The company “Achilleion Nephrology Center MAE” (hereinafter “the Company”), respecting the privacy of its patients and partners, as well as of any other person, takes all the necessary measures to protect natural persons against the processing of personal data.

Below one may find briefly the Company’s policy in relation to the processing and protection of personal data, which come into its possession in any way and especially from the use of its website and other websites.

Ι. Personal Data
Protection Policy

Processing of personal data

a. What is personal data?

Personal data is any information relating to a specific natural person or an identifiable natural person, i.e. one whose identity can be ascertained, directly or indirectly, in particular by reference to an identification element such as a name, an identity card number, location data or to one or more factors that characterize the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person in question (“data subject”).

Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the purpose of indisputable personal identification, health-related data or data concerning a natural person’s sexual life or sexual orientation, constitute a special category of personal data, which needs increased protection due to their confidential and sensitive nature.

b. What is the processing of personal data?

The Company collects personal data only in the cases and exclusively for the purposes for which your explicit and unconditional consent is provided, as well as in those cases specifically provided for by the applicable provisions. Personal data comes into our possession in the following cases:

Every time you address the Company by physical presence at its headquarters or by sending printed or electronic messages, in order to receive information about the services provided by it or in order to be served by its staff.

• In cases where you address the Company in the context of your cooperation or possible cooperation (e.g. sending a CV) with it.

• By visiting the website https://achilleionmed.gr/en or any other webpage or website of our company.

• By third-party partners, such as insurance agencies and companies.

• The automated collection of data through the Company’s website and in particular through the use of Cookies (see below), is carried out by the latter only upon consent, which is provided by selecting the relevant option at the bottom of the screen.

Especially for the information provided by sending messages through the contact form on our website, your consent is provided by clicking in the relevant box. In cases where you provide personal data to the Company on your own initiative (sending e-mails, faxes, CVs, letters or handing over documents of any kind to the company’s staff), it is considered that you have provided your consent to the processing of your personal data, for the purposes expressly stated or clearly inferred from the content of your statements and/or actions.

The processing of personal data, which are collected and transmitted to the Company by third parties, is carried out following a previous check of the right of the latter to disclose them to the Company. The processing in this case is carried out only for the purposes for which they are provided to the Company based on the agreement between it and the third party, but in no case for purposes for which the consent of the subject of the personal data has not been provided to the third party. In any other case, the collection and processing of data is made in accordance with the provisions of the applicable legislative provisions.

It is pointed out that personal data, with which it is possible to communicate with you (e.g. name, phone number, e-mail address, etc.) is likely to be used for the purpose of promoting the company’s services. This happens only following your explicit and unconditional consent and after you have been informed.

The use by third parties of image and sound recording media within the clinic maintained by the Company is prohibited in any case. By way of exception, a closed circuit television is used observing of all legal conditions and only for reasons of protection of the Company, its staff, the patients, as well as any other person who enters the clinic, and only the competent company and the employees authorized for this purpose have access to it. The transmission of the data, which is recorded by these media, is excluded, except for the cases provided for in the applicable at each time legislation (e.g. legitimate disclosure to law enforcement authorities).

The consent of any data subject for processing of its personal data in any way by the Company, is always provided by a relevant action of the data subject (e.g. clicking in a box, signing a document) and never by omission implying tacit consent. In no case is consent set as a condition for the conclusion or performance of a contract, unless to the extent that the processing of personal data is absolutely necessary due to the nature and content of the contract.

c. Exactly what personal data does the Company retains, who processes it and what rules are followed to protect it?

The Company retains only the personal data it can collect and process in a legal manner. The personal data processed include, but are not limited to, the name, surname, father’s name and mother’s name, Tax Registration Number, Social Security Number and the ID card number, the mobile and landline telephone number, the resident’s address and e-mail address, as well as information regarding the payment of the services provided by the Company, such as in particular the number of the bank account or the credit or debit card. The data concerning your health are differentiated according to the reason for which services are provided to you by the Company. Personal data of your relatives or friends are collected and subject to processing by the Company to serve your needs and only after their express and unconditional consent. Whatever related to the processing and protection policy of technical data collected during your browsing of the company’s websites is analyzed below. In order to be informed about the special and specific data concerning you, you may contact the Company, at the contact details listed at the end of the text.

