Privacy policy

Data controller

For account and appointment data, the data controller is giatros.app. Contact for data protection matters: info@giatros.app.

For the medical record kept by your doctor, the data controller is the doctor or the practice. The platform acts as a processor on their behalf and does not use this data for any other purpose.

What data we process

Booking an appointment requires as little information as possible:

• Full name and mobile number. The mobile number is confirmed with a one-time code (SMS).
• Optionally, an e-mail address, if you add one to your account.
• The appointment details: doctor, practice, service, date and time, status, and the name of the person the appointment is for, when you book it for your child or for another adult.
• Technical security data: IP address and browser, in the audit log, for every action involving one-time codes, cancellation links and appointment changes.
• Your acceptance of the processing, with the text version and a timestamp (current booking consent version: 2026-08-31).

We do not store your location. When you choose “near me”, the coordinates are used only for the duration of the request, to find the nearest town, and are not recorded anywhere.

We do not use tracking cookies, advertising networks or third-party analytics tools. The only cookies are the ones that keep you signed in.

Purpose and legal basis

• Performance of a contract: booking, confirming, changing and cancelling your appointment, and the related SMS messages.
• Legitimate interest: security of the service, prevention of abuse, and an audit log of actions involving codes and links.
• Consent: confirmation of your mobile number and acceptance of the booking text.
• Legal obligation: where the law requires records to be kept.

The medical record is kept by your doctor in the course of providing healthcare and is not accessible through the platform to any other doctor, nor to the patient themselves through their account.

Which providers are involved

We use as few providers as possible, and only to operate the service:

• Supabase — database, authentication and file storage. The data is stored in the London region (United Kingdom).
• Twilio — sending SMS messages (confirmation codes, appointment notifications).
• TypeSafe — understanding the questions the practice types into the “Ask” tool. Only the sentence as written is sent, which may contain a patient’s name if the doctor types it; no data from the database is sent. Processing region: [to be completed].
• Google Maps — the map showing where the practice is. When the map is displayed, Google receives your IP address and browser details, as on any web page that embeds a Google map. Your name, your appointment and any of your account details are not sent.
• Cloudflare — content delivery network and website protection.
• Application server provider: Microsoft Azure, in the Sweden region (European Union).

If the doctor connects their calendar (Google, Microsoft or Apple), their calendar provider receives only the times that are booked: the time, the practice and a link. No patient name, phone number, email or AMKA is sent. The doctor makes the connection and can end it at any time.

We do not sell or rent personal data to anyone.

Where the data is stored

The database and files are on servers in London (United Kingdom). SMS messages are routed through the network of the telecommunications provider.

Storing data in the United Kingdom, outside the European Economic Area, relies on the European Commission’s adequacy decision for the United Kingdom.

How long we keep it

• One-time codes: stored only as a cryptographic hash, valid for 5 minutes, and the related records are deleted automatically 24 hours after they are used or expire.
• Action links (cancellation, reply to a new time): deleted under the same rule.
• The text of the code in a message that was not sent is cleared at the latest when the code expires.
• Appointments and message history: kept for as long as your account exists and for as long as the operation and obligations of the practice require.
• Audit log: kept for security purposes and never contains codes or complete links.
• Medical record: the retention period is set by your doctor and by the law on medical records.

Your rights

You have the right of access, rectification, erasure, restriction and objection to processing, as well as the right to data portability. For account and appointment data, contact us; for the medical record, contact your doctor, who is the data controller.

You can also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Security

The connection is always made over HTTPS. One-time codes and action links are stored only as a cryptographic hash with a secret key and can be used only once. The medical record can be accessed only by the doctor who keeps it and by the staff to whom the doctor has given that permission, and every entry made in it is logged.

Doctor details in the directory

Besides the doctors who accept appointments through the platform, we keep a directory of doctors who are registered with the medical associations and are not members of the platform: full name, specialty, association, practice address as published by the association, and one phone number, from the association or, where the association does not publish one, from the 11888.gr directory. In the regional unit of Xanthi, where the medical association does not publish a list of members, the directory includes the doctors listed on 11888.gr, with full name, specialty, practice address, phone number and map location as 11888.gr publishes them, without an association. When the association or 11888.gr publishes a practice email address, we keep it without showing it anywhere; we do not send messages to the doctors in the directory, and the email address is deleted when the source stops publishing it.

The purpose is to help patients find a doctor and a way to contact the practice, and the legal basis is legitimate interest (Article 6(1)(f) GDPR). No reviews are published, and every directory page states that the doctor does not take appointments through giatros.app.

“Remove listing” on the page of each listing: the listing is removed immediately, without any details or reason having to be given, together with the source records and working copies, and the name is checked at every update so that the listing is not created again. The detailed notice — sources, recipients, retention period, display order — is published together with the directory, on the page “Doctor directory: sources and information”.

Contact

For any request about your data: info@giatros.app.