Privacy-policy -

1. Data controller

Dr Ioannis Dimitriou
YinYang Clinic
Papadiamadopoulou 52
15771 Athens, Greece
Email: info@ioannisdimitriou.com
Telephone: +30 210 770 0128

2. Personal data we may collect

Depending on how you use the website, we may process:

information you provide when contacting us by email or telephone;
your name, contact details and the content of your enquiry;
technical information such as IP address, browser type, device information, access time and server logs;
cookie preferences and other information described in the Cookie Policy;
information required to protect the website against misuse, fraud or security threats.

Please do not send detailed medical records or other sensitive health information through ordinary email unless specifically requested and an appropriate secure method has been agreed.

3. Purposes and legal bases

Purpose	Legal basis
Responding to enquiries and appointment requests	Steps taken at your request before entering into a service relationship and legitimate interests in responding to communications
Website operation, security, maintenance and fraud prevention	Legitimate interests in operating and protecting the website
Use of optional analytics, media or marketing technologies	Your consent, where required
Compliance with legal, regulatory or professional obligations	Compliance with a legal obligation

4. Sharing of personal data

Personal data may be shared only where necessary with trusted service providers that support website hosting, security, maintenance, email, consent management or other technical functions. Such providers may process data only for the relevant service and under appropriate safeguards.

Data may also be disclosed where required by law, a competent authority or for the establishment, exercise or defence of legal claims.

5. International transfers

Some third-party services may process data outside the European Economic Area. Where this occurs, appropriate safeguards will be used as required by applicable data-protection law, such as an adequacy decision or standard contractual clauses.

6. Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, maintaining security, complying with legal obligations and resolving disputes.

7. Your rights

Subject to the conditions of the GDPR, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain data in a portable format;
withdraw consent at any time, without affecting earlier lawful processing;
lodge a complaint with a supervisory authority.

To exercise a right, contact info@ioannisdimitriou.com.

8. Complaints

You may lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr.

9. External links

This website contains links to external websites and professional or social-media profiles. Their operators are responsible for their own privacy practices.

10. Changes to this policy

This policy may be updated to reflect legal, technical or operational changes. The latest version will be published on this page.