Privacy policy
This policy explains what personal data this website collects, why, and what rights you have. It covers the website only. Health data held as part of your dental treatment is governed by the medical record of each partner clinic and by medical confidentiality.
Data controller
The controller for data submitted through this website is Dora Skordou, Doctor of Dental Surgery.
For any question about your data, please use the details on the contact page.
What we collect
The website has no user accounts, takes no payments and asks for no health data. Only the following is collected:
- Contact form details: the name you give, the contact method you provide (email or phone), optionally the clinic or area that suits you, and the text of your message.
- Your cookie choice: stored locally in your browser so you are not asked again.
- Technical data from the hosting provider: IP address and basic request information, logged automatically for the security and operation of the site.
- Visit statistics, only if you accept Analytics cookies: through Google Analytics, which pages are viewed and for how long, the type of device and browser, the approximate location (country or city) and the page or search that led to the visit. They are tied to a random identifier stored in a cookie, not to your name or contact details.
Why we process it, and on what legal basis
Form details are used solely to answer your enquiry and, if you ask, to arrange an appointment. The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to the messages we receive (Article 6(1)(f)).
Optional cookies, visit statistics and third-party embeds load only with your consent (Article 6(1)(a)). The statistics help us understand which pages are useful and improve the site.
Please do not send us information about your health through the form. Anything clinical is best discussed at the practice.
Recipients and third-party providers
We do not sell or rent personal data. Your data is disclosed only to the providers needed to run the site:
- Form service: Form submissions are received and stored by our own form service, operated by the studio that maintains this website, and forwarded to us by email. They are kept for as long as we need them to answer you and are deleted on request. Cloudflare Turnstile checks that the submission comes from a person rather than an automated script.
- Google Maps: clinic maps are loaded from Google, and only after you explicitly choose to load them. Until then no request is sent to Google.
- Google Analytics: provided by Google Ireland Limited, it receives the visit statistics above, and only after you accept Analytics cookies. Google Analytics 4 does not log or store IP addresses. Google may process this data outside the European Union, including in the United States, under the safeguards it provides for such transfers.
- Hosting provider: hosts the site's files and keeps technical logs.
How long we keep it
Form messages are kept for as long as it takes to answer your enquiry and, where they lead to an appointment, for as long as our relationship with you requires. Your cookie choice stays in your browser until you change it or clear your browsing data. Visit statistics are kept in Google Analytics for at most 14 months, and its cookies expire after at most 2 years.
Display preferences
If you change the site's display preferences (text size, contrast, motion and so on), your choices are stored locally on your own device, in your browser's localStorage, under the key a11y-prefs-v1. They are never sent to us or to anyone else. They are removed by the panel's Reset, or by clearing this site's data in your browser.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction and objection, as well as the right to data portability. Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Security
The site is served exclusively over an encrypted connection (HTTPS). No transmission over the internet is completely secure, but we take reasonable technical and organisational measures to protect the data you entrust to us.
Changes to this policy
If this policy changes materially, the date at the top of the page will be updated.