Privacy Policy

Last updated: 1 September 2026

Dr Dimitrios Grigoriou respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Cyprus data protection legislation.

1. Who We Are

The data controller responsible for this website is:

Δρ Δημήτριος Γρηγορίου
Mother and Child Medical Centre
9–11 Penelopis Delta Street
Nicosia 1076, Cyprus

Email: dgrigoriou.gyn@gmail.com
Telephone: +357 22 376630
Website: https://drgrigoriou.com/

2. Personal Data We Collect

We may collect the following information when you use this website or contact us:

• Your first and last name.

• Email address and telephone number.

• Information included in an appointment request or message.

• Appointment-related correspondence.

• Technical information such as your IP address, browser type, device information and website usage data.

• Cookie preferences and analytics information, where you have provided consent.

Please avoid including detailed or unnecessary medical information in the website contact form. Medical emergencies should not be reported through the website.

3. Health Information

Information concerning health is considered special-category personal data under the GDPR.

Where health information is necessary to respond to your request or provide healthcare services, it may be processed for medical diagnosis, treatment or healthcare management under Article 9(2)(h) GDPR and subject to professional confidentiality. Where required, processing may instead be based on your explicit consent under Article 9(2)(a).

Medical records created during treatment may be subject to a separate patient privacy notice and applicable medical-record retention requirements.

4. How We Use Your Information

We may use your personal data to:

• Respond to enquiries and appointment requests.

• Arrange, manage or confirm appointments.

• Communicate with you regarding healthcare services.

• Maintain the security and proper operation of the website.

• Meet professional, medical, legal and regulatory obligations.

• Establish, exercise or defend legal claims.

• Analyse website performance where you have consented to analytics cookies.

We do not sell or rent your personal information.

5. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following grounds:

• Taking steps at your request before providing healthcare services.

• Providing healthcare and managing appointments.

• Compliance with legal and professional obligations.

• Our legitimate interests in communicating with patients, operating the website and protecting our services.

• Your consent for non-essential cookies, analytics or other optional processing.

• Establishing, exercising or defending legal claims.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

6. Sharing Your Information

Personal data may be shared only where necessary with:

• Authorised clinical or administrative personnel.

• Healthcare professionals and medical facilities involved in your care.

• Website hosting, email, form-management, IT and security providers.

• Professional advisers, insurers or public authorities where legally required.

• Regulators, courts or law-enforcement authorities where disclosure is required by law.

All service providers are expected to protect personal data and process it only for authorised purposes.

7. International Transfers

Some technology or email providers may process information outside the European Economic Area. Where this occurs, appropriate safeguards will be used, such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism recognised under the GDPR.

8. Data Retention

Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected.

General website enquiries that do not lead to an appointment will normally be retained for no longer than 12 months. Appointment, clinical, financial and legal records may be retained for longer where required by medical, tax, insurance or other applicable legal obligations.

Information will then be securely deleted or anonymised where appropriate.

9. Cookies

This website may use essential cookies required for security and basic functionality.

Analytics, advertising or other non-essential cookies will only be placed after you provide consent through the website’s cookie banner. You can reject non-essential cookies or change your preferences at any time.

Further details should be provided in the website’s Cookie Policy.

10. Your GDPR Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete information.

• Request deletion of your personal data.

• Restrict how your personal data is processed.

• Object to processing based on legitimate interests.

• Receive certain information in a portable format.

• Withdraw consent at any time.

• Lodge a complaint with a data protection authority.

To exercise your rights, contact dgrigoriou.gyn@gmail.com. We may request information to verify your identity before processing your request.

You may also lodge a complaint with the:

Office of the Commissioner for Personal Data Protection of Cyprus
Website: https://www.dataprotection.gov.cy/
Email: commissioner@dataprotection.gov.cy
Telephone: +357 22 818456

11. Data Security

Reasonable technical and organisational safeguards are used to protect personal data against unauthorised access, loss, alteration or disclosure. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Children’s Data

This website is not intended to collect personal data directly from children. Information concerning a minor should be submitted only by a parent, legal guardian or another person with lawful authority to do so.

13. Automated Decision-Making

The website does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

14. External Links

The website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. Users should review the privacy policies of external services before providing personal information.

15. Changes to This Policy

This Privacy Policy may be updated when the website, services or legal requirements change. The latest version will always be published on this page with its revision date.

16. Contact Us

For questions concerning this Privacy Policy or the processing of your personal data, please contact:

Δρ Δημήτριος Γρηγορίου
Email: dgrigoriou.gyn@gmail.com
Telephone: +357 22 376630