Privacy Policy
Last updated: May 2026
Data Controller
Dr. Maria Stamatelatou, Diabetes & Internal Medicine Practice, Sitia, Crete. Contact: via the details listed on the Contact page.
Data we collect
• Data you enter when booking an appointment (name, phone, email, appointment time) through the Cal.com tool. • Technical browsing data (IP address, browser type) used solely for security and error diagnostics. We do not collect medical data through this website. Your medical history is collected and kept exclusively within the practice.
Legal basis
We process your data on the basis of: (a) your consent (appointment booking), (b) contract performance (provision of medical services), and (c) legal obligation (maintenance of medical records under Greek law).
Cookies
We use only strictly necessary technical cookies. We do not use tracking, advertising, or third-party analytics cookies without your explicit consent.
Third-party processors
• Cal.com — appointment-booking tool (GDPR-compliant data processor). • Sanity.io — content management for the website (EU storage). • Vercel — website hosting (CDN with EU nodes).
Your rights
You have the right to access, correct, delete, restrict or port your data, as well as the right to object. To exercise these rights, please contact us. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Retention
Appointment data is retained for as long as required for the practice to operate. The medical record is kept in accordance with applicable law (Greek Law 4624/2019).