DATA PROTECTION NOTICE

The Law Office “Stergios Konstantinou & Associates” with distinctive title “SGKLegal” based in Athens (8 Ippokratous Street, PC 10679, tel. (+30) 2103600366, e-mail: info@sgklegal.gr), (hereinafter referred  to as the “Law Office), in its capacity as Data Controller, collects and further processes your personal data, only if absolutely necessary, for explicit and legitimate purposes, based on Regulation (EU) 2016/679, Law 4624/2019 as well as Law 3471/2006, as in force.

Definitions

For the purposes of this notice, the following terms have the following meanings:

  • “Personal Data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • ‘Special categories of personal data’ means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
  • ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available; association or combination, restriction, deletion or destruction.
  • ‘controller’ means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, or the specific criteria for its appointment may be provided for by Union or Member State law. For for the purposes of this policy, the Law Office acts as Data Controller.
  • ‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • ‘Consent’ means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
  • “Existing Legislation”: The current EU and National regulatory framework on the protection of personal data, namely the General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”), Hellenic Laws 4624/2019 and 3471/2006, the Court of Justice of the European Union (hereinafter “CJEU”) jurisprudence as well as the Decisions, Directives and Opinions of the European Data Protection Board (hereinafter “EDPB”) and the Personal Data Protection Authority (hereinafter “HDPA”).

 

  1. Processing Activities, in the context of case handling

Categories of personal data

Purpose

Legal basis

Retention period

Recipients

Identification data (e.g. full name, father’s and mother’s name, ID card, gender, date and place of birth)

The provision of the legal services of the Law Office

Article 6 para. 1 item b’ GDPR

Article 9 para. 2 approx. f’ GDPR

5 years after the end of the case, personal data in customer files are anonymized

1.     Processors: Processors:

A. Cloud Service Providers – Microsoft

B. Invoicing Software Service Providers (AADE)

2.     Courts, Authorities, Opposing Parties and/or wherever required in the context of handling your case.

Communication data (e.g. postal and e-mail address, telephone number (landline, mobile))

Any other information relevant to your case (including any special categories)

  1. Personal data we process in the context of prospective associates

Categories of personal data

Purpose

Legal basis

Retention period

Recipients

Identification data (e.g. full name, father’s and mother’s name, ID card, gender, date and place of birth)

Evaluation of a job applicant and possible recruitment

Legitimate interest (Article 6 (1) (f) GDPR), which we pursue in our effort to hire qualified and appropriate personnel for the purposes of our business activity.

6 months or longer based on your consent

Processors:

Cloud service providers – Microsoft

Communication data (e.g. postal and e-mail address, telephone number (landline, mobile))

CV data (e.g. marital status, any disabilities, Education and work experience data, work experience)

  1. Personal data collected by the Law Office through the website

Editing Activity

Categories of personal data

Purpose

Legal basis

Retention period

Recipients

Communication

Identification Data (Full Name)

Contact of website users with the Law Office

Article 6 (1) (f) GDPR  – Direct and interactive communication with you

5 years

Processors: Microsoft

Contact data (telephone, emai)

Data included in the communication

Newsletter

Email

Article 11 para. 1 or 3 & Art. 6 para. 1 item a’ or f’ GDPR – Informing recipients about the actions of the office and/or legal developments

Until your consent is withdrawn

Processors: Mailchimp

Data we collect automatically

When you use our Website, we also collect information automatically, some of which may be personal data. This includes information such as language settings, IP address, location, device settings, device operating system, activity details, time of use, redirect URL, status report, user information (information about browser version), operating system, browsing result (simple visitor or registered customer), browsing history,  the kind of data you saw. We may also collect data through cookies. For information on the use of cookies, click here.

Rights of Data Subjects

The Company ensures that it is able to respond immediately to the requests of the subjects for the exercise of their rights in accordance with the Existing Legislation.

In particular, every data subject shall have the following rights:

Access

Rectification

Erasure

Restriction

Finally, you have the right to object to a processing activity based on our legitimate interest.

In case you provide your consent for a longer period of keeping your CV, you can withdraw this consent at any time.

You may address any of the above rights to info@sgklegal.gr and the Law Office will respond immediately (in any case within thirty (30) days from the submission of the request), informing you in writing of the progress of its satisfaction.

For any complaint regarding this information note or personal data protection issues, if we do not satisfy your request, you may contact the Personal Data Protection Authority, www.dpa.gr.

Disclaimer for Third-Party Websites-Social Media Buttons

On this Website there are social media buttons – social media widgets (eg Facebook, Instagram) with the use of which, after the user connects to the social network, a special digital fingerprint is created, for which both the Law Office and the social network itself act as joint controllers.

For the Law Office, the purpose of processing this data is to improve the functionality of the website and the services provided as well as to analyze its traffic. The legal basis for processing personal data is the achievement of the legitimate interest of the customer and in particular interoperability with applications used by the customer (Article 6 (1) (f) GDPR).

The Company does not control nor is responsible for any subsequent processing carried out on them by the joint Controllers.

For more information on the data processing policy and the options for configuring these networks, you can visit the following websites: