1. INTRODUCTION – WHO WE ARE AND WHY WE ARE PROVIDING THIS NOTICE

Dentist GEORGIOS GIKAS, son of IOANNIS, member of the Evros Dental Association with registration number 108255, based in Alexandroupoli, at 9 I. Kavyri Street, Alexandroupoli, with telephone number (0030) 25510 29719, mobile number (0030) 694 5877997, and email info@gikasdentalcare.gr, provides dental services addressed to the public and specialized seminars intended exclusively for professionals (hereinafter, the “Business” or “We”). The Business maintains the website https://dmicro.gr/ (the “Website”).

For information or to exercise your rights, please contact us at:
Email: info@gikasdentalcare.gr

We handle all matters regarding the protection of your personal data with responsibility.

For this reason, we have prepared this policy, in which you can find information about how we process your personal data.


1. GENERAL – DATA CONTROLLER

The Business is the “Data Controller of your personal data” within the context of your browsing of the Website, your communication with us, and the submission of a statement of participation in specialized seminars addressed to professionals.

Within the framework of the Business’s operation, and in order for the Business to comply with its legal obligations, certain information about visitors and customers is collected, which may lead to their direct or indirect identification.

Under the applicable legal framework, some of this information constitutes personal data.

You, as visitors, are the “data subjects,” and we, as the Business, are the “data controller” of your data.

Through this policy, our goal is to provide you with information in simple and understandable language about the data we process, the purposes and legal basis of the processing, the recipients, your rights, and how you can exercise them.
If you have any questions regarding the handling of your data or the exercise of your rights, please contact us using the contact details provided above.


2. OUR BASIC PRINCIPLES FOR THE PROCESSING OF YOUR DATA

The Business processes your data in a lawful and transparent manner, in accordance with the applicable legal framework, namely the General Data Protection Regulation (GDPR) [Regulation (EU) 2016/679], Law 4624/2019, Law 3471/2006, and the relevant regulatory framework.

In simple terms, this means:

  • We process your data only for purposes that are explicit, lawful, and defined from the outset, and do not subject it to further processing in a way incompatible with these purposes (purpose limitation).
  • We process only the data that is appropriate, relevant, and necessary for the purposes we set for its processing (data minimization).
  • We make every effort to keep your data accurate, providing you, where appropriate, with the option to correct/delete it (accuracy).
  • We keep your data in a form that permits your identification only for as long as is necessary for the purposes for which it is being processed (storage limitation).
  • We make every effort to safeguard the security of your data, protecting it—among other means—against unauthorized or unlawful processing and accidental loss, destruction, or damage (integrity and confidentiality).

As part of protecting your data, the Business implements a range of appropriate technical and organizational measures, adopts internal security policies, trains its staff (who are bound by confidentiality and privacy obligations), and uses technologies that ensure the security of your data (e.g., SSL certificates, encryption, certified hosting providers). In strict adherence to the principles of information security and data protection, we regularly monitor our security measures and, if necessary, adjust them to align with new best practices.


3. WHAT DATA WE PROCESS AND UNDER WHAT TERMS

As a general principle, the Business processes your data only when you actively provide it (e.g., by placing an order or sending us an email). However, this is not possible for certain data collected via cookies and for certain data automatically collected during your visit.

A. INFORMATION COLLECTED AUTOMATICALLY

Due to the nature and operation of the internet, as soon as you visit the Website, our server records your IP address (which is considered personal data, even if we cannot identify you solely based on this information) along with additional information such as the date and time of your visit and the webpage from which you accessed our Website. The legal basis for collecting and storing data in special files (log files) is our legitimate interest in ensuring the security of networks, information, and services from accidental events or unlawful or malicious actions (e.g., denial-of-service attacks), as well as effectively dealing with possible technical issues. This processing is in accordance with the relevant legal framework, as it does not present significant risks to your rights and freedoms, and it is permitted under the GDPR and national legislation to be based on our legitimate interest.

B. INFORMATION YOU PROVIDE TO US

We process personal data you provide to us in the following cases:


I. COMMUNICATION WITH THE BUSINESS VIA TELEPHONE OR EMAIL
DATA PROCESSEDPURPOSELEGAL BASIS
a. Email addressb. Full namec. Telephone number (optional)Important Note: In your message to the Business, please include only the information necessary for the issue that concerns you and avoid referring to personal data belonging to you or third parties.We process this data as part of serving you, enabling us to respond to your message or contact you. Simply sending an email or completing a form does not make you a “customer” of the Business, nor do we include you in our customer database. If you do not ultimately assign us to assist you with your concern, we do not keep a record of your personal data.We process the data you provide to us in pursuit of our legitimate interests (Article 6(1)(f) GDPR), specifically to address your requests and maintain/improve communication between the Business and its potential or existing customers. If you send us data about your health, we process it based on your explicit consent (Article 9(1) GDPR).

