Privacy Policy

1. Introduction

The sole-trader business operating under the name Ellie Noitsi and the trading name "Ellie Noitsi – Psychotherapy & Counselling Centre" (Greek Tax ID: 107429850, Tax Office: ΚΕΦΟΔΕ, Andrea Lazaraki 21-23, Glyfada, Athens, Greece), represented by Ellie Noitsi, is the Data Controller for personal data collected through the websites www.noitsi.gr and www.noitsi.com.

We take the protection of your personal data seriously and have implemented all necessary technical and organisational measures to ensure the security and confidentiality of the information you entrust to us.

This Policy constitutes notice to data subjects in accordance with Articles 13–14 of the EU General Data Protection Regulation (GDPR) 2016/679 and Greek Law 4624/2019. It applies exclusively to the websites listed above.

2. Data Controller

For any queries or requests regarding the processing of your personal data, please contact us at [Click to View].

We have not appointed a Data Protection Officer (DPO), as no such obligation applies given the scale and nature of the processing we carry out.

3. What Data We Collect

3.1 Data collected automatically during browsing

When you visit our website, the following information may be collected automatically:

• Internet Protocol (IP) address of your device
• Browser type and operating system
• Pages visited within the website and duration of visit
• Referring website (the page you came from)
• Information collected via cookies (see Section 8)

3.2 Data you provide through the contact form

When you submit the contact form, we collect:

• Full name
• Email address
• Phone number (optional)
• Message content (free text)

This information is sent directly to the Centre's email address and is used solely to respond to your enquiry. It is not stored in a database and is not used for any other purpose.

3.3 Special categories of data (health data)

Our Centre provides psychotherapy and counselling services. Any information relating to your health or other sensitive matters that you voluntarily share through the contact form falls within the special categories of data under Article 9 GDPR. Such data is processed exclusively on the basis of your explicit consent (Article 9(2)(a) GDPR) and only to the extent necessary to respond to your enquiry.

4. Purposes of Processing & Legal Basis

We process your personal data for the following purposes:

A. Responding to contact enquiries

Legal basis: performance of a contract or pre-contractual steps at your request (Article 6(1)(b) GDPR), or consent (Article 6(1)(a) GDPR). Where messages include health data: explicit consent (Article 9(2)(a) GDPR).

B. Website traffic analysis (Google Analytics)

Legal basis: consent (Article 6(1)(a) GDPR) given via the cookies banner, for the purpose of improving our website and user experience.

C. Measuring advertising effectiveness (Google Ads Conversion Tracking)

Legal basis: consent (Article 6(1)(a) GDPR) given via the cookies banner. We do not use remarketing or interest-based advertising.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected:

• Contact form data: retained for as long as required to respond to your enquiry and, thereafter, for a reasonable period not exceeding 12 months.
• Analytics / cookies data: in accordance with the lifetime of each cookie (see Cookie Policy).

In any case, we may retain data for as long as required by a legal obligation or as necessary to defend our legitimate interests before courts.

6. Disclosure to Third Parties

We do not sell or transfer your personal data to third parties for commercial purposes. We may share data exclusively with the following data processors, who act under our instructions and are contractually bound to protect your data:

• Google LLC (Google Analytics, Google Ads): for website traffic analysis and conversion measurement. Google may transfer data outside the EU based on Standard Contractual Clauses. Further information: policies.google.com/privacy
• Hetzner Online GmbH (Germany): web hosting provider, with servers located within the EU. Further information: hetzner.com/legal/privacy-policy
• Alexandros Nikolaidis – Web Development & Marketing Services: external technical partner responsible for website management and maintenance, with access limited strictly to what is necessary for technical purposes.

We may also disclose your data where required by law, court order, or the instruction of a competent authority (including the Hellenic Data Protection Authority).

Our websites are hosted within the EU (Germany). Apart from Google services, which may transfer data outside the EU under appropriate safeguards, we do not transfer personal data outside the EU/EEA.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access: to know what data we hold about you, the purpose of processing, and the recipients.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure ("right to be forgotten"): to request deletion of your data where there is no longer a lawful basis for processing.
• Right to restriction of processing: where accuracy or lawfulness of processing is contested.
• Right to data portability: to receive your data in a structured, commonly used, machine-readable format.
• Right to object: to processing based on legitimate interests.
• Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to: [Click to View]

We will respond within 30 days of receiving your request. In exceptional cases involving complexity or volume, this period may be extended by up to two further months, with written notice provided within the initial deadline.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifissias 1-3, 115 23 Athens, Greece  |  www.dpa.gr

8. Cookies

Our website uses cookies. Detailed information about the types of cookies we use, their purpose, and how to manage them is provided in our Cookie Policy, which forms an integral part of this Privacy Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include:

• SSL/TLS encryption for all communications through our websites
• Hosting on secure servers within the EU (Hetzner, Germany)
• Access to personal data restricted to authorised individuals only
• Regular technical security reviews

Despite these measures, no internet transmission can be guaranteed absolutely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay where required under the GDPR.

10. Minors

Our websites and services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have received data from a child under the age of 16 without verifiable parental consent as required under Article 8 GDPR, we will delete it immediately. If you believe this may have occurred, please contact us at [Click to View].

11. Links to Third-Party Websites

Our websites may contain links to third-party sites. We are not responsible for the data protection practices or content of those websites. We recommend that you review the privacy policy of every website you visit.

12. Changes to This Policy

We reserve the right to update this Policy at any time by publishing a revised version on our websites. Changes take effect upon publication, and the "last updated" date at the top of this page will be revised accordingly. We recommend checking this page periodically.

13. Contact

For any questions or requests regarding this Policy or the processing of your personal data: