Privacy Policy

How personal data are handled when you visit psy-change.com or contact Psychange about an appointment.

Last updated: 12 November 2026

This notice explains how personal data are handled in connection with the public website psy-change.com and initial website-related enquiries. The controller is:

Website operator and data controller: Spyridon Poulouktsis (Spyros), trading as Psychange.
Professional address: Kassandrou 70, Thessaloniki, Greece.
Email: [email protected].
Website: psy-change.com.

For questions or a rights request, use the email above and include “Privacy request” in the subject. You do not need to disclose a diagnosis or therapy history to make a privacy request.

Information you choose to provide. If you email Psychange, your message may include your name, email address, availability, country of location, whether the enquiry concerns an adult or teenager, and any other information you voluntarily include.

Technical and security information. Hosting and security systems may record IP addresses, requested pages, date and time, browser or device information, and information about suspicious requests or login attempts. This supports delivery of the website, troubleshooting and protection against misuse.

The public website has no public registration area, online checkout, comment facility or appointment submission form. Clicking an email link opens your own email application; it does not submit a form on this website.

Initial appointment enquiries are handled to respond to your request and, where relevant, take steps at your request before a service arrangement is made (Article 6(1)(b) GDPR). Other correspondence and the secure, reliable operation of the website may be handled on the basis of legitimate interests (Article 6(1)(f)): communicating with visitors, resolving technical problems and preventing abuse.

Information may also need to be retained or disclosed to comply with a legal obligation (Article 6(1)(c)). Where consent is the appropriate basis for an optional activity, it must be specific and can be withdrawn for future processing. Simply browsing the website is not treated as consent to marketing or to processing health information.

The public website does not ask you to upload medical records or detailed health information. Keep an initial message to the minimum needed to discuss an appointment.

Health information requires a separate applicable condition under Article 9 GDPR as well as an Article 6 basis. Any collection needed for assessment or therapeutic services must be considered in that specific context, including professional confidentiality and any consent requirements. This website notice does not itself authorise the collection or disclosure of clinical information.

Before sessions begin, ask for the confidentiality, record-retention and data-protection information applicable to the actual service and communication tools. The website notice does not replace those arrangements.

Information may be available to the practitioner and, where necessary, to hosting, email, website support and security service providers, subject to their role and applicable confidentiality and data-protection requirements. Access should be limited to the information needed for the relevant task.

Information may be disclosed where required by law or where another applicable legal basis permits it. Website enquiry information is not sold or used for advertising audience lists. Sending an enquiry does not authorise sharing clinical details with another practitioner; any proposed coordination of care is discussed separately, subject to applicable legal requirements.

Email and other technical services may involve processing outside the European Economic Area depending on the provider and service used. Where a restricted international transfer occurs, an applicable transfer mechanism is required, such as an adequacy decision or appropriate safeguards under the GDPR. Contact Psychange for information about the providers, locations and safeguards relevant to your own communication or service before sharing sensitive information.

Information is kept for the period needed for the purpose for which it was collected. For enquiries, the criteria include dealing with the request and necessary follow-up; for technical logs, security, troubleshooting and incident investigation; and for legal records, any applicable retention obligation or need to establish, exercise or defend legal claims. Data should be removed or anonymised when those reasons no longer apply.

The website uses HTTPS and access controls, with hosting and security measures intended to protect the service. No internet service or ordinary email channel can be guaranteed completely secure. Please do not send passwords, identity documents or detailed clinical records in an initial email.

At the date of this notice, the public pages do not include an advertising pixel, an analytics tracking tag or an embedded third-party video player. The photographs are served from this website. Essential website or security functions may use cookies where necessary, particularly for authorised administrator logins.

If optional analytics, advertising or other non-essential tracking is introduced, visitors must first receive relevant information and a suitable choice where consent is required. A privacy notice or continued browsing alone is not a substitute for that consent. You can also manage stored cookies through your browser settings.

Following an external link or using your own email provider is subject to that provider’s practices. Psychange does not control those independent services.

You may have rights of access, correction, erasure, restriction, portability and objection, depending on the basis and circumstances. Where processing relies on consent, you can withdraw it without affecting processing already lawfully carried out. See Personal Data & Your Rights for how to make a request.

Providing information for an enquiry is voluntary, but without suitable contact details it may not be possible to reply or arrange an appointment. No solely automated decision producing legal or similarly significant effects is made through this public website.

You can complain to the Hellenic Data Protection Authority, or another competent supervisory authority. Contacting Psychange first is not a condition for making a complaint.

This notice may be updated when the website or relevant practices change. The current version and its updated date are shown here. For information about a particular enquiry or a service arrangement, contact [email protected].