Privacy Policy

  1. Introduction This Privacy Policy (hereinafter the “Data Protection Policy” or the “Policy”) defines the terms and conditions observed by the data controller (“A MORTAKIS SPECIALIZED OBSTETRICS GYNECOLOGY SERVICES PRIVATE CLINIC”, hereinafter the “Clinic”) regarding the processing and protection of the personal data of patients, their relatives and next of kin, during the provision of medical services, their transit and stay at the Clinic’s premises and the use of the services provided through the Clinic and its websites (https://mortakisclinic.gr/).

    The purpose of this Data Protection Policy is to inform you about the personal data we collect and process, as well as the manner and purposes of collecting, storing, using and transmitting such information as applicable. It also aims to inform you of your rights under the personal data protection legislation.

    The Data Protection Policy may be revised from time to time, as deemed necessary, without prior notice to you. For this reason, please check this Policy periodically to stay informed about any updated versions.
  2. What does the term “personal data” mean? Personal data or personally identifiable information means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  3. What does the term “health data” mean? Health data means personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about their health status.
  4. What does the term “processing” mean? Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  5. What does the term “data controller” mean? A data controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

The medical and other health services, as well as the services available through the website https://mortakisclinic.gr/ are provided by the company under the name “A MORTAKIS SPECIALIZED OBSTETRICS GYNECOLOGY SERVICES PRIVATE CLINIC”, headquartered in Athens (17 Mouson St., P.C. 11524) with VAT No. 802450414.

The Clinic acts as the Data Controller for the personal data collected through the means and in the ways detailed in this Data Protection Policy and which are subject to processing in the context of your relationship with it.

  1. What kind of personal data does the Clinic collect and process? Whenever you request medical services, visit the premises or the websites of the Clinic, contact the Clinic directly using any medium, or complete electronic or physical contact forms, we collect and process personal data concerning you, including standard personal data, special categories of data, such as health data, and other information as applicable.

Specifically, the personal data collected and processed include the following:

  • Identity and contact details, your own and/or those of your next of kin, such as full name, date of birth, postal address, e-mail address, telephone number, ID Card No., AMKA (Social Security Number), AFM (VAT No.), etc.
  • Special categories of data related to your physical health, past, current or future, which include information such as medical history, medical examinations (e.g., gynecological examination, Pap test, HPV test, ultrasounds, colposcopies, etc.), medical procedures (e.g., biopsies, laser applications, gynecological surgeries), and information arising during the provision of medical services, analysis on a part or substance of your body, as well as any information related to illness, clinical treatment or your physiological or biomedical condition.
  • Technical and other information regarding your activity on the Clinic’s website and information that is automatically derived through the browser you use, such as your IP address, the type and version of your browser, and your operating system.
  1. For what purposes does the Clinic collect my personal data? The Clinic processes personal data only when there is a legitimate reason. Specifically, the Clinic collects and processes personal data of patients, companions, employees, suppliers and partners, for the purpose of:
  • The provision of medical and health services (obstetrics, gynecology, preventive check-ups, surgeries).
  • The management of medical examinations and the patients’ medical records.
  • The management of cytological, biological and histological samples (biopsies, cultures).
  • Financial planning and payment management.
  • The management of legal matters and the conclusion of contracts.
  • The maintenance of books, statutory and other documents based on tax legislation.
  • Communicating with you to manage your appointments or to answer your questions through the website’s contact form.
  1. How is the data controller legitimized to carry out the relevant processing? The Clinic processes personal data only when there is a legitimate reason, and specifically when:

(a) the processing is necessary for the provision of the medical services you wish to receive, as well as for compliance with legal obligations (Article 6 para. 1 (b), (c) and (f) of the GDPR). (b) the processing is necessary for the purposes of preventive or occupational medicine, medical diagnosis, the provision of health or social care or treatment (Article 9 para. 2 (h) of the GDPR). (c) the processing is necessary for the safeguard and protection of legitimate interests, such as for the creation of electronic files with health data and the communication of diagnostic test results. (d) the processing is necessary for the establishment, exercise and/or defense of legal claims (Article 9 para. 2 (f) of the GDPR). (e) the processing is necessary for compliance with legal obligations (e.g., tax legislation). (f) the processing is based on your explicit consent (Article 6 para. 1 (a) and Article 9 para. 2 (a) of the GDPR), provided it is requested, such as when submitting contact requests through online forms.

The Clinic processes your personal data in a lawful and fair manner, collecting only the strictly necessary amount of information to fulfill its purposes.

  1. Do third parties have access to my personal data? The Clinic does not allow third parties to gain unjustified access to your personal data. Exceptionally, and only when absolutely necessary, access may be granted to medical, nursing and administrative staff, affiliated doctors, medical laboratories/diagnostic centers (for the analysis of tests), external partners (such as accountants or IT companies bound by confidentiality clauses), as well as competent Judicial, Administrative or Tax Authorities if required by law.

Furthermore, based on legislation (IDIKA / EOPYY-gov.gr), test results and medical certificates may be prescribed/registered in your electronic health record, where the Ministry of Health is the data controller.

  1. How long does the data controller retain my data? The data retention period is determined on a case-by-case basis:
  • When processing is imposed by provisions of the current legal framework (e.g., Medical Deontology Code, Law 3418/2005), your medical file is kept for ten (10) years from your last visit (provided it concerns a primary care unit / private clinic).
  • Tax records (e.g., receipts for the provision of services) are retained for the period stipulated by the respective tax legislation.

If you wish your data to be deleted, you can submit a relevant request. The Clinic will satisfy your request, unless national or Union law (e.g., the obligation to maintain medical records) prohibits their deletion before the expiration of the statutory period.

  1. What are my rights regarding my personal data? Every natural person enjoys the following rights:
  • Right to information & access: To have access to your medical file and your data.
  • Right to rectification: To request the correction/update of your data.
  • Right to erasure: To request their deletion (subject to the legal obligation to maintain medical records).
  • Right to restriction / objection: To restrict or object to the processing under certain conditions.
  • Right to data portability: To receive your data in electronic format.
  • Right to withdraw consent: Where processing is based on consent.
  • Right to lodge a complaint: With the Hellenic Data Protection Authority (www.dpa.gr, complaints@dpa.gr).

To exercise any of your rights, you can send a message to the e-mail address: info@mortakis.gr.

  1. What conditions are met regarding the security of my data? The Clinic has taken and implements all appropriate technical and organizational measures aimed at the secure processing of personal data and the prevention of unauthorized and/or illegal access to them, their loss, modification or disclosure, in accordance with the General Data Protection Regulation (GDPR).

For any information or clarification regarding the protection of your personal data, you can contact us via e-mail: info@mortakis.gr or by phone at the clinic’s contact details.

How can we help you?

    This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.
    Can we help you?