The “DYSLEXIA CENTERS – PAVLIDIS METHOD” i.e., the company PAVLIDIS ALEX. & CO. EE, LEGAL SERVICES, ELPIDOS 72 POLICHNI, PC 56533, TEL. 2310667795 – 2310588244 (hereinafter referred to as “Centers”), based in Thessaloniki (Elpidos 72, 56533, +2310 588244, info@dyslexiacenters.gr) manage the website https://dyslexiacenters.gr/ (hereinafter referred to as the “Website”).

The processing of personal data is carried out in accordance with the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter “GDPR”) or “Regulation”), and applicable Greek law, specifically Law 4624/2019 and Law 3471/2006 on the protection of personal data and privacy in the electronic communications sector.

 

  1. SCOPE OF APPLICATION

This Privacy Policy sets out how the Centers collect, use, process, store, delete, manage, disclose to third parties, and protect personal data (also referred to as “Personal Data” or “PD”) in order to comply with applicable law. Personal Data is processed lawfully and fairly in a transparent manner for legitimate and specific purposes.

The Centers collect only data that is appropriate, relevant, and necessary for the purposes of processing and ensure that it is accurate and, where necessary, kept up to date. Personal data shall not be processed in a manner incompatible with the original purposes and shall be protected against unauthorized or unlawful use, accidental loss, destruction, or damage.

 

  1. PURPOSES OF PROCESSING

The Centers collect and process personal data for the following purposes:

  • Recording interest in the services offered by the Centers.
  • Organizing and managing meetings between interested parties and scientific staff.
  • Provision of the services of the Centers.
  • Communication regarding business cooperation through franchising (licensing).
  • Collaboration with the Centers as scientific or administrative staff.
  • Conducting satisfaction surveys on the services offered.
  • Evaluating job candidates and monitoring contracts.
  • Monitoring and managing payments.
  • Compliance with legal obligations.
  • Establishing, exercising, and defending the legal rights of the Centers.
  • Responding to inquiries and requests from individuals.
  • Sending electronic updates and messages via email, multimedia, online platforms, and applications such as Viber, WhatsApp, Facebook Messenger, and other social networks.

 

  1. METHODS OF COLLECTING PERSONAL DATA

The Centers collect personal data in the following ways:

  • By completing and submitting an electronic form on the Website or a printed form
  • By completing the specialized questionnaires of the Pavlidis Dyslexia Centers
  • After communication by mail, telephone, email, social media, Information Society services (Viber, WhatsApp, Messenger, etc.), video calls
  • From the device and browser used by the user when browsing the Website or the Centers’ social media pages.

 

  1. CATEGORIES OF NATURAL PERSONS, PERSONAL DATA AND LEGAL BASES FOR PROCESSING

The Centers process the following data indicatively—and not restrictively—by category of natural persons:

Parents/guardians: full name, contact details, marital status, insurance providers, information relevant to the application obtained by completing questionnaires.

 

Children: full name, information for disorder assessment

 

Legal basis for processing:

  • Free and explicit consent of the subjects during communication with the Centers and completion of questionnaires (Article 6, paragraph 1(a) of the Regulation on the provision of simple data and Article 9, paragraph 2(a) of the Regulation on the provision of health information and assessment of the child’s condition)
  • The performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract for the provision of services by the Centers (Article 6(1)(b) of the Regulation)
  • Provision of treatment and health services by the Centers (Article 9, paragraph 2(i) of the Regulation)

 

Those interested in Center services: name, contact details, email address, information relevant to the request obtained by completing questionnaires.

 

 

Legal basis for processing:

  • Free and explicit consent of the subjects (Article 6, paragraph 1 a) of the Regulation on simple personal data and Article 9, paragraph 2 a) of the Regulation on personal health data – “sensitive personal data”)

 

Those interested in business cooperation with the Centers through franchising/licensing: name, contact details, email address, profession, information relevant to the request obtained by completing questionnaires.

 

 

Legal basis for processing:

  • Free and explicit consent of the subjects during the communication stage with the Centers (Article 6, paragraph 1 a) of the Regulation).
  • The performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the Regulation)

 

Job applicants: Name, email, contact telephone number, CV, information relevant to the application obtained by completing questionnaires.

 

Legal basis for processing

  • Free and explicit consent of the subjects (Article 6, paragraph 1(a) of the Regulation).

 

Employees*: Name, identification details, contact details, financial details and payment data (bank accounts, salary, additional earnings), marital status, social security data (AMKA, AMA, EFKA), educational qualifications, letters of recommendation, employment history/previous employment, health data, information relevant to the request obtained through the completion of questionnaires.