The processing of personal data is made only by the authorized employees/partners and executives of our company and exclusively for the purposes for which they are granted by you to the Company or provided for in the applicable provisions. The Company’s staff is informed about the need to protect personal data and is properly trained to prevent incidents of illegal processing of personal data. The processing of personal data takes place only by the staff, within the framework of the tasks assigned to them and exclusively to the extent that it serves the performance of these tasks.

The transmission of personal data to third parties takes place only if and to the extent that your express and unconditional consent is provided or there is any other reason than those provided for in the applicable provisions. A separate consent is specifically requested for the transmission of personal data to third parties, who intend to use them for commercial purposes. Similarly, the transmission of personal data to social security organizations or insurance companies is carried out upon your consent, which is considered to be provided in cases where you submit a relevant transfer request to the Company. Personal data may be transmitted to our partners, in order to update personal data protection methods or to adapt to the current legislation and only to the extent deemed necessary to achieve this purpose.

All third parties, without exception, to whom personal data held by the Company are transmitted, are bound by confidentiality agreements, as well as conditions that prohibit their processing for purposes that differ from those for which you provided them to the Company or are contrary to the applicable provisions. In addition, third parties commit to the Company not to further transmit the personal data they receive. The company does not bear any responsibility for the violation by third parties of their contractual obligations, as well as those provided for in the currently applicable legislative provisions for the protection of personal data.

Personal data processed by the Company, regardless of their origin, remain confidential. The Company ensures the safe processing of personal data and takes all necessary technical measures to protect them from illegal processing for as long as they are at its disposal. The time for retaining personal data does not exceed the necessary one to serve the purposes for which they were provided and in any case the time period provided for by law. Given the company’s field of activity (provision of diagnostic or therapeutic health services), increased measures are taken to protect personal data, which are included in the special category of increased protection.

For more details about the personal data protection measures that are the subject of processing by the company (issues on technical interest for the data management system, the pseudonymization and encryption system, etc.), you may contact our company, at the contact details referred to at the end of the text.

e. What are the rights in relation to personal data?

The applicable legislative provisions provide in detail the rights of the data subject, as well as the basic principles of how to exercise them. These include the right to information about the type and content of personal data, which are retained by the data controller, as well as the purposes of the processing (right to information). In addition, you may have access to the personal data processed by the Company, which is obliged to verify or deny the processing of your data by it as well as to provide information on the possible transmission of the information to third parties (right of access). You have the right to request the correction and deletion of personal data, as well as the limitation of the purposes for which the Company processes your personal data, as well as to fully withdraw your consent to the processing of your personal data (right to correction, deletion and restriction of processing). Furthermore, you can request the transmission of your personal data to another natural or legal person in a readable and editable format, with or without their simultaneous deletion from the Company’s file (right to portability). In any case and at any time you may object to the processing of your personal data by the Company in any way (right to object). It is expressly stated that decisions concerning you and producing legal or other important results for you by the Company in an automated manner are excluded, including profiling.

If you wish, you may request the deletion, alteration, correction or transfer of your personal data from our archive. It is pointed out that at any time,

and to report any incident related to your personal data, which is kept by the Company. It is pointed out that at any time, you can report any incident related to your personal data, which is retained by the Company. For all the relevant requests, as well as for any other request or question regarding your personal data, you may contact the Company at any time at the details referred to at the end of the text.

ΙΙ. Information on the company’s websites – Disclaimer

1. Responsibility for the content of the website

The information mentioned on the Company’s webpage (https://achilleionmed.gr/)as well as on any of its other websites, such as in particular the social networking pages (Facebook, Instagram, LinkedIn, YouTube), including any medical information, are of a general nature, do not constitute a diagnosis or suggestion and do not in any way replace the appropriate and personalized medical treatment and advice, which is given after examination by the doctors and the specialized staff of the center. The company bears no responsibility for any damage caused as a direct or indirect effect of the use or misuse of the information provided on this website.

