{"id":3,"date":"2026-09-08T11:56:57","date_gmt":"2026-09-08T11:56:57","guid":{"rendered":"https:\/\/www.nutrial.gr\/?page_id=3"},"modified":"2026-10-09T23:13:51","modified_gmt":"2026-10-09T20:13:51","slug":"politiki-aporritou","status":"publish","type":"page","link":"https:\/\/www.nutrial.gr\/en\/politiki-aporritou\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><em>Last updated: 9 October 2026<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Protecting your personal data is both an obligation and a commitment for us. In this Privacy Policy we explain in plain language what personal data we collect through the website <strong>www.nutrial.gr<\/strong>, for what purpose, on what legal basis, with whom we share it, how long we keep it and what rights you have. This Policy has been drawn up in accordance with the General Data Protection Regulation (EU) 2016\/679 (\u00abGDPR\u00bb), Greek Law 4624\/2019 and Greek Law 3471\/2006 on the protection of data in electronic communications.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Data controller<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The controller of your personal data is <strong>Alexandra Papantoni<\/strong>, RD Dietitian &#8211; Nutritionist, trading under the name <strong>NUTRIAL<\/strong> (\u00abwe\u00bb, \u00abus\u00bb).<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Office address: Filoktitou 97, Ilion, 131 22<\/li>\n\n\n<li>Phone: <a href=\"tel:+302172183461\">217 218 3461<\/a><\/li>\n\n\n<li>Email: <a href=\"mailto:info@nutrial.gr\">info@nutrial.gr<\/a><\/li>\n\n\n<li>Website: https:\/\/www.nutrial.gr<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">No Data Protection Officer (DPO) has been appointed, as processing by an individual health professional is not considered large-scale processing within the meaning of Article 37 GDPR (Recital 91). For any matter concerning your data you can contact us directly at <a href=\"mailto:info@nutrial.gr\">info@nutrial.gr<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. What data we collect and how<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We collect only the data that is necessary for each purpose. Analytics or advertising tools are activated only if you give your consent (see section 2.6).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.1 \u00abBook an appointment\u00bb form<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you fill in the appointment request form, we collect: full name, phone number, email address (optional), your preferred session type (in person or online) and any message you choose to write. The request is sent by email to <a href=\"mailto:info@nutrial.gr\">info@nutrial.gr<\/a> and is used solely to contact you and book your appointment.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.2 Newsletter sign-up<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you sign up for the newsletter using the field at the bottom of the pages, we collect your email address in order to send you updates, articles and recipes. You can unsubscribe at any time by replying to any such email or by writing to <a href=\"mailto:info@nutrial.gr\">info@nutrial.gr<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.3 Contact by email or phone<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you contact us directly, we process your contact details and the content of your message in order to respond to your request.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.4 Data during sessions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Once we start working together, as part of the nutritional assessment and follow-up we process information such as your medical and dietary history, body measurements, body composition analysis results (InBody 270S) and any tests you bring us. This data is collected directly from you during the session, not through the website, and is covered by professional confidentiality.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.5 Technical and security data<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you visit, the website's server and security system automatically record technical information such as your IP address, the date and time of access, the page requested and your browser type. This information is used solely for the operation, security and protection of the website against abuse and spam. Spam protection for the forms runs locally on our server, without sending your details to third parties.