Law Office «Papachatzis | Bairaktaris» (hereinafter ‘we’ or ‘our office’), is a law office situated in Athens, 25 Ploutarchou str. P.C. 10675 with email address info@pblegal.gr, Τel.: +30 2103616064-054, Fax +30 210 3616024 and website pblegal.gr

To the purpose of provision of professional service our office may proceed with collection and processing of personal data of natural persons in accordance with the Greek legislation in force, as well as the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter ‘GDPR’). We guarantee the protection and respect of the privacy of our clients as well as other natural persons in transaction with us, and the protection of their personal data kept either in our network or in our premises.

This Personal Data Privacy Policy aims at identifying the processing methods of personal data adopted by our office, explaining what kind of personal data or other personal information we may collect when you use our website and services, how and why we collect this information, the purposes for which we use your personal information, when and to whom we may notify information related to you, as well as how you can manage the information related to you and exercise your rights in accordance with the GDPR.

By providing your personal data to us (either via our website, via email, in person or via the telephone) you agree in the processing in accordance with this Personal Data Privacy Policy.

1. Personal information we collect and how we collect it:

We may collect and further process different kind of personal data during the operation of our office and provision of service. This data may include:

• Basic personal data and communication details such as name and surname, postal address, telephone number, mobile number, fax number, email address.
• Identification data and other verification data, such as copy of identification card or identification documents, date of birth, utility bills etc.
• Business data such as participation in professional or commercial union or association.
• Information related to court disputes or other legal procedures against you or against third parties in connection with you that may be relevant.
• Special categories of personal data, per case, within the framework of handling of cases and always within the framework of exercise of legal duties, our office may collect and process data that belong to special categories of personal data (sensitive personal data), such as information related to health, copies of penal records and other relevant judicial information.
• Information relevant to hiring procedure, such as your CV, history of education and profession, details of professional associations and other information that may be relevant to your recruitment.
• Data of website use, such as data from your visit to our website or information collected by cookies.
• Any other personal data related to you that you may provide us with.
• In accordance with the legal framework in force, our office may collect and process personal data of underage (namely persons under 18 years old) either directly or through their parents or legal guardians or persons having custody, or even third parties, always within the framework of handling legal cases. However, given that it is not always possible to check the age of the persons visiting or using the website of our office , it is recommended to parents or legal guardians of underage to directly contact us in case they ascertain non authorised sharing of data on behalf of underage for whom they are responsible for, in order to exercise the relevant rights provided i.e. for erasure of personal data.

We may collect your personal data through many ways and by different means, and in particular:

• You may provide your personal information to us promptly and directly, for example when completing and submitting the document on our website, when you communicate with us via email, letter or via the telephone or in person when visiting our premises.
• We may collect information from other sources, such as from associates or external advisors you may already have business relationship with to the purpose of further collaboration with our office.
• We may collect information from publicly available sources.

2. For what purposes and how we may use your personal data:

We collect and further process your personal data for defined, specific and legal purposes, as described in the present Personal Data Privacy Policy, justified by the European and national legislation on the protection of personal data and we do not process your personal data in incompatible way with the purposes and laws on personal data protection.

In particular we use personal data:

• For the provision of legal advice or other services requested, including services or solutions in accordance with your instruction or in accordance with your requests for the provision of answers/clarifications in questions.
• For the management of our business activities and management of business relationship with our clients including processing of payments, accounting and auditing services, services in relation to invoicing, supporting service.
• To analyse and improve our service and communication with you.
• To secure compliance of our personnel with the law, the contractual obligations, and in particular the Lawyer’s Code and the Code of Conduct for Lawyers
• To defend your interests, in the sense of proving the adequate or non-adequate behaviour towards you
• For the protection of security and management of access to our premises, IT infrastructure, communication systems and our website as well as prevention and detection of threats for the security, fraud or other criminal or devious activities.
• For investigation purposes and the prevention of non-authorised access to the services and other illegal activities.
• For the determination of persons authorised to proceed with transactions on behalf of our clients, procurers and/or service providers.
• For the compliance with the legal and regulatory obligations including submission of reports and/or audits from national and international regulatory authorities.
• For the compliance with judicial decisions and/or the defence of our legal rights.
• To communicate with you for the latest legal developments, announcements and other information for us via newsletter, letter etc pursuant to your explicit consent.
• For any other purpose relevant and/or appendant to the any of the above purposes or any other purpose for which we have been provided with your personal data.

3. Legal basis for the processing of personal data

We process personal data we collect in accordance with the above, based on the following legal basis:

• Personal information we have in our possession and we process are necessary for the execution of the service agreement or independent contracts or other agreements in which our clients are contracting parties or for the execution of services or answer to questions our clients have asked for otherwise.
• Personal information collected and processed may as well be necessary for our lawful business interests, in view of the provision of the most effective solutions and legal service, management of our business needs, provisions of information to our clients or potential clients with respect to the provided services and for which they have expressed interest for or we believe that it will be to their benefit.
• We may also process personal data in order to comply with a legal obligation our office is under, as well as the fulfilment of the regulatory and legal obligations or judicial or other mandates (i.e. comply with the fiscal procedures, anti- money laundering procedures, detection of fraud etc.)

4. With whom we may share your personal data with:

We may share your personal data only with the below indicative categories of recipients:

• Lawyers – Associates or other providers of legal service and intermediaries, consultants or experts or other professional consultants as per case (i.e. financial, business or other consultants), auditors occupied within the framework of provision of service to our clients or potential clients,
• Third parties service providers to whom we assign particular activities such as IT services, photocopy and translation services, accounting services, post and courier services. In this case we demand from third parties providers to act in accordance with the present Privacy Policy, our instruction and the applicable legislation for personal data protection. We commit ourselves to provide the adequate guarantee, as per the legislation in force, in order to secure the privacy, completeness and security of your personal data in case of possession of third party service providers.
• Notaries, bailiffs or other judicial clerks.
• We may also share your personal data with courts, governmental, regulatory or other authorities, with opposing parties (throughout a dispute) or with legal consultants representing opposing parties when reasonably necessary for the grounding, exercising or defending a legal claim or for reasons of confidential alternative dispute resolution procedure.

5. How long we may retain your personal data for:

We retain your personal data for as long as necessary for the proper performance of the purpose for which data have been collected for as well as any other relevant permitted purpose. When processing of personal data is related to the provision of legal services or grounding, exercising or defending rights before court we will retain your personal data until the deadline for claims recovery or claims settlement, or to the purpose of compliance with the legal obligations with respect to retaining such data.

Retention duration of personal data is also based on our business needs and best practice.

6. Security of personal data

We keep adequate technical and organisation safety measures in order to protect personal data in our possession, networks and systems from unauthorised access, revelation, deterioration, improper use, loss or damage. Security measures indicatively include physical, technical, administrative, electronical and procedural safety procedures, firewalls, physical access security control in the data centre, as well as information access licensing control. Security procedures may also require proof of identity in order to verify your identity before we communicate with you or before we reveal any personal information to you. Although we put our best effort to keep the privacy of your personal data upon receipt, particularly for data received through our website we hereby note that we cannot guarantee 100% of the transmission safety though the internet or any other public network, given that this does not depend entirely on us.

7. Rights of Personal Data Subjects

In order to protect your data you have the below rights. These rights may in certain circumstance be limited by the relevant legislation.

Right of access:

You have the right to be informed for the processing of your data, to have access to your personal data as well as the information in relation to their processing and to request copy of them.

Right to rectification

You have the right to have the data rectified or completed.

The right to erasure

You have the right to request erasure of your data. We will satisfy this right:
If data are no longer necessary for the purposes for which they have been collected for.
If you exercise the right to object.
If your data have been processed unlawfully.
If your date need to be eased in order to meet legal obligation.

Right to restriction of processing

You have the right to obtain restriction of processing of your data. This right is satisfied:

If the accuracy of your personal data is contested.

If processing is unlawful and you request restriction of processing instead of erasure.

If you exercise the right to object, until we verify if legal grounds of processing prevail over the interests, rights and freedom of yours.

Right to data portability

The right to have your data transmitted for the execution of the agreement between us or pursuant to your consent, in a publicly used and machine-readable electronic format, and to request transmission of your data to you as well as to other party who will process them. Necessary prerequisite for this transmission is full payment of your financial obligations in accordance with the legal services agreement between you and our office.

Right to object

You have the right to object to the processing of your personal data to the purpose of our or third parties legal interests.

Right to withdraw consent

If we process your data pursuant to your consent you have the right to withdraw your consent for processing anytime by using our office contact details.

Right to submit complaint to the Hellenic Data Protection Authority

To exercise any of the above rights you have the right to submit complaint to the Hellenic Data Protection Authority (www.dpa.gr), Tel.: +30 210 6475600, Fax: +30 210 6475628, Email address: contact@dpa.gr

To the purpose of submitting questions with respect to the processing of your personal data or exercise of rights provided for in the General Data Protection Regulation you may contact our office by telephone or by email to the email address info@pblegal.gr

8. Updates of Personal Data Privacy Policy

Our office may amend this Personal Data Privacy Policy from time to time to the purpose of compliance with regulatory amendments. Updated versions of this Personal Data Privacy Policy will be uploaded on the website of our office with date reference in order the latest update to be clearly notified.