA4, it is absolutely necessary to have a fully functional Consent Management Platform (CMP / Cookie Banner) on your homepage. The Meta and Google pixels must not load or track the user until they explicitly click “Accept.” In the medical sector, targeting ads based on perceived health conditions is a highly sensitive legal issue under Article 9 of the GDPR.
