DATA PRIVACY POLICY
Papathanasiou Law Firm (hereinafter “PAPATHANASIOU LAW“) respects the privacy of your personal data and ensures its protection in accordance with applicable legal provisions. This policy informs you about how we process your personal data and provides information about your rights and how you can exercise them.
(1) PERSONAL DATA
Any information concerning an identified or identifiable natural person (data subject) (e.g. name, surname, telephone, email address).
Special categories of personal data are personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data, health-related data, a person’s sex life or sexual orientation.
In the context of practicing law and providing legal advice to our clients, we process personal data that are necessary for the purpose pursued in each case. Listed below are examples of the categories of personal data we collect and process:
- Personal identification data: e.g. name, surname, title.
- Personal contact data: e.g. phone, email.
- Financial/tax data and payment data.
- Personal data to fill a job vacancy e.g. curriculum vitae, supporting documents supporting the curriculum vitae.
- Personal data for entering into an employment relationship, e.g. name, surname, Tax ID no, Tax Office.
- Data collected through the use of Cookies
- Sensitive data such as health data only if this is absolutely necessary for the handling of a legal case or the employment relationship.
(2) PURPOSES OF PROCESSING
We process the personal data of natural persons in the context of the intended purpose in each case. Indicatively listed below are the purposes for which we process personal information:
- Provision of legal services: In the context of practicing law, we process data of our clients, as well as their counterparties and opponents. We also process data for the legitimate purposes of our practice.
- Conclusion of contracts: In the context of our professional activities we collect all necessary personal data in order to conclude contracts mainly with third parties and our suppliers.
- Purposes of communication: We collect personal data in order to communicate with our clients as well as to respond to their requests for legal advice.
- Compliance: We collect personal data of individuals in order to comply with applicable legislation (e.g. tax obligations) and due diligence obligations (Know Your Client).
- Recruitment: In the context of filling a vacant job position, we collect CVs of candidates to carry out the necessary evaluation and judge which candidate is suitable for a specific job position in our office.
We may post photos and videos of events or interviews of individuals on our website or our social media platforms.
(3) METHODS OF COLLECTION
We may collect personal data through the individual himself during the provision of legal services, through a contact or client onboarding form where the individual enters his information, via an application for employment, via lawful public sources and through messages sent to our office’s social media.
(4) LEGAL BASIS FOR PROCESSING
We process your personal data only if one of the legal bases set out below applies:
- Performance of a contract/order: personal data are processed in order to fulfill instructions given to us by our client or our contractual obligations.
- Legitimate interest: processing is necessary for the purposes of the legitimate interests we pursue as long as there is no serious impact on the fundamental rights and freedoms of the data subjects.
- Legal obligation: in some cases personal data are subject to processing for the purpose of our compliance with statutory provisions (e.g. tax obligations).
- Consent: the data subject has consented to the processing of his/her personal data for one or more specific purposes after having been fully and clearly informed about the respective processing and for the related purpose. Such consent can be withdrawn at any time.
(5) RECIPIENTS
Personal data collected may be shared or transmitted to third parties, if this is required for the fulfillment of legal obligations, the execution of instructions from our clients or it is necessary for the fulfillment of the functions of this website. In any case, care is taken in order to comply with the safeguards of applicable legislation.
Your data are processed internally by our office from the absolutely necessary personnel assigned for this purpose, observing the necessary conditions of confidentiality. In the event that we appoint third parties who process personal data on our behalf and in accordance with our instructions (e.g. accountants), we will ensure that the party performing the processing has appropriate security and personal data protection measures in place, as provided for by law.
(6) RETENTION PERIOD
We keep the personal data of natural persons for the period that is necessary to fulfill the respective processing purpose as well as to comply with our legal obligations.
(7) SECURITY
We take care to implement all the necessary technical and organizational measures in order to protect personal data from illegal access and incorrect use. The measures taken concern preventive security procedures, control of granting access rights to authorized personnel as well as technical and physical access restriction mechanisms.
(8) TRANSFER OF PERSONAL DATA TO NON-EU/EEA COUNTRIES
The data we collect is processed within the European Union. If your data is sent to countries outside the EU/EEA, all necessary measures will be taken to ensure an adequate level of personal data protection in accordance with applicable legislation.
(9) COOKIES
Cookies are small text files that are stored on your computer or mobile device when you visit a website. The Cookies Policy provides further details on the use of cookies as well as the ways in which you can delete or prevent the storage of certain cookies on your computer or mobile device.
(10) RIGHTS OF NATURAL PERSONS
As a personal data subject you have the following rights:
Right of access: You have the right to be informed by us, among other things, if and how we process your personal data, for what purpose we collect and use your personal information, what personal data we hold about you, for how long we store data and whether automated decision-making takes place.
Right to rectification: You have the right to request us to correct your personal information that is inaccurate or to have incomplete personal information completed.
Right to erasure: You have the right to request from us to delete your personal data as long as there is no reason to justify non-deletion on our part.
Right to portability: You have the right to request us to receive the personal data you have provided to us in a readable format or to ask us to transfer it to another controller.
Right to restriction: You have the right to request us to restrict the processing of your personal data in accordance with the specific legal provisions.
Right to object: You have the right to object at any time to the processing of your personal data or to withdraw the consent you have given us, in which case we will stop the respective processing if there are no legitimate and compelling reasons that justify the further processing of your personal data.
You can exercise your rights at any time by sending a request to [email protected] . We will consider your request and respond to you within thirty (30) days from the date of receipt and confirmation of your identity, unless the request is unusually complex and burdensome in which case the time period may be extended for an additional sixty (60) day period and you will be informed on that.
Fulfilling your request is basically free of charge. However, in the event that a request is manifestly unfounded or excessive, a reasonable fee may be imposed.
In any case, we would like to inform you that in the event that we do not respond to your request and you consider that applicable legislation on the protection of personal data has been violated, you have the right to file a complaint with the Hellenic Data Protection Authority (HDPA): Kifisias 1 -3, Athens / www.dpa.gr, tel. 2106475600.
(11) CONTACT
For any information or clarification regarding the processing of your personal data, you can contact us either by post at the address: Papadiamantopoulou 24C, 115 28, Athens, or electronically at the address: [email protected]
(12) AMENDMENTS TO THIS POLICY
From time to time it is necessary to adjust the content of the information contained in this policy. In case of future modifications, we will publish the modified version here.