 

* Employees are defined as persons employed under any employment relationship or contract for work or services, as well as former employees.

 

Legal basis for processing

  • Performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the Regulation and Article 27 of Law 4624/2019).
  • Compliance with a legal obligation of the Controller (Article 6, paragraph 1(c) of the Regulation)

The Centers process sensitive personal data of employees within the framework of labor and social security legislation, in cases provided for by law, and as defined by the Regulation (Article 9, paragraph 2) and Law 4624/2019 (Article 27(3)).

 

E-mail recipients: Full name, e-mail address.

Legal basis for processing

  • Free and explicit consent of the subjects (Article 6, paragraph 1(a) of the Regulation) and Article 11, paragraph 1 of Law 3471/2006 on electronic communications).
  • Legitimate interest (Article 6, paragraph 1(f) of the Regulation and Article 11(3) of Law 3471/2006 on electronic communications) for categories of recipients who have already used the services of the Centers or following previous communication.

 

Website and social media page visitors: Browsing data on the Website and on the pages maintained by the Company on social media, which are automatically collected by the device or browser, such as standard web browser data, internet provider data, IP address (Internet Protocol), device type and operating system, actions on the website, links clicked by the user, and other preferences.

 

Legal basis for processing

  • Free and explicit consent of the subjects (Article 6, paragraph 1(a) of the Regulation) and Article 11(1) of Law 3471/2006 on electronic communications), through the acceptance of cookie settings, for categories of cookies that are not technically necessary for the operation of the Website.
  • Legitimate interest (Article 6, paragraph 1(f) of the Regulation and Article 4, paragraph 5 of Law 3471/2006 on electronic communications) for categories of cookies that are technically necessary to connect to the website, provide the internet service, or prevent security risks.

 

Partners and suppliers: name, identification details, contact details (telephone number, email address, fax, registered office address), details of legal representatives, professional capacity, payment details (bank accounts), invoicing details.

 

Legal basis for processing

  • The performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the Regulation).
  • Compliance with a legal obligation of the Controller (Article 6, paragraph 1(c) of the Regulation).
  1. CONSENT

When the processing of personal data is based on the legal basis of consent, the conditions for obtaining valid consent and the possibility of revoking it are taken into account. Consent is obtained after providing information and is evidenced by a specific Consent Form, in electronic or printed form.

Natural persons have the right to withdraw their consent at any time, without, however, affecting the lawfulness of the processing based on consent before its withdrawal. Those registered for an electronic newsletter have the option to unsubscribe by filling in the relevant field in the electronic newsletter.

 

  1. USE OF COOKIES & RELATED TECHNOLOGIES

The website uses cookies and related technologies to ensure that users have the best possible experience and can navigate the website efficiently to make optimal use of its services. Cookies also allow the Website to be tailored to the user’s preferences, and to identify and prevent security risks.

Through the use of cookies, websites perform certain functions, while statistical data on website traffic is collected. The information concerns the browser, IP address, provider name, type of device used to connect, operating system, browsing history, and other relevant information.

Information with a detailed description of cookies can be found in the Cookies and Related Technologies Policy (clickable link to Cookies Policy).

 

  1. SENDING ELECTRONIC NOTIFICATIONS

The Centers may send electronic updates to individuals whose details they have obtained legally:

  • when collecting their data by completing electronic or printed forms
  • in the context of providing their services
  • in previous communication and contact with them

According to Article 11(3) of Law 3471/2006, in such cases, messages may be sent without the persons concerned having given their prior consent for such use, provided that the Centers give the recipient of the message the option to opt out of receiving electronic communications in each email message sent.

In any other case, the Centers will obtain the user’s prior consent for the electronic transmission of the relevant material.

Updates are sent via email (Email Alerts, newsletters), personal messages using mobile phones (SMS, MMS), online personal messaging platforms (Viber, WhatsApp, Skype, etc.), and social media (Facebook, Instagram, Twitter, etc.). Skype, etc.), and social networking sites (Facebook, Instagram, Twitter, etc.).

The Centers may send printed information material by traditional mail to individuals who have given their consent or in the context of a previous transactional relationship.

 

  1. RETENTION PERIOD FOR PERSONAL DATA

Personal data is retained for as long as necessary to fulfill the purposes for which it was collected, in accordance with the legal basis for its processing. The retention period is determined by applicable law (on the retention of health, tax, insurance, and employment data), by the nature of the natural person’s interaction with the Centers, the need to respond to requests, to resolve any problems, to fulfill legal obligations as provided for by applicable law, in view of any legal claims/complaints, as well as for security purposes. When personal data is no longer necessary, it is deleted in a secure manner.

When the Centers process data for statistical purposes, it will be anonymized so that natural persons cannot be identified.

Natural persons have the right to receive a copy of the files containing their personal data.

 

  1. TRANSFER OF DATA TO THIRD PARTIES

The Centers do not transfer personal data to third-party recipients unless the transfer is necessary for the purposes set out in this Policy.

The Centers may entrust the processing of personal data to partners, third-party authorized subcontractors/processors such as: partner service providers (accounting service providers, IT service providers, website hosting providers, cloud hosting providers for file storage and maintenance).

In this case, the transfer and processing are subject to the provisions of Article 28 of the Regulation, which concerns Processors acting on behalf of the Controller. Processors are bound by contractual clauses to provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of the Regulation and ensures the protection of the rights of the data subject. If the Processor or subcontractor processes Personal Data outside the EU/EEA, the transfer will only take place in accordance with the procedures and conditions set out in the General Data Protection Regulation, such as the EU Standard Contractual Clauses for transfers to third countries or other explicitly mentioned legal basis for the transfer of personal data to a third country.

Personal data relating to billing may be transferred and made available to banking institutions or online payment platforms for the purpose of processing payments.

The Centers disclose personal information when required by law, if disclosure is necessary to protect its rights, to comply with a court order, judicial decision, or legal process.

In any other case, the Centers do not transfer or disclose personal data to third parties before informing the individuals concerned and obtaining their consent.

 

1Ο. RIGHTS REGARDING PERSONAL DATA

Natural persons have:

  • The right to be informed about the collection and processing of their personal data by the Centers (Right to Information)
  • The right to receive confirmation regarding the processing of their data, a copy of their data, and information about the processing (Right of Access)
  • The right to request the correction or completion of their data when it is inaccurate or incomplete, as well as its updating (Right of Correction)
  • The right to request the deletion of their personal data (Right to Erasure) under the conditions of the Regulation.
  • The right to request restriction of further processing of their data (Right to Restriction of Processing), bearing in mind that, in certain cases, restriction of processing may result in the Centers being unable to provide their services.
  • The right to request the transfer of their personal data to a third party, organization, or provider in a readable format (Right to Portability). This right does not apply to the content, structure, methodology, or tools (such as questionnaires, procedures, and assessments) used by the Centers, which are protected by copyright and governed by confidentiality.
  • The right to object if the processing is based on the legitimate interests of the Centers or concerns direct marketing purposes (Right to Object)
  • The right not to have their data subjected to automated processing, including profiling, which produces legal effects or similarly significantly affects them, unless it is necessary for the conclusion or performance of a contract, if it is required by law, and if they have given their explicit consent. (Right to non-automated individual decision-making, including profiling).

 

The exercise of the above rights is subject to the restrictions of the General Data Protection Regulation and Greek law.

The request must include all the information necessary for the processing of personal data, as well as the format in which the natural person wishes to receive the information.

Responses to requests shall be provided within 30 days of receipt of the request. This deadline may be extended by a further two months, if necessary, taking into account the complexity of the request and the number of requests. The Centers will inform the applicant of such an extension within one month of receiving the request, as well as the reasons for the delay. If the request has been submitted by electronic means, the notification shall be provided, where possible, by electronic means, unless the data subject requests otherwise.

If it does not act on the request or the request cannot be satisfied, the Centers shall inform the applicant without delay and at the latest within one month of receiving the request, of the reasons for not acting or of the reasons why the request cannot be satisfied.

The information is provided free of charge, unless the requests of the natural person are manifestly unfounded, excessive, or repetitive. In such cases, the Centers may charge a reasonable fee.

To submit relevant requests, please contact info@dyslexiacenters.gr.

  1. SECURITY OF PROCESSING

The Centers implement appropriate organizational and technical measures to protect and secure personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, access, or processing of personal data, in accordance with Article 32 of the Regulation, in order to ensure an appropriate level of security against these risks.

In addition, the Centers ensure that any natural person acting under their supervision and having access to personal data will not process such data except under their instructions, while access to personal information will be restricted to authorized employees.

  1. CONTACT FOR INFORMATION, SUBMITTING REQUESTS AND COMPLAINTS

You can contact the Centers at info@dyslexiacenters.gr or + 30 2310 588244.

 

For further requests and complaints regarding the processing of your personal data, you can contact the Hellenic Data Protection Authority (HDPA), (1-3 Kifissias Avenue, 115 23, Athens, https://www.dpa.gr/, tel. 210 6475600).

 

  1. AMENDMENTS

The Centers reserve the right to amend the Protection Policy at any time. The updated version will always be posted on this website.

 

Last updated, January 2026