Medical Oncologist
Privacy Policy
Last updated: 16 August 2026
This Privacy Policy describes how the personal data of visitors to and users of www.georgiosevangelou.gr are collected and processed.
Data Controller
The controller of the personal data is:
Georgios Evangelou
Medical Oncologist
Email: contact@georgiosevangelou.gr
Telephone: 6946 102 593
What Data May Be Collected
When you visit or use the website, the following data may be collected:
Identification and contact details, such as your name, email address and telephone number
Information you submit through a contact form or by email
Technical data, such as your IP address, device type, browser, operating system and basic browsing data
Data relating to requests for appointments, a second opinion or a review of your medical record
Health information or medical documents, only if you choose to send them voluntarily
Purposes of Processing
Personal data may be used to:
Respond to contact requests
Arrange appointments or provide initial guidance on the appropriate contact route
Assess a request for a second opinion or medical consultation
Manage and secure the website
Comply with legal obligations
Improve the operation and user experience of the website
Lawful Basis for Processing
The processing of your personal data is based, as applicable, on:
Your consent
The need to take steps at your request before the possible provision of a service
Compliance with a legal obligation
A legitimate interest in the secure and proper operation of the website
When you send health information or medical documents, they are processed only where necessary to consider your request and with appropriate safeguards for confidentiality.
Health Data
Health data are a special category of personal data and are handled with particular care.
If you choose to send information about your health through the website, by email or by another means, it will be used solely to assess your request or for purposes connected with the provision of a medical service, with due regard for medical confidentiality.
In accordance with the principle of data minimisation, you are advised not to send more medical information than is strictly necessary for the initial contact.
Who Data May Be Shared With
Personal data may be shared, only where necessary, with service providers that support the operation of the website and electronic communications, such as hosting, technical support and email service providers.
These providers process personal data only for the purpose of delivering the relevant services and subject to appropriate data protection and confidentiality obligations.
Personal data may also be disclosed to competent public or regulatory authorities where required by applicable law.
Transfers Outside the European Economic Area
Some technical providers used to operate the website may process data outside the European Economic Area. In such cases, appropriate safeguards are put in place in accordance with the General Data Protection Regulation.
Retention Period
Personal data are retained only for as long as necessary for the purpose for which they were collected and, where required, for the period prescribed by law.
By way of indication:
Contact data are retained for a reasonable period so that the request can be managed
Technical data are retained for as long as required for security and the proper operation of the website
Data relating to the provision of services are retained in accordance with the applicable legal or professional obligations
Data Security
Appropriate technical and organisational measures are taken to protect personal data against loss, unauthorised access, alteration or unlawful processing.
However, no transmission of data over the internet can be considered completely secure. You are therefore advised not to send extensive sensitive medical information without prior arrangement.
Your Rights
Under applicable law, you have the right to:
Be informed
Access your data
Rectify inaccurate or incomplete data
Erasure, where permitted
Restrict processing
Data portability
Object to processing, where provided for
Withdraw your consent where processing is based on consent
To exercise your rights, you may contact:
contact@georgiosevangelou.gr
Lodging a Complaint
If you consider that your personal data are not being processed lawfully, you have the right to contact the:
Hellenic Data Protection Authority
Website: https://www.dpa.gr
Cookies
The website may use strictly necessary cookies for its basic operation and, where applicable, additional functionality or analytics cookies.
You can configure your browser to reject certain cookies. Disabling some cookies may affect the functionality of the website.
Where a cookie consent mechanism is used, you can also manage your preferences through the relevant banner.
Links to Third-Party Websites
The website may contain links to other websites. The controller is not responsible for the way in which those websites process personal data. You are advised to read their respective privacy policies.
Protection of Minors
The website is not specifically directed at minors. If it is found that a minor’s personal data have been submitted without the necessary lawful basis, appropriate steps will be taken to delete them.
Changes to This Policy
This Privacy Policy may be amended from time to time to reflect changes in the law, the services or the operation of the website. The current version will be posted on this page with the relevant date of update.