Last updated: 27/10/2026
1. Introduction
The protection of personal data and respect for visitors’ privacy are fundamental principles of the myRetina Eye Center.
This Privacy Policy describes how the personal data of website visitors is collected, used, stored, and protected https://myretina.gr/.
The processing of personal data is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), Law 4624/2019, Law 3471/2006, and all other applicable Greek and European legislation.
This policy primarily concerns myRetina’s online presence. For data collected in the context of medical examinations, diagnoses, treatments, and the maintenance of medical records, additional, specific information may be provided to patients.
2. Data Controller
The Data Controller for the personal data collected through the website is:
myRetina
Scientific Director: Eustratios V. Gotzaridis, Ophthalmic Surgeon
Address: 66 Vasilissis Sofias Avenue, Athens
Phone: +30 210 7212200
Email: info@myretina.gr
For any questions regarding the protection of personal data, interested parties may contact us using the contact information provided above.
3. What personal data do we process?
Depending on how you use the website, we may process the following categories of data.
3.1 Contact Information
When you contact us via the contact form, email, or phone, the following information may be collected:
Full name.
Email address.
Contact phone number.
Content of your message.
Other information you voluntarily provide when communicating with us.
3.2 Technical Specifications
While using the website, technical information may be processed, such as:
IP address.
Date and time of access.
Device and browser type.
Technical log files.
Information about managing cookie consent.
This data is used, to the extent necessary, to ensure the secure and proper operation of the website.
3.3 Traffic Data
If you have previously consented to the use of statistical cookies, information may be collected regarding:
The pages you visit.
The duration and frequency of visits.
The device type.
The source of the traffic.
Your overall interaction with the website.
Statistical analysis may be performed using Google Analytics and may include online identifiers that constitute personal data.
3.4 Data on informational mailings
If you choose to subscribe to our newsletters, we may process your email address and the information required to record and manage your consent.
3.5 Health Data
When you contact myRetina, you may provide us with information related to your health.
This information constitutes special categories of personal data under Article 9 of the GDPR and is subject to enhanced safeguards.
It is recommended that you do not send medical records, test results, or sensitive health information through general communication channels, unless there is an appropriate and secure process in place for that specific purpose.
4. Purposes and Legal Bases for Processing
Personal data is processed only for specific and legitimate purposes.
4.1 Handling Communication Requests
The information you submit is used to review your request and contact you.
Depending on the nature of the request, the legal basis may be:
Article 6(1)(b) of the GDPR, when pre-contractual measures are required at your request.
Article 6(1)(f) of the GDPR, where processing is necessary for the legitimate interests of handling general communication requests, provided that your rights do not take precedence.
4.2 Scheduling Appointments
If you request an appointment, your information will be used for the relevant arrangements and communication.
When the request includes health information, the specific processing conditions set forth in Article 9 of the GDPR also apply.
4.3 Provision of Health Services
In the context of the provision of medical services, health data may be processed provided that the conditions of Article 9(2)(h) of the GDPR are met, subject to the safeguards set forth in Article 9(3) and applicable law.
This processing is carried out in accordance with medical confidentiality and patients' rights.
4.4 Website Security
Technical data may be used to protect against malicious activities, address technical issues, and ensure the proper functioning of the website.
The processing is based, as applicable, on a legitimate interest pursuant to Article 6(1)(f) of the GDPR or on a relevant legal obligation.
4.5 Statistical Analysis
Optional statistical cookies are used only if prior consent has been given.
The legal basis for the processing of personal data in this context is Article 6(1)(a) of the GDPR.
4.6 Fact-finding missions
If the option to subscribe to a newsletter is offered, informational content is sent in accordance with the required consent and applicable electronic communications legislation.
Consent may be withdrawn at any time.
5. Special Protection of Medical Confidentiality
myRetina recognizes the highly sensitive nature of health-related data and the need for enhanced protection of such data.
Access to such data is restricted to individuals who are duly authorized and are subject to a relevant professional or legal duty of confidentiality.
Health data shall not be disclosed for promotional or advertising purposes unless all legal requirements are met, including those related to the protection of personal data and medical ethics.
6. Recipients of Personal Data
Depending on the purpose of the processing, the following may have access to personal data:
Authorized partners and staff members.
Web hosting and technical support providers.
Email service providers.
Electronic form management providers.
Providers of informational mailings, if used.
Statistical service providers, provided that appropriate consent has been obtained.
Competent public or supervisory authorities, where required by law.
When third parties act as data processors on our behalf, the requirements of Article 28 of the GDPR apply.
7. Data Transfers Outside the European Economic Area
The use of services provided by technology providers may involve the transfer of personal data to, or access to such data from, third countries.
If such transfers take place, they must be based on an appropriate mechanism in accordance with Chapter V of the GDPR, such as an adequacy decision by the European Commission or appropriate contractual and other safeguards.
8. Data Retention Period
Personal data is retained only for as long as necessary for the purpose of processing or as required by applicable law.
Retention periods vary depending on the category:
Contact requests: https://myretina.gr/contact
Appointment requests: https://myretina.gr/contact.
Technical Safety Documents: https://myretina.gr/contact
Statistical analysis data: in accordance with the confirmed regulations of the relevant agency.
Newsletter details: until consent is withdrawn or the purpose is fulfilled, while retaining the strictly necessary evidence where required.
Medical data: in accordance with the specific requirements for maintaining medical records and the information provided to patients.
After the retention period expires, the data is deleted or anonymized, unless there is another legal basis for retention.
9. Rights of Data Subjects
Under the GDPR, and subject to the conditions it sets forth, you have the following rights:
Right of access: to be informed about the personal data that is being processed.
Right to rectification: Request the correction of inaccurate data.
Right to erasure: Request the deletion of data where applicable.
Right to restriction: to request the restriction of processing.
Right to Object: to object to specific processing activities.
Right to portability: to receive data in an appropriate format, where applicable.
Right to Withdraw Consent: to withdraw any consent you have provided at any time, without affecting the lawfulness of the processing that took place prior to the withdrawal.
Rights Regarding Automated Decision-Making: where the relevant conditions are met.
To exercise your rights, you may submit a request to info@myretina.gr.
Requests are reviewed within the statutory time limits, generally within one month, with the possibility of an extension in the cases provided for by the GDPR.
10. Right to File a Complaint
If you believe that the processing of your personal data violates the law, you may file a complaint with the competent supervisory authority.
Personal Data Protection Authority
Website: https://www.dpa.gr/
Email: complaints@dpa.gr
11. Data Security
Appropriate technical and organizational safeguards are implemented, depending on the nature of the processing and the associated risks.
These measures are intended to protect data from unauthorized access, loss, alteration, destruction, or unlawful disclosure.
12. Data on Minors
The processing of data relating to minors is subject to special care and the applicable protection requirements.
Where necessary, communication and the provision of information are carried out through persons who have legal parental custody or representation.
The general contact form is not intended for submitting sensitive medical documents pertaining to minors.
13. Mandatory or Optional Provision of Data
Providing contact information is optional. However, failure to provide the absolutely necessary information may make it impossible to respond to your request.
Consent to statistical or other optional cookies is not required to access the website's basic informational content.
Consent to receive the newsletter is also optional.
14. Cookies and Tracking Technologies
This website uses cookies and similar technologies in accordance with applicable law.
For more information about cookie categories, providers, retention periods, and consent management options, please visit the page Data and Cookies.
15. Policy Changes
This policy is subject to change due to changes in the website's operations, processing procedures, or the applicable regulatory framework.
The date of the last update appears at the top of the page.
16. Contact
For any questions regarding this Privacy Policy or the protection of your personal data:
myRetina
66 Vasilissis Sofias Avenue, Athens
Phone: +30 210 7212200
Email: info@myretina.gr
Website: https://myretina.gr/