We are a law firm providing legal and consulting services and are regulated and bound by the legal framework and professional ethics for law firms, including professional secrecy. We are also strongly committed to data protection and this privacy notice details our approach to data protection issues. The present privacy notice (hereinafter, the “Notice”) is drafted in accordance with Article 13 of the General Data Protection Regulation (Regulation (EU) No. 2016/679) to inform Candidate employees, expressing their interest to be recruited by our firm by sending their curriculum vitae (CV), about the use of their personal data.
If you have any questions regarding this Notice and the way your personal data are processed, please contact us at the following email: gdpr@drakopoulos-law.com
Data Controller
The Data Controller for the collection of your data and their processing is DRAKOPOULOS LAW FIRM, seated at 332, Kifissias Ave, 152 33 Halandri, Greece, T: +30 210 6836561 (“DRAKOPOULOS”). That means that DRAKOPOULOS determines the purposes and the means of your personal data processing.
Data Collection & Data Processing
The following table sets out the purposes of processing of the personal data provided by the Candidate employees, as well as the legal basis of such processing:
| Purpose of Processing activity | Categories of personal data processed | Legal Basis of Processing |
| Recruitment | Personal details, CV data (work experience, studies, interests, military obligations), contact details, recommendations, any further information included in the CV or voluntarily provided by the Candidate employee. | Art. 6 par. 1 (f)- processing is necessary for the purposes of the legitimate interests pursued by the controller and the Candidate employee, enabling DRAKOPOULOS to assess the suitability of the Candidate employee in the light of the recruitment needs of DRAKOPOULOS |
Disclosure to Recipients and transfer to Third Countries
DRAKOPOULOS does not transfer Candidate employees’ personal data to third parties, but may be accessible by IT service providers in the context of maintenance of IT systems and will be stored in third-party cloud service providers, such as Microsoft 365.
Security
DRAKOPOULOS maintains and processes Candidate employees’ personal data in a manner that ensures their protection. Specifically, your personal data are processed solely by specifically authorized personnel or by suppliers of DRAKOPOULOS which are bound towards DRAKOPOULOS with the same obligations regarding Candidate employees’ personal data protection, while all appropriate organisational and technical measures are in place for data security and protection against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access and any other form of illicit processing.
Data retention
The personal data that Candidate employees provide us shall be retained for a period of six (6) months as of their receipt.
Data subject rights
This section presents Candidate employees’ rights with respect to their personal data. These rights are subject to certain exceptions, reservations or limitations.
DRAKOPOULOS will respond as soon as possible and in any case within one (1) month as of receipt of the request. If the examination of Candidate employee’s request requires more time, Candidate employee will be informed accordingly. DRAKOPOULOS shall always take into account professional ethics and secrecy for lawyers when examining such requests.
To exercise their rights, Candidate employees may contact us at the following email: gdpr@drakopoulos-law.com
DRAKOPOULOS shall ensure that Candidate employees exercise the following rights uninterruptedly:
- Right of information/update
Candidate employees have the right to request and receive clear, transparent and easily understandable information about how we process their personal data.
- Right of access
Candidate employees have the right to access their personal data.
- Right to Rectification
Candidate employees have the right to request the correction of their personal data if they are inaccurate or incomplete.
- Right to Erasure
Candidate employees have the right to request the deletion or removal of their personal data when it is no longer necessary for the purposes collected or there is no legitimate reason for DRAKOPOULOS to continue processing them.
- Right to Restriction of Processing
In some cases, Candidate employees have the right to restrict or terminate further processing of their personal data. In cases where processing has been restricted, Candidate employees’ personal data remain stored, without being subject to further processing.
- Right to Data Portability
Candidate employees have the right to request their personal information, which they have provided us with, in a structured and commonly used format readable by machines and forward that data to another data controller, if applicable.
- Right to Object
Candidate employees have the right to object at any time and for reasons related to their particular situation to the processing of their personal data, unless DRAKOPOULOS demonstrates imperative and legitimate reasons for such processing.
- Rights on automated individual decision-making and profiling
DRAKOPOULOS does not make automated individual decision-making, including profiling.
Right to complain
For any further information in relation to Candidate employees’ rights or in case Candidate employees wish to submit a complaint, they may contact the Hellenic Data Protection Authority (HDPA), at 1-3, Kifissias str., P.C. 115 23, Athens, Greece, Tel: +30 210 6475600, email: contact@dpa.gr .
Modifications to the present Privacy Notice
Our goal is to regularly review and update this Privacy Notice, so as to comply with the relevant applicable legislative and regulatory requirements and provide at the same time the optimum personal data protection. Any further update will be uploaded to our website www.drakopoulos-law.com.
