Last updated: October 2026
This page explains what personal data we process when you visit familysmile.gr or contact us, for what purpose, for how long, and what rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.
1. Data controller
Lydia Gerasopoulou, dentist
15 Glafkou Street, 154 51 Neo Psychiko, Athens
Tel. +30 210 6743342 · E-mail: [email protected]
2. What data we process and why
2.1 When you visit the website
The website is static: it has no forms, requires no registration, sets no application cookie, and uses no advertising, analytics or tracking tools. We do not collect visit statistics.
During a visit, the server and content delivery network automatically record some technical data: IP address, date and time, page requested, browser and device type.
- Purpose: running the website, keeping it secure and diagnosing technical issues.
- Legal basis: legitimate interest in a secure, functioning website (Article 6(1)(f) GDPR).
- Retention: server logs are automatically deleted after 14 days, unless needed to investigate a specific security incident.
2.2 When you e-mail us
We process your name and e-mail address, and whatever you write to us.
- Purpose: to reply to your message and, if you ask, to book an appointment.
- Legal basis: steps taken at your request before entering a service (Article 6(1)(b) GDPR) and our legitimate interest in answering correspondence (Article 6(1)(f)).
- Health data: please do not e-mail us details of your health. If you do, we use that information only for your dental care, under our duty of professional confidentiality (Article 9(2)(h) GDPR).
- Retention: correspondence is kept for up to 12 months from the last contact. If you become a patient, relevant information is added to your record.
2.3 When you call us
When you book by phone, we record your name, a contact number and the appointment time in the practice schedule. Calls are not recorded.
2.4 Your dental record
If you are a patient, the dentist keeps a dental record (history, examinations, X-rays, treatments) in line with applicable law and the Code of Dental Conduct.
- Legal basis: provision of healthcare by a professional bound by confidentiality (Article 9(2)(h) GDPR) and the legal duty to keep records (Article 6(1)(c)).
- Retention: at least 10 years from your last visit.
3. Who has access to your data
Your data is not sold, not used for advertising, and there is no automated decision-making or profiling.
To run the website and correspondence we work with the following processors, who act only on our instructions under a written contract (Article 28 GDPR):
- Hetzner Online GmbH (Germany): website hosting, in a data centre within the EU.
- Cloudflare, Inc. (USA): content delivery network, attack protection, DNS, under the EU-US Data Privacy Framework and standard contractual clauses.
- E-mail service provider for [email protected], outside the EU, with appropriate transfer safeguards.
4. Cookies
The website uses only cookies that are strictly necessary for its operation and security. See our Cookie policy.
5. Links to other websites
The Contact page has an "Open in Google Maps" link. If you click it, you are taken to Google's website, where Google's own privacy policy applies.
6. Security
The website runs only over an encrypted connection (HTTPS). Access to website administration and e-mail is protected with strong passwords and two-factor authentication.
7. Your rights
You have the right to access, rectify, erase (unless retention is required by law, such as the dental record), restrict processing, data portability where applicable, and object to processing based on legitimate interest.
To exercise your rights, write to [email protected] or send a letter to the practice address. We will respond within one month.
If you believe our processing breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr).
8. Changes
If the way we process data changes, we will update this page and the date at the top.