NEAPLASIS MEDICAL GROUP SINGLE-MEMBER MEDICAL COMPANY LIMITED LIABILITY COMPANY, with the distinctive title NEAPLASIS MEDICAL GROUP (hereinafter referred to as the Company), which is headquartered in the Municipality of Athens (105-107 Vasilissis Sofias Street, Athens, P.C. 11521 and Telephone: 210-7771022) hereby informs you that the processing of your personal data, collected when you visit its clinic at its headquarters at 105-107 Vasilissis Sofias Street, Athens, P.C. 11521, is carried out in accordance with the applicable data protection legislation (Regulation (EU) 2016/679 – hereinafter referred to as the “GDPR Regulation”) and this Privacy Policy.

This Privacy Policy provides you with information on how your personal data collected by the Company is processed and constitutes an information notice to data subjects, in accordance with the provisions of the GDPR Regulation. Specific information notices regarding the processing of your personal data may also be contained in forms that you are invited to sign in order to receive the medical treatments provided within the aforementioned Company's clinic.

Data Controller

The Data Controller is the Company with the name NEAPLASIS MEDICAL GROUP E.P.E. and with the distinctive title NEAPLASIS MEDICAL GROUP (hereinafter the Company), which is headquartered in the Municipality of Athens (105-107 Vas. Sofias Street, Athens,) ("Data Controller").

For any communication related to the issue of the protection of your personal data, the following email address applies: info@neaplasis.gr

What Personal Data do we process and for what reasons

The collection and processing of personal data by the Company is necessary by law and is strictly linked to the provision of its services. With your consent, we process the personal data required in order to offer you the medical services you have requested from us. These data include your name and surname, profession, address and contact information (telephone and e-mail).

During your first visit to the Company's clinic, you are invited to fill out a form, through which the Company collects and registers your personal data that is required by law or is necessary for the fulfillment of its obligations to you. Specifically, the Company collects and registers a) identification data (name, surname, date of birth, social security number), b) contact data (home address, telephone and e-mail) and c) payment data, i.e. receipts with full name and corresponding credit card slip (in case you have requested payment for the Company's services by credit or debit card and not in cash). If you do not agree to the collection and registration of these personal data, we will not be able to offer you the services you have requested.

The Company does not process personal data whose collection and registration is not required by law nor is it necessary for the fulfillment of the Company's contractual obligations towards you.

The Company will never transfer your personal data to advertising companies, research companies and promotional companies, because it does not cooperate with such companies. Therefore, the Company does not collect, store or process your personal data for the above purposes.

In any case, even without your prior consent, the Company, as Data Controller, may process your personal data in order to comply with the obligations arising from National Legislation, regulations and European Union law, to exercise rights in legal proceedings, to establish or defend its legal claims, to protect its own legitimate interests, as well as in all cases provided for, as the case may be, in articles 6 and 9 of the GDPR Regulation.

The Company records video, without recording audio, those areas of the clinic where it is legally permitted and where a corresponding information sign has been placed, in order to prevent offenses against persons and property, observing all measures to protect your image, in accordance with the relevant legislation on video recording of areas for security reasons.

How do we store personal data and for how long

The processing of your personal data is carried out by paper or automated means, ensuring the necessary level of security, confidentiality and lawfulness. In accordance with the provisions of the GDPR Regulation, the Company has taken appropriate measures to limit the use of personal data and identification data to a minimum. Your personal data are processed only to the extent necessary to achieve the purposes referred to in this Privacy Policy and will be kept for as long as necessary to achieve the purposes for which they were collected. In any case, the criterion used to determine this period of time is based on compliance with the deadlines that the legislative provisions either allow, to protect the legitimate interests of the Company, or impose, therefore the Company must comply with them, as well as the principles of personal data minimization, time limitation of storage and rational management of files.

Personal Data of Minors

The Personal Data of minors are always submitted by the parents / guardians who accompany them.

Processing of Personal Data from visiting the Website

If you visit the Company's Website (www.neaplasis.gr) and (hereinafter: the Website,) the processing of your personal data is limited to personal browsing data, that is, to the data that is necessary to be sent to the Website for its operation on the Internet (e.g. IP addresses).

The Company has no ability to access data that may lead to the identification of a specific person (e.g. IP). This ability is only available to the third party partner to whom the Company has assigned the operation of the Website, who has fully complied with the provisions of the GDPR Regulation and who, in any case, does not collect this information for the identification of users. However, since the user can be identified through the connection with data held by third parties, the above information may be stored by the Company's third-party partner to identify and track down the perpetrators of criminal and civil offenses that may be committed against the Website and the Company.

Links to other websites

This Privacy Policy applies only to the Company's Website mentioned above. Although the Website does not automatically redirect to other websites, the Website may contain links to other websites (third-party websites). Please note that the Company is not aware of the methods of processing your personal data by third-party websites nor is it responsible for the registration, collection and processing of your personal data by them. For these reasons, the Company expressly disclaims any relevant liability. Therefore, you should be informed about the Privacy Policy of the third-party websites you choose to connect to, as well as about the way they collect and process your personal data.

How we ensure the security and quality of your personal data

The Company has taken all necessary, appropriate, appropriate and provided for by the GDPR Regulation, organizational and technical measures, for the security of your personal data. The Company keeps the completed forms in a place with protected and controlled access and uses advanced computer security technology to protect your electronically registered personal data, so that your personal data, in any way and if they are registered, are protected from accidental or unlawful destruction or loss, from illegal or irregular use, from unauthorized access to them, as well as from disclosure without consent.

Who has access to your personal data

Your personal data is accessible to the Company's doctor and staff, as well as the doctors and staff of the diagnostic laboratories with which the Company collaborates, who must process your personal data to provide the medical services you have requested, in accordance with the provisions of the GDPR Regulation, with which they are fully compliant.

Your personal data may be disclosed to third parties, who provide the Company with services required for its operation (e.g. tax consultants, IT partners). Third parties receive only the personal data necessary for their respective functions and undertake their processing only for the purposes mentioned above, in accordance with the provisions of the GDPR Regulation, with which they are fully compliant.

Your personal data may also be disclosed to recipients designated by applicable law, with which the Company must comply. Please note that the Company is obliged to transmit your personal data to any competent Police, Prosecutorial and Judicial Authority, if a relevant request is submitted to it or a relevant order is given.

Transfer of personal data outside the EU

The Company informs you that it does not transfer your personal data outside the European Union.

What are your rights

You may at any time exercise the rights provided for in the relevant provisions of the GDPR Regulation, namely information, access, correction, portability, opposition and deletion of personal data, in cases permitted by applicable law. Among other things, you can confirm the existence or non-existence of your personal data, check their content, origin and accuracy, request a copy of them and demand any corrections, request the restriction of their processing or their deletion. You can also, at any time, withdraw your consent, submit comments regarding the processing procedures of your personal data, if you consider them incorrect or unjustified in the context of your relationship with the Company, as well as submit a complaint to the Personal Data Protection Authority. You can contact the Data Controller at the address listed above, in order to submit requests regarding the processing of your personal data by the Company and to exercise your legal rights.

Change to Privacy Policy

This Privacy Policy may change in order to comply with applicable legislation and to be in accordance with the orders and decisions issued by the competent institutions for the protection of personal data. Therefore, we advise you to read it regularly, so that you are fully informed of any changes to its content.