Evomedica respects your privacy. This policy explains which personal data we process when you visit evomedica.com or contact us through it, why, how long we keep it and what your rights are, under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek law (Law 4624/2019).
Data controller
The data controller is Γ. Στεφανόπουλος & ΣΙΑ Ε.Ε. (G. Stefanopoulos & Co., a Greek limited partnership, trading as “Evomedica”), tax ID (ΑΦΜ) 999239039, General Commercial Registry (G.E.MI.) no. 069140703000.
- Registered office (Athens): Ikarias 9, 121 32 Peristeri, Greece, tel. +30 210 26 25 260
- Thessaloniki: 26is Oktovriou 28, Thessaloniki, tel. +30 231 601 6222
- Email: info@evomedica.com
For any question about your personal data, please contact us using the details above. If you contact us directly by email or phone, we process the details you give us in the same way and for the same purpose as form messages.
What data we process and why
Contact form
When you send us a message through the form, we process:
- your full name, email address, phone number (optional), the subject and your message;
- the page you sent it from (for example the system you are interested in), the page language and the time it was sent;
- a pseudonymised fingerprint of your IP address (not the address itself), to limit the number of submissions and protect the form from abuse.
Purpose: to reply to your enquiry (demo, consultation meeting or general question). Your name, email and message are needed to reply; without them we cannot handle the enquiry. Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering enquiries and protecting the website (Article 6(1)(f) GDPR).
The message is stored in a file on our server, outside the public part of the website, and sent by email to info@evomedica.com.
The form is meant for business enquiries. Please do not include information about your health or anyone else’s (for example patients) in your message. If you do, we will use it only to reply to you and delete it together with the message.
Protecting the form from automated programs (Cloudflare Turnstile)
To protect the form from spam, we use Cloudflare, Inc.’s Turnstile service. It loads on the page with the form and receives your IP address and technical information about your browser and device, to tell people apart from automated programs. It sets no cookies; it stores one technical item in your browser, under Cloudflare’s own domain (challenges.cloudflare.com). When you submit the form, our server sends Cloudflare only the verification token and your IP address — not your name, email, phone number or message.
Legal basis: our legitimate interest in the security of the website (Article 6(1)(f) GDPR). More in Cloudflare’s Turnstile Privacy Addendum (opens in a new tab).
Visitor statistics
To improve the website we may record visitor statistics with Matomo, software that runs on our own servers; the data is not shared with third parties. No cookies or other storage on your device are used. IP addresses are shortened before they are stored, so they cannot be linked to you. We record the pages you visit, the page or advertising campaign that brought you here, your device and browser type, and your country. Detailed data is deleted after 13 months; only aggregated statistics are kept.
Legal basis: our legitimate interest in understanding how the website is used (Article 6(1)(f) GDPR).
Server logs
Like every website, our server automatically records technical details of each request: IP address, date and time, the page or file requested, browser type and referring page. These are used only for the security and proper operation of the website and are kept for a limited period.
Legal basis: our legitimate interest in the security and operation of the website (Article 6(1)(f) GDPR).
Find a Provider directory
The Find a Provider page publishes details of professionals who use the technologies we supply: name, speciality, address and map position, phone, email, website and technologies. They are published only with the professional’s written consent, which can be withdrawn at any time by email to info@evomedica.com; the entry is then removed.
Legal basis: consent (Article 6(1)(a) GDPR).
Map
When the provider directory shows a map, your browser loads the map images from OpenStreetMap France (France), which receives your IP address and the map area you are viewing. The map uses no cookies. The “Directions” link opens Google or Apple Maps in a new tab only if you click it; their own terms apply from there.
How long we keep data
- Form messages on our server: deleted automatically after 90 days.
- Messages in our mailbox: for as long as needed to handle your enquiry and any resulting business relationship, or as required by law.
- Form submission limit: 1 hour.
- Visitor statistics: detailed data for 13 months, then aggregated statistics only.
- Server logs: for a limited period, for security purposes.
- Provider directory: until the entry is removed or consent is withdrawn.
Who has access to the data
We do not sell your data or give it to third parties for their own purposes. Only Evomedica staff who handle enquiries have access, together with the providers who support us technically, as far as necessary:
- ScalaHosting: hosting of the website, the form and email, on servers in the European Union (Sofia, Bulgaria).
- Cloudflare, Inc.: form protection (Turnstile).
- OpenStreetMap France: map images in the provider directory.
Cloudflare may process data outside the European Economic Area, including in the United States. In those cases the transfer relies on appropriate safeguards under the GDPR, such as the EU–U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.
We may also disclose data to public authorities where the law requires it.
Cookies
This website uses no cookies. More in our Cookie policy.
Security
We take appropriate technical and organisational measures to protect your data: an encrypted connection (HTTPS), messages stored outside the public part of the server, pseudonymised IP addresses, access limited to authorised people, and automatic deletion.
Your rights
Under the GDPR you have the right to:
- be informed and obtain a copy of your data (access);
- have inaccurate data corrected;
- have your data erased;
- have processing restricted;
- receive your data in a structured, commonly used format (portability);
- object to processing based on our legitimate interest;
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise your rights, email info@evomedica.com. We will reply within one month; for complex requests this may be extended by two further months, and we will tell you if so. We may ask for information to confirm your identity. Exercising your rights is free of charge.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1–3, 115 23 Athens, Greece, www.dpa.gr (opens in a new tab)).
Automated decisions
We do not make decisions based solely on automated processing, including profiling, that produce legal effects for you.
Changes to this policy
We may update this policy, for example when the website or the law changes. The date of the last update is shown at the top of the page.