--- title: Privacy · Paxinos A. Urology description: Privacy and personal data policy of the practice. lang: en source: https://www.paxinosurology.gr/en/privacy/ fetched: '2026-09-25T14:43:58.927Z' --- *Last updated: 25 September 2026* This policy explains what personal data the practice's website collects, why, how long it is kept and what your rights are, under the General Data Protection Regulation (EU 2016/679, GDPR) and Greek Law 4624/2019. The Greek version of this policy is the reference text. ## 1\. Data controller Apostolos Paxinos, urologist, 2 Gounari St, 1st floor, 454 44 Ioannina, Greece. Phone: 6947760646 · 2651078905 · Email: paxinosurology@gmail.com For any personal-data matter, contact the practice directly at the details above. ## 2\. What we collect - **Through the appointment form:** your full name, phone number, optionally your email address and your message, and your consent. Your IP address and browser type are recorded with the submission, to protect the form from abuse. - **Health data:** if your message describes symptoms or the reason for your visit, that is health data, a special category under Article 9 GDPR. Write only what is needed to book the appointment; the rest is discussed at the practice. - **When you contact us** by phone or email: the details you give us. The website uses no advertising cookies. Statistics cookies (Google Analytics) are set only with your consent. See the [Cookie Policy](https://www.paxinosurology.gr/en/cookies/). ## 3\. Why we process it (legal bases) - **Consent** (Article 6(1)(a) and, for health data, Article 9(2)(a) GDPR): when you submit the form, so that we can contact you and arrange your appointment. You can withdraw it at any time. - **Provision of medical care** (Article 9(2)(h) GDPR): to examine you at the practice and keep your medical record, under the duty of medical confidentiality. - **Legal obligations** (Article 6(1)(c)): keeping medical records, tax law. ## 4\. Who receives it - **Forms service:** form submissions are received and stored by the forms service run by the studio that maintains this website, and forwarded to the practice by email. Cloudflare Turnstile checks that a submission comes from a person and not from an automated script. - **Technical providers:** Cloudflare, Inc. (hosting and delivery of the website). Google Analytics loads only if you accept statistics cookies, and the OpenStreetMap map only if you choose to show it (see the Cookie Policy). - **Transfers outside the EEA:** some of the providers above may process data outside the European Economic Area (for example in the USA). Such transfers rely on the European Commission's standard contractual clauses or an equivalent lawful basis. We do not sell personal data or share it with third parties for advertising. ## 5\. How long it is kept - Form messages are kept for as long as needed to reply to you and arrange the appointment, and are deleted at your request. Submissions rejected as spam are deleted automatically after 30 days. - The medical record created by your visit is kept for as long as the law requires: for a private practice, ten years from the last visit (Greek Law 3418/2005, Article 14). ## 6\. Security The website is served only over an encrypted connection (HTTPS). Access to form submissions is restricted. ## 7\. Display preferences If you change the site's display preferences (text size, contrast, motion and so on), your choices are stored locally on your own device, in your browser's **localStorage**, under the key `a11y-prefs-v1`. They are never sent to us or to anyone else. They are removed by the panel's Reset, or by clearing this site's data in your browser. ## 8\. Your rights You have the right to: - access your data and be informed about its processing, - have inaccurate data corrected, - have it erased, unless there is a legal obligation to keep it, - restrict or object to its processing, - receive the data you gave us in a portable form, - withdraw your consent at any time. To exercise these rights, contact us at the details in §1. We reply within one month at the latest. You also have the right to lodge a complaint with the Hellenic Data Protection Authority ([www.dpa.gr](https://www.dpa.gr/), 1-3 Kifisias Ave, 115 23 Athens). ## 9\. Changes to this policy Any future changes will be published on this page with a new update date.