We are a law firm providing legal and consulting services and are regulated and bound by the legal framework and professional ethics for law firms, including professional secrecy. We are also strongly committed to data protection and this privacy notice details our approach to data protection issues. The present privacy notice (hereinafter, the “Notice”) is drafted in accordance with Article 13 of the General Data Protection Regulation (Regulation (EU) No. 2016/679) to inform Clients about the use of their personal data.
If you have any questions regarding this Notice and the way your personal data are processed, please contact us at the following email: gdpr@drakopoulos-law.com
Data Controller
DRAKOPOULOS LAW FIRM, seated at 332, Kifissias Ave, 152 33 Halandri, Greece, T: +30 210 6836561 (“DRAKOPOULOS”).
Data Collection & Data Processing
The following table sets out the purposes of processing of the personal data provided by our Clients, as well as the legal basis of such processing:
| Purpose of Processing activity | Categories of personal data processed | Legal Basis of Processing |
| Provision of legal services | Name, surname, e-mail address, communication content, national/tax identification numbers, various personal data related to business or personal affairs, special categories of personal data (depending on the case assigned to DRAKOPOULOS) | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 par. 1 (b))
In case of special categories of personal data, processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity (art.9 par. 2 (f)) |
| Compliance with accounting and tax regulations | Name, surname, e-mail address, communication content | Processing is necessary for compliance with a legal obligation to which the controller is subject (art. 6 par. 1 (c)) |
| Communication and marketing | Name, surname, e-mail address | Processing is necessary for the purposes of the legitimate interests pursued by the controller (art. 6 par. 1 (f) and art. 11 par. 3 of Law No. 3471/2006 (e-privacy Directive)
The purpose of the legitimate interests of DRAKOPOULOS is to communicate various information on our business to the Clients. |
Disclosure to Recipients and transfer to Third Countries
In general, DRAKOPOULOS does not transfer Clients’ personal data to third parties, unless this is needed in order to provide Clients with the requested legal services (e.g. Courts and administrative authorities). DRAKOPOULOS may transfer Clients personal data to other third parties (e.g. public utility companies and banks), should this be needed for the performance of our services.
Should the case entrusted to us involves jurisdictions in Third Countries (i.e. countries outside EU and the EEA), the legal basis shall usually be art. 49 par. 1 (e), i.e. the transfer is necessary for the establishment, exercise or defence of legal claims.
Security
DRAKOPOULOS maintains and processes Clients’ personal data in a manner that ensures their protection. Specifically, your personal data are processed solely by specifically authorized personnel or by suppliers of DRAKOPOULOS which are bound towards DRAKOPOULOS with the same obligations regarding Clients’ personal data protection, while all appropriate organisational and technical measures are in place for data security and protection against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access and any other form of illicit processing.
Data retention
The personal data that Clients provide us with are retained only for as long as it is required for the purposes for which they were collected or as required by law.
Data subject rights
This section presents Clients’ rights with respect to their personal data. These rights are subject to certain exceptions, reservations or limitations.
We kindly ask Clients to submit their requests responsibly. DRAKOPOULOS will respond as soon as possible and in any case within one month as of receipt of the request. If the examination of Clients’ request requires more time, Clients will be informed accordingly. DRAKOPOULOS shall always take into account professional ethics and secrecy for lawyers when examining such requests.
To exercise their rights, Clients may contact us at the following email: gdpr@drakopoulos-law.com
DRAKOPOULOS shall ensure that Clients exercise the following rights uninterruptedly:
- Right of information/update
Clients have the right to request and receive clear, transparent and easily understandable information about how we process their personal data.
- Right of access
Clients have the right to access their personal data for free, except in the following cases, where there may be a reasonable charge to cover the administrative expenses of DRAKOPOULOS:
- Requests are manifestly unfounded or excessive in particular because of their repetitive character
- Additional copies of the same information are requested
- Right to Rectification
Clients have the right to request the correction of their personal data if they are inaccurate or incomplete.
- Right to Erasure
Clients have the right to request the deletion or removal of their personal data when it is no longer necessary for the purposes collected or there is no legitimate reason for DRAKOPOULOS to continue processing them. The right to erasure shall not apply in case there is legitimate reason for retaining Clients’ personal data.
- Right to Restriction of Processing
In some cases, Clients have the right to restrict or terminate further processing of their personal data. In cases where processing has been restricted, Clients’ personal data remain stored, without being subject to further processing.
- Right to Data Portability
Clients have the right to request their personal information, which they have provided us with, in a structured and commonly used format readable by machines and forward that data to another data controller, if applicable.
- Right to Object
Clients have the right to object at any time and for reasons related to their particular situation to the processing of their personal data, unless DRAKOPOULOS demonstrates imperative and legitimate reasons for such processing.
- Rights on automated individual decision-making and profiling
DRAKOPOULOS does not make automated individual decision-making, including profiling.
Right to complain
For any further information in relation to Clients’ rights or in case Clients wish to submit a complaint, they may contact the Hellenic Data Protection Authority (HDPA), phone number: +30-210 6475600, site: http://www.dpa.gr/
Modifications to the present Privacy Notice
Our goal is to regularly review and update this Privacy Notice, so as to comply with the relevant applicable legislative and regulatory requirements and provide at the same time the optimum personal data protection. Any further update will be uploaded to our website www.drakopoulos-law.com.
Definitions
Personal Data: any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as name, phone number, email address, ID number, VAT registration number.
Data Subject: the identified or identifiable natural person to whom the Personal Data or/and the Special Categories of Personal Data are referring to.
Clients: clients of DRAKOPOULOS, natural persons or legal entities, to whom DRAKOPOULOS provides legal services and advice regarding their legal rights and responsibilities, representation before civil and criminal courts, business transactions and other matters in which legal advice and other assistance are sought.
Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data Controller: for the purposes of the present Privacy Notice, the data controller is DRAKOPOULOS, by means of defining the purposes and the means of personal data processing.
Special Categories of Personal Data: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data, health or data concerning to the sex life or the sexual orientation of the individual. Criminal records shall be treated as Special Categories of Personal Data.
Personal Data Breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.
