Template notice: this page is a starting template prepared for Imperial Health Solutions and must be reviewed and completed by a qualified legal adviser before publication. Items in [square brackets] must be completed.
Who we are
Imperial Health Solutions, Hersonissos, Heraklion Crete, Greece 70014 (“Imperial”, “we”) is the controller of personal data processed through imperial-solutions.com. Contact: operations@imperial-solutions.com, +30 28970 25100. [Company legal name, VAT number, Data Protection Officer contact if appointed]
What data we collect
When you contact us by telephone, email or our contact form we process the information you provide: name or company, email, telephone, type of request, patient location and the content of your message. Because requests may relate to medical assistance, they can include health data, which is a special category of personal data under the GDPR (Art. 9). We ask you to share only what is necessary to open or discuss a case.
Why we process it and on what legal basis
- To respond to your request and coordinate medical assistance (Art. 6(1)(b) and (f) GDPR; for health data Art. 9(2)(c), (f) or (h) as applicable, or your explicit consent Art. 9(2)(a)).
- To work with insurance and assistance companies on cases they have instructed us on (Art. 6(1)(b)/(f)).
- To meet legal obligations (Art. 6(1)(c)).
Who receives the data
Only where necessary for the case: treating healthcare providers, medical transport and aviation providers, and the insurance or assistance company responsible for the case. Our website host and email provider act as processors under data processing agreements. [List processors]
International transfers
Where a case involves an insurer or provider outside the EEA, transfers take place on the basis of an adequacy decision or appropriate safeguards (Standard Contractual Clauses). [Confirm]
How long we keep data
[Define retention periods — e.g. contact-form enquiries not leading to a case: 12 months; case files: as required by law and contractual obligations.]
Security
The website uses HTTPS encryption. Form submissions are sent by email to our operations team and are not used for marketing. [Describe storage: e.g. submissions are not stored in the website database.]
Your rights
You have the right to access, rectify, erase, restrict and object to processing, to data portability and to withdraw consent at any time. You can also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Changes
We may update this policy. Last updated: [date].