Privacy Policy

1. Who we are — Data Controller

This Privacy Policy describes how Kontogianni, Klokouzas & Associates Law Firm processes the personal data of visitors to the website www.aklawoffice.gr, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

The data controller is Athina Kontogianni, Lawyer, member of the Piraeus Bar Association.

Head office: 105B Ioannidon St., Agios Vasileios, Piraeus 18537 — tel. +30 210 452 3809
Branch: 95 Evergeti Konstantinou Prifti St., Keratea, Attica 19001 — tel. +30 229 906 6252
Email: info@aklawoffice.gr
Contact hours: Monday – Friday 09:00–19:00, by appointment and also via Google Meet
VAT number / Tax office: [To be completed]
G.E.MI. number: [To be completed]
Piraeus Bar Association reg. no.: [To be completed]

For any matter concerning the processing of your data you may contact us using the details above.

2. What data we collect

2.1 Data you give us

Through the website’s contact form we collect only the details you fill in yourself:

full name
email address
type of matter (the area of law you select)
the content of your message

If you contact us by telephone or by email, we process the details you disclose to us in the course of that communication.

2.2 Technical data

For security and proper operation, the hosting server records technical data such as the IP address, the date and time of the request, the browser type and the page from which the request originated. This data is not used to build visitor profiles.

2.3 No tracking

We use no tracking cookies, no analytics tools and no advertising tracking pixels. We do not build profiles and we do not carry out automated decision-making. For details on the storage of your language preference on your device, see our Cookie Policy.

3. Purposes of processing and legal bases

Responding to your request submitted through the contact form. Legal basis: your consent (Article 6(1)(a) GDPR), which you give by expressly ticking the relevant box on submission.
Assessment of the case, preparation and performance of the engagement. Legal basis: performance of a contract or steps taken prior to entering into a contract at your request (Article 6(1)(b) GDPR).
Website security, prevention of abusive submissions and technical maintenance. Legal basis: our legitimate interest in the secure operation of our systems (Article 6(1)(f) GDPR).
Compliance with legal obligations arising in particular from tax and social security legislation and from the Greek Code of Lawyers. Legal basis: legal obligation (Article 6(1)(c) GDPR).

Providing the data in the form is optional; without it, however, we cannot respond to your request.

4. Legal professional privilege

The firm is bound by legal professional privilege, as enshrined in Article 38 of the Greek Code of Lawyers (Law 4194/2013). A lawyer must maintain absolute confidentiality as to everything entrusted to them by their client and is entitled to refuse to give evidence on those matters.

Legal professional privilege prevails and applies cumulatively alongside our obligations under the GDPR: no information covered by it is disclosed to third parties, even where a request is made, unless disclosure is expressly permitted or required by law.

Please note that sending a message through the website does not in itself create an engagement. Please do not send sensitive or confidential documents before the engagement has been agreed.

5. Recipients of the data

Access to your data is limited to the lawyers and associates of the firm, who are bound by a duty of confidentiality, to the extent required in order to deal with your request. In addition, data is processed on our behalf by:

the website hosting provider
the email service provider

The above act as processors, are bound by an agreement under Article 28 GDPR and do not use the data for their own purposes. Data may be disclosed to judicial or other public authorities only where required by law and always subject to legal professional privilege.

We do not transfer data outside the European Economic Area without the appropriate safeguards under Chapter V GDPR (an adequacy decision or standard contractual clauses). We do not sell or trade personal data.

6. Retention period

Contact requests that do not result in an engagement: retained for up to twelve (12) months from the last communication and then deleted.
Client files: retained for as long as required by law, by the Code of Lawyers (Law 4194/2013) and by the applicable limitation periods, as well as for the defence of legal claims.
Technical server logs: retained for a short period, in accordance with the hosting provider’s policy, and for security purposes only.

7. Your rights

As a data subject you have, subject to the conditions of the GDPR, the following rights:

Access to the data concerning you (Article 15)
Rectification of inaccurate data or completion of incomplete data (Article 16)
Erasure — the “right to be forgotten” (Article 17)
Restriction of processing (Article 18)
Portability of your data (Article 20)
Objection to processing based on legitimate interest (Article 21)
Withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Article 7(3))

To exercise your rights, please write to info@aklawoffice.gr or call +30 210 452 3809. We reply without undue delay and in any event within one (1) month of receiving the request; that period may be extended by a further two (2) months where necessary owing to the complexity or the number of requests, in which case you will be informed accordingly. We may ask for additional information in order to verify your identity.

The exercise of these rights is subject to the limitations laid down by law, in particular where the data is covered by legal professional privilege or is necessary for the establishment, exercise or defence of legal claims.

8. Right to lodge a complaint

If you consider that the processing of your data infringes the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority: 1–3 Kifissias Avenue, 11523 Athens — www.dpa.gr. We would, however, appreciate it if you contacted us first, so that we can resolve the matter directly.

9. Data security

We apply appropriate technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration and unauthorised access: encrypted transmission of website data (HTTPS/TLS), restriction of access to strictly necessary personnel, confidentiality undertakings by our associates, regular software updates and measures to prevent automated submissions through the contact form.

Please note that transmission of data over the internet is never entirely secure. For particularly confidential matters we suggest that you contact us by telephone or arrange an appointment.

10. Minors

The website is addressed to adults. We do not collect, and do not knowingly seek to collect, data relating to minors. If it emerges that a minor’s data has been submitted without the consent of the person exercising parental responsibility, that data is deleted without delay.

11. Changes to this policy

This Privacy Policy may be updated in order to reflect changes in the operation of the website or in the legal framework. The version in force from time to time is posted on this page with an indication of the date of last revision. We recommend that you consult it periodically.

See also our Terms of Use and our Cookie Policy. For any clarification, contact us.