Privacy Policy
Last updated: 2026-08-01
This Privacy Policy explains how Ella Clinic collects and processes personal data when you visit our website or book an appointment online.
1. Data controller
The data controller is «KORRO EMANOUELA PRIVATE PLASTIC SURGERY MEDICAL PRACTICE L.P. (E.E.)», trading as «Ella Aesthetic Clinic», legal form Limited Partnership (E.E.), GEMI No. 187472303000, Tax ID (AFM) 803016632, place of business: 42 Sevastoupoleos Street, Ampelokipoi, 115 26 Athens, Greece. Contact: [email protected], tel. 2107711878. Public registry record: https://publicity.businessportal.gr/company/187472303000.
2. Data we collect
Depending on how you use the website, we may collect: full name, email, phone number, booking details (service, date/time, staff member), online deposit payment details (via Cardlink — we do not store full card numbers on our servers), booking cancellation codes, and technical data (IP address, cookies/device data, access logs) needed to operate and secure the site.
If you contact us (form/email), we process the content of your message and your contact details.
3. Purposes and legal bases
We process data to: (a) manage and confirm appointments and related communications (contract performance / pre-contractual steps), (b) collect deposits and manage payments/refunds (contract performance and legal obligation), (c) respond to contact requests (legitimate interest or consent), (d) secure the website, prevent fraud and keep services running (legitimate interest), and (e) meet tax/accounting duties (legal obligation).
Health-related data created during treatment may be kept in the course of providing healthcare services under applicable law and professional duties; online booking is not a medical record substitute.
4. Recipients / processors
Data may be shared with providers that support us technically or operationally, such as: the payment provider (Cardlink / Eurobank Cardlink for online payments), website hosting/maintenance, email services, and — where required — accountants/legal advisors or competent authorities.
Providers act on our instructions and under appropriate contractual safeguards where applicable.
5. Retention
We keep data only as long as needed for the purposes collected and as required by law (e.g. tax records of transactions). Booking and related contact data are kept for a reasonable period to manage appointments and client history, unless you request earlier deletion and no legal retention duty applies.
6. Cookies
The website uses essential cookies for basic operation (e.g. session, language preference, security). If analytics or marketing cookies are enabled later, we will inform you and — where required — ask for consent.
7. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability and objection to processing, and withdraw consent (where processing is based on consent), without affecting the lawfulness of processing before withdrawal.
To exercise your rights: [email protected]. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
8. Security and updates
We apply appropriate technical and organisational measures to protect data. No system is completely secure; please also protect your own devices and access credentials.
We may update this policy; the last-updated date appears at the top of the page.
ΚΟΡΡΟ ΕΜΑΝΟΥΕΛΑ ΙΔΙΩΤΙΚΟ ΙΑΤΡΕΙΟ ΠΛΑΣΤΙΚΗΣ ΧΕΙΡΟΥΡΓΙΚΗΣ Ε.Ε.
Trading as: Ella Aesthetic Clinic
GEMI: 187472303000 · Tax ID: 803016632
42 Sevastoupoleos Street, Ampelokipoi, 115 26 Athens, Greece