Privacy Policy

Dental Clinic Chania
Last updated: 16/10/2026

1. Introduction
Dental Clinic Chania (hereinafter referred to as the “Clinic”) respects the privacy of its website visitors and patients and is committed to protecting their personal data.
This Privacy Policy describes how we collect, use, store and protect the personal data you provide to us through the website https://www.dentalclinicchania.gr/, as well as when you communicate with the Clinic.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, and the applicable Greek and European legislation in force from time to time.

2. Data Controller
The entity legally responsible for operating Dental Clinic Chania is responsible for the processing of personal data.
Contact details:

  • Name: Dental Clinic Chania
  • Address: Papandreou & Mitsotaki (Eleftherias Square 1), Postal Code 73100, Chania, Crete, Greece
  • Telephone: 28210 28824
  • Mobile: 6973 323 231
  • Email: beniouel@gmail.com
  • Website: https://www.dentalclinicchania.gr/

For any matter relating to the protection of your personal data, you may contact the Clinic using the details provided above.

3. What Personal Data We Collect
Depending on how you interact with the website or the Clinic, we may process the following categories of data:

A. Contact details

  • Full name
  • Email address
  • Contact telephone number, where provided
  • Subject and content of the message
  • Information you voluntarily provide to us

B. Information relating to appointments and the provision of dental services

  • Patient identification and contact details
  • Information about scheduling or changing appointments
  • Medical and dental history, where required
  • Information about diagnoses, examinations and treatments
  • Diagnostic images, such as dental X-rays, where applicable
  • Information necessary for invoicing and compliance with legal obligations

C. Technical browsing data

When you visit the website, technical information may be processed, such as:

  • IP address
  • Browser and device type
  • Date and time of access
  • Technical server log files
  • Information relating to the operation and security of the website

Data collection is limited to what is appropriate and necessary for the relevant purposes.

4. Purposes of Personal Data Processing
Personal data is used, as applicable, for:

  1. Managing and responding to requests submitted through the contact form, by email or by telephone.
  2. Scheduling, confirming and managing dental appointments.
  3. Providing dental diagnosis, prevention, care and treatment services.
  4. Maintaining the necessary medical and dental records.
  5. Fulfilling tax, accounting, professional and other legal obligations.
  6. Protecting the security, availability and proper functioning of the website.
  7. Establishing, exercising or defending legal claims, where necessary.

Data is not used for incompatible purposes without the required lawful basis.

5. Legal Basis for Processing
Personal data is processed, depending on the purpose, on the following legal bases:

  • Article 6(1)(a) GDPR: Consent, where required, such as for optional processing activities.
  • Article 6(1)(b) GDPR: Performance of a contract or taking steps before entering into a contract, such as handling a request for services.
  • Article 6(1)(c) GDPR: Compliance with the Clinic’s legal obligations.
  • Article 6(1)(f) GDPR: Legitimate interests, such as the secure operation of the website and the handling of general enquiries, provided that the rights and freedoms of individuals do not override those interests.

The processing of health data is also subject to the specific requirements of Article 9 GDPR, particularly Article 9(2)(h), where processing is necessary for diagnosis and the provision of healthcare, subject to the required safeguards concerning professional confidentiality.
The processing of health data necessary for the provision of dental care does not necessarily rely on the patient’s consent, provided that the applicable legal requirements are met.

6. Protection of Health Data and Medical Confidentiality
The Clinic recognises that health data constitutes a special category of personal data and requires an enhanced level of protection.
Access to such data is restricted to authorised personnel and healthcare professionals who need to process it in the course of their duties.
Processing is carried out in accordance with data protection legislation, medical and professional confidentiality requirements, and the obligations governing the provision of healthcare services.
We recommend that website visitors avoid sending sensitive medical information through the general contact form unless it is necessary.

7. Contact Form
The website provides a contact form through which you can submit questions or requests to the Clinic.
The data you enter is used to receive, assess and respond to your message, as well as for any necessary follow-up communication.
Completion of the required fields is necessary to handle your request. Failure to provide them may make it impossible for us to respond.
Submitting the form does not constitute registration for marketing communications.

8. Cookies and Tracking Technologies
The website may use cookies and similar technologies for technical functionality and security and, where the relevant services have been enabled, to measure website traffic or embed third-party content.
Strictly necessary cookies may be used to provide the service requested by the visitor.
For cookies or technologies that are not strictly necessary and require consent, consent is requested before they are installed or activated.
Where applicable, visitors can accept, reject or modify their preferences through the website’s cookie management mechanism.
Detailed information about the technologies used, their providers and their duration is provided in the relevant Cookie Policy, where applicable.

