Privacy Policy
Last updated: 26 July 2026
Protecting your personal data matters to us — all the more because our services concern your health. This policy explains what data we collect through nutrievi.gr and in the course of providing our services, why we collect it, how long we keep it and what rights you have, in accordance with the EU General Data Protection Regulation 2016/679 (GDPR), Greek Law 4624/2019 and Law 3471/2006.
1. Data controller
NUTRIEVI — Evi Christodoulou, Dietitian-Nutritionist
Lykovrysi Karambaba, Chalkida, Evia 34100, Greece
Tel.: +30 22210 94488 · Email: info@nutrievi.gr
Tax ID (ΑΦΜ): [TO BE FILLED] · Tax office (ΔΟΥ): [TO BE FILLED]
Professional licence no.: [TO BE FILLED — number and issuing authority]
No Data Protection Officer (DPO) has been appointed, as a sole-practitioner dietetic practice is not subject to that obligation under Article 37 GDPR. For any personal-data matter you can contact us directly using the details above.
2. What data we collect and why
a. Appointment booking (Bookly form)
When you book an appointment through the website we collect: full name, email, phone number, the service you select, date/time and any notes you enter. Because the appointment concerns dietetic care, this information constitutes health data (a special category under Article 9 GDPR).
Legal basis: performance of a contract / pre-contractual steps (Art. 6(1)(b) GDPR) and, for health data, Art. 9(2)(h) GDPR (provision of health care by a professional bound by professional secrecy) in conjunction with Art. 22 of Law 4624/2019; where required, your explicit consent is requested (Art. 9(2)(a)).
Retention: the dietetic file is kept for 10 years from your last visit, by analogy with Art. 14(4) of the Greek Code of Medical Deontology (Law 3418/2005) for private practices. Booking data is stored on our own installation (it is not sent to any third-party booking platform).
b. Contact form
We collect your name, email and message. The submission is sent to our practice by email and is not permanently stored in the website’s database. Please do not include medical information in the contact form — that is discussed at your appointment.
Legal basis: steps at your request prior to entering into a contract (Art. 6(1)(b)) or our legitimate interest in answering enquiries (Art. 6(1)(f)). Retention: up to 12 months after the exchange is concluded, unless a professional relationship follows.
c. Newsletter
If you subscribe to our newsletter we keep your email address in order to send nutrition tips and updates. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time via the unsubscribe link in every message or by emailing info@nutrievi.gr. Retention: until you unsubscribe.
d. Visitor statistics (Google Analytics 4)
With your consent given via the cookie banner, we use Google Analytics 4 for anonymous usage statistics. Without consent, no analytics cookies are set. Details in the Cookie Policy.
Legal basis: consent (Art. 6(1)(a) GDPR and Art. 4(5) of Law 3471/2006).
e. Server logs
The hosting server automatically records technical details (IP address, time, page, browser) for security and proper operation. Legal basis: legitimate interest (Art. 6(1)(f)). Retention: per the hosting provider’s policy, as a rule up to 12 months.
3. Recipients and transfers
Only the dietitian has access to the data. We use the following processors / providers:
- Website and email hosting provider: [TO BE FILLED — name; within the EEA or with appropriate safeguards]
- Google Ireland Ltd (Google Analytics — only with consent; Google Maps — only if you choose to load the map; Google Fonts): data (e.g. your IP address) may be transferred to Google LLC in the USA on the basis of the EU-U.S. Data Privacy Framework and standard contractual clauses.
We do not sell your data or share it with third parties for advertising. Disclosure to public authorities takes place only where the law requires it.
4. Your rights
You have the right of access, rectification, erasure (to the extent it does not conflict with the record-keeping obligation), restriction of processing, data portability, objection, and withdrawal of your consent at any time with effect for the future. We respond within one month of your request to info@nutrievi.gr.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): 1-3 Kifisias Ave., 115 23 Athens, Greece, tel. +30 210 6475600, complaints@dpa.gr, www.dpa.gr.
5. Security and confidentiality
Your connection to the website is encrypted (TLS/HTTPS). The dietetic file is covered by professional secrecy and kept with restricted access. No automated decision-making or profiling takes place.
6. Minors
The website is not directed at minors. Services are provided to minors only with the consent and presence of a parent or guardian.
7. Changes
Any updates to this policy will be posted on this page with a new date. See also the Cookie Policy, the Terms of Use and the Disclaimer.