{"id":27094,"date":"2026-07-15T10:25:27","date_gmt":"2026-07-15T07:25:27","guid":{"rendered":"https:\/\/athensvision.gr\/gdpr\/"},"modified":"2026-09-15T14:52:22","modified_gmt":"2026-09-15T11:52:22","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/athensvision.gr\/en\/gdpr\/","title":{"rendered":"GDPR"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

GDPR<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tBook an Appointment<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tCompany<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tAbout Us<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tMission - Vision - Values<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tFacilities<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tGr. P. Georgariou Scholarship<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tSocial Responsibility & Contribution<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tQuality Policy<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tPolicy for the Prevention and Combating of Violence and Harassment at Work<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tGDPR<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tCertifications<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

ATHENS VISION \u2013 PRIVATE DAY CARE UNIT S.A.\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

GENERAL PRIVACY POLICY AND DATA PROTECTION POLICY
\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1. TABLE OF CONTENTS
<\/p>

2. POLICY STATEMENT
<\/p>

3. PURPOSE
<\/p>

4. SCOPE OF APPLICATION
<\/p>

4.1. 4.1. Definitions
<\/p>

5. DATA PROTECTION
<\/p>

5.1. 5.1. What information we collect about you and how we use it.
<\/p>

5.2. 5.2. What is the legal basis for processing data
<\/p>

5.3. 5.3. How we store and secure the information we collect
<\/p>

5.4. 5.4. What are your rights and how to access them
<\/p>

5.5. 5.5. How we transfer the information we collect internationally
<\/p>

5.6. 5.6. How we keep your information secure
<\/p>

5.7. 5.7. Notification of the Data Protection Officer and exercising user rights
<\/p>

<\/p>

  1. PRIVACY POLICY<\/b><\/li><\/ol>

    \u201cATHENS VISION Private Day Care Unit S.A.\u201d (hereinafter the \u201cCompany\u201d or \u201cAthensVision\u201d) is engaged in the provision of primary healthcare services, including the provision of day care services, in the field of ophthalmology. Given that the majority of the information collected consists of health data of AthensVision patients, there is a strong commitment to process such data in accordance with the General Data Protection Regulation (GDPR), the applicable Greek legislation on personal data protection, the Code of Medical Ethics, the guidelines issued by the Hellenic Data Protection Authority, circulars, decisions, and acts issued by the Hellenic Data Protection Authority, and any other legislation or regulatory and statutory framework relating to the protection of personal data (hereinafter collectively referred to as \u201cPersonal Data Protection Laws \u2013 PDPA\u201d).
    <\/p>

    <\/p>

    1. PURPOSE<\/b><\/li><\/ol>

      The purpose of this privacy policy and the personal data protection statement included herein is to inform you about the type of personal data our company collects from you, how we process (collection, storage, use, transfer) your personal data, how it is protected, and the rights you have regarding this processing, which is always carried out in a reliable and transparent manner. Your privacy is important to us, and so, to ensure transparency regarding how we collect, use, and share your information, we ask that you carefully read the following: <\/p>

      • What information we collect about you and how we use it<\/li>
      • What is the legal basis for our processing of your information<\/li>
      • How we share the information we collect<\/li>
      • Advertising messages<\/li>
      • How we store and secure the information we collect and how long we retain it<\/li>
      • What your rights are and how to access and control your information<\/li>
      • How we transfer the information we collect internationally<\/li>
      • How we keep your information secure<\/li>
      • How you can protect your children\u2019s information and age restrictions<\/li>
      • Cookies<\/li>
      • What changes have been made to our previous Privacy Policy<\/li>
      • Who are the data processors<\/li>
      • Who is the Data Protection Officer at our company<\/li>
      • Hellenic Data Protection Authority (HDPA)<\/li>
      • Contacting our company<\/li><\/ul>

        <\/p>

        4 SCOPE OF APPLICATION
        <\/b><\/p>

        This Policy applies to all patients, persons accompanying patients, Company staff (permanent, fixed-term, and temporary employees) and, in general, all persons employed by the Company, regardless of the legal form of the employment relationship (employment contract, project contract, contract for the provision of independent services, etc.), third-party representatives, subcontractors, volunteers, persons who may observe the performance of medical procedures at the Company or who generally collaborate with the Company, and are involved in the processing of personal data or whose personal data the Company processes. Compliance with this policy is mandatory under applicable law.
        <\/p>

        <\/p>

        • Definitions<\/b><\/li>
        • \u201cConsent\u201d of the data subject means any freely given, specific, explicit, and fully informed indication of the data subject\u2019s wishes by which he or she, indicates, by a statement or by a clear affirmative action, that he or she consents to the processing of personal data relating to him or her.<\/li>
        • \u201cCross-border Processing\u201d means the processing of personal data which: takes place in more than one Member State or substantially affects or is likely to affect data subjects in more than one Member State.<\/li>
        • \u201cController\u201d means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of this document, AthensVision is considered the Data Controller. <\/li>
        • \u201cProcessor\u201d means the natural or legal person, public authority, agency, or other body that processes personal data on behalf of the Data Controller.<\/li>
        • \u201cData Protection Laws\u201d means, for the purposes of this Policy, the collective description of the GDPR, the legislation on the protection of personal data currently in force in Greece, the guidelines, circulars, decisions, and acts, and any other relevant GENERAL POLICY ON THE PROTECTION OF PERSONAL DATA, as well as the legislation or regulatory and legal framework regarding the protection of personal data with which the Company complies.<\/li>
        • \u201cData Subject\u201d means the natural person to whom the personal data relates.<\/li>
        • \u201cGDPR\u201d means the General Data Protection Regulation [Regulation (EU) 2016\/679].<\/li>
        • \u201cGenetic data\u201d means personal data relating to the genetic characteristics of a natural person that have been inherited or acquired, as resulting, in particular, from the analysis of a biological sample from that natural person and which provide unique information regarding the physiology or health of that natural person.<\/li>
        • \u201cPersonal Data\u201d (hereinafter referred to as \u201cpersonal data\u201d or \u201cPD\u201d), any information relating to an identified or identifiable natural person (\u201cdata subject\u201d). An identifiable natural person is one whose identity can be ascertained, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. <\/li>
        • \u201cSpecial categories of personal data\u201d means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data, health data, data concerning a natural person\u2019s sex life or sexual orientation.<\/li>
        • \u201cHealth data\u201d means data related to the physical or mental health of a natural person and revealing information about their past, present, or future health status.<\/li>
        • \u201cProcessing\u201d means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.<\/li>
        • \u201cProfiling\u201d means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects of a natural person, in particular to analyze or predict aspects concerning that natural person\u2019s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.<\/li>
        • \u201cRecipient\u201d means the natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the context of a specific investigation in accordance with Union or Member State law are not considered recipients; the processing of such data by those public authorities shall be carried out in accordance with the applicable data protection rules, depending on the purposes of the processing. <\/li>
        • \u201cSupervisory Authority\u201d means an independent public authority established by a Member State. For the purposes of this document, the Supervisory Authority refers to the Personal Data Protection Authority. <\/li>
        • \u201cThird Party\u201d means any natural or legal person, public authority, agency, or body, other than the data subject, the controller, the processor, and the persons who, under the direct supervision of the controller or the processor, are authorized to process personal data.<\/li>
        • \u201cPersonal data breach\u201d means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data that has been transmitted, stored, or otherwise processed.<\/li><\/ul>

          <\/p>

          1. DATA PROTECTION.<\/b><\/li><\/ol>

            5.1. 5.1. What information we collect about you and how we use it.
            <\/b><\/p>

            \u2013 About our patients:<\/b><\/p>

            We collect information about you when you provide it to us, such as your full name, father\u2019s name, date of birth, occupation and job title, Social Security Number (AMKA), contact information, home address, social security fund, insurance company and policy number, and email address. The company named \u201cATHENS VISION S.A.\u201d maintains, in accordance with Article 14 of Law 3418\/2005 (Code of Medical Ethics), a mandatory medical record in which personal and medical information is recorded. This record is retained, in accordance with the law, for a period of 10 years following the patient\u2019s last visit, while adhering to the necessary legal security measures to safeguard personal data.
            <\/p>

            Patients of the company named \u201cATHENS VISION AE\u201d have the following rights regarding their personal data, subject to certain terms and conditions (Articles 15, 16, 17, 18, 21 of Regulation (EU) 2016\/679): The right of access, rectification, erasure (after the expiration of the aforementioned ten-year period), restriction of processing, as well as the right to have their data transmitted to third parties.
            <\/p>

            Furthermore, when patients submit a request exercising any of the above rights, the physician of the company named \u201cATHENS VISION AE\u201d is required to respond within 1 month (no later than 3 months), either by granting the request, rejecting it with justification, or explaining the reasons for the delay.
            <\/p>

            Finally, and only if patients provide their consent, the physician of the company named \u201cATHENS VISION AE\u201d will use patients\u2019 personal data for the following purposes:
            <\/p>

            a. To utilize the access provided by the IDIKA electronic prescription system to retrieve information regarding their medical history of any kind,
            <\/p>

            b. To contact them by phone to schedule a follow-up visit,
            <\/p>

            c. Providing information regarding their health\u2014without their consent, the physician will not use their contact information, unless there is a need to protect their own or a third party\u2019s vital interests or an overriding public interest),
            <\/p>

            d. Taking photographs to monitor their health progress,
            <\/p>

            e. Posting their photographs for educational purposes and for presentation at medical seminars and conferences, ensuring that their identity is not directly or indirectly revealed,
            <\/p>

            f. Communicating with them regarding various updates concerning the clinic\u2019s activities,
            <\/p>

            g. Posting photos on social media platforms such as Facebook and Instagram to highlight and promote the clinic\u2019s services, as well as the results of the clinic\u2019s work.
            <\/p>