ORTHOPAEDIC CARE ATHENS
Privacy policy
Last updated: 11 November 2026
This notice covers orthocareathens.gr and contact requests submitted through the website.
Controller and contact details
The controller for website data is Charalampos Kontos, Orthopaedic Surgeon, Orthopaedic Care Athens, 46 Formionos Street, 11633 Athens, 4th floor. Telephone: +30 210 722 2146. For privacy questions and requests: [email protected].
Information and purposes
The form asks for your name and telephone number, with an optional email address and preferred contact time. We use these details to contact you and arrange the appointment you request. Submission does not automatically confirm an appointment. Required fields must be completed; you can always call the practice instead.
There is no medical history field or file upload. Please do not enter diagnoses, symptoms or test results. This notice does not cover medical records, about which the practice provides separate information.
Technical information, such as IP address, access time, requested page and browser details, is processed to operate and protect the website. We do not use appointment enquiries for advertising messages.
Legal bases
Appointment enquiries are handled as steps you request before a service is provided, under GDPR Article 6(1)(b). Necessary website security relies on our legitimate interest in secure operation, under Article 6(1)(f). Where communication reveals health information, Article 9(2)(h) applies to healthcare provision, subject to the professional confidentiality safeguards in Article 9(3).
Optional Google services load after you enable them. You can withdraw that choice for future use through “Privacy settings”. Acknowledging that you have read this notice does not constitute consent to advertising.
Access and service providers
Charalampos Kontos and authorised secretarial staff handle enquiries at [email protected]. Zoho hosts the mailbox in an account assigned to its European data centre. The website uses hosting and technical support services, Cloudflare for traffic delivery and security, and Wordfence/Defiant for protection against malicious activity. Technical providers access the information needed for their respective service.
The WordPress SMTP plugin does not keep an additional log of email contents. Zoho holds incoming messages and related sent copies.
Google Maps and reCAPTCHA
Google Maps loads when you select “Show Google Maps”. The form loads Google reCAPTCHA when you select “Enable contact form”. These services transmit technical details, including your IP address and browser information, to Google and use cookies. See Google’s Privacy Policy.
You can browse and call the practice without enabling these functions. Anti-spam checks can reject a submission, but do not make medical decisions or determine access to care.
Retention
Enquiries that do not result in an appointment are deleted no later than 90 days after the last contact. Charalampos Kontos and the secretarial staff handle deletion of related incoming messages, sent copies and copies in Trash. This is a manual procedure.
When an enquiry leads to a service, necessary information follows the practice’s separate process. Retention of technical security logs and backups is determined by incident investigation and service recovery needs and the backup replacement cycle. Particular information is kept longer only when required for a legal obligation or a documented legal claim. You can request details about information concerning you.
Processing outside the EEA
International technical providers use infrastructure and partners outside the European Economic Area. A European Zoho account does not mean that every activity of every provider takes place within the EU. Zoho describes contractual safeguards based on European standard clauses. Cloudflare and Google describe adequacy decisions/the EU–US framework and standard contractual clauses, as applicable to the transfer. Defiant describes contractual safeguards. Contact us for further information and a copy of applicable safeguards.
Rights and requests
Subject to GDPR conditions, you can request access, correction, erasure, restriction or portability and object to processing. Where consent applies, you can withdraw it without affecting earlier lawful processing. Send requests to [email protected]. We normally respond within one month and inform you if a lawful extension is needed. You may also complain to the Hellenic Data Protection Authority.