Personal Data

Your data-protection rights and how to make a privacy request.

Last updated: 12 November 2026

This page explains how to ask about your personal data in connection with psy-change.com. It complements our Privacy Policy, which describes the purposes, legal bases, recipients and retention criteria.

Website operator and data controller: Spyridon Poulouktsis (Spyros), trading as Psychange.
Professional address: Kassandrou 70, Thessaloniki, Greece.
Email: [email protected].
Website: psy-change.com.

• Access: ask whether your personal data are being processed and request the relevant information and a copy where applicable.
• Rectification: ask for inaccurate data to be corrected or incomplete data to be completed.
• Erasure: ask for deletion where the legal conditions are met. This is not an absolute right; some records may need to be retained under an applicable obligation or for legal claims.
• Restriction: ask for processing to be limited in the circumstances provided by law.
• Portability: where applicable, receive data you provided in a structured, commonly used format or request transmission to another controller.
• Objection: object to processing based on legitimate interests on grounds relating to your situation. You can object to direct marketing at any time.
• Withdrawal of consent: withdraw consent for future processing where consent is the basis, without affecting the lawfulness of earlier processing.

Email [email protected] with the subject “Privacy request”. Explain the right you want to exercise and enough context to identify the relevant enquiry or record. Where possible, contact us from the email address used previously.

Do not attach an identity document or disclose sensitive health information unless it is genuinely necessary and an appropriate, secure method has been agreed. Proportionate additional information may be requested if there are reasonable doubts about identity.

A request should normally be answered without undue delay and within one month of receipt. Where permitted because of complexity or the number of requests, that period may be extended by up to two further months; you must be informed within the first month and given the reason.

Requests are normally free of charge. A reasonable fee or refusal is possible only in the circumstances allowed by data-protection law, such as a manifestly unfounded or excessive request. If a request cannot be fulfilled in full, the reasons and available complaint routes must be explained.

Data-protection rights do not require disclosure of another person’s confidential information and do not automatically override applicable legal retention or professional obligations.

You may lodge a complaint directly with the Hellenic Data Protection Authority or another competent supervisory authority. You do not have to contact Psychange first.

This public website does not provide a patient portal or an online account from which clinical records can be downloaded. For information about records connected with sessions, contact the practitioner directly using an agreed communication channel.