1. Introduction and Scope of this Privacy Policy
    • DTK Law Firm is committed to protecting the privacy of visitors to its website and ensuring that personal data are processed in accordance with applicable data protection legislation. Please read this Privacy Policy carefully in order to understand how we collect, use, process and protect your personal data, as well as the rights you may exercise in relation to such data.
    • This Privacy Policy applies to the use of dtklawfirm.gr, the official website of DTK Law Firm, with registered offices at 19, Skoufa Street, 106 74, Athens, Greece (hereinafter referred to as the “Company”, “we”, “us” or “our”).
    • Your use of this website (the “Website”) is governed by the present Privacy Policy (referred to herein as the “Privacy Policy”).
    • This Privacy Policy has been drafted in accordance with:
  • Regulation (EU) 2016/679 (“GDPR”),
  • Law 4624/2019,
  • and the applicable Greek and EU legislation regarding the protection of personal data.
  • The Company acts as “controller” within the meaning of the GDPR.
  • This Privacy Policy explains:
  • which personal data we collect,
  • how and why, we collect and process such data,
  • who may receive your personal data,
  • how long we retain them,
  • and your rights as a data subject.
  • The Website is not intended for individuals under the age of eighteen (18). We do not knowingly collect personal data relating to minors.
  • Failure to provide certain personal data may prevent us from responding to your requests, providing services or communicating information that may be of interest to you.
  • The Website may also contain links to third-party websites, applications or platforms which are not operated or controlled by the Company. This Privacy Policy does not apply to such third-party services, and the Company bears no responsibility for their privacy practices.
  • DTK Law Firm reserves the right to amend or update this Privacy Policy from time to time. Any amendments shall become effective upon publication on this Website. We therefore encourage you to review this page periodically.
  • If you do not agree with the terms of this Privacy Policy, please discontinue use of the Website.
  • Should you have any questions regarding this Privacy Policy or wish to exercise any of your rights in relation to your personal data, you may contact us:
  • by post at: 19, Skoufa Street, 106 74, Athens, Greece; or
  • by e-mail at: info@dtklawfirm.gr.
  1. Collection of Personal Data
    • Information Provided Directly by You
      • We may collect and process personal data when:
  • you visit or interact with the Website,
  • you contact us,
  • you submit an enquiry,
  • you submit a job application,
  • or otherwise communicate with us.
  • The Company may also process personal data when you voluntarily submit a job application, whether by e-mail or through the relevant section of the Website.
  • Where available, if you subscribe to newsletters or updates, the Company may send communications that may be relevant or of interest to you, based on your consent.
  1. Categories of Personal Data Processed
    • When using the “Contact Us” section of the Website, the Company may process information directly provided by you, including:
  • name,
  • e-mail address,
  • reason for communication,
  • and the content of your message.
  • Such information is processed for communication purposes, including responding to requests and understanding users’ needs and expectations.
  • Where you submit a job application, we may additionally process:
  • CVs,
  • contact details,
  • educational background,
  • professional experience,
  • and other information voluntarily provided by you.

 

  1. Legal Grounds for Processing
    • The Company processes personal data only where permitted under applicable law and where an appropriate legal basis exists.
    • Depending on the circumstances, processing may be based on:
  • your consent,
  • the Company’s legitimate interests,
  • compliance with legal obligations,
  • or other lawful grounds provided under applicable legislation.

Examples include:

  • communication following your enquiry,
  • newsletter subscriptions,
  • processing job applications,
  • or retaining CVs for future opportunities.
  • The Company’s legitimate interests may include:

 

  1. a) ensuring the secure and efficient operation of the Website and preventing fraud or misuse
  2. b) improving the Website and services provided
  3. c) analyzing Website usage and visitor behavior in order to improve content, services and user experience.
  4. Disclosure of Personal Data

5.1. The Company may disclose personal data to affiliated entities, partners, subsidiaries or service providers where necessary:

  • for compliance with legal obligations,
  • for the protection of legitimate interests,
  • or for purposes connected with the operation and administration of the Website and services.

5.2. Such disclosure shall always take place in accordance with applicable data protection legislation.

  1. Retention of Personal Data

6.1. Personal data are retained only for as long as necessary depending on:

  • the purpose of processing,
  • legal obligations,
  • and applicable retention requirements.

6.2. Communication-related data are retained for the period necessary to review and respond to the relevant request.

6.3. Job application data are generally deleted within one (1) month following receipt of the application, unless:

  • there is a relevant employment interest; or
  • you have consented to the retention of your CV for future opportunities.

6.4. Where an employment or collaboration relationship is established, additional information regarding processing as employee or associate shall be provided separately.

  1. Your Rights

7.1. Under the GDPR and applicable Greek legislation, you may exercise the following rights:

  1. the right of information (article 13),
  2. the right of access (article 15),
  3. the right to rectification (article 16),
  4. the right to erasure “right to be forgotten” (article 17),
  5. the right to restriction of processing (article 18),
  6. the right to data portability (to receive your personal data in a structured and commonly used format – article 20 where applicable) and
  7. the right to object (article 21) which applies to certain data processing activities.

7.2.  In addition, as we require your explicit consent to process your personal data, you have the right to withdraw your consent at any time by contacting us by following the instructions below.

7.2.1. More specifically your rights are the following:

  1. Right of access

You may contact us to explain to you if and which data is retained for you, as well as the way we process such data. You may also request a copy of your personal data which is retained for you.

  1. Right to rectification

If you believe that your data is not accurate or needs to be updated, you have the right to obtain the rectification of inaccurate personal data and to have incomplete data completed.

  1. Right to erasure

Under certain circumstances, e.g., personal data are no longer necessary, you withdraw consent, the data have been unlawfully processed, you have the right to obtain the erasure of personal data.

  1. Right to restriction of processing

If you believe that your data is not accurate or their processing is unlawful or you think that does no longer needs your data or you have objections to automated processing, you have the right to obtain the restriction of processing.

  1. Right to object

You have the right to object to processing your personal data on grounds relating to your situation, unless, among other reasons, there are compelling and legitimate grounds for the processing which override your interests, rights and freedoms. You also have the right to object when a decision concerning you is based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you (the law provides exceptions which apply).

  1. Right to data portability

You have the right to receive the data concerning you in a structured, commonly used and machine-readable format, as well as the right to transmit that data to another entity (controller), indicated by you too.

If you have provided your consent with regard to specific collection, process and use of your personal data, you may withdraw that consent at any time. The previously mentioned withdrawal of consent applies only in the future.

You can find more information regarding your rights on the Hellenic Data Protection Authority’s (HDPA) website here.

In case you exercise any of your rights, we will take all appropriate measures available for the satisfaction of your request within thirty (30) days – with the possibility of extension according to the applicable law- following the receipt of the relevant request. We may either inform you on the acceptance of your request or on any objective grounds that hinder the processing of your request.

  1. Right to Lodge a Complaint

You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) regarding the processing of your personal data.

HDPA address

1-3 Kifisias Avenue,

115 23 Athens,Greece

Further information is available at: www.dpa.gr.

  1. Security of Personal Data

The Company implements appropriate technical and organizational measures to ensure a level of security appropriate to the risks associated with the processing of personal data.

Such measures are designed to protect personal data against:

  • accidental or unlawful destruction,
  • loss,
  • alteration,
  • unauthorised disclosure,
  • or unauthorised access.

Security measures may include:

  • confidentiality safeguards,
  • regular testing and assessment of security measures,
  • and restricted access to authorized personnel only.

 

Privacy Policy