Privacy Policy
Last updated: 19 October 2026
This notice explains how personal data are handled when you visit drvenetis.com or contact the medical practice through the website. It applies to the website only. Information collected during medical care is subject to professional confidentiality and the practice’s separate clinical-record obligations.
Who is responsible for your data?
The data controller for this website is Dr Christos Ath. Venetis, fertility and assisted-reproduction specialist.
- Address: 8 Adrianoupoleos St & 26 Epanomis St, Kalamaria, P.C. 55133, Greece
- Email: info@drvenetis.com
- Telephone: +30 2310 41 41 00
What information may be collected?
- Information you submit: your name, email address, telephone number and message when you use the contact form or contact the practice directly.
- Health-related information: your message may reveal information about fertility, pregnancy, treatment or health. Please include only what is necessary for the initial request and do not upload or paste medical records into the public contact form.
- Technical and security data: IP address, request time, requested page, browser/device information and security events may be recorded in server logs to deliver and protect the website.
- Cookie preferences: CookieYes stores your consent choice and, if consent logging is enabled, a consent identifier and a record of the consent choice.
- Measurement and advertising data (only with your consent): if you accept the “Analytics” or “Advertisement” categories, Google and Meta receive the address and title of the page you visit, the referring page, your IP address, device/browser information and cookie identifiers. Because this is a fertility website, a page address or title may indicate interest in a particular health topic. If you reject, nothing is sent to these providers.
Why and on what legal basis?
- To answer an enquiry, arrange a consultation or take steps you request before receiving a service (GDPR Article 6(1)(b)).
- To operate, troubleshoot and secure the website, prevent abuse and maintain appropriate records (legitimate interests, Article 6(1)(f)).
- To meet legal, regulatory and professional obligations (Article 6(1)(c)).
- For optional cookies or similar technologies, only where you have consented (Article 6(1)(a)); you may withdraw that consent at any time.
Where a communication contains health data, the applicable GDPR Article 9 condition depends on the context. This may include processing necessary for healthcare by a professional subject to confidentiality (Article 9(2)(h)) or explicit consent where that is the appropriate basis. The content of the contact form is never sent to Google or Meta and is not used for advertising audiences. If you have accepted advertising cookies, only the fact that the form was submitted is recorded (as a “conversion”), without your details or message.
Who may receive the data?
Access is limited to the doctor and authorised practice personnel who need the information to respond. Necessary service providers may process limited data on the practice’s instructions, including website hosting and maintenance, email delivery, security and the consent-management service. The site uses CookieYes for consent management and cdnjs for technical website files. Only if you consent, it also uses:
- Google Analytics 4 (Google Ireland Limited), for visitor statistics, under the “Analytics” category.
- Google Ads and Google Tag Manager (Google Ireland Limited), to measure advertising effectiveness (conversions such as a call or a form submission), under the “Advertisement” category.
- Meta Pixel and Meta Conversions API (Meta Platforms Ireland Limited), to measure Facebook/Instagram advertising, under the “Advertisement” category. With the Conversions API, the website’s server sends Meta a copy of the same event your browser records, only after you have accepted.
These data are not used for remarketing or personalised advertising. Meta “Advanced Matching” is switched off: no email addresses or telephone numbers are sent, not even in hashed form.
The contact page provides an external link to Google Maps instead of loading the map automatically. If you choose that link, you leave this site and Google will process data under its own terms. Social-media and other external links work in the same way.
International transfers
Some external service providers may process data outside the European Economic Area. Where a restricted transfer occurs, it must be covered by an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Google and Meta may transfer data to the United States; both are certified under the EU–U.S. Data Privacy Framework and also rely on Standard Contractual Clauses. External services also publish their own privacy information.
How long is information kept?
Website enquiries are kept only for as long as needed to handle the request and, where necessary, to meet legal obligations or establish, exercise or defend legal claims. If an enquiry leads to medical care, relevant information may become part of the clinical record and be retained under the applicable healthcare-record rules. Security logs are retained for the limited period needed to investigate incidents and protect the service. CookieYes normally remembers a consent choice for one year. Optional cookie durations are listed in the Cookie Policy; data received by Google and Meta are retained according to the practice’s account retention settings and the providers’ policies. Data are deleted or anonymised when they are no longer required.
Your rights
Subject to the conditions in data-protection law, you may request access, correction, erasure, restriction or data portability, or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. To make a request, email info@drvenetis.com. We may need to verify your identity before disclosing personal data and normally respond within one month.
You may also complain to the Hellenic Data Protection Authority. The Authority recommends contacting the controller first so the concern can be addressed promptly.
Cookies and changing your choice
Read the Cookie Policy for details. You can reopen the consent panel at any time:
Contact-form safety
The contact form is for consultation requests and practical questions. It is not monitored as an emergency service. Please do not send urgent medical concerns or detailed medical records through the form; call the appropriate emergency service or your treating clinician.
This notice is reviewed when the website’s services or data practices change. Material changes will be shown by updating the date above.