Who is responsible
The data controller for this website and contact enquiries is Filippos-Georgios Ramfos, Specialist in Internal Medicine, 7 Evripidou Street, Glyfada, Greece. For privacy enquiries, email info@dr-ramfos.gr or call +30 698 740 0702 or +30 210 894 6488.
Messages and appointment enquiries
Contact form details are sent to the practice by email to respond to your enquiry and arrange a visit. The lawful bases are taking steps at your request before providing a service and, for general correspondence and security, the practice's legitimate interests in communicating and preventing misuse.
Your name, email address and message are required to submit the form; your telephone number is optional. Without the required details the form cannot be sent, but you can contact the practice by telephone. Do not include medical records, test results or sensitive health information. The website does not maintain a patient record or message database; correspondence remains in the practice's email system.
Technical data and service providers
The website is supported by website hosting and email service providers. Necessary connection data, such as IP address and technical browser information, and correspondence data are processed by the practice, authorised personnel and providers supporting these services, to the extent needed for operation, security and message delivery.
Cloudflare Turnstile checks form submissions for automated abuse. It loads after you select Send with valid form fields and processes technical connection and device data. The website does not send the form's message or contact details to the verification service.
Providers may process data outside the European Economic Area, including in the United States. Such transfers are subject to GDPR requirements for adequate protection and appropriate safeguards, such as adequacy decisions or standard contractual clauses, as applicable. You can ask the practice for information about the recipients and safeguards relevant to your data.
The website does not use advertising trackers, analytics cookies or automated decisions producing legal or similarly significant effects. Functional preferences and public files for offline access are stored on your device, but submitted messages are not. You can remove local website data through your browser settings.
Google Maps and external links
Google Maps is optional and loads only after you give consent in Cookie preferences. When loaded, Google receives connection data such as your IP address and may use cookies or similar technologies under its own policy. Your choice is stored for 180 days and can be withdrawn at any time using Cookie preferences in the footer and selecting Necessary only. Withdrawal does not affect earlier lawful processing. Following an external link, such as directions, opens the respective provider's service.
Google Privacy PolicyHow long information is kept
Correspondence is kept for as long as needed to respond, arrange a visit and meet any legal obligations or lawful claims, based on the nature of the enquiry and the need to retain it. Temporary abuse-prevention counters, which include a hashed email identifier, expire within ten minutes; the identifier remains personal data. Providers' technical logs follow their respective retention periods. You may ask the practice about retention of your correspondence. Any separate medical records are subject to the relevant medical recordkeeping obligations.
Your choices and rights
Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. Send your request to info@dr-ramfos.gr; proportionate identity verification may be needed. A response is normally provided within one month, with any lawful extension and its reasons communicated to you.
You may also lodge a complaint with the Hellenic Data Protection Authority at dpa.gr. The Authority explains the applicable complaint procedure on its website, including when you should first exercise your rights with the controller.
Hellenic Data Protection Authority