1. Data controller

The controller of personal data is The Way We Eat, a Nutritional Care Center that manages this website and the services provided through it.

Trade name	The Way We Eat
Legal name	Adamidi Nikoleta
Tax ID (AFM)	164611976
Address	89-91 Vasileos Pavlou Avenue, 16673 Voula, Attica
Email	info@thewayweeat.gr
Phone	+30 211 402 9778

2. What personal data we collect

We collect only the data necessary for communication, service provision, appointment management, sending updates and the lawful operation of the business.

Data category	Indicative data	Source
Identification details	First name, last name.	Forms, bookings, communication.
Contact details	Email, phone.	Contact form, online booking system, newsletter.
Booking details	Service, date, time, session type, booking notes, booking status.	Online booking system.
Nutritional assessment data	History, goals, habits, measurements, biochemical tests, information you provide during the session.	Directly from the client.
Financial/transactional data	Payment method, payment status, transaction amount, receipts, details required to complete or confirm a payment. Full bank card details are not stored by The Way We Eat.	Payment at the office, Viva Wallet or another payment provider in the future, accounting management.
Technical data	IP address, browser, device, logs, cookies, consent preferences.	Website, hosting, security/cookie tools.

3. The purposes for which we use the data

To respond to requests via form, email or phone.
To manage bookings, changes, cancellations and appointment reminders.
To provide personalized nutritional care services.
To send information about the session, such as instructions, an online meeting link or updates.
To process payments, where available, and to confirm the transaction status.
To issue legal documents and meet accounting/tax obligations.
To improve the website, user experience and security.
To send the newsletter, only where a relevant subscription or consent has been given beforehand.

4. Legal bases for processing

The processing of personal data is based, depending on the case, on one or more of the following legal bases:

Legal basis	When it applies
Performance of a contract or pre-contractual steps	When you request information, book an appointment or receive a service.
Consent	For the newsletter, non-essential cookies or special categories of data where required.
Legal obligation	For tax, accounting or other records that must be kept by law.
Legitimate interest	For website security, prevention of misuse, essential business communication and the protection of rights.

5. Special categories of data / health data

As part of the nutritional assessment, we may process information related to your health, such as medical or pharmaceutical history, biochemical tests, allergies, pregnancy, body measurements or other information you choose to provide to us.

This data is used exclusively to provide the service you requested.
It is not shared with third parties without a legal basis or consent, unless required by law.
Please do not send sensitive documents or test results unless they are necessary for the session.
If you send data by email, please note that email is not always the most secure communication channel.

6. Appointment bookings

The website may use an online booking system to manage appointments. During booking, details such as full name, email, phone, selected service, date, time, session type, booking notes, booking status and, where applicable, payment status may be collected.

Booking data is used to confirm, manage, change or cancel the appointment.
Automated confirmation, reminder or update emails regarding the appointment may be sent.
The booking may be linked to the Terms of Use, Bookings & Payments, including the no-refund policy for confirmed or prepaid bookings.
If online payment via Viva Wallet or another payment provider is enabled in the future, the provider will process the necessary transaction details.
The Way We Eat does not store full bank card details on the website.

8. Who may have access to the data

Access to the data may be granted only to the necessary persons or partners who support the operation of the website and the provision of the services.

Recipient category	Purpose
Hosting / technical support provider	Operation, security and maintenance of the website.
Email / newsletter provider	Sending communication emails, confirmations or updates.
Payment provider, such as Viva Wallet	Processing online payments, transaction confirmation, fraud prevention and secure payment completion, if online payment is enabled in the future.
Accountant or legal advisor	Meeting legal obligations and protecting rights.
Analytics/cookie tools	Statistical analysis of traffic, only where there is a legal basis or consent.

9. Data retention period

We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law or to protect legal rights.

Category	Indicative retention period
Contact requests	For as long as required to handle the request and a reasonable period afterwards.
Bookings/appointments	For the duration of the collaboration and for as long as required for administrative or legal purposes.
Nutritional/health history	For as long as required to provide the service and in accordance with professional/legal obligations.
Accounting/tax data	For as long as required by applicable tax and accounting legislation.
Newsletter	Until you unsubscribe or withdraw your consent.
Cookies	Depending on the category and lifespan of each cookie.

10. Your rights

In accordance with applicable data protection legislation, you have rights regarding your personal data.

Right to information and transparency regarding how your data is processed.
Right of access to the personal data we hold about you.
Right to rectification of inaccurate or incomplete data.
Right to erasure, where permitted by law.
Right to restriction of processing.
Right to data portability, where applicable.
Right to object to certain forms of processing.
Right to withdraw consent, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, you can contact us at info@thewayweeat.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.

11. Data security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, alteration or disclosure.

Use of a secure HTTPS connection.
Restricted access to data only where necessary.
Technical maintenance and updates of the website.
Protective measures at the hosting, website and plugin level.

Nevertheless, no method of transmitting or storing data on the internet is completely secure.

12. Cookies Policy

Cookies are small files stored on your device when you visit a website. They are used to make the website work properly, remember preferences, measure traffic or support third-party service functions.

12.1 Cookie categories

Category	Description	Consent
Strictly necessary	Necessary for the basic operation of the website, security, the booking form, storing cookie choices and the operation of the online booking system.	No consent required.
Functionality	Help the website remember choices or provide enhanced features.	Consent may be required, depending on use.
Statistics / Analytics	Help us understand how the website is used, so we can improve the user experience.	Consent is required, unless fully anonymous/exempt use applies where permitted.
Marketing	Used for personalized advertising, remarketing or measuring advertising campaigns, if enabled.	Consent required.
Third-party services	May be placed by services such as maps, video, security tools, payment providers or communication platforms.	Depending on the function and legal basis.

12.2 Indicative cookies/technologies that may be used

The list below is indicative and is updated according to the technologies used on the website at any given time.

Service	Purpose	Category
Basic website operation	Security, session management, correct page loading and technical operation.	Necessary
Online booking system	Operation of the booking form, service/date selection and appointment management.	Necessary / Functionality
Cookie consent tool	Storing your cookie choices.	Necessary
Google Analytics / another analytics tool	Statistical traffic analysis, if enabled.	Analytics
Google Maps / Google Fonts / Google Meet / reCAPTCHA	Maps, fonts, online sessions or form protection, if used.	Functionality / Third-party
Viva Wallet or another payment provider	Secure completion of online payment, transaction confirmation, payment security and fraud prevention, if online payment is enabled in the future.	Necessary / Third-party
Meta Pixel or advertising tools	Remarketing and ad measurement, only if enabled.	Marketing

12.3 Managing cookie preferences

You can change your cookie preferences at any time from the relevant banner or the cookie settings button, if it is active on the website.

13. Contact regarding personal data

For any matter concerning this Privacy & Cookies Policy or to exercise your rights, you can contact us:

Email: info@thewayweeat.gr
Phone: +30 211 402 9778
Address: 89-91 Vasileos Pavlou Avenue, 16673 Voula, Attica

This policy may be updated when our services, the technologies we use or our legal obligations change. The latest version will be published on this page.