Privacy Policy

The data controller is DERMAMED LASER Ο.Ε., a laser and skin-care centre.

• Address: 25is Martiou 5, 121 36 Peristeri, Greece
• Phone: +30 210 574 4144
• Email: info@dermamedlaser.gr

• Contact and booking request forms on this website: your name, phone, email, message and preferred treatment or time. We use them to reply to you and arrange appointments.
• WhatsApp Business, Instagram and Facebook messages: your details and the content of your messages. An automated assistant may reply first and pass your request on to our staff. The purpose is to answer your requests.
• Phone calls to the centre's line: calls may be answered by an automated voice assistant. The purpose is, again, to answer your requests.
• Analytics and advertising cookies:we use Google Analytics 4, Meta Pixel and Google Ads to measure visits to the website and the performance of our ads. These cookies are only activated if you choose "Accept" in the cookie notice. If you choose "Essential only", they are not loaded.
• Client appointment and treatment records: we keep records of your appointments and the services you receive in our booking system, to provide our services and meet our legal and tax obligations.
• CCTV: cameras operate in common areas of the centre for the security of people and property. Recordings are kept for up to 15 days.

• Consent (e.g. analytics and advertising cookies).
• Steps prior to entering a contract and performance of a contract (answering requests, appointments, providing services).
• Legal obligation (tax and accounting records).
• Legitimate interest (security of the premises, CCTV).

Your data may be processed on our behalf by, or shared with:

• hosting and IT service providers,
• Meta (WhatsApp, Instagram, Facebook),
• Google,
• our accountant and our e-invoicing provider, for issuing tax documents,
• our payment provider (Viva) for card or IRIS payments.

Some providers (Meta, Google) may transfer data outside the European Union. Such transfers take place under the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

• Enquiries and communications: up to 24 months, unless you become a client.
• Client records and tax records: for as long as the law requires.
• CCTV recordings: up to 15 days.
• Website analytics data: according to each provider's settings.

You have the right to:

• access your data,
• rectification,
• erasure,
• restriction of processing,
• data portability,
• object to processing,
• withdraw your consent at any time.

To exercise your rights, email us at info@dermamedlaser.gr. We will reply within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

To request deletion of your data, you can:

• email info@dermamedlaser.gr with the subject "Διαγραφή δεδομένων" (Data deletion), stating your name and the phone number or account you used to contact us, or
• send us a message on WhatsApp or Instagram asking for deletion.

We will delete your data and confirm within one month. Data we are required by law to keep (e.g. tax documents) will be kept only for as long as required.

Our services are not directed to persons under 16 without the consent of a parent or guardian.

We may update this policy. The date of the latest update is shown at the top of this page.