Data Protection Policy

1.Introduction
The protection of your personal data is of utmost importance to us.
For this purpose, we implement all necessary technical and organisational measures to safeguard the personal data processed by our firm, ensuring that such processing is carried out at all times in compliance with the applicable legal and regulatory framework, and in particular with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Law 4624/2019.
This Policy sets out the terms and conditions governing the protection of personal data of our clients and prospective clients, as well as the principles under which we collect, process and safeguard the integrity and confidentiality of such data.
Our firm reserves the right to amend the content of this Policy at any time and without prior notice, at its discretion. Accordingly, you are advised to review this Policy each time you visit our website to ensure that you agree with its terms as in force from time to time.

2.Data Controller – Contact Details
The law firm operating under the name “Dimitrios N. Apostolopoulos & Associates” acts as the Data Controller in respect of all personal data it collects, processes and stores.
Dimitrios N. Apostolopoulos & Associates
Address: 122 Nestoros Street, 13122 Ilion, Greece
Telephone: +30 210 2634502
Email: info@adlawfirm.eu
Data Protection Officer (DPO): [to be completed]

3.Personal Data We Collect and Process
The legal office “Dimitrios N. Apostolopoulos & Associates” collects and processes personal data of its clients, including but not limited to: full name, address details, telephone number, email address, profession, identity card details, tax identification number, contents of case files, and data contained in court decisions relating to its clients, for the purpose of providing legal services.

4.Purposes and Legal Bases for Processing
All personal data is collected and processed solely for the purposes of providing legal services to our clients and/or prospective clients.
Processing is carried out, as applicable, on the following legal bases:
(1) Performance of a contract and pre-contractual measures
Where processing is necessary for the performance of a contract for the provision of legal services or in order to take steps at the request of the data subject prior to entering into a contract.
(2) Compliance with legal obligations
Where processing is necessary for compliance with legal and regulatory obligations to which our firm is subject.
(3) Legitimate interests
Where processing is necessary for the purposes of the legitimate interests pursued by our firm or third parties, including our clients, in particular for the establishment, exercise or defence of legal claims.
(4) Consent
Where processing is based on the explicit consent of the data subject for specific purposes.
(5) Contact form
Where processing is necessary to respond to enquiries submitted through our website.

5. Recipients of Personal Data
Access to personal data is granted, in principle, only to authorised personnel of our firm, strictly within the scope of their duties.
Personal data may be disclosed to third-party collaborators, such as bailiffs, notaries, and other professionals, where necessary for the handling of a case. All such disclosures are made under strict confidentiality and in full compliance with legal professional privilege.
Furthermore, data may be disclosed to public authorities where required or permitted by law, in order to comply with legal obligations.
Personal data is not transferred outside the European Economic Area, unless this is strictly necessary due to the nature of the case. In such cases, appropriate safeguards are implemented in accordance with applicable data protection legislation.

6. Data Retention
Personal data is retained for as long as necessary, depending on the nature and course of each case.
In particular:
– For civil and administrative matters, up to twenty (20) years, unless a shorter limitation period applies by law.
– For criminal matters, up to twenty-five (25) years, unless a shorter limitation period applies or the matter is concluded earlier.
Data may also be retained for longer periods where required by law or necessary for the establishment, exercise or defence of legal claims.
Where processing is based on consent, data is retained until such consent is withdrawn.

7. Data Subject Rights
You have the following rights under the GDPR:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw consent at any time
These rights may be subject to limitations where processing is required for legal obligations or for the establishment, exercise or defence of legal claims.

8.Exercise of Rights
To exercise your rights or for any enquiry regarding the processing of your personal data, you may contact us at:
Email: info@adlawfirm.eu
Tel: +30 210 2634502
We will respond without undue delay and, in any event, within one (1) month of receipt of your request. This period may be extended by two (2) additional months where necessary, taking into account the complexity or number of requests.

9.Right to Lodge a Complaint
You have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) regarding the processing of your personal data.

10. Contact
If you have any questions, comments or requests regarding this Policy or the processing of your personal data, please contact us at:
info@adlawfirm.eu