DATA PROTECTION

1. Data controller

The data controller is Konstantinos Varvagiannis, physiotherapist (licence no. 8913), Athens, Greece. Contact email: kostas.varvagiannis@gmail.com

Phone: +30 698 594 1957.

2. What data we collect

Contact details you provide in the website forms: name, email, phone number.

Health information you voluntarily share in the free-text fields of the application (symptom description, duration, goals).

Your email address, if you subscribe to the newsletter.

Customer account details, if you create an account in the shop: name, email and password (stored only in encrypted form).

Order details: your email, the ebooks you bought, the amount, the date and the payment status, the file downloads, and the record of your acceptance of the Terms of Sale (date, IP address, browser). Your card details never reach us.

Cookies

This website uses cookies in specific categories. Apart from the strictly necessary ones, no cookie is set without your consent.

Strictly necessary. The typ_consent cookie remembers the choices you made about cookies. It is kept for 6 months and does not require consent. In the shop, the typ_shop cookie keeps your cart and your account login until you close the browser.

Videos (YouTube). The video on the home page is hosted on YouTube. It loads only if you have accepted the “Videos” category or if you click its cover image. From that moment YouTube (Google) may store its own cookies and receive your IP address.

We do not use advertising cookies. You can change or withdraw your consent at any time, using the button below or the “Change cookie preferences” link at the bottom of every page.

Change cookie preferences

3. Purpose and legal basis

Contact details are used solely to respond to your request and to arrange your session or participation in the programme (Article 6(1)(b) GDPR — performance of a contract and pre-contractual steps).

Health data is a special category of data and is processed only with your explicit consent and for the purpose of providing health care (Article 9(2)(a) and (h) GDPR).

Newsletter delivery is based on your consent, which you can withdraw at any time.

4. Recipients

We do not sell or transfer your data to third parties for commercial purposes.

We use MailerLite to send the newsletter and Doctor Anytime for appointment scheduling. Processing by these platforms is governed by their own privacy policies.

Messages you send via Viber or WhatsApp are subject to those providers’ terms.

Payments in the shop are handled by Stripe (Stripe Payments Europe, Ltd.), acting as payment processor. Stripe receives your email and your payment details. We do not receive or store your card details.

5. Retention

Patient data is retained for five years from the last session, as required for health professional records.

Contact requests that did not lead to a session are deleted within twelve months.

Newsletter data is retained until you unsubscribe.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw your consent.

To exercise your rights, contact kostas.varvagiannis@gmail.com. We respond within thirty days.

You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

7. Security

Data is stored on password-protected devices accessible only to the data controller. No health data is stored on a publicly accessible server.

8. Updates

This policy was last updated on 8 September 2026. Any changes will be published on this page.