Digital Secretary Privacy Policy

Operation of the Digital Secretary

The Digital Secretary is used via WhatsApp for:

Providing general information.
Searching for appointment availability.
Scheduling and rescheduling appointments.
Sending confirmations and reminders.
Generating links for online sessions.
Forwarding requests to the physician when necessary.

Its use is optional. It does not perform diagnoses, psychiatric evaluations, treatment proposals, or automated clinical decisions.

Data We Process

Depending on the request, the following may be processed:

Full name and phone number.
Declaration of adulthood.
Email address for online appointments.
Information whether you are a new or existing patient.
Type, date, and time of appointment.
Content and technical details of messages.
Temporary technical data for security and preventing duplicate processing.

Please do not send detailed medical history, laboratory tests, prescriptions, or other unnecessary health data through automated chat.

Automated Processing

For system operation, messaging, automation, artificial intelligence, electronic calendar, email, and video conferencing services are used.

Artificial intelligence is used exclusively to understand and manage administrative requests. When human judgment is required, the request is forwarded to the physician.

Certain technical providers may process data outside the European Economic Area under the required legal safeguards.

Purposes and Retention Periods

Processing is necessary for managing requests and appointments, providing healthcare services, fulfilling legal obligations, and system security.

Temporary scheduling data is retained from 24 hours to 30 days, depending on purpose. Technical data is retained only as long as necessary for security and error investigation.

If information is incorporated into the medical record, it is retained in accordance with the law, typically for ten years from the last visit.

Your Rights

You can request access, correction, deletion, restriction, portability, or object to processing where these rights apply.

Deletion does not apply to data that must be retained due to legal obligation, such as the medical record.

Requests can be submitted to contact@drgkikas.com and are generally answered within one month.