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2.6 Cookies, analytics and advertising (only with your consent)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The website always uses the strictly necessary cookies required for it to work and to store your choices in the cookie banner. In addition, we may use analytics and advertising tools such as Google Analytics and Google Ads (Google Ireland Ltd) or the Meta Pixel (Meta Platforms Ireland Ltd) to understand how the website is used, measure the effectiveness of our advertising campaigns and show relevant ads. <strong>These tools are loaded only after you give your explicit consent<\/strong> through the cookie banner (Article 4(5) of Law 3471\/2006 and Article 6(1)(a) GDPR). You can accept, reject or choose per category, and change or withdraw your consent at any time via the \u00abCookie settings\u00bb link at the bottom of every page. The tools active at any given time, their purpose and the duration of their cookies are listed in detail in the <a href=\"\/en\/politiki-cookies\/\">Cookie Policy<\/a>. These providers may transfer data to the USA, with the safeguards described in section 6.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Health data (special categories of data)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Data concerning your health belongs to the special categories of data under Article 9 GDPR and we handle it with extra care. We kindly ask you <strong>not to include detailed health information in the contact form<\/strong>. A short description of why you are getting in touch is enough, and we will discuss the rest during the appointment. If you nevertheless choose to share such information with us, it is processed on the basis of your explicit consent (Article 9(2)(a) GDPR). Health data processed during sessions is based on Article 9(2)(h) GDPR (provision of health services by a professional bound by confidentiality).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4. Purposes and legal bases of processing<\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Purpose<\/th><th>Data<\/th><th>Legal basis<\/th><\/tr><\/thead><tbody><tr><td>Responding to an appointment request and scheduling a session<\/td><td>Full name, phone, email, session type, message<\/td><td>Taking steps at your request before entering into a contract (Article 6(1)(b) GDPR)<\/td><\/tr><tr><td>Provision of nutrition services and follow-up<\/td><td>Identity, contact and health details<\/td><td>Performance of a contract (Article 6(1)(b)) and Article 9(2)(h) GDPR<\/td><\/tr><tr><td>Sending the newsletter<\/td><td>Email<\/td><td>Consent (Article 6(1)(a) GDPR), which you can withdraw at any time<\/td><\/tr><tr><td>Answering general enquiries<\/td><td>Contact details, message content<\/td><td>Legitimate interest in responding to people who contact us (Article 6(1)(f) GDPR)<\/td><\/tr><tr><td>Website security, prevention of spam and abuse<\/td><td>IP address, technical data, form content for spam checks<\/td><td>Legitimate interest in the secure operation of the website (Article 6(1)(f) GDPR)<\/td><\/tr><tr><td>Website analytics and ad measurement\/targeting<\/td><td>Cookie identifiers, IP address, browsing and interaction data<\/td><td>Consent (Article 6(1)(a) GDPR and Article 4(5) of Law 3471\/2006), only if you give it<\/td><\/tr><tr><td>Compliance with tax and accounting obligations<\/td><td>Invoicing\/receipt details<\/td><td>Legal obligation (Article 6(1)(c) GDPR)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">5. Recipients of the data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do not sell, rent or make your data available to third parties for marketing purposes. Access to it is given, strictly as necessary, to the following providers acting as processors on our behalf, under contractual data protection terms:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Hostinger International Ltd<\/strong> (Cyprus): hosting of the website on a server located in Frankfurt, Germany.<\/li>\n\n\n<li><strong>Zoho Corporation<\/strong> (data centre in the European Union): email service through which we receive your requests and emails.<\/li>\n\n\n\n\n\n<li><strong>Defiant Inc.<\/strong> (Wordfence service, USA): firewall and protection of the website against malicious attacks, through the processing of IP addresses.<\/li>\n\n\n<li><strong>Zoom Video Communications Inc.<\/strong> or <strong>Google LLC<\/strong> (Google Meet), only if you choose an online session, to hold the video call.<\/li>\n\n\n<li><strong>Google Ireland Ltd<\/strong> (Google Analytics, Google Ads) and <strong>Meta Platforms Ireland Ltd<\/strong> (Meta Pixel), only if these tools are active and you have consented to statistics or advertising.<\/li>\n\n\n<li><strong>Bogdan Group Ltd (BI-Enterprises)<\/strong> (United Kingdom): technical development, maintenance and support of the website.