WEBSITE PRIVACY POLICY

(«www.aalawyers.gr»)
The present constitutes the Privacy Policy (Personal Data Protection Policy) pursuant to which the Law Firm «Dimitrios Anastasopoulos – Anastasia Afrati & Associates», in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and acting as the Data Controller, collects, stores, uses and in general processes your personal data in specific online activities.
This Privacy Policy also describes the way your personal data are used, disclosed and protected, the rights you have in relation to your personal data, as well as how you may contact us. For any questions regarding this Privacy Policy or any matter relating to the processing of your personal data and the exercise of your rights, you may contact our Law Firm through the contact details available on our website.

1. What is Personal Data?
The term “Personal Data” refers to information of natural persons, such as first and last name, postal address, email address, contact telephone number, etc., which do identify or can identify your identity, hereinafter referred to as “Personal Data” or “Data”.

2. What is the Processing of Personal Data?
Any operation or line of actions operations, performed with or without the usage of automated means, on Personal Data or on sets of Personal Data such as the collection, the recording, the organization, the structuring, the storage, the adaptation or the alteration, the retrieval, the consultation, the use, the disclosure by transmission, dissemination or otherwise making available, the alignment or the combination, the restriction, the erasure or the destruction of.

3. Which Personal Data do we collect?
We only collect your strictly necessary Personal Data, as mentioned below, which are adequate and relevant to the purpose they are intended for.
o Regarding communication through the contact form or through the email addresses listed on our website:
– your first and last name;
– your email address and your telephone number;
– any other personal data potentially included in your message.
o Regarding the sending newsletters to those who register on our website:
– your email address;
– the date of your registration;
– the IP address of your registration.
o Regarding promotional activities on social media, namely on Facebook and/or Instagram and/or LinkedIn and/or YouTube:
– any information potentially contained in your personal messages.
In addition, there is use of cookies, which collect your necessary personal data to ensure the optimal functioning of our website, only with your consent and in accordance with our Cookies Policy, which is also published on our website. You can view the Cookies Policy here.

4. For which purposes do we collect your Personal Data?

o Regarding communication via the contact form or through the email address listed on our website: We collect your Personal Data directly from you, as provided by you when completing the contact form, for the purpose of communicating with you.
o Regarding the sending of newsletters to those who subscribe on the website: We collect your Personal Data directly from you, as you provide it while using our website, in order to send you newsletters.

5. What is the legal basis for the processing of your Personal Data by “AALAWYERS LAW FIRM”?
We collect your Personal Data only if we have a legal basis for processing them.
o Regarding communication via the contact form or through the email address listed on our website:
In any case, the processing will be based on your consent, which is expressed by sending the relevant communication message. You may revoke your consent at any time.
o Regarding the promotion of the activities of our Law Firm on our website:
In any case, the processing will be based on your consent obtained in writing or upon the execution of our contract of which you will be a part of. As to your consent, you may revoke it at any time.
o Regarding the sending of newsletters to those who subscribe on the website:
In any case, the processing will be based on your consent, which is expressed by the listing of your email address to the relevant field of our website. You may revoke your consent at any time.

Please note that, in case you are under 16 years of age, consent must be provided or approved by the person who has parental responsibility for you
o Regarding the electronic distribution of press releases to online media. In any case, the processing will be based on our overriding legitimate interests, namely informing the public about our activities through the media, within the framework of freedom of expression and information in the course of our activities.

6. Who has access to your Personal Data and/or who are the recipients of your Personal Data?
o Regarding communication through the contact form or through the email address listed on our website:
Access to your Personal Data is limited to the absolutely essential personnel of our Law Firm and is granted only when necessary.
o Regarding the promotion of the activities of our Law Firm on our website:
Access to your Personal Data is limited to the absolutely essential personnel of our Law Firm and is granted only when necessary, as well as the visitors of the website.
o Regarding the sending of newsletters to those who subscribe on the website:
Access to your Personal Data is limited to the absolutely essential personnel of our Law Firm and is granted only when necessary.
o Regarding the electronic distribution of press releases to online media:
Access to your Personal Data is limited to the absolutely essential personnel of our Law Firm and is granted only when necessary.

7. How do we ensure that our associates respect your Personal Data?

8. Our associates have agreed:

o to maintain confidentiality;
o not to disclose your Personal Data to third parties without our authorisation;
o to implement appropriate technical and organisational security measures;
o to comply with the legal framework governing the protection of personal data and, in particular, Regulation (EU) 2016/679 (GDPR).

8. Do we transfer your Personal Data outside the EU?
As a general rule, we do not transfer your Personal Data outside the European Union.

9. When do we delete your Personal Data?
Your Personal Data is retained only for the period of time necessary to fulfill the purpose for which you have provided it to us, in accordance with applicable legislation, unless an extension of this period is required due to legal claims or our legal obligations.
o Regarding communication through the contact form or through the email address listed on our website:
Your Personal Data is deleted one year after the conclusion of our communication.
o Regarding the promotion of the activities of our Law Firm on our website:
Your Personal Data is deleted after the conclusion of the respective advertising campaign.
o Regarding the sending of newsletters to those who subscribe on the website:
Your Personal Data is deleted if six months have passed, without you having being sent a newsletter.
o Regarding promotional activities on social media, namely on Facebook and/or Instagram and/or LinkedIn and/or YouTube:
Your Personal Data collected through communication via Facebook Messenger and Instagram Direct is deleted three months after our last communication.
o Regarding the electronic distribution of press releases to online media:
Your Personal Data is deleted following your departure out of the respective media.

10. Is your Personal Data secure?
Recognizing the importance of the security of your Personal Data, we have taken all appropriate organizational and technical measures to ensure the security and protection of your Personal Data against any unauthorized access, misuse, alteration, prohibited dissemination, loss, or accidental or unlawful destruction, and any other form of unlawful processing.
These measures are reviewed and amended whenever deemed necessary.

11. What are your rights?
o You have the right to access your Personal Data. This means you have the right to ask us how and which of Personal Data we process. You may request information regarding the purpose of the processing, the types of Personