Privacy Policy

Data controller

The data controller is Dr. Aspasia (Sissy) Aligizaki. For any matter concerning your personal data you may write to sisialigizaki@gmail.com.

What data we collect

The website does not use web analytics tools, advertising networks or tracking cookies. We do not build user profiles and we do not carry out automated decision-making.

The only personal data collected is what you voluntarily submit through the contact form: your name, email address, subject and the content of your message.

The hosting provider may keep technical log files containing the IP address and browser type, for the security and stability of the service. We do not use these logs for analytics or to identify visitors.

Purpose and legal basis

Form data is used solely to reply to your message. The legal basis is your consent (Article 6(1)(a) GDPR), given by ticking the consent box before sending. The hosting provider’s technical logs rest on the legitimate interest of keeping the website secure (Article 6(1)(f) GDPR).

Recipients and processors

The contact form is delivered through the FormSubmit service (formsubmit.co), which forwards the message to the controller’s email address and acts as a processor. The message is then delivered to the email provider (Google — Gmail). Your data is never sold and never passed to third parties for advertising purposes.

Some of the above providers may process data outside the European Economic Area. Where that is the case, the transfer is covered by the European Commission’s Standard Contractual Clauses or by an adequacy decision.

Retention period

Messages are kept for as long as needed to respond to your request and to document the related correspondence, as a rule up to twenty-four (24) months, unless you ask for earlier deletion.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise your rights, write to sisialigizaki@gmail.com.

If you believe the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or with the supervisory authority of your country of residence.

Security

The website is served exclusively over an encrypted HTTPS connection. Reasonable technical and organisational measures are in place to protect data against loss, misuse or unauthorised access.