II. PLACING AN ORDER AND BOOKING SPECIALIZED MEDICAL SEMINARS (PRODUCTS)
DATA PROCESSEDPURPOSELEGAL BASIS
a. Full nameb. Email addressc. Mobile/landline phone numberd. Postal addresse. Tax ID (AFM) and Tax Authority (DOY)f. ProfessionWe process this data in order to fulfill our contractual obligations (e.g., delivering products) and issue any necessary legal documents for our transactions. These details are also necessary to safeguard our rights and financial claims, as well as for establishing, exercising, or defending legal claims.We process the information you provide so that we can fulfill our contractual obligations or take steps prior to entering into a contract (Article 6(1)(b) GDPR). We are also obligated by relevant legislation to maintain records and issue the required documents for our transactions (legal obligation – Article 6(1)(c) GDPR).

Important Note:
The accuracy of the information submitted in all cases is the responsibility of those providing it. Please see the section on your rights in this policy for details on how to correct your data.


4. WHO HAS ACCESS TO YOUR DATA

Primarily, your data is accessible by the authorized personnel of the Business, who process it under strict confidentiality and only to the extent and within the context of the lawful purposes explained above. In order to provide its services, the Business may share some of your data with partner companies.

These companies (processors) process your data only for the purposes mentioned above and solely on behalf and under the instructions of the Business, except in cases of any legal obligations they may have independently.
When transmitting your data, all necessary technical and organizational measures are taken to ensure the highest possible level of security.

These companies are selected, among other criteria, based on their ability to securely process your data. They are bound by a contract with the Business to provide the necessary guarantees for the protection of Personal Data and to take appropriate technical and organizational measures to ensure lawful processing and the protection of your data and rights.
Such companies provide us with:
(a) web hosting services,
(b) services related to our online presence, such as online payment solutions and commercial promotion.


6. WHERE AND FOR HOW LONG WE STORE YOUR DATA

Your data is stored in the Business’s information system, which is hosted at a data center located within the European Economic Area. In any case, the appropriate organizational and technical measures are always in place to prevent any data breach. Data is stored only for as long as is necessary for each specific processing purpose. For example, if you have purchased products from us, we are required to keep the relevant transaction records for five (5) years.


7. WHAT ARE YOUR RIGHTS REGARDING YOUR DATA AND HOW TO EXERCISE THEM

Under the relevant legal framework (see in particular Articles 12-22 of the GDPR), you have several rights concerning the processing of your data by the Business.

Specifically, you have the right to:

  1. Submit a request to find out if we process your data and, if so, which data (right of access).
  2. Request its correction or supplementation if it is incomplete (right to rectification).
  3. Request, under certain conditions, its deletion (right to erasure).
  4. Request, under certain conditions, the restriction of its processing (right to restriction of processing).
  5. Object, under certain conditions, to its processing by us (right to object), especially with regard to processing for marketing purposes (e.g., newsletters).
  6. Request the data you have provided to us in a structured, commonly used, and machine-readable format (right to data portability), provided this is deemed technically feasible.
  7. In the event of a data breach that may pose a high risk to your rights and freedoms—and if it does not fall under any of the exceptions provided by the GDPR or applicable national legislation—the Business is obligated to inform you of the breach without undue delay.

Compliance with the legal framework for data processing, including enabling you to exercise your rights, is a priority for us. For this reason, we reserve the right to request additional information necessary to confirm your identity before you exercise your rights.

As a rule, the Business must respond to your request promptly and no later than one (1) month after receiving it. If necessary—taking into account the complexity of the request and the number of requests—the response period may be extended by an additional two (2) months. In any case, the Business will inform you as soon as possible and, in any event, within one (1) month of receiving your request about its progress and the reason for any potential delay.
If you have an account on our online store or platform (if applicable), you can manage your personal information via your account settings. For instance, you can correct your data, add addresses, request a copy of your data, anonymize your data, and request account deletion.

If your requests are manifestly unfounded or excessive or submitted in a manner that is clearly abusive—particularly due to their repetitive nature—the Business may charge a reasonable fee, taking into account the administrative costs of providing the information or taking the requested action, or refuse to act on your request. If you believe the Business has not complied with data protection laws, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr, Kifisias 1-3, 115 23 Athens, Greece).


8. MINORS

The Business’s services are intended exclusively for individuals over 18 years of age. In the event data is submitted to the Business, it is presumed the visitor is over 18 or, if under 18, has obtained the necessary consent from the holder(s) of parental responsibility and will provide their details if requested by the Business. Since it is not technically feasible to effectively verify the age of the Website’s visitors, we commit to deleting any related information if we become aware of the submission of personal data pertaining to minors. Such deletion is subject to retaining data if needed to establish, exercise, or defend our legal claims or to fulfill a legal obligation.


9. CHANGES TO THE POLICY AND NOTIFICATION

This policy may be modified at any time without prior notice.

Guided by the principle of transparency, we commit to informing you of any significant changes to our policy. In any case, however, you should check our policy periodically, as continued use of our services implies your acceptance of its terms.