Skip to content
Doctor4you.gr

DOCTOR4YOU · PRIVACY & DATA PROTECTION

Privacy Policy

Effective Date: October 2026

At Doctor4you, we take the confidentiality of your personal and health-related inquiries seriously. Whether you are a permanent resident or visiting Crete for your vacation, this policy explains how we collect, process, and protect your information in compliance with the General Data Protection Regulation (EU 2016/679) and applicable Greek legislation.

GDPR Compliant

Operated under EU Regulation 2016/679 and Greek Law 4624/2019.

EU Data Residency

All database records and uploaded policy files are hosted within the EU.

Consent-First Tracking

Analytics and advertising cookies load only after explicit user consent.

Private Geolocation

Your location on our map is processed strictly on your device and is never saved.

1. Data Controller

The Data Controller responsible for the processing of your personal data on this website is:

Doctor4you

Medical Network in Crete, Greece

Office: Adelianos Kampos 75, Rethymno, Crete, GR

Phone: +302831071300

Email: info@doctor4you.gr

Website: https://doctor4you.gr

2. Information We Collect

We collect information only when it is voluntarily submitted by you to facilitate medical appointments, check insurance terms, or respond to customer inquiries.

  • Contact & Identification Data:

    Name, email address, telephone number, and the body of your message.

  • Insurance & Coverage Details:

    Country of residence, insurance provider name, policy number or notes, and any uploaded insurance card/policy files (PDF or images).

  • Technical & Usage Data:

    IP addresses, browser user-agent, pages viewed, time spent, and referral sources — collected in aggregated, anonymized form only with your consent.

3. Contact Forms & Associate Routing

When you submit a message through our primary contact form or directly from an associate’s listing page:

• General Inquiries: Messages sent via /contact/ are received by the central Doctor4you coordination desk (info@doctor4you.gr) to assist you with general queries or facility guidance.

• Direct Associate Routing: Messages sent from a doctor’s or clinic’s dedicated profile page are automatically forwarded to that specific associate’s official medical reception (and logged securely in our coordination inbox) to enable immediate appointment scheduling or medical inquiry handling.

• Delivery Infrastructure: Transactional emails are securely delivered via Resend over encrypted TLS connections. Submissions are stored in our private EU database so that legitimate inquiries are never lost to email spam filters.

4. Insurance Policy Verification

To assist travelers and local patients with medical billing, our Insurance Coverage Checker offers instant coverage determinations (Direct Billing, Pay & Claim, Minor Excess, or custom review):

Uploaded Policies & Documents:

If you choose to upload a photo or PDF of your insurance card or certificate, this file is stored securely in an encrypted Cloudflare R2 bucket located within the European Union (EU jurisdiction).

Access is strictly restricted to authorized medical administration coordinators to verify whether your insurance policy allows direct billing or requires pay-and-claim documentation. Uploaded files are never shared with unauthorized third parties or used for marketing.

5. Cookies, Analytics & Google Ads

We respect your right to privacy and operate an explicit opt-in policy for all non-essential cookies and trackers.

Essential Storage (No Consent Required)

We use browser localStorage solely to remember your cookie preference (cookieConsent). This storage contains no personally identifiable data and is essential for adhering to GDPR consent standards.

Google Analytics 4 (Consent Required)

With your consent, we load Google Analytics 4 (Measurement ID: G-240MEPGZ1P). We enforce IP anonymization (anonymize_ip: true) so your full IP address is truncated and never stored by Google. Analytics data helps us understand visitor traffic to maintain website stability and improve navigation for travelers.

Google Ads Conversion Tracking (Consent Required)

With your consent, we use Google Ads conversion tracking (Tag ID: AW-16762079392) to measure the effectiveness of our advertising campaigns aimed at informing vacationers about local medical coverage in Crete. A conversion event is recorded only when a form is intentionally submitted.

6. Maps & Geolocation Privacy

Our interactive medical maps are powered by Leaflet and map tiles from OpenStreetMap:

• Map Tiles: When viewing our maps, your browser loads map tile images directly from OpenStreetMap servers. In this standard HTTP request, OpenStreetMap receives your IP address solely for tile transmission.

• "Show My Location" Feature: If you click the "Show my location" button on our map, your browser will ask for your permission to access your device’s GPS coordinates. If granted, your position is displayed as a private pin on your screen so you can identify the nearest clinic.

🔒 Your GPS coordinates are processed exclusively client-side inside your browser. They are NEVER transmitted to Doctor4you servers, NEVER recorded in logs, and NEVER shared with any third party.

7. Live Chat Support (Tidio)

To provide immediate assistance to visitors requiring urgent clinic directions or medical guidance, our website offers live chat via Tidio. The widget script is loaded when your browser is idle to ensure it never slows down page loading.

When using the chat feature, the messages and contact details you type are processed by Tidio in accordance with their privacy policy and our data processing terms.

8. Third-Party Processors & EU Storage

We entrust technical operations only to reputable service providers that adhere strictly to GDPR data processing standards:

ProviderPurposeData Location
Cloudflare, Inc.Edge hosting, D1 Database & R2 StorageEuropean Union (EU jurisdiction)
Resend, Inc.Transactional email delivery for formsEncrypted in transit (TLS)
Tidio LLCLive chat assistance widgetGDPR DPA Compliant
Google Ireland Ltd.Anonymized analytics & ad measurement (consent only)EU & Privacy Shield Adequacy

9. Data Retention

We retain personal data only for as long as is strictly necessary to fulfill the purposes for which it was collected:

  • Contact Inquiries: Retained until your query is fully answered or resolved, after which they are deleted or anonymized.
  • Insurance Files: Retained only during the duration of your stay and insurance claims settlement process, after which uploaded copies are securely purged from our storage.
  • Analytics Records: Kept in aggregate form with a standard retention period of 14 months in Google Analytics.

10. Your Rights Under GDPR

Under Chapter III of the GDPR, you have the following rights regarding your personal information:

Right of Access (Art. 15)Request confirmation and a copy of the personal data we hold about you.
Right to Rectification (Art. 16)Request correction of inaccurate or incomplete personal records.
Right to Erasure (Art. 17)Request deletion of your personal data ("right to be forgotten").
Right to Restriction (Art. 18)Request that we pause processing while a dispute or verification is resolved.
Right to Data Portability (Art. 20)Receive your data in a structured, commonly used and machine-readable format.
Right to Object (Art. 21)Object to processing based on legitimate interests or direct communications.

To exercise any of these rights, please contact our Data Protection coordinator by email at info@doctor4you.gr. We respond to all verified requests within thirty (30) days without charge.

11. Supervisory Authority

If you believe that our processing of your personal data infringes data protection laws, you have the statutory right to lodge a complaint with the competent supervisory authority:

Hellenic Data Protection Authority (HDPA)

Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα

Kifissias 1-3, 115 23 Athens, Greece

Phone: +30 210 6475600

Email: contact@dpa.gr

Portal: www.dpa.gr

Questions About Your Health Care Data?

Our medical network coordination office in Rethymno is available to help with questions about confidentiality, clinic appointments, or insurance billing.