<\/li>\n\n\n<li>An accountant or accounting firm, to meet our tax obligations.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We may also disclose data to public, judicial or supervisory authorities, only where required by law.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Transfers outside the European Economic Area<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Some of the providers above (Defiant, Zoom, Google, Meta) are based in, or transfer data to, the USA. These transfers are based on the EU-U.S. Data Privacy Framework, where the provider is certified, or on the European Commission's Standard Contractual Clauses (Article 46 GDPR). For the United Kingdom, an adequacy decision of the European Commission applies (Article 45 GDPR).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">7. How long we keep your data<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Appointment and contact requests<\/strong> that did not lead to a collaboration: up to 12 months after the last contact, after which they are deleted.<\/li>\n\n\n<li><strong>Client file<\/strong> (history, measurements, nutrition plans): for as long as the collaboration lasts and thereafter for as long as required by applicable law or for the establishment, exercise or defence of legal claims.<\/li>\n\n\n<li><strong>Tax and accounting records<\/strong>: for as long as tax legislation requires.<\/li>\n\n\n<li><strong>Newsletter<\/strong>: until you unsubscribe or withdraw your consent.<\/li>\n\n\n<li><strong>Cookies<\/strong>: for the duration stated for each cookie in the Cookie Policy. Your choice in the cookie banner is kept for up to 12 months.<\/li>\n\n\n<li><strong>Server and security logs<\/strong>: for a limited time, normally up to 90 days, unless longer retention is needed to investigate a security incident.<\/li>\n\n\n<li><strong>Backups<\/strong> of the website: they are overwritten on a rolling basis and kept only for as long as needed to restore the website in the event of a fault.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">8. How we protect your data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We apply appropriate technical and organisational measures, such as an encrypted HTTPS (TLS) connection across the whole website, a web application firewall, regular software updates, restricted and password-protected access to systems, regular backups and professional confidentiality. No method of transmission over the internet is completely secure, but we take every reasonable measure to protect your data.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Your rights<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Under the GDPR you have the following rights:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Access<\/strong>: to find out whether we process your data and to receive a copy of it (Article 15).<\/li>\n\n\n<li><strong>Rectification<\/strong>: to request the correction of inaccurate or the completion of incomplete data (Article 16).<\/li>\n\n\n<li><strong>Erasure<\/strong>: to request the erasure of your data where there is no legal ground for keeping it (Article 17).<\/li>\n\n\n<li><strong>Restriction of processing<\/strong> (Article 18).<\/li>\n\n\n<li><strong>Portability<\/strong>: to receive the data you provided to us in a structured, commonly used format, or to ask for it to be transmitted to another controller (Article 20).<\/li>\n\n\n<li><strong>Objection<\/strong> to processing based on our legitimate interest (Article 21).<\/li>\n\n\n<li><strong>Withdrawal of consent<\/strong> at any time, without affecting the lawfulness of processing carried out before the withdrawal (Article 7(3)).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We do not make decisions based solely on automated processing, including profiling (Article 22).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10. How to exercise your rights<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To exercise any of your rights, email us at <a href=\"mailto:info@nutrial.gr\">info@nutrial.gr<\/a>. We may ask you for information to confirm your identity, so that data is not disclosed to a third party. We will reply without undue delay and in any event within one (1) month of receiving your request. This period may be extended by a further two (2) months where necessary due to the complexity of the request, in which case we will let you know. Exercising your rights is free of charge.