Privacy & Personal Data Protection Policy

1. Introduction

Embryoclinic P.C. (the “Clinic”, “we”, “us”) respects the privacy of visitors to the Website and takes the necessary measures to protect their personal data. This Privacy Policy explains what data we collect, the purposes for which we process it, the legal basis for such processing and your rights.

2. Data Controller

The Data Controller is the company under the corporate name “Embryoclinic Private Medical Centre – Medical Private Capital Company”, with the distinctive title “EMBRYOCLINIC P.C.”, having its registered office in Thessaloniki, at 6 Adrianoupoleos Street – Kalamaria, Tax Identification Number (TIN) 997179080, telephone +30 2310-420010, email admin@embryoclinic.eu.

3. What data do we collect?

Depending on how you use the Website, we may collect: a) Identification details (full name, contact details and other information you choose to provide to us), b) Contact details (email address, telephone number, address, content of messages), c) Appointment request details (full name, telephone number, email address, appointment date and time, type of appointment and other information required for scheduling), d) Health data (where the relevant form allows you to submit such information, you may provide information such as medical history, information concerning fertility, previous treatments, test results and other health information that you choose to provide to us).

Please do not submit health information through a general contact form if it is not requested or necessary for the specific purpose.

Health data constitute a special category of personal data and require enhanced protection.

4. Purposes of processing

Personal data may be used to respond to contact requests, communicate with prospective patients, schedule and manage appointments, provide the requested services, manage the patient–Clinic relationship, comply with legal obligations, protect the rights and security of the Clinic, prevent malicious or unlawful use, send newsletters where the relevant consent has been provided, analyse the use of the Website, improve its functionality and user experience, and manage cookies and tracking technologies in accordance with the user’s choices.

5. Legal bases for processing

Depending on the circumstances, processing may be based on your consent, the necessity to perform a contract or to take steps prior to entering into a contract, compliance with a legal obligation of the Clinic, the legitimate interests of the Clinic where permitted and after balancing the relevant rights and interests, and other lawful grounds provided for by the GDPR and applicable legislation.

6. Health data

Due to the nature of the Clinic’s services, health data may be processed. The Clinic limits the collection and use of such data to what is strictly necessary for each lawful purpose.

7. Newsletter

If you subscribe to the newsletter, we may use your email address to send you Clinic updates, informational content, news, events and educational content relating to the services provided. You may unsubscribe at any time by using the “unsubscribe” link included in the relevant messages or by contacting us.

Subscription to the newsletter is optional.

8. Google Analytics

The Website may use Google Analytics to analyse Website traffic and usage. The activation of non-essential analytics cookies is carried out in accordance with the choices made by the user through the cookie banner. The relevant information may include information regarding how the Website is used, the device, the browser and general technical/statistical data.

9. Google Tag Manager

The Website may use Google Tag Manager to manage technologies and tags used on the Website. Its use does not necessarily mean that all tags are activated independently of the user’s cookie preferences. Individual tags are activated in accordance with the configuration of the Website and the requirements of applicable legislation.

10. Google reCAPTCHA

The Website may use Google reCAPTCHA to protect forms from automated or malicious use. The service may collect technical information necessary to assess human activity versus automated use.

11. YouTube

The Website may include content or videos hosted through YouTube. The embedding of content from third-party services may involve communication with the servers of the relevant provider. Where required, the loading of non-essential content is carried out in accordance with the user’s choices through the cookie banner.

12. Google Maps

The Website may use Google Maps to display the location of the Clinic. The service is provided by a third-party provider and may involve the processing of technical data.

13. Recipients of personal data

Your data may, to the extent necessary and lawful, be accessible to authorised Clinic personnel, medical and administrative staff, providers of information systems, website hosting services, online booking systems, newsletter services, analytics services and technical support services, professionals providing services to the Clinic, as well as public or judicial authorities where required by law.

Third-party providers that process data on behalf of the Clinic are, where required, bound by appropriate contractual data protection obligations.

14. Transfers outside the European Economic Area

Certain service providers used on the Website may process data outside the European Economic Area. In such cases, the Clinic takes the appropriate measures required by applicable legislation, such as the use of an adequacy decision or appropriate safeguards, where required.

15. Data retention period

The Clinic retains personal data only for as long as necessary for the purpose for which they were collected or for as long as required by applicable legislation.

For data forming part of the medical record, the specific provisions concerning the retention of medical records shall apply.

16. Security

The Clinic implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, unlawful or unauthorised processing.

Access to health data is restricted to persons who have a lawful right of access.

17. Your rights

Subject to the conditions provided for by the GDPR, you have the right to: a) access your personal data, b) rectify inaccurate or incomplete data, c) erasure, d) restriction of processing, e) data portability, f) object to certain forms of processing, g) withdraw your consent where processing is based on consent. The exercise of a right may be subject to legal exceptions and limitations.

18. How can you exercise your rights?

You may submit a request to admin@embryoclinic.eu.

The Clinic may request additional information to verify your identity where this is necessary for the protection of personal data.

19. Right to lodge a complaint

If you believe that the processing of your personal data violates applicable legislation, you have the right to lodge a complaint with the competent data protection supervisory authority.

For Greece, the competent authority is the Hellenic Data Protection Authority (HDPA).