1. Data Automatically Collected Through Our Website

The website www.idl.gr uses the SSL (Secure Sockets Layer) protocol, which applies encryption methods to the data exchanged between two devices (typically personal computers), establishing a secure connection via the internet and ensuring the protection of your personal data.

When you visit our website, our server automatically collects so-called server log files, including:

• Date and time of access to the website.

• Volume of data transmitted (in bytes).

• Browser type and operating system used to access the website.

• Internet Protocol (IP) address. When you access our website, the IP address is personal data combined with the date and time of your visit, even if we cannot identify you solely through this information.

The legal basis for collecting and storing your IP address in special log files is our legitimate interest, in order to ensure network, information, and service security against accidental events or unlawful or malicious actions that could compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted data (e.g. prevention of denial-of-service attacks), as well as our legal obligation to provide an appropriate level of security for the processing of personal data (GDPR Article 6(1)(f) and (c)).

The data will not be transferred or used in any other way. However, we reserve the right to review server log files if specific indications of unauthorized use arise.

2. Patient / Customer Data

When you visit us, we collect personal data such as full name, patronymic, email address, postal address, and contact details, as well as medical data contained in Orthopedic Device Order Forms that we execute for you.

The purpose of processing your personal data is the provision of the requested medical and orthopedic services.

The legal basis for processing is the performance of a contract between us (GDPR Article 6(1)(b)) and the processing of special categories of data for medical purposes (GDPR Article 9(2)(h)).

Personal data is retained for the required period in order to enable us to provide long-term support (e.g. follow-up of orthopedic devices, progress monitoring, etc.).    3. Δεδομένα που συλλέγουμε μέσω ηλεκτρονικού ταχυδρομείου και φόρμας επικοινωνίας

3. Communication via Email and Contact Forms

In the context of communication between us via email and the contact form on our website, we collect your name, email address, and any other information you voluntarily provide to us.

This data is stored and used exclusively in order to respond to your request.

The legal basis for processing your personal data is your consent (GDPR Article 6(1)(a)).

Your data will be deleted after the final completion of our communication, once the purpose and scope of the communication have been fulfilled, provided that there are no existing legal obligations requiring the retention of such data.

4. Supplier Data

For the performance of our contractual obligations, we collect supplier data such as:

• Full name

• Address

• Contact details

• Shipping details

• Financial data voluntarily provided to us

The legal basis for processing supplier data is the performance of a contract and compliance with legal obligations (GDPR Article 6(1)(b) and (c)).

Supplier data is retained for a period of up to twelve (12) years following the last provision of services, or for as long as required by tax and other applicable legislation.

5. Facebook Page

Our company maintains a page on the social media platform Facebook.

You may contact us via our Facebook page in order to receive further information about our services by using the messaging option. In order to respond to your inquiries, we collect and process:

• Your Facebook username

• Any information you choose to share publicly through your Facebook profile

Sending a message via our Facebook page constitutes your consent to the processing of your personal data.

If you choose to connect with our page (by clicking “Follow” or “Like”), you consent to receiving news and promotional updates via your Facebook newsfeed. If you do not wish to receive such updates, you may opt out at any time by selecting “Unfollow” or “Unlike”.

We take all appropriate technical and organizational security measures to protect personal data processed via Facebook, including restricting access to individuals authorized to manage our social media accounts.

Please note that we have no control over the way personal data is processed by social media platforms. You may find additional information about how Facebook processes personal data at the following link:
Facebook Privacy Policy