Privacy Policy

1. Data Controller

IASIS Physiotherapy & Clinical Pilates
Geroulanou 6, Argostoli, 28100, Kefalonia, Greece
Phone: +30 2671 026063

2. What Data We Collect

We may collect the following personal data when you use our contact form or communicate with us directly:

• Full name
• Phone number
• Email address
• Reason for visit and any details you choose to share about your health or condition
• Preferred appointment date

3. Why We Collect Your Data

Your personal data is collected solely for the following purposes:

• To respond to your appointment request or enquiry
• To plan and manage your physiotherapy or Clinical Pilates sessions
• To maintain clinical records as required by applicable health regulations

We do not use your data for marketing purposes without your explicit consent.

4. Legal Basis for Processing

Processing of your personal data is based on your consent (Article 6(1)(a) GDPR) when you submit the contact form, and on the performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR) when you book an appointment. Health-related data is processed on the basis of Article 9(2)(h) GDPR (health care purposes).

5. Data Retention

Clinical records are retained for the minimum period required by Greek health legislation. Enquiry data submitted via the contact form is retained only for as long as necessary to respond to your request.

6. Sharing of Data

We do not sell, rent, or share your personal data with third parties, except where strictly necessary for the delivery of our services or where required by law. Our contact form is processed by a secure third-party service solely to deliver your message to us.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Withdraw consent at any time without affecting the lawfulness of prior processing
• Lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr

To exercise any of these rights, please contact us directly by phone or in person at the clinic.

8. Cookies

This website does not use tracking cookies or third-party analytics tools. A security verification service (Cloudflare Turnstile) is used on the contact form to prevent automated abuse. This service may set a functional cookie strictly necessary for form operation.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be reflected on this page. Last updated: April 2026.