9. Disclosure of Data to Third Parties
Personal data is not sold to third parties.
Where necessary and where an appropriate legal basis exists, data may be disclosed to:

  • Authorised partners and healthcare professionals involved in providing care.
  • External providers of technical support, website hosting and email services.
  • Accountants and other professional partners, to the extent necessary for the relevant services.
  • Public, tax, judicial or other competent authorities where there is a legal obligation to do so.

Where third parties act as data processors, appropriate contractual and organisational safeguards are applied in accordance with Article 28 GDPR.

10. Transfers of Data Outside the European Economic Area
If technological services are used that involve the transfer of personal data outside the European Economic Area, the Clinic will ensure that such transfers comply with the requirements of Chapter V GDPR.
Where required, appropriate safeguards are applied, such as European Commission adequacy decisions, Standard Contractual Clauses and supplementary measures.
Further information about any specific transfers and the corresponding safeguards is available upon request.

11. Retention Period for Personal Data
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or for as long as required by applicable law.
In particular:

  • General correspondence data is retained for the period necessary to handle the request and for any further retention required by law.
  • Appointment information is retained in accordance with the Clinic’s operational needs and relevant legal obligations.
  • Medical and dental records are retained in accordance with the applicable provisions governing the retention of medical records.
  • Tax and accounting records are retained for the periods required by the relevant legislation.
  • Technical log files are retained for the period necessary to support the security and operation of the website.

Once the applicable retention period has expired, data is securely deleted or anonymised unless there is a lawful reason for further retention.

12. Personal Data Security
The Clinic implements appropriate technical and organisational measures, depending on the nature of the data and the relevant risks, with the aim of protecting it against unauthorised access, loss, alteration, destruction or unlawful disclosure.
Depending on the circumstances, these measures include controlled access, secure management of accounts and records, technical system protection, backups and compliance with confidentiality obligations.
Although every reasonable effort is made to protect data, no electronic system or means of data transmission can be considered entirely free from risk.

13. Your Rights
Under the GDPR, you have the following rights, subject to the applicable legal conditions:

  • Right to information and access: To know whether and which personal data concerning you we process and to request a copy of it.
  • Right to rectification: To request the correction of inaccurate data or completion of incomplete data.
  • Right to erasure: To request the deletion of data where the legal requirements are met.
  • Right to restriction: To request restriction of processing in specific circumstances.
  • Right to data portability: To receive or transfer data where provided for by law.
  • Right to object: To object to processing based on legitimate interests, subject to the applicable conditions.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

The exercise of certain rights, particularly the right to erasure, may be restricted where data must be retained by law or to protect important legitimate interests, such as the lawful retention of medical records.
To exercise your rights, you may submit a request to beniouel@gmail.com.
Requests are handled without undue delay and, as a general rule, within one month of receipt, in accordance with Article 12 GDPR.

14. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable legislation, you have the right to lodge a complaint with the competent supervisory authority.
Hellenic Data Protection Authority (HDPA)
Website: https://www.dpa.gr/
You also have the right to seek recourse before the competent courts, in accordance with applicable law.

15. External Links and Third-Party Services
The website may include links to external websites or third-party services, such as mapping services.
External providers may apply their own privacy policies and process personal data in accordance with their respective terms.
Visitors are advised to review the data protection policies of third-party services before using them.

16. Personal Data of Minors
The Clinic may process personal data of minors in connection with the provision of paediatric dental services.
Such processing is carried out in accordance with the applicable provisions governing healthcare services for minors, parental responsibility, medical confidentiality and personal data protection.
Where required by law, appropriate consent or authorisation is obtained from the minor’s legal representative, while respecting the rights of the minor.

17. Automated Decision-Making
In the ordinary course of providing dental services, the Clinic does not envisage making decisions based solely on automated processing that produce legal effects or similarly significantly affect individuals.
If such processes are introduced in the future, the required information will be provided and the applicable legal safeguards will be observed.

18. Amendments to the Privacy Policy
The Clinic reserves the right to update this Privacy Policy to reflect changes in legislation or changes to the operation of the website and data processing procedures.
The current version will be published on the website, together with the date of the most recent update.

19. Contact
For any questions, requests for clarification or enquiries concerning this Privacy Policy and the protection of your personal data, you may contact us:
Dental Clinic Chania
Papandreou & Mitsotaki (Eleftherias Square 1)
73100 Chania, Crete, Greece
Telephone: 28210 28824
Mobile: 6973 323 231
Email: beniouel@gmail.com
Website: https://www.dentalclinicchania.gr/