Privacy
Policy

1. Information We Collect

To provide tailored medical tourism packages and pre-operative clinical evaluations, we collect the following types of information when you interact with our website or consultation forms:

• Personal Details: Full name, date of birth, passport/national ID details (for hospital admittance and VIP travel arrangements).
• Diagnostic & Medical History: Orthopedic X-rays, MRI scans, medical questionnaire responses, current medications, and attending physician notes uploaded via our secure portal.
• Contact Information: Email address, phone number (with country code), preferred contact method, and emergency contact details.
• Travel & Accommodation Preferences: Flight arrival times, companion details, mobility requirements, and hotel/resort recovery choices.

2. How We Use Your Information

Your diagnostic data and medical history are used exclusively for legitimate healthcare and travel coordination purposes:

• Transmitting diagnostic imaging securely to board-certified attending orthopedic surgeons for pre-surgical feasibility assessment.
• Generating transparent, line-item cost estimates for surgery, hospital fees, and physical rehabilitation stays.
• Booking private operating suites at JCI-accredited partner hospitals in Athens.
• Coordinating chauffeured medical transport, dedicated bilingual translators, and post-operative hydrotherapy stays.

3. Medical Confidentiality & Third-Party Sharing

We respect medical secrecy and strict professional confidentiality. Your health records are never sold, leased, or disclosed to third-party advertisers. Information is shared strictly on a need-to-know basis with:

• Your designated lead surgeon and clinical surgical team.
• Admitting staff and anesthesiologists at partner hospital facilities.
• Assigned physical therapists and medical concierge staff responsible for your rehabilitation stay.

4. Data Security & Storage

All digital communications and file uploads on MedInGreece utilize 256-bit SSL encryption. Diagnostic imaging is stored on encrypted servers with multi-factor authentication and strict access logs. Data is retained for the duration required by medical record-keeping laws and deleted upon request where legally permissible.

5. Your Rights Under EU GDPR

As a data subject, you hold the following rights regarding your personal and medical data:

• Right of Access: Request a complete copy of all diagnostic records and personal data held by MedInGreece.
• Right to Rectification: Request corrections to any inaccurate or incomplete medical records.
• Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your records, subject to medical record retention statutes.
• Right to Data Portability: Obtain your medical files in a structured, electronic format to share with your local physician.