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">11. Right to lodge a complaint<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you believe that the processing of your data infringes the law, you have the right to lodge a complaint with the <strong>Hellenic Data Protection Authority<\/strong> (1-3 Kifisias Ave., 115 23 Athens, tel. +30 210 6475600, <a href=\"https:\/\/www.dpa.gr\" target=\"_blank\" rel=\"noopener\">www.dpa.gr<\/a>). We would appreciate it, however, if you contacted us first so we can resolve any issue promptly.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">12. Minors<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The website is intended for adults. For services concerning children and teenagers (e.g. paediatric nutrition), the appointment request is submitted and communication takes place through the parent or legal guardian. We do not knowingly collect data from children under 15 without the consent of a parent or guardian (Article 21 of Law 4624\/2019). If you find that this has happened, please contact us so that we can delete the data.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">13. Cookies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Strictly necessary cookies are always used. Analytics and advertising cookies are used only with your consent, which you can manage at any time via the \u00abCookie settings\u00bb link at the bottom of every page. Detailed information can be found in the <a href=\"\/en\/politiki-cookies\/\">Cookie Policy<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">14. Links to third parties<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The website contains links to third-party websites and services (e.g. Instagram, Facebook, Google Maps). When you visit them, the privacy policies of the respective providers apply, for which we are not responsible. We recommend that you read them.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">15. Changes to this Privacy Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may update this Policy from time to time, for example when the law or our services change. The current version is always available on this page, with the date of the last update at the top. We will inform you prominently on the website about any material changes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">16. Contact<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For any question about this Privacy Policy or your data: <a href=\"mailto:info@nutrial.gr\">info@nutrial.gr<\/a>, Filoktitou 97, Ilion, 131 22, tel. <a href=\"tel:+302172183461\">217 218 3461<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>\u03a4\u03b5\u03bb\u03b5\u03c5\u03c4\u03b1\u03af\u03b1 \u03b5\u03bd\u03b7\u03bc\u03ad\u03c1\u03c9\u03c3\u03b7: 9 \u039f\u03ba\u03c4\u03c9\u03b2\u03c1\u03af\u03bf\u03c5 2026 \u0397 \u03c0\u03c1\u03bf\u03c3\u03c4\u03b1\u03c3\u03af\u03b1 \u03c4\u03c9\u03bd \u03c0\u03c1\u03bf\u03c3\u03c9\u03c0\u03b9\u03ba\u03ce\u03bd \u03c3\u03b1\u03c2 \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03c9\u03bd \u03b5\u03af\u03bd\u03b1\u03b9 \u03b3\u03b9\u03b1 \u03b5\u03bc\u03ac\u03c2 \u03c5\u03c0\u03bf\u03c7\u03c1\u03ad\u03c9\u03c3\u03b7 \u03ba\u03b1\u03b9 \u03b4\u03ad\u03c3\u03bc\u03b5\u03c5\u03c3\u03b7. \u03a3\u03c4\u03b7\u03bd \u03c0\u03b1\u03c1\u03bf\u03cd\u03c3\u03b1 \u03a0\u03bf\u03bb\u03b9\u03c4\u03b9\u03ba\u03ae \u0391\u03c0\u03bf\u03c1\u03c1\u03ae\u03c4\u03bf\u03c5 \u03b5\u03be\u03b7\u03b3\u03bf\u03cd\u03bc\u03b5 \u03bc\u03b5 \u03b1\u03c0\u03bb\u03ac \u03bb\u03cc\u03b3\u03b9\u03b1 \u03c0\u03bf\u03b9\u03b1 \u03c0\u03c1\u03bf\u03c3\u03c9\u03c0\u03b9\u03ba\u03ac \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03b1 \u03c3\u03c5\u03bb\u03bb\u03ad\u03b3\u03bf\u03c5\u03bc\u03b5 \u03bc\u03ad\u03c3\u03c9 \u03c4\u03bf\u03c5 \u03b9\u03c3\u03c4\u03cc\u03c4\u03bf\u03c0\u03bf\u03c5 www.nutrial.gr, \u03b3\u03b9\u03b1 \u03c0\u03bf\u03b9\u03bf\u03bd \u03c3\u03ba\u03bf\u03c0\u03cc, \u03bc\u03b5 \u03c0\u03bf\u03b9\u03b1 \u03bd\u03bf\u03bc\u03b9\u03ba\u03ae \u03b2\u03ac\u03c3\u03b7, \u03bc\u03b5 \u03c0\u03bf\u03b9\u03bf\u03c5\u03c2 \u03c4\u03b1 \u03bc\u03bf\u03b9\u03c1\u03b1\u03b6\u03cc\u03bc\u03b1\u03c3\u03c4\u03b5, \u03b3\u03b9\u03b1 \u03c0\u03cc\u03c3\u03bf \u03c7\u03c1\u03cc\u03bd\u03bf \u03c4\u03b1 \u03b4\u03b9\u03b1\u03c4\u03b7\u03c1\u03bf\u03cd\u03bc\u03b5 \u03ba\u03b1\u03b9 \u03c0\u03bf\u03b9\u03b1 \u03b4\u03b9\u03ba\u03b1\u03b9\u03ce\u03bc\u03b1\u03c4\u03b1 \u03ad\u03c7\u03b5\u03c4\u03b5. \u0397 \u03a0\u03bf\u03bb\u03b9\u03c4\u03b9\u03ba\u03ae [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":3,"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":12346,"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/12346"}],"wp:attachment":[{"href":"https:\/\/www.nutrial.gr\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}