Privacy Policy (GDPR)
Last updated: 8th of December 2025
⸻
1. Purpose of the Privacy Policy
This Privacy Policy explains how Drakopoulos Reproductive Medicine collects, processes and protects your personal data, in accordance with the General Data Protection Regulation (EU 679/2016 – GDPR) and Greek law.
It concerns all data we collect through:
• the website drakopoulos-ivf.gr,
• electronic communication forms,
• appointment requests,
• telephone and email communications,
• medical information and health care services.
⸻
2. Data Controller
Drakopoulos Reproductive Medicine
Alopekis 47, Athens (Kolonaki), Postal Code 10676, Greece
Tel.: +30 210 2602748
Email: info@drakopoulos-ivf.gr
The controller determines the purpose and manner of processing your data.
⸻
3. Categories of Data We Collect
When communicating or using the website we collect:
A. General Personal Data
• First & Last Name
• Telephone
• Contact information
• Content of messages/queries
• Website search data
• Cookies & analytics data
B. Sensitive Medical Data (Article 9 GDPR)
When providing medical services we may collect:
• Medical history
• Fertility information
• Previous exams
• Laboratory analysis results
• Health information related to IVF or infertility
This sensitive data is protected with much higher levels of security and is processed exclusively by authorized medical personnel.
⸻
4. Data Collection Methods
We collect data:
• Through the contact form
• Through an appointment request
• Via email or telephone communication
• Through cookies and analysis tools (GA4, Tag Manager)
• Through social media or external requests
We do not collect data from minors without parental consent.
⸻
5. Purposes of Data Processing
Your data is used for:
1. Communication and answering questions
2. Appointment scheduling
3. Provision of medical information & evaluation of medical history
4. Maintaining medical records (where required)
5. Statistical analysis of visits
6. Operation of the website
7. Compliance with legal obligations
⸻
6. Legal Basis for Processing
The processing is carried out in accordance with:
Article 6 GDPR – General personal data
• (a) Consent
• (b) Contract for scheduling appointments
• (f) Legitimate Interest for the operation of the site
Article 9 GDPR – Sensitive medical data
Edit only with:
• Explicit consent
• Medical diagnosis / provision of health care
• Obligations of the medical profession
⸻
7. Recipients of the Data
The data is only accessible to:
• The doctor, the midwife and the medical staff
• The secretariat for appointment management
• Technical partners who support the website (with a confidentiality agreement)
We do not sell, share or assign data to third parties for marketing purposes.
⸻
8. Cookies & Analytics
The website uses:
• Google Analytics 4
• Google Tag Manager
• Meta Pixel (where applicable)
Cookies are used exclusively for:
• Traffic analysis
• Improve user experience
• Statistical display — not for personal identification
We respect your choice to disable cookies through your browser.
⸻
9. Data Security
We implement strong security measures:
• HTTPS / SSL
• Firewall & Anti-malware
• Limited access for medical personnel
• Access control with credentials
• File encryption
• GDPR-compliant hosting
⸻
10. Data Retention Period
• Messages & forms: up to 18 months
• Medical data: as required by medical legislation
• Appointment details: up to 5 years
• Cookies: according to browser settings
⸻
11. Your Rights (GDPR Rights)
You have the right:
• Access
• Correction
• Restriction
• Deletion (where there is no legal obligation to comply)
• Withdrawal of consent
• Data portability
• Submitting a complaint to the Data Protection Authority
For the above, send an email to: info@drakopoulos-ivf.gr
⸻
12. Changes to the Policy
This Policy may be updated periodically.
The most recent version is always available on the page drakopoulos-ivf.gr/gdpr.