2. Responsibility for the hyperlinks

The webpage and websites of the company’s responsibility may contain hyperlinks to other websites, the content of which is not influenced by the Company in any way. For this reason, no guarantee is given for the content of these websites that are not related to the Company. In any case, the respective provider or administrator is responsible for their content. The hyperlinks on this page were checked for possible illegality at the time of their posting. However, it is not possible for us to check any illegal content of other websites at any time without specific indications of violations of the law by other websites. In the event that a violation is found, we will remove the hyperlinks in question from this website.

3. Intellectual property rights

The content of this website belongs to the Company and is protected by the current copyright law. The reproduction, processing, communication and any kind of exploitation of its content, which is not permitted under the law of intellectual property, is only permitted upon the written consent of the Company. Uploading and copying the elements of this website is allowed only for personal use and under no circumstances for commercial use. To the extent that the content of this website does not come from its administrator, the provisions on the copyright of third parties and the protection of their personal data shall apply. It is noted that the data should be used appropriately with particular attention to the intellectual property rights of third parties. In case of violation of the relevant rights, the Company will take the appropriate actions to stop and prevent them.

4. About social media

The Company maintains pages on social media. On the Company’s Facebook page (Provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA) FACEBOOK one may find the option “Like” or a similar one of Facebook. The provider of the social media is solely responsible for the processing and protection policy of the personal data collected when visiting our Facebook page and using the above option (“Like”). Information about Facebook’s data protection policy can be found at the following link: https://www.facebook.com/privacy/explanation. DATA POLICY https://www.facebook.com/privacy/explanation We point out that the Company has absolutely no knowledge of the processing of data by Facebook, nor does it receive and process personal data through it, without your prior express and unconditional consent.

5. Cookies policy

Cookies are small pieces of text used to store information in browsers for the purpose of storing and retrieving identifiers and other information on computers, mobiles, and other devices. The website uses Cookies, after granting your express and unconditional consent, which takes place selecting the option “ACCEPT”, in the short informational message that appears at the bottom of the screen when you visit the website. Cookies do not cause any damage to your computer. On the contrary, they help make the website more user-friendly, efficient, and secure. Most of the Cookies used by this website are so-called Session-Cookies, which are deleted after the end of your visit to the Website. Cookies, which remain on your end device and are stored on it, enable us to recognize your computer on your next visit. However, they can be deleted at your request. You may enter settings on your computer, which inform you about the placement of Cookies on your computer and allow the use of Cookies only with your prior consent, the acceptance of Cookies only in specific cases or the general blocking of Cookies, as well as their automatic deletion by closing your browser.

6. Server Log Files

The website provider automatically collects and stores information in Server – Log files, which are automatically transmitted from your browser to us. This information is as follows:

• Browser type and version

• Operating system used

• URL Address

• Hostname of the connected computer

• Time point of the request to the provider

By using these details it is not possible to determine the identity of a certain person. No correlation of these data with data from other sources is carried out. We expressly reserve the right to subsequently check these details, when specific details of their illegal use are disclosed to us.

Contact details

To exercise any of your legal rights regarding your personal data as well as for any information or clarification, we remain at your disposal at the following contact details:

“Achilleion Nephrology Center”

8 Mitropoleos str., Thessaloniki

MO – WED – FRI 07:00 – 21:00

TUE – THU – SAT 07:00 – 21:00

T: + 30 2310 288 110

F: +30 2310288109

Ε: info@achilleionmed.gr

17 Ethinikis Antistaseos str., Kalamaria

MO-WED-FRI 06:00 – 21:00

TUE-THU-SAT 07:00 – 14:30

T: +30 2310 436 600

F: +30 2310 436 601

kalamaria@achilleionmed.gr