Athens · 92 Vasilissis Sofias Ave.+30 210 7712704
info@petridis-orthopedikos.gr
Loutraki · 6 Ethnikis Antistaseos St.+30 27440 61304
Call AthensCall Loutraki
Georgios Petridis, MD, MScOrthopaedic Surgeon Contact

Privacy Policy

Last updated: 27 October 2026

This is an English translation of our Greek privacy policy. In case of any discrepancy, the Greek version applies.

1. Data controller

The controller of personal data processed through petridis-orthopedikos.gr is Georgios Petridis, MD, MSc, Orthopaedic Surgeon.

  • Athens clinic: 92 Vasilissis Sofias Ave., 11528 Athens, tel. +30 210 7712704
  • Loutraki clinic: 6 Ethnikis Antistaseos St., 20300 Loutraki, Corinthia, tel. +30 27440 61304

For any question about your data, please contact info@petridis-orthopedikos.gr or call either clinic.

2. Scope of this policy

This policy covers your visit to the website and your contact with the practice through it (telephone, email, appointment booking). It is drawn up in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and Greek Law 3471/2006.

It does not cover:

  • The medical record kept at the clinic, which is governed by medical confidentiality and the Greek Code of Medical Ethics (Law 3418/2005).
  • Third-party platforms, such as Doctoranytime and social media, which apply their own privacy policies.

3. What data is collected

The website has no forms and no user accounts. Data is collected only in the following ways.

  • Browsing the website: IP address, device and browser type, pages visited, date and time. These are recorded automatically by the server.
  • Statistics via Google Analytics: Only if you accept it in the cookie banner: pages, visit duration, device, approximate location, cookie identifier.
  • Statistics via Metricool: Aggregate visit data. No cookies are used and IP addresses are not stored.
  • Contact by email or telephone: Name, contact details and anything you write or tell us, which may include information about your health.
  • Appointment booking via Doctoranytime: Name, telephone, email, date and clinic of the appointment and, if you provide it, the reason for the visit.
  • Embedded content (Google Maps, YouTube): Loads only if you accept it. The provider receives your IP address and may set cookies.
  • Our pages on Facebook, Instagram and LinkedIn: Your messages, comments and reactions, together with aggregate page statistics provided by the platform.

4. Purposes and legal bases

Every processing operation relies on a specific legal basis under the GDPR. Data that requires consent is never collected without it.

  • Operation and security of the website: Legitimate interest (Article 6(1)(f) GDPR)
  • Responding to your enquiries, scheduling and providing appointments: Steps taken at your request (Article 6(1)(b)). For health data: provision of medical care by a doctor bound by medical confidentiality (Article 9(2)(h) and 9(3))
  • Statistics via Google Analytics and loading of embedded content: Consent (Article 6(1)(a) GDPR and Article 4(5) of Law 3471/2006), which you may withdraw at any time
  • Aggregate statistics via Metricool to improve the website: Legitimate interest (Article 6(1)(f))
  • Managing our social media pages: Legitimate interest (Article 6(1)(f)). For Facebook and Instagram page statistics, we are joint controllers with Meta Platforms Ireland Ltd (Article 26 GDPR)
  • Compliance with legal obligations, e.g. tax and medical records: Legal obligation (Article 6(1)(c))

5. Health data

Information about your health is a special category of data (Article 9 GDPR) and is protected by medical confidentiality. It is used solely for your medical care and is not shared with third parties for any other purpose.

For your protection:

  • Please do not send medical tests or a detailed medical history through social media messages. These platforms are not intended for medical data.
  • To send test results before your appointment, please call the clinic first.
  • We do not link your browsing of condition-specific pages on this website to your identity.

6. Who receives your data

We do not sell your data or share it for advertising purposes. Access is limited to the providers needed to run the website and the practice.

  • TopHost (website and email hosting): processor acting on our behalf
  • Google Ireland Ltd (Google Analytics): processor, only with your consent
  • Google Ireland Ltd (Google Maps, YouTube): independent controller, only with your consent
  • Metricool, Spain (aggregate visitor statistics): processor acting on our behalf
  • Doctoranytime (appointment booking): processes data under its own privacy policy
  • Meta Platforms Ireland Ltd (Facebook, Instagram): independent controller; joint controller for page statistics
  • LinkedIn Ireland Unlimited Company (LinkedIn): independent controller

Data may also be disclosed to public, judicial or supervisory authorities, only where required by law.

7. Transfers outside the European Union

The website and email are hosted on servers in Europe. Google, Meta and LinkedIn may transfer data to the United States. Such transfers take place with the safeguards provided by the GDPR, namely a European Commission adequacy decision or standard contractual clauses.

8. How long data is kept

Data is kept only as long as needed for its purpose or as required by law.

  • Server log files: For the limited period set by the hosting provider for security purposes
  • Correspondence (email, messages) that did not lead to an appointment: 2 years from the last contact
  • Appointment details and medical record: 10 years from the last visit (Article 14 of Law 3418/2005)
  • Google Analytics statistics: 14 months
  • Cookies: As stated for each cookie in the Cookie Policy

9. Your rights

You can exercise your rights by emailing info@petridis-orthopedikos.gr. You will receive a reply within one month.

  • Access: to find out what data we hold about you.
  • Rectification: to have inaccurate or incomplete data corrected.
  • Erasure: to have your data deleted, except data we are required to keep, such as the medical record.
  • Restriction: to have processing temporarily restricted.
  • Portability: to receive your data in a commonly used electronic format.
  • Objection: to object to processing based on legitimate interest.
  • Withdrawal of consent: at any time, from the Cookie Policy, linked at the bottom of every page.

If you believe your rights have been infringed, you may lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, tel. +30 210 6475600, www.dpa.gr).

10. Security and other information

Security. The website uses an encrypted HTTPS connection. Access to site administration is restricted, and software is updated and backed up regularly.

Automated decisions. No decisions are made solely by automated processing, and no profiling takes place.

Minors. Appointments for minors are booked by a parent or guardian.

Cookies. Details of each cookie are available in the Cookie Policy, where you can also change your choices.

Changes. This policy is updated whenever the way we process data changes. The date of the last update appears at the top of the page.