Privacy Policy
Last updated: September 2026
Protecting your personal data is important to us. This policy explains what personal data Evgeniou Clinic collects through this website, why, and what rights you have — in line with the EU General Data Protection Regulation (GDPR) and Cyprus data protection law.
Data controller
The data controller is Evgeniou Clinic (Dr Andreas Evgeniou), Larnaca, Cyprus. You can contact us using the details on the Contact page for any question about this policy or your personal data.
What data we collect
When you fill in the appointment request form, we collect your full name, phone number, email address and any other information you choose to provide, solely to respond to your request. No account is required, and the site does not use advertising or third-party tracking cookies.
Cookies and similar technologies
This website does not use cookies or local storage to track you. The only optional exception is the interactive location map: it stays inactive until you actively choose to load it, at which point Google Maps may set its own cookies. See our Cookie Policy for details and how to change your choice.
Website analytics
We use Vercel Web Analytics, a privacy-friendly analytics service built into our hosting platform, to see how many people visit the site and which pages they read. It does not use cookies or any persistent identifier and does not collect personal data such as your name, email address or exact IP address — only aggregated statistics like page views, referring site, approximate (country-level) location and device type. See Vercel’s own privacy documentation at vercel.com/docs/analytics/privacy-policy for details.
Purpose & legal basis
We process the data you submit through the appointment form on the basis of your consent (Article 6(1)(a) GDPR), solely to manage your request and communicate with you about it.
Who we share your data with
We do not sell or rent your data. Appointment requests are delivered to us through Web3Forms, our form-processing provider, acting as a data processor under a data processing agreement. If you choose to load the location map, Google LLC processes data as an independent controller under its own privacy policy.
International data transfers
Our form processor and, if you load the map, Google, may process data outside the European Economic Area. Where this happens, it relies on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Data retention
We keep your appointment request data only for as long as necessary to handle your enquiry and any resulting appointment, and in line with our legal and medical record-keeping obligations, after which it is securely deleted.
Data security
This website is served exclusively over HTTPS, and the appointment form never places personal data in the page URL. We limit data collection to what is strictly necessary and restrict access to submitted requests to clinic staff.
Your rights
Under the GDPR you have the right to access, rectify, erase and restrict the processing of your data, the right to data portability, and the right to withdraw your consent at any time. To exercise any of these rights, contact us using the details on the Contact page.
Right to lodge a complaint
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (www.dataprotection.gov.cy).
Children’s privacy
This website is not directed at children, and we do not knowingly collect personal data from children through the appointment form.
Maps & external services
The location map on our Contact and Home pages loads only after you explicitly choose to, so no data is transferred to Google before you consent.
Changes to this policy
We may update this policy from time to time to reflect changes to the website or our legal obligations. The “last updated” date at the top of this page shows when it was last revised.