Privacy Policy

This Privacy Policy applies to the website nousnsomma.gr and communications initiated through it. It does not cover data processing during a treatment or a visit to the centre, for which separate information may be provided where required.

1. Data controller

The controller responsible for the data described here is Nous n Somma, trading as Nous n Somma.

2. What data we collect

When using the contact form

• Name and phone number.
• Email address, if provided.
• Your interest in a specific category of services.
• The content of your message.
• The choice to accept the privacy notice and the time of submission.

When you request a personal assessment online

• Name, phone number and confirmation email.
• The care pathway and service you choose.
• Two preferred dates and times, plus an optional short note.
• Submission status, confirmation and scheduled reminder.

To be able to continue an incomplete request, form fields are only stored locally on your device. They are not sent to the business before you hit the submit button.

Technical data

When accessing the website, technical information such as IP address, browser type, request date and time, requested page, device information and security events may be recorded by the hosting infrastructure. The form also temporarily uses the IP address to limit abusive or automated submissions.

Anonymous conversion events, such as phone clicks, requests for directions, form submissions or assessment requests, are recorded with the page and a short action label. Events do not contain names, email addresses, phone numbers or message content.

If you opt-in to Google Analytics, Google may also process page views, source of visit, approximate geographic area, browser and device information and the above conversion events. We do not send Google Analytics name, email, phone number or form content.

Google Maps

The interactive map is automatically loaded on the pages where it appears. During loading, your browser is connected to Google services and technical data such as IP and device information may be transmitted. More is described in Cookie Policy.

3. Why we process the data

We do not use the form data for newsletter, advertising profiling or automated decision-making. If separate consent is requested for commercial communication in the future, this will be optional and revocable.

4. Who receives the data

Only those who need it for the respective purpose may have access:

• Authorized members of the Nous n Somma team.
• Resend / Plus Five Five, Inc., to securely send requests, confirmations, instructions and scheduled reminders.
• Vercel Inc., as a provider of hosting, technical infrastructure and anonymous web analytics measurement.
• Google LLC, when you visit a page on which the interactive map is displayed and, only with your consent, for Google Analytics.
• Public authorities or professional advisers, only when there is a legal obligation or need to establish, exercise or support legal claims.

We do not sell or rent personal data.

5. Transfers outside the European Economic Area

Some technical providers are based or use infrastructure outside the EEA. Where required, transfers are based on appropriate mechanisms, such as adequacy decisions, the EU-US Data Protection Framework or standard contractual clauses, together with additional measures depending on the risk.

6. Retention time

• Requests that do not lead to the provision of a service: up to 12 months from the last substantial communication.
• Draft assessment request on your device: until you submit it, clear your browser data or remove the draft.
• Customer or transaction-related requests: as necessary for service and applicable tax, accounting or legal obligations.
• Technical and security data: for the period strictly necessary for security purposes, in accordance with the infrastructure provider’s policies.
• Google Analytics: in accordance with Analytics property retention settings; cookies _ga and _ga_* may be retained for up to 2 years by default, unless you withdraw consent or delete them earlier.

After the expiration of the relevant time, the data is deleted or anonymized, unless legal retention is required or there is a pending dispute.

7. Your Rights

Depending on the terms of the GDPR, you can request access, rectification, erasure, restriction, portability or object to processing. Where the basis is consent, you can withdraw it at any time without affecting the lawfulness of the previous processing. No solely automated decision-making that produces legal or similarly significant results takes place.

To exercise a right, write to info@nousnsomma.gr. Reasonable proof of identity may be requested. We will respond within the deadline provided by law.

You also have the right to complain to Hellenic Data Protection Authority .

8. Security and minors

We implement reasonable technical and organizational measures, such as limited access, control of the origin of requests, limitation of repeated submissions and protected data transfer. No system can guarantee absolute security.

The website is not intended for independent submission of requests by children. If you are under 18, use the form only with the participation of a parent or legal guardian. If we become aware that a minor's data has been collected without a proper basis, we will delete it.

9. Policy Changes

The policy may be updated when services, providers or the legal framework change. The current version is published here with a new update date. For material changes additional notification will be provided where required.