01
Who is responsible?
Controller for the data collected through drtsialoukis.gr is the Panagiotis Tsialoukis Cardiology Practice.
- Panagias Korifinis, Nea Moudania 632 00
- 23730 23300
- office@drtsialoukis.gr
For any data protection issue or to exercise a right you can use the above information.
02
What data is collected
When you contact us through the form
Name, phone number and reason for contact are collected. Email address and short message are optional. The form is not intended to send medical history, tests or other detailed health data.
When visiting the site
Your hosting or security provider may record technical data such as IP address, date and time, requested page, browser type and response code. This data is used for security, diagnosis of technical problems and integrity of the service.
03
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering questions and organizing communication or visits | Taking measures at your request and legitimate interest in managing the communication (Articles 6§1b and 6§1f GDPR, as the case may be) |
| Processing of health data that you may voluntarily enter | Express consent (Articles 6§1a and 9§2a GDPR) |
| Security, abuse prevention and technical operation | Legitimate interest for safe and reliable operation (Article 6§1f GDPR) |
| Complying with a legal obligation or establishing legal claims | Legal obligation or legal exercise/defense of claims, where applicable |
No automated decision-making, profiling or use of form data for newsletter and advertising marketing takes place.
04
Who may receive the data
Only the doctor and authorized members of the practice have access to the extent necessary. For technical operation may be used:
- the hosting and technical support provider of the site,
- the service Resend to forward the message to the doctor's email,
- the email providers of the sender and the doctor,
- the Google Places API to retrieve publicly available ratings and reviews. The call is made by the server and does not send the visitor's personal information from the browser,
- Google when you choose to load the map or open a link to Google Maps.
Resend (Plus Five Five, Inc.) processes the form messages on behalf of the practice for delivery to their email. When you submit the form, the server sends Resend your name, phone number, reason for contact and any email or message you fill in, along with the sender and recipient email details needed for delivery. This integration does not load Resend code or install Resend cookies on your browser. It does not send TSIALOUKIS CARE System prep data or preventive tool responses. Service obligations and contractual transmission guarantees are described in Resend Data Processing Agreement .
Partners act under contractual and confidentiality obligations or in accordance with their own policies when acting as independent data controllers. For Google Maps content also apply Google Maps Terms of Use and the Google Privacy Policy .
05
Transfers outside the EEA
Resend states that its primary processing operations take place in the US and provides for mechanisms such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. Where a third party service involves a transfer outside the European Economic Area, the appropriate safeguards of Chapter V of the GDPR apply.
06
Retention time
Routine contact requests are only retained for as long as is necessary to respond to and follow up on them and normally no longer than 12 months from the last contact. They may be retained longer when required by legal obligation, to protect legal claims, or when the content is lawfully included in the medical record after the doctor-patient relationship has begun.
The technical logs are kept for the absolutely necessary period of security and technical operation and are then deleted or anonymized. The technical providers apply the corresponding contractual retention times.
07
Your rights
Depending on the terms of the GDPR, you have the right to information, access, rectification, erasure, restriction, portability and objection. Where the processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of the processing that preceded it.
Send your request to office@drtsialoukis.gr. Only the information necessary to confirm your identity may be requested. The answer is provided without undue delay and, as a rule, within one month.
You also have the right to complain to Personal Data Protection Authority .
08
Safety and special clarifications
Appropriate technical and organizational measures are taken, such as limited access, secure data transfer and selection of providers with protection measures. No internet transmission system can, however, guarantee absolute security.
This policy concerns exclusively the operation of the site. The processing of data in the context of a medical visit and the medical record is additionally governed by professional confidentiality and applicable health legislation. The site is not directed at children; for communication about a minor, a parent or legal guardian must act.
09
TSIALOUKIS CARE System Pre-Visit
The visit preparation application allows you to enter basic identity and contact information, reason for visit, health information, medication, family history, lifestyle, measurements and available tests. The purpose is exclusively the preparation of the cardiology visit and the subsequent confirmation of the data by the doctor.
You can delete the local temporary copy at any time from the corresponding button in the application. If you're using a shared device, don't save a temporary copy and delete the file after it's safely transferred. The practice only gains access when you provide the file. The details are marked as unconfirmed and checked during the visit. They are not used for analytics, advertising, automated diagnosis or TSIALOUKIS CARE System Score.
To access, correct or delete information already included in the medical file, contact the practice in the details of section 01. Secure electronic sending will only be activated after a separate data protection check and a corresponding update of this policy.
Caching is only enabled by explicit selection in the form. The copy expires 30 days after the last saved change; the expiration is checked the next time the form is opened. Disabling removes the saved copy and allows you to continue on the open page. Deleting from the browser does not delete files that you have already downloaded.
Optional usage statistics
Google Analytics 4, if configured, is only loaded after your separate consent. It measures overall visits to practice pages, phone clicks, contact actions and successful form submissions. No TSIALOUKIS CARE System data, preventive tool options, names, phone numbers, emails, message content or search terms are sent from the measurement code. Clinical pages and preparation pages are excluded from counting views. Ad personalization or Google Signals are not enabled. You can opt out from the cookie settings.
10
Cookies and policy changes
For cookies and similar technologies see the separate one Cookies Policy. This policy may be updated when the functions of the site, the providers or the legal framework change. The date of the last update is displayed at the top of the page.