Privacy Policy

The data controller for personal data collected through this website and business correspondence is:

Synesis Psifiaki Ygeia Monoprosopi IKE
Trading as: Synesis Digital Health
Registered address: Ethnikis Antistaseos 37, 62100 Serres, Greece
GEMI: 187359752000 · AFM: 803011593
Email: info@synesisdigital.health
Tel: +34 664 840 755

This website does not collect personal data automatically. We do not use analytics tools, tracking pixels, advertising cookies, or any form of behavioural tracking.

We only collect personal data that you voluntarily provide by contacting us directly by email. This may include:

• Your name and professional title
• Your email address
• Your organisation and role
• The content of your message or enquiry

We do not collect sensitive personal data (special category data under GDPR Article 9) and do not request it.

We process personal data received by email for the following purposes and legal bases:

• Responding to enquiries — legal basis: legitimate interests (Article 6(1)(f) GDPR). It is in our mutual interest to communicate about potential or existing advisory engagements.
• Performing or negotiating a contract — legal basis: contract performance (Article 6(1)(b) GDPR), where correspondence relates to the provision of advisory services.
• Compliance with legal obligations — legal basis: legal obligation (Article 6(1)(c) GDPR), where retention of business correspondence is required by applicable law.

We retain personal data contained in business correspondence for a maximum of 5 years from the date of last contact, unless a longer retention period is required by applicable law (for example, accounting and tax records under Greek law).

Where correspondence does not lead to a business relationship, we will delete it within 12 months of the last exchange.

We do not sell, rent, or share your personal data with third parties for marketing or commercial purposes.

Your data may be accessed by the following categories of recipients only where strictly necessary:

• Email service providers (Google Workspace) — for the operation of our email infrastructure, under a data processing agreement
• Professional advisors (accountant, legal counsel) — where required to fulfil legal or contractual obligations, under confidentiality obligations
• Public authorities — where required by law or court order

All processors engaged by Synesis Digital Health are required to process personal data only on our instructions and in compliance with applicable data protection law.

Our email infrastructure is operated by Google Workspace, which may process data on servers located outside the European Economic Area. Google LLC participates in the EU-US Data Privacy Framework and provides appropriate safeguards under GDPR Article 46.

We do not otherwise transfer personal data outside the EEA in the course of our operations.

This website uses no tracking, analytics, or advertising cookies.

The website is a static site served via Cloudflare Pages. Cloudflare may set a technical session cookie (__cf_bm) strictly for bot management and security purposes. This cookie does not track you across websites and does not require your consent under Recital 25 of the ePrivacy Directive as it is technically necessary for the security of the service.

No other cookies are set by this website.

Under the GDPR and Greek Law 4624/2019, you have the following rights in relation to your personal data:

• Right of access — to obtain confirmation of whether we process your data and a copy of it
• Right to rectification — to have inaccurate data corrected
• Right to erasure — to have your data deleted where there is no longer a lawful basis for processing
• Right to restriction — to restrict processing in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests

To exercise any of these rights, contact us at info@synesisdigital.health. We will respond within one month.

As a company registered in Greece, our lead supervisory authority is the Hellenic Data Protection Authority (ΑΠΔΠΧ):

Kifissias 1-3, 115 23 Athens, Greece
Tel: +30 210 647 5600
Email: contact@dpa.gr
Website: www.dpa.gr

You have the right to lodge a complaint with the ΑΠΔΠΧ at any time if you believe your personal data has been processed unlawfully.

We may update this policy from time to time to reflect changes in our practices or applicable law. The effective date at the top of this page will be updated accordingly. We recommend checking this page periodically.

Material changes will be notified to any active clients by email.