Last updated: October 2026

UGI Bariatric (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit and use the website ugi-bariatric.com (the “Website”).

The Website provides information about bariatric, metabolic and other surgical procedures, information about our medical team and services, and allows visitors to contact us and request an appointment.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Greek data-protection legislation and other applicable privacy laws.

Who is responsible for your personal data?

The data controller responsible for the processing of your personal data through this Website is:

UGI Bariatric / Dr. Ilias Kon. Sdralis

Private Practice
100 Tsimiski Street, 2nd Floor
Thessaloniki, Greece

Telephone: +30 2310 222 422

The medical services associated with the practice are also provided at:

Interbalkan Medical Center of Thessaloniki
10 Asklipiou Street, Pylaia
Thessaloniki 57001, Greece
Telephone: +30 2310 400000

What personal information do we collect?

Depending on how you use the Website, we may collect the following categories of personal data:

Information you provide directly

When you contact us, request an appointment or submit information through a contact form, we may collect:

• Name and surname
• Email address
• Telephone or mobile number
• The content of your message or enquiry
• Any other information that you voluntarily provide to us

Please do not provide medical information or other sensitive personal information through a general contact form unless it is specifically requested or necessary for your enquiry.

Information relating to appointments

If you contact us to arrange or discuss an appointment, we may process information necessary to respond to your request and arrange the appointment.

Depending on the information you choose to provide, this may include information concerning your health or medical circumstances. Health information is considered special category personal data under the GDPR and is handled with additional safeguards.

Technical information

When you visit the Website, certain technical information may be collected automatically, such as:

• IP address
• Browser type and version
• Device type
• Operating system
• Date and time of access
• Pages visited
• Referring website or source
• Technical information relating to your interaction with the Website

This information may be used to maintain website security, diagnose technical problems and understand how the Website is used.

How do we use your personal data?

We may use personal data for the following purposes:

• To respond to enquiries submitted through the Website
• To communicate with you regarding an appointment or request
• To provide information you have requested
• To manage and administer communications with patients and prospective patients
• To improve the Website and its functionality
• To maintain the security and integrity of the Website
• To prevent fraud, abuse or unauthorised access
• To comply with legal and regulatory obligations
• To establish, exercise or defend legal claims where necessary

We will not use your personal information for purposes that are incompatible with the purposes described in this Privacy Policy unless permitted or required by law.

Legal basis for processing

Depending on the circumstances, we may process your personal data on one or more of the following legal bases under Article 6 of the GDPR:

• Your consent, where you have provided it;
• Performance of a contract or steps taken at your request prior to entering into a contract;
• Compliance with a legal obligation;
• Our legitimate interests, where those interests are not overridden by your rights and freedoms;
• Provision of healthcare or management of healthcare services, where applicable and permitted under Article 9 of the GDPR.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Health and other sensitive personal data

Because UGI Bariatric provides medical services, information relating to your physical or mental health may be processed in connection with the provision and management of healthcare services.

Health data is classified as special category personal data under the GDPR.

We only process such information where there is an appropriate legal basis under the GDPR and applicable healthcare and data-protection legislation.

We ask visitors not to submit detailed medical information through general website forms unless this is necessary for their enquiry or specifically requested by us.

The Website itself should not be considered a substitute for a medical consultation, diagnosis or medical advice.

Contact forms

If you submit a contact form through the Website, the information you provide may be transmitted to and processed by us for the purpose of responding to your enquiry.

The information may include your:

• Name
• Email address
• Mobile/telephone number
• Message or enquiry

We retain this information only for as long as reasonably necessary for the purpose for which it was collected, or for longer where required by law

Cookies and similar technologies

The Website may use cookies and similar technologies.

Cookies are small text files stored on your device when you visit a website. They may be used to ensure that the Website functions correctly, remember preferences, provide security and, where applicable, analyse Website usage.

Cookies may include:

Strictly necessary cookies

These cookies are necessary for the operation and security of the Website and cannot generally be disabled through the Website’s cookie settings.

Analytics cookies

Where analytics services are used, these cookies help us understand how visitors use the Website, for example which pages are visited and how users interact with the Website.

Analytics cookies will only be used where the applicable legal requirements for consent are satisfied.

Third-party cookies

Certain third-party services embedded in or linked from the Website may place cookies or similar technologies on your device.

You can control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

Third-party services

The Website may contain links to or integrations with third-party services, such as video platforms, social-media platforms, mapping services, analytics services or other external websites.

When you follow a link to a third-party website, that website operates under its own privacy policy and terms. We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party service before providing personal information to it.

Data sharing and disclosure

We do not sell, rent or trade your personal data.

We may disclose personal information to trusted third parties where this is necessary and legally permitted, including:

• Website hosting and technical service providers
• IT and website maintenance providers
• Communication and email service providers
• Professional advisers, where necessary
• Healthcare professionals or healthcare organisations involved in your care, where appropriate
• Public authorities or regulatory bodies where required by law

Where third-party service providers process personal data on our behalf, we take appropriate measures to ensure that the processing complies with applicable data-protection requirements.

International transfers

Where personal data is transferred outside the European Economic Area (EEA), we will ensure that an appropriate legal mechanism is in place in accordance with the GDPR.

This may include an adequacy decision by the European Commission, Standard Contractual Clauses or another legally recognised safeguard.

How long do we keep your personal data?

We retain personal data only for as long as necessary for the purposes for which it was collected.

The retention period depends on:

• The nature of the information
• The purpose for which it was collected
• Whether you become a patient
• Applicable medical and legal record-retention requirements
• Our legitimate business and legal requirements

Medical records, where applicable, may be retained for longer periods in accordance with applicable healthcare and legal requirements.

Information submitted through a general website enquiry will normally be retained only for as long as reasonably necessary to deal with the enquiry and maintain appropriate records.

Data security

We take reasonable technical and organisational measures to protect personal data against:

• Unauthorised access
• Accidental loss
• Destruction
• Alteration
• Unauthorised disclosure

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

Your rights under the GDPR

Subject to applicable legal conditions and limitations, you may have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing activities
• Request data portability, where applicable
• Withdraw consent where processing is based on consent

You also have the right to lodge a complaint with the relevant data-protection supervisory authority.

In Greece, the competent supervisory authority is the:

Hellenic Data Protection Authority (HDPA)

You can find further information about your rights and the supervisory authority through the official website of the Hellenic Data Protection Authority.

How to exercise your rights

To exercise any of your data-protection rights or ask a question about this Privacy Policy, please contact us using the contact details below.

UGI Bariatric / Dr. Ilias Kon. Sdralis

100 Tsimiski Street, 2nd Floor
Thessaloniki, Greece

Telephone: +30 2310 222 422

When making a request, we may need to take reasonable steps to verify your identity before providing access to personal data or making changes to your information.

Children’s privacy

The Website is not specifically directed at children.

We do not knowingly collect personal data from children through the Website without appropriate legal authorisation or parental/guardian involvement where required by law.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can take appropriate action.

Links to other websites

The Website may contain links to external websites.

We are not responsible for the privacy practices, security or content of external websites. Once you leave our Website, we recommend reviewing the privacy policy of the website you visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, the Website, applicable legislation or our data-processing practices.

Any changes will be published on this page and the “Last updated” date will be amended accordingly.

We recommend checking this page periodically for the latest version.

Contact us

If you have any questions about this Privacy Policy or the way we process your personal data, please contact us:

UGI Bariatric / Dr. Ilias Kon. Sdralis

Private Practice
100 Tsimiski Street, 2nd Floor
Thessaloniki, Greece

Telephone: +30 2310 222 422

Interbalkan Medical Center of Thessaloniki
10 Asklipiou Street, Pylaia
Thessaloniki 57001, Greece

Telephone: +30 2310 400000
Fax: +30 2310 471 056