Data controller

Breast & Osteoporosis Diagnostic Center — Dr. Spyros Lazarou, Vas. Sofias 48, 115 28 Athens, Greece. Phone +30 210 72 91 307, email info@digitalmamo.gr.

What we collect

  • Contact form: full name, phone, email and, optionally, a subject and message. Please do not include sensitive medical details in the message — we will discuss those by phone or at your appointment.
  • Technical data: your IP address is used briefly to protect the form from abuse (a sending limit) and is recorded by our hosting provider in its security logs.
  • Visitor statistics: anonymous and aggregated (pages, country, device type), with no cookies and no way to identify a visitor.

Why, and on what legal basis

  • Answering your request and scheduling appointments — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). The form is not meant for health information; if you send us any anyway, we use it only to answer you and delete it together with the message.
  • Protecting the form from spam and abuse — legitimate interest (Art. 6(1)(f)).
  • The interactive map on the contact page — only with your consent (GDPR Art. 6(1)(a) and Art. 4(5) of Greek Law 3471/2006).
  • Anonymous statistics to improve the site — legitimate interest.

Who receives the data

We do not sell your data or make it available for advertising. Only the providers needed to run the site process it on our behalf:

  • Vercel Inc. — website hosting and anonymous statistics.
  • Resend (Plus Five Five, Inc.) — delivering the contact form message to info@digitalmamo.gr.
  • The Center’s email provider, where messages are stored.
  • Mapbox, Inc. — only if you accept the interactive map.

Transfers outside the European Economic Area

Vercel, Resend and Mapbox are based in the United States. Where data is transferred outside the EEA, this relies on the safeguards of the GDPR: the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

We keep contact form messages for as long as it takes to handle your request and then delete them, unless an examination at the Center follows, in which case the rules for medical records apply. The hosting provider’s security logs are deleted automatically after a short period.

Cookies and local storage

The site uses no advertising or tracking cookies. Only the following is stored on your device:

  • Your choice in the cookie notice (strictly necessary, no consent required).
  • Mapbox data needed for the map to work — only if you accept it.

Changing your choice

You can change or withdraw your consent at any time from the “Cookie settings” link at the bottom of every page. Withdrawing consent does not affect anything done before.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw any consent you have given. To exercise them, write to info@digitalmamo.gr — we reply within one month.

If you believe the processing breaches the law, you can lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr).

Security

The site is served only over an encrypted connection (HTTPS), and access to messages is limited to the Center staff who need it.

Changes

If the way we process data changes, we will update this page and the date at its top.