Personal Data Protection Policy

Preamble

The management and protection of the personal data of the visitor/user of the website www ……… . gr (hereinafter referred to, for the sake of brevity, as the “Website”) is subject to the terms of this section as well as the relevant provisions of Greek, European and international legislation and covers the personal data of visitors / users that may be collected during the visit and use of the services and the website pages.

This document accompanies the document describing the Website’s Terms of Use.

Attention for every visitor / user: If you do not agree with the personal data protection conditions herein, you must not use the services of the Website.

1. Definition of personal data

Any information concerning an identified or identifiable natural person. An identifiable natural person is one whose identity can be verified, directly or indirectly, in particular by reference to an identifier such as a name, an identity number, location data, an online identifier or one or more factors that characterize the physical, physiological, genetic, psychological, economic, cultural or social identity of said natural person.

2. Processing of personal data

Any act or series of acts performed with or without the use of automated means, on personal data or personal data sets, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, search of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.

3. Which personal data are cοllected by this Website

The nature of this website is purely informative and therefore it is clarified that in principle the above website does not collect or use any kind of personal data.

No decisions are made, nor profiling is done, based on automated processing of the Data of the visiting user.

 

4. Controller

The Person Responsible for processing the personal data of the website www …… gr is Maria Samioti (hereinafter “Administrator”) , and who is based in Nea Erythraia of Attica, Ionias street, no. 15, P.C. 14671, with contact phone number
………….. and email address
…………………… 

Users can contact the data controller for any issue related to the processing of your data.

 

5. User/visitor rights (in case the website processes personal data)

The user/visitor of the website has, in addition to the above:

• Right to rectify and/or delete personal data

Visitors / users are given the right to delete any personal data, rectify and/or update their personal data, at any time.

• Right of access to their personal data,

• Right to restriction of processing,
• Right to data portability, i.e., the right to receive the data concerning them in a structured, commonly used and machine-readable format,
• Right to submit a complaint to the competent supervisory authority in case of illegal processing of the Data.
• Right to object, i.e., the right to object to the processing of their Data when there is a legitimate interest in accordance with the conditions and provisions of article 21 of Regulation 679/2016,

In order for the visitor/user to exercise their rights, they can send a relevant request either to the postal address of the “Administrator” (street …………., no. …, P.C. ……), or to the e-mail address ( ………………… ) under the title “Exercising the right of access/rectification/deletion/restriction/objection”, and the “Administrator” will ensure to examine it and respond as soon as possible.

It is pointed out that according to the current legislation the “Administrator” has the right to refuse the satisfaction of a right if any processing is necessary for the establishment, exercise or support of their legal rights or the fulfillment of their obligations.

 

6. Provision and Disclosure of personal data

The “Administrator” through the Website undertakes not to sell, rent or in any way publish and/or share the personal data of the visitors/users of the website to any third party. The “Administrator” can provide personal data of their visitors / users to third legal and/or natural persons inside or outside Europe only if:

• They have the express consent of the visitors / users for the channeling of personal data.
• The provision of personal data to legal and/or natural persons who cooperate with the Website becomes necessary for the implementation of the wishes of users / members.
• The processors process the data by order and on behalf of the “Administrator”. Processors are carefully selected, controlled and bound by contract in accordance with Article 28 of the GDPR.
• It is required due to compliance with the relevant provisions of the law and the competent only authorities (administrative, judicial).

 

 

7. Sending of Curricula Vitae

In the event that a Curriculum Vita (CV) is sent to the Website, through other means of electronic networking and e-mails, the “Administrator” will take note of the data that will be sent through the CV. This data will be used in order to consider the prospect of the candidate for the job position. In any case, the “Administrator” will not keep the above personal data for a period of more than two years.

If the “Administrator” ultimately decides to retain the Personal Data to fill another position, the subject will be informed accordingly, and the appropriate consent will be requested.

 

8. Interaction via phone and/or social networking media

In case of communication by phone or via e-mail or via social networking media, the Administrator will receive information such as the user’s phone number, username, profile photo, place of residence, email , gender etc. in order to answer the user’s messages.

The Administrator does not have access to the information collected by social media and does not have jurisdiction over it. For more information about the protection of their data, the user should be informed about the protection declarations of the social networking medium.

9. Cookies

The Website may use cookies to identify the visitor / user of some of its pages, for further information see here.

 

10. Links to other sites

The Website may include links to other websites which are not controlled by it but by third parties (natural or legal persons). In no case is the Administrator responsible for the Terms of Protection of Personal Data of the visitors / users, which these parties follow.

 

11. Psychotherapy Services – Seminars – Events

In the context of the provision of psychotherapy services, seminars and events and the subsequent issuance of a tax document for the provision of services, the following data may be collected under conditions of confidentiality and professional secrecy:

1. Name, Surname, Date of Birth, Home Address, Telephone Numbers, Email Address
2. Name, Surname, Address, Occupation, VAT number, Tax Office
3. Session History, Mental Health Data

The above information is used exclusively for the following purposes:

1. Communication for the purpose of organizing sessions and providing psychotherapy services.
2. The fulfillment of tax obligations, which includes the transmision of the information to an accountant and their use before the tax authorities, when this is required by law.
3. The keeping of a professional record with the name of the treated person, a summary of the progress of the sessions and stenographic history/notes/reports which may include mental health data for the purposes of observing scientific methodology, ethics and self-evaluation, i.e., for the appropriate fulfillment of the services provided.

When starting the provision of services or participating in seminars and events, you may be requested to consent in writing to the use and storage of the above information, bearing in mind that your consent may be revoked at any time.

Recipients of the above personal data are exclusively the Data Controller, any secretarial support, external accountant (exclusively for any tax data). Those acting as processors on behalf of the controller are fully bound by professional secrecy, the controller’s instructions and orders and similar confidentiality clauses. All of the above, as well as other employees, are bound by professional secrecy, the obligations provided for in the legislation and the EU General Data Protection Regulation regarding the collection and processing of the above data, the instructions and orders of the data controller and any special discretion and confidentiality clauses. Moreover, for a part of the data that is necessary for the issuance of tax documents, public authorities (tax etc.) can also become recipients. The data controller undertakes not to transmit or disclose or share the above data to any third party, while they are bound by professional secrecy for the totality of the above data. Especially with regard to mental health data, history and content of sessions, the disclosure of said data is excluded in any case, with the exception of the cases stipulated by the Law.

The administrator declares that she ensures the compliance of the processing with the applicable Greek and European law and that she has taken all the appropriate organizational and technical measures for the security of the data and their protection against accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access and any other form of unlawful processing.

Sessions take place with absolute respect for privacy and confidentiality. Any record of personal data and sessions is mainly kept in physical form (paper /handwritten) and is accessible only to the provider of psychotherapy services. A small part of the file (mainly contact information) may also be kept in an electronic format that is stored securely and is accessible only to the psychotherapy service provider and any secretarial support. In any case, the file is maintained only in accordance with appropriate security and preservation rules, without providing access to unauthorized third parties and for as long as is necessary for the completion of the sessions (i.e. the provision of services), but also for the compliance with other legal obligations, such as, for example, obligations to public and tax authorities, etc.

 

12. Updates (Newsletter)

The Website does not provide the possibility and option for you to subscribe to a list of regular updates (newsletter ), at this point in time.

 

13. Modification of Protection Policy

This policy is subject to change. We recommend that you visit this page frequently to always be informed about how we use your personal data.