Last updated: 11 October 2026
This Privacy Policy explains how KAPA Nutrition collects, uses and protects the personal data of visitors and users of this website, and of people who contact us for information, subscribe to the newsletter or request an appointment.
Using this website does not mean that you give general consent to every type of processing. We process your personal data only where an appropriate legal basis applies, as explained below.
1. Data controller
The data controller is:
Katerina Paschalidou / KAPA Nutrition
Address: K. Karamanli 153, Thessaloniki, Greece
Telephone: +30 6982 559 719, +30 2310 334 883
Email: kapa@kapadiatrofi.gr
For any question about the processing of your personal data, please contact us at the email address above.
2. Who this policy applies to
This policy applies when you:
- visit the website,
- contact us through the contact form, email or telephone,
- request information or an appointment,
- subscribe to the newsletter,
- interact with cookies or similar technologies,
- use third-party features or content that may appear on the website.
3. What data we may collect
Depending on how you interact with the website, we may collect:
a. Data you provide to us
- your full name,
- your email address,
- your telephone number,
- the content of your message,
- details relating to a contact or appointment request.
b. Newsletter data
When you subscribe to the newsletter, we may collect:
- your email address,
- your name, if you choose to provide it,
- subscription confirmation details, such as the date and time of subscription and confirmation, when a double opt-in process is used.
c. Technical and usage data
During your visit, the following may be collected automatically:
- IP address,
- device type,
- browser type,
- operating system,
- date and time of access,
- pages visited,
- technical logs,
- data relating to your cookie choices.
d. Data from third-party tools
The website may use or display third-party services, such as:
- newsletter delivery tools,
- statistics or analytics tools,
- the integrated system for managing cookie choices and external content,
- hosting and technical support services,
- review display widgets or services,
- links to social media.
4. Why we process your data and our legal bases
4.1 Communication and responses to requests
We process the details you send us so that we can respond to questions, requests for information or appointment requests.
Legal basis:
- taking steps at your request before a possible business relationship,
- and/or our legitimate interest in managing communication with visitors and prospective clients.
4.2 Managing appointment requests
When you request an appointment, we process the details needed to arrange and confirm it.
Legal basis:
- taking steps before entering into a contract,
- and/or performing a contractual relationship, where one exists.
4.3 Sending the newsletter
If you subscribe to the newsletter, we will use your email address to send you updates, articles, news and other relevant content.
Legal basis: your consent.
You can withdraw your consent at any time through the unsubscribe link in the newsletter or by contacting us.
4.4 Technical operation, security and protection of the website
We use technical data to operate the website properly, prevent malicious activity, monitor errors and protect the security of networks and information.
Legal basis:
- our legitimate interest in the secure and reliable operation of the website,
- and, where required, the use of strictly necessary cookies.
4.5 Statistics and service improvement
Where you have given consent, we may use usage data for statistical purposes, traffic analysis and improvement of our content and services, as well as to protect our lawful rights.
Legal basis for optional statistics: your consent.
5. Important note about health data
Please do not send sensitive health data through the general contact form or ordinary email, such as medical diagnoses, test results, medication details or a detailed medical history, unless we have expressly requested them.
If processing such information becomes necessary while providing services, it will take place only to the extent necessary, with increased confidentiality and with the appropriate legal basis and notice.
6. Cookies and similar technologies
The website uses cookies and similar technologies for its operation, storing preferences, statistical analysis and, potentially, marketing functions.
Your statistics and advertising choices are stored separately in your browser for up to 180 days. The Google tag starts with storage consent denied and updates its signals when you change your choices. With advanced Consent Mode, limited cookieless signals may be sent even without optional consent. Embedded maps and videos load only after you choose “Advertising and media”.
Cookies generally fall into the following categories:
- Strictly necessary / functional cookies: required for the basic operation of the website and cannot be disabled through the consent system.
- Preference cookies: store user choices.
- Statistics cookies: help us understand how the website is used.
- Marketing cookies: used only if you give the relevant consent.
At any time, you can:
- accept or reject the optional cookie categories,
- change your choices through the website's consent management tool,
- delete or block cookies through your browser settings.
Rejecting optional cookies does not affect the basic operation of the website, but it may limit some non-essential features.
For more details, see the Cookie Policy.
7. Who we may share data with
We may share data only where necessary and in accordance with the law, with:
- hosting and technical support providers,
- newsletter or contact email delivery providers,
- analytics or cookie management tool providers,
- providers of review displays or embedded third-party content,
- professional advisers, where necessary,
- competent public authorities, where required by law.
These third parties receive only the data strictly necessary and are contractually or legally bound to protect it.
We do not sell or rent your personal data to third parties.
8. Transfers of data outside the EEA
Some service providers used for technical support, newsletters, analytics or other digital tools may be located outside the European Economic Area.
In such cases, we take appropriate protective measures, such as:
- an adequacy decision by the European Commission, or
- standard contractual clauses, or
- other lawful safeguards provided by legislation.
9. How long we keep your data
We keep personal data only for as long as necessary for the purpose for which it was collected or as required by law.
For example:
- Contact messages: up to 12 months after the last communication, unless there is a reason to retain them longer.
- Appointment requests that do not proceed: up to 12 months.
- Newsletter details: until you unsubscribe or withdraw your consent. After unsubscribing, we may keep limited details on a suppression list solely to ensure that we do not send you newsletters again.
- Technical security logs: for a reasonable and limited period, depending on security and technical support needs.
- Cookie choices in your browser: up to 180 days, unless you change or delete them earlier.
Where the law requires longer retention, or where it is needed to establish, exercise or defend legal claims, the data may be kept for longer.
10. Your rights
Under applicable data protection law, you have the right to:
- access your personal data,
- rectify inaccurate or incomplete data,
- have data erased where permitted,
- restrict processing,
- object to processing based on legitimate interests,
- data portability, where applicable,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact us at: kapa@kapadiatrofi.gr
We will make every effort to respond within the period provided by law.
11. Right to lodge a complaint
If you believe that the processing of your personal data violates the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
12. Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
13. Third-party links and services
The website may include links to third-party websites or services, as well as third-party content or features such as social media or review display services.
When you visit or interact with those services, your data is processed under their own privacy policies and terms of use. We recommend reading them carefully.
14. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction.
However, no method of transmission over the internet or electronic storage can guarantee absolute security.
15. Children's data
The website is not specifically intended for minors, and we do not knowingly seek to collect personal data from people who are below the age required for valid consent under applicable law. If such collection is identified, appropriate steps will be taken to delete the data.
16. Changes to this policy
We may amend this Privacy Policy from time to time to reflect compliance requirements, technical changes or updates to our services.
Each new version will be published on the website with an updated last-modified date.