NOTIFICATION-

STATEMENT OF PERSONAL

DATA COLLECTION AND PROCESSING CONSENT

The Civil Non-Profit Company with the name: “ANASA – SUPPORT COMPANY FOR PEOPLE SUFFERING FROM EATING DISORDERS”, based in Athens, Sygrou Avenue no. 36-38, P.C. 11742 (TIN 999039736 5th Public Finance Department of Athens), tel. 210 9234904, e-mail: [email protected], under the provisions of EU Regulation 2016/679 for the protection of natural persons, against the processing of their personal data, informs, as controller, the natural person who is about to submit the questionnaire electronically, for the collection and processing of his personal data:

A. CONTROLLER: ANASA (contact details above) provides support to those suffering from Eating Disorders (Anorexia nervosa, Bulimia nervosa, Episodic Binge Eating). For this reason, an Outpatient Clinic operates for psychiatric evaluation and diagnosis, introduction to a socio-therapeutic framework and inclusion of patients/sufferers in special therapeutic activities, psychotherapy (individual, cognitive, family, group), dietary counseling, psycho education, support of families and social-professional promotion of their lives.

B. DATA PROTECTION OFFICER: Lampros Smailis, Lawyer, based on ANASA’s official notification to the Hellenic Data Protection Authority dated 05/24/2018. (Contact details: [email protected])

C. TYPE AND SOURCE OF DATA: The personal data submitted through the website www.anasa.com.gr in the corresponding contact form-questionnaire.

D. PURPOSE OF PROCESSING: Provision of health services (article 9 par. 2(h) GDPR.

E. LEGAL BASIS OF PROCESSING: Legitimate interest of ANASA as the controller (Article 6§1f Reg. EU 679/2016) which consists of supporting people suffering from Eating Disorders, supporting their families, creating prevention actions and education, informing and raising public awareness.

F. PROCESSING OF HEALTH DATA: It is carried out for those deemed necessary as a special category of data by doctors and health professionals, scientific collaborators of ANASA, who are subject to a legal obligation to maintain professional confidentiality, with the maintenance of a medical record and for the purpose of providing health or social care or treatment or management of health and social systems and services (Article 9§2i, §3 Reg. EU 679/2016). The medical record is kept according to the provisions of Reg. EU 679/2016 and Law 3418/2005 and is kept at ANASA as a primary health unit of the private sector for a decade from the patient’s/sufferer’s last visit.

G. NOTICE OF RIGHTS: ANASA recognizes and respects the signatory’s rights, in the management of his/her personal data and hereby informs about: 1) His/her right to submit a request for access to health data, so that he/she knows if his/her data is being processed, how and for what purpose, as well as to receive a copy of his/her file. 2) His/her right to request correction of his/her personal data, if he/she considers that these are inaccurate or incomplete or have been changed. 3) His/her right to request deletion or removal of his/her personal data, except for the case where a medical record has been compiled with health data, as in this case there is a legal obligation to maintain it for a period of 10 years from the last visit. 4) His/her right to request the restriction of the processing of his/her personal data, when there are certain conditions. 5) His/her right to health data portability, i.e. to request for his/her data to be sent to another doctor or health facility.

You have the right to appeal to the Hellenic Data Protection Authority (DPA) for issues concerning the processing of your personal data. For the Authority liability and the way to submit a complaint, you can visit the Authority website http://www.dpa.gr (□ My rights □Submit a complaint), where there is detailed information (DPA, Kifisias 1-3, P.C. 11523, Athens, tel. 210 6475600, Fax: 210 6475628, email: [email protected])

H. CONSENT: Having been informed of the above, the processing purposes and my rights, through the submission form on the website www.anasa.com.gr, I declare, that in full knowledge, based on my free and unhindered decision, I agree, consent and give my express consent to the processing of all my personal data as well as the special categories of data (health data etc.) contained in the electronically submitted questionnaire, in order to receive the support services of ANASA and to voluntarily participate in the planning process of its therapeutic program, if this is deemed necessary by the Day Center Clinical Unit .

I. PERIOD OF PROCESSING: The data provided electronically by completing the questionnaire are deleted within three months of their submission through the website www.anasa.com.gr, if no appointment is made.

I know that at any time I have the possibility to withdraw my consent for the use of his/her data, for the purpose of informing him/her about the activities of ANASA.

Finally, I wish to receive any additional information by email/SMS/phone/fax.