Privacy Policy

Welcome to F.T.PREMIUM CLINIC S.A. – THERAPY. We want to provide you with our services with a commitment to protecting and respecting your privacy. For reasons that serve this information, we will refer to ourselves here as the “Organization”.

With this policy, we inform you of the way we collect and use information that concerns you, as provided for by applicable legislation (General Data Protection Regulation 679/2016 and Law 4624/19). At the same time, we describe your rights regarding the personal data we process and the measures to protect your privacy. Personal data is information on the basis of which someone can be identified. Indicatively, information regarding your name and surname, the information that your insurance provider (public or private) has to identify you, your e-mail account (e-mail). Sensitive personal data, biometric and genetic, are those elements that are related to your health (article 4, par.13,14,15 GDPR) and determine your identity.

This Policy helps the Organization protect itself from risks that, among others, may include:

• Breach of confidentiality. That is, information that can be given to someone without the necessary authorization and competence to process it.
• Lack of choice by the subject of the ways in which data concerning him or her is kept and processed
• Damage to the Organization’s reputation in the event that access to personal and sensitive personal data is illegally obtained.

In order to process your data, a specific legal basis is necessary.

The Organization keeps and processes personal data in the context of the performance of its contractual obligations, as provided by law (Article 6 GDPR par. 1) but also to safeguard the vital interests of the subjects of the aforementioned personal data.

In order for the Organization to be in line with the law, while keeping and processing personal data (electronic or paper files) it is necessary to follow certain basic principles, which are:

• to do so with a legitimate reason,
• for a specific purpose,
• accurately and by keeping only the necessary information.

In addition, personal data must be accurate and up-to-date, in accordance with the rights of the subject, kept only for the time that is necessary and protected by appropriate technical and organizational means.
In the event of their transfer outside the European Union, this must be done legally.

The Organization collects:

• Your name, surname, contact details with you, sometimes your date and place of birth. Also, details related to the preparation of your medical file, in order to serve the medical practice and your relationship with the Organization. Collection of personal data in case of weakness of the patient upon admission can be given by the attendant, the attending physician or by the EKAB in case of transfer of the patient
• In case of communication with you and vice versa, we will keep a file with details of this communication. Possibly also the content of your own judgments for third parties.
• Data of connection and communication details on the internet related to the media and applications you use. In any case, our telephone communications may also be recorded to serve the purposes of the Organization for the provision of quality services.
• If you are an employee or business partner of the Organization, we may collect data regarding your gender, nationality and documents sufficient for your identification. Also data for payroll purposes, numbers associated with tax and insurance data and whatever is considered necessary for the termination of a contractual relationship.
• In our facilities there is a closed circuit surveillance (CCTV) to record possible malicious activity, as required by law. In this context, images and movement are recorded and kept for a short time.
• The Organization reserves the right to control, monitor, record, use the content of the data held in it and processed through the electronic systems it maintains. The same applies to data held in paper files (folders).

The Organization collects and processes personal data concerning you for the following reasons:

• For our compliance with applicable legislation (such as GDPR 679/2016 and law 4624/19)
• To be able to fulfill our obligations arising from your position as a customer
• For purposes related to the security of persons, facilities, assets and material related to the Organization
• For the management of the Organization’s communications and transactions
• For any obligations of the Organization related to obligations and rights defined by the Public Authorities.
• For any case where your express consent to the storage and processing of the above data is considered an important justification.

In order to enter into a contract with you and to meet the obligations arising from it and to exercise our rights, you are required to provide us with your personal data. If not, we may not be able to enter into a contract with you and provide you with our services (either as an employer, as a service provider or as a supplier).

For statistical research purposes and for your information, following your consent, the Organization may use automated decision-making systems for profiling. We reiterate that this, when done, requires your consent.

The Organization may keep your data for a number of years after the end of the contractual relationship with you. In some cases, it may even be required by law. Financial information concerning you is kept in our file for a decade (10 years). We keep sensitive personal data only for as long as is necessary for the termination of our contractual relationship. Personal data as defined by Law 3418/2005 is kept for 10 years for diagnostic tests and 20 years in the event of hospitalization.

The Organization does not share files containing sensitive personal data with third parties. In the event that this happens, it will only be done with the express consent of the subject and for reasons that will be explicitly stated. For example, the description of a diagnosis which is transmitted to a healthcare provider or to another diagnostic or treatment unit. Also, personal data may be transmitted to an accounting or banking support company, which will be governed by this policy, always within the framework of a contractual relationship. Furthermore, we disclose personal data to the Authorities, as we are subject to a relevant legal obligation and when this becomes necessary in the context of compliance with the law and for public security. Your data is not transmitted outside the European Union.

(They can be transmitted to the insurance fund or private insurance company to which the patient is a party, to collaborating laboratories, to material supply companies, if this is required for medical procedures, to external partners (e.g. medical equipment) that process personal data on behalf of the Clinic, to supervisory or public authorities within the framework of its jurisdiction to which the Clinic legally discloses, to the employer or the occupational physician, in the context of conducting group diagnostic examinations of employees).

At F.T.PREMIUM CLINIC S.A. – THERAPIST we attach great importance not only to knowing your rights in relation to your personal data but also to the way you can exercise them. Therefore, you have:

Right to know if we are holding and/or processing your personal data. This right of yours stems from article 15 GDPR 679/2016. You can also request a copy of your data and how you can access them.
Right to be able to request the correction of your personal data. From the moment you can prove that the data we hold and concern you need correction, you can request it from the Organization.
Right to be “forgotten”, that is, to delete your data. In any case, you have the right to request from the Organization either the restriction of the personal data concerning you that we hold and process or their deletion. Your request may be accepted immediately, as long as it does not conflict with the law or an obligation of the Organization arising from it. Right to object to the storage and processing of your data.
Right to object to the storage and processing of your data.

Please contact us in any case of interest in exercising the above-described rights. This can be done either by phone or by sending an e-mail to dpo@therapis-hospital.gr In any case, you will be asked for identification information to process your request. You have every right to appeal to the Personal Data Protection Authority, as it is the competent national supervisory body, in case you find a problem regarding your data and the Organization does not respond.

You can be informed about any changes and amendments to this policy from our website www.therapis-hospital.gr

This Data Protection Policy of F.T.PREMIUM CLINIC S.A. – THERAPY was prepared and approved by the Management on 26/05/2020. It was implemented on 01/06/2020 and its next review is scheduled for 31/12/2022.