We are a law firm providing legal and consulting services and are regulated and bound by the legal framework and professional ethics for law firms, including professional secrecy. We are also strongly committed to data protection and this privacy notice details our approach to data protection issues. The present privacy notice (hereinafter, the “Notice”) is drafted in accordance with Article 13 of the General Data Protection Regulation (Regulation (EU) No. 2016/679) to inform Clients about the use of their personal data.
If you have any questions regarding this Notice and the way your personal data are processed, please contact us at the following email: gdpr@drakopoulos-law.com
Data Controller
The Data Controller for the collection of your data and their processing is DRAKOPOULOS LAW FIRM, seated at 332, Kifissias Ave, 152 33 Halandri, Greece, T: +30 210 6836561 (“DRAKOPOULOS”). That means that DRAKOPOULOS determines the purposes and the means of your personal data processing.
Data Collection & Data Processing
The following table sets out the purposes of processing of the personal data provided by our Clients, as well as the legal basis of such processing:
| Purpose of Processing activity | Categories of personal data processed | Legal Basis of Processing | |||
| Provision of legal services | Name, surname, e-mail address, communication content, national/tax identification numbers, various personal data related to business or personal affairs, special categories of personal data (depending on the case assigned to DRAKOPOULOS) | Art. 6 par. 1 (b)- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
Art. 9 par. 2 (f)- In case of special categories of personal data, processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity |
|||
| Compliance with accounting and tax regulations | Name, surname, e-mail address, communication content | Art. 6 par. 1 (c)- processing is necessary for compliance with a legal obligation to which the controller is subject | |||
Disclosure to Recipients and transfer to Third Countries
DRAKOPOULOS does not transfer Clients’ personal data to third parties, unless this is needed in order to provide Clients with the requested legal services (e.g. Courts and administrative authorities). DRAKOPOULOS may transfer Clients’ personal data to other third parties (e.g. public utility companies and banks), should this be needed for the performance of our services or personal data may also be accessible by IT service providers in the context of maintenance of IT systems and will be stored in third-party cloud service providers, such as Microsoft 365.
Security
DRAKOPOULOS maintains and processes Clients’ personal data in a manner that ensures their protection. Specifically, your personal data are processed solely by specifically authorized personnel or by suppliers of DRAKOPOULOS which are bound towards DRAKOPOULOS with the same obligations regarding Clients’ personal data protection, while all appropriate organisational and technical measures are in place for data security and protection against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access and any other form of illicit processing.
Data retention
The personal data that Clients provide us shall be retained as long as it is required for the purposes for which they were collected or as required by law.
Data subject rights
This section presents Clients’ rights with respect to their personal data. These rights are subject to certain exceptions, reservations or limitations.
DRAKOPOULOS will respond as soon as possible and in any case within one (1) month as of receipt of the request. If the examination of Client’s request requires more time, the Client will be informed accordingly. DRAKOPOULOS shall always take into account professional ethics and secrecy for lawyers when examining such requests.
To exercise their rights, Clients may contact us at the following email: gdpr@drakopoulos-law.com
DRAKOPOULOS shall ensure that Clients exercise the following rights uninterruptedly:
- Right of information/updateClients have the right to request and receive clear, transparent and easily understandable information about how we process their personal data.
- Right of accessClients have the right to access their personal data.
- Right to RectificationClients have the right to request the correction of their personal data if they are inaccurate or incomplete.
- Right to ErasureClients have the right to request the deletion or removal of their personal data when it is no longer necessary for the purposes collected or there is no legitimate reason for DRAKOPOULOS to continue processing them.
- Right to Restriction of ProcessingIn some cases, Clients have the right to restrict or terminate further processing of their personal data. In cases where processing has been restricted, Clients’ personal data remain stored, without being subject to further processing.
- Right to Data PortabilityClients have the right to request their personal information, which they have provided us with, in a structured and commonly used format readable by machines and forward that data to another data controller, if applicable.
- Right to ObjectClients have the right to object at any time and for reasons related to their particular situation to the processing of their personal data, unless DRAKOPOULOS demonstrates imperative and legitimate reasons for such processing.
- Rights on automated individual decision-making and profilingDRAKOPOULOS does not make automated individual decision-making, including profiling.
Right to complain
For any further information in relation to Clients’ rights or in case Clients wish to submit a complaint, they may contact the Hellenic Data Protection Authority (HDPA), at 1-3, Kifissias str., P.C. 115 23, Athens, Greece, Tel: +30 210 6475600, email: contact@dpa.gr.
Modifications to the present Privacy Notice
Our goal is to regularly review and update this Privacy Notice, so as to comply with the relevant applicable legislative and regulatory requirements and provide at the same time the optimum personal data protection. Any further update will be uploaded to our website www.drakopoulos-law.com.
