Privacy policy

Last updated: 26/10/2026
This is a translation. If there is any difference, the Greek text prevails.

1. Data controller

The website apexartisionline.com and the services described on it are provided by the company “ΕΥΑ ΚΑΡΑΝΑΣΙΟΥ ΚΩΣΤΑΣ ΛΑΧΑΝΑΣ Ι.Κ.Ε.” (Greek private company), trading as “APEX-ARTISI ONLINE” (full details above). For any matter concerning personal data, you can contact us at apexartisionline@gmail.com.

2. What data we collect

We collect only what is needed to reply to you and to provide the service:

• Contact form: name (this can be just your first name or a nickname), email address, your message, whether it concerns you or someone close to you and, if you wish, a phone number so we can call you. The content of the message is, as a rule, data concerning health (special category, Article 9 GDPR). We process it only with your explicit consent (Article 9(2)(a) GDPR), which you give with the relevant tick box before sending, and which you can withdraw at any time, by email. Withdrawal does not affect the lawfulness of processing carried out before it. If the message concerns someone close to you, write only what is needed; we do not ask for their name.
• Request for the family support group link: name or nickname, email and, if you wish, a phone number for a reminder. We use them only to send you the link and the reminder, with your consent (Article 6(1)(a) GDPR).
• Form for companies: company name, full name, work email, phone, number of employees and, if you wish, a message. We use them only for communication about the collaboration, with your consent (Article 6(1)(a) GDPR).
• Withdrawal notice: name, email and the date of the booking. We use them only for the withdrawal and the refund, because the law requires it (Article 6(1)(c) GDPR).
• Session booking: name, email, booking time and, if you wish, phone, through the Calendly platform. We use the phone only to call you if you cannot get into the session; payment is made through Stripe. Your card details do not reach us. The booking is based on the contract (Article 6(1)(b)) and the issuing of receipts and invoices on a legal obligation (Article 6(1)(c)).
• Sessions: they take place on Zoom. They are not recorded on video or audio. The psychologist’s notes are kept under professional secrecy (Article 9(2)(h) and 9(3)).

Cookies: the website does not use cookies and does not collect visitor statistics. The fonts are loaded from the website itself, not from third parties. On the booking page, the Calendly calendar loads only when you press “See available times”. From that moment, Calendly receives your IP address and may use its own cookies, which it tells you about in its own notice.

3. Why we use it

• To reply to your message.
• To schedule and hold the sessions.
• For your psychologist to keep the notes the support work needs.
• To issue the legally required receipts and invoices.

Your data is not sold, not rented and not used for third-party advertising. We do not send newsletters.

4. Who has access

Only those members of the team who need to reply to you have access to form messages, under a confidentiality commitment. Your psychologist has access to the content of the sessions and the notes; the peer support partners involved in your own support know only what they need to, with a written confidentiality commitment. For the technical operation of the service we use providers who process data on our behalf: Netlify (hosting and forms, with a spam filter), Google (email), Calendly (bookings), Stripe (payments) and Zoom (sessions). Some of them are based outside the European Union; transfers take place on the basis of the EU-US Data Privacy Framework or standard contractual clauses, a copy of which is available on request.

5. Confidentiality

What you share with the team remains confidential. Our services are psychological and supportive, not medical. The only exceptions are the cases provided for by law, in particular an immediate danger to life and an order of a public prosecutor or a court.

6. How long we keep it

• Requests for the family support group link: for as long as you want to receive the link. They are deleted as soon as you ask, and at the latest 12 months after your last participation.
• Messages from companies: for as long as the communication or collaboration lasts, and up to two years after.
• Withdrawal notices: deleted from the hosting platform as soon as they are answered. The copy is kept for as long as our tax obligations for the refund require.
• Contact form submissions: deleted from the hosting platform as soon as they are answered. The copy of the correspondence is deleted after 6 months if we do not start working together.
• Session notes: kept confidentially by the psychologist for five years from the last session, and then deleted.
• Booking details: for as long as we work together and up to two years after.
• Receipts and invoices: for as long as tax law requires.

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, write to apexartisionline@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, dpa.gr).

Withdrawing consent: you can withdraw at any time any consent you gave in a form on the website, with an email to apexartisionline@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before it.

8. The Apex app

The mobile app (the text of the day, journal, groups) has its own data notice and asks for separate, explicit consent before you use it. Nothing you write in the app is linked to this website.

9. Contact

For any question about the protection of your data: apexartisionline@gmail.com