Privacy Policy

Controller and contact details

The controller responsible for the processing described in this notice is the company that operates LyroDental Clinic.

• Legal name: LYRO DENTAL SINGLE MEMBER P.C.
• Registered address: Therissou 122, 71304 Heraklion, Greece
• VAT number: 800611046 — Heraklion Tax Office
• Telephone: +30 2811 810 253 and +30 2814 003 158
• Privacy enquiries: lyrodental@gmail.com

Data covered by this notice

Depending on how you use the website or contact the clinic, the following limited categories may be processed:

• Technical request data, such as IP address, browser and device information, requested page, date and time, referral information and security or error logs.
• A theme preference stored locally on your device under the key “lyrodental-theme”. It contains only “light” or “dark”.
• Contact and appointment-enquiry data that you choose to provide by telephone or email, such as your name, contact details, message and preferred appointment information.
• Health information only where you voluntarily include it in a communication or where its processing is necessary to arrange or provide dental care. Health information is special-category data and receives additional protection.

Purposes and legal bases

• To deliver, maintain and secure the website, diagnose faults and prevent misuse: our legitimate interests under Article 6(1)(f) GDPR.
• To respond to an enquiry or take steps requested by you before arranging care: Article 6(1)(b) GDPR; where that basis does not apply, our legitimate interest in handling communications under Article 6(1)(f).
• To meet legal, tax, accounting, professional and regulatory duties: Article 6(1)(c) GDPR.
• To process health information for diagnosis, treatment or management of healthcare under professional secrecy: Article 9(2)(h) GDPR and Article 22 of Greek Law 4624/2019.
• Where we specifically request consent for an optional purpose: Articles 6(1)(a) and, where applicable, 9(2)(a) GDPR. Consent may be withdrawn at any time without affecting earlier lawful processing.

Cookies and local storage

The website does not currently set analytics, advertising or social-media cookies and does not run visitor profiling or session-recording tools. It therefore does not request consent for optional tracking technologies.

If you actively choose light or dark mode, the site stores that presentation choice in your browser’s local storage so it can honour your request on later visits. The value remains until you change it or clear your browser data. If optional tracking is introduced later, it will be blocked until any legally required consent has been obtained.

Recipients and service providers

Access is limited according to role and necessity. Data may be received by authorised clinic staff and treating healthcare professionals; website hosting, email, IT and security providers acting under appropriate terms; accountants, legal or professional advisers; and public authorities where disclosure is legally required. The website itself does not sell personal data or share it for behavioural advertising.

International transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, the clinic requires a lawful transfer mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required. Information about the applicable safeguards can be requested using the contact details above.

Retention

• Technical logs are retained only for the operational, diagnostic and security period applied by the hosting provider, and longer only where required to investigate an incident or comply with law.
• The theme preference stays on your device until you change it or clear local storage.
• Enquiry and appointment communications are kept only as long as needed to respond, arrange care, maintain necessary business records, resolve disputes or meet legal obligations.
• If a communication becomes part of a patient’s clinical or administrative record, it is retained for the period required by healthcare, tax and professional law. A valid legal retention duty may limit a request for erasure.

Your choices and obligations

Providing information by telephone or email is voluntary, but the clinic may be unable to answer or arrange an appointment without the contact details reasonably required for that purpose. No automated decision-making or profiling producing legal or similarly significant effects is used.

Ordinary email is not an emergency or secure clinical channel. Please avoid sending unnecessary medical records, identification documents or detailed health information by email. For urgent symptoms or emergencies, use an appropriate emergency service and do not rely on this website.

Your GDPR rights

Subject to the conditions and limits of the GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may also withdraw consent where consent is the basis. Requests are normally free of charge and answered within one month; identity verification may be required before disclosing health or other confidential information.

Complaints

Please first contact the clinic at lyrodental@gmail.com so the matter can be examined. You also have the right to lodge a complaint with the Hellenic Data Protection Authority, Kifisias 1–3, 11523 Athens, Greece, telephone +30 210 6475600, or with another competent supervisory authority.

Third-party destinations

The site links to Google Maps and Google Reviews, Doctoranytime, Instagram, Facebook, LinkedIn and the site creator’s website. These services are not embedded and receive data from your browser only after you choose to follow their link. Their own privacy notices and terms then apply.

Security and changes to this notice

Reasonable technical and organisational measures are used to protect data, but no internet transmission is completely risk-free. This notice will be updated when the website’s data practices, providers or legal obligations change. The current version and revision date will remain available on this page.