SERVICES
The 4th Oncology Clinic of Metropolitan Hospital (Oncocare Group) respects your privacy. This policy explains which personal data the website oncocare.bluedata.gr collects, for what purpose and for how long, and what your rights are under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
Data controller
The data controller is the 4th Oncology Clinic, Metropolitan Hospital, 9 Ethnarchou Makariou and 1 El. Venizelou Street, 185 47 Neo Faliro, Greece. For any matter concerning your personal data you can contact us on 210 48 09 150 or at oncology.clinic4@gmail.com.
What data we collect and why
The website is informational. It has no user accounts, comments, registration forms or newsletter, and it uses no analytics tools or advertising cookies. We process personal data only in the following cases.
| Case | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Contacting us | Name, telephone number, email address and the content of your message or call, when you contact us through the numbers or the email address shown on the website. | Answering your request and arranging an appointment. Article 6(1)(b) GDPR (steps prior to entering into a contract) and, where you disclose health data to us, Article 9(2)(h) (provision of health care). | For as long as the communication and the care relationship last. Data recorded in the medical file are kept in accordance with the legislation on medical records. |
| Visiting the website | Technical data recorded automatically by the server: IP address, browser type, pages requested, date and time. | Secure operation, troubleshooting and defence against malicious access. Article 6(1)(f) GDPR (legitimate interest). | For a limited period, as long as required for security purposes, after which they are deleted or anonymised. |
Health data
The website does not process medical records. Health information you disclose to us by telephone, by email or during your visit is kept in the Clinic’s medical file, within Metropolitan Hospital, under the guarantees of medical confidentiality (Law 3418/2005, Code of Medical Ethics) and the Hospital’s data protection policy. Only the staff involved in your care have access to it.
Cookies
The website uses only technically necessary cookies and browser storage, which serve the operation and security of the pages and do not identify you. No analytics, tracking or advertising cookies are used, and for this reason no cookie consent is requested. Should such services be added in the future, this policy will be updated and your consent will be requested before they are activated.
Links to other websites
Our pages contain links to third parties, such as Google Maps for the Clinic’s address, the PubMed database and the journals for our publications, and public bodies (e-EFKA, EOPYY, OPEKA). When you follow such a link, the privacy policy of the respective website applies. Our website embeds no third-party content that tracks visitors.
Recipients and transfers
We do not sell or pass personal data to third parties for their own purposes. Access may be given, solely on our behalf and under contractual guarantees, to the website’s hosting providers, with servers within the European Union, and to the email provider, as well as to Metropolitan Hospital for appointment scheduling and hospitalisation. Data are disclosed to public authorities only where the law requires it.
Your rights
You have the following rights regarding the data that concern you. To exercise them, contact the data controller at the details above. We reply within one month, extendable by two months in complex cases, as the Regulation provides.
| Right | What it means |
|---|---|
| Access | To learn whether we process your data and to receive a copy (Article 15). |
| Rectification | To have inaccurate data corrected or incomplete data completed (Article 16). |
| Erasure | To have your data deleted when they are no longer necessary or the processing is unlawful, subject to the obligations to keep medical records (Article 17). |
| Restriction | To have processing restricted while an objection of yours is examined (Article 18). |
| Portability | To receive the data you gave us in a structured, machine-readable format (Article 20). |
| Objection | To object to processing based on our legitimate interest (Article 21). |
| Complaint | To lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr, if you believe your rights are being violated. |
Security
The website runs exclusively over an encrypted connection (HTTPS). We apply technical and organisational measures, such as access control, regular security updates and backups, so that data are protected against loss, alteration and unauthorised access.
Minors
The website is addressed to adults. We do not knowingly collect data of minors through the website. Matters concerning the care of minor patients are arranged with their parents or guardians.
Changes to this policy
The policy is updated whenever the way the website operates or the legislation changes. The current version is always published on this page.
Last updated: 8 September 2026. For questions about this privacy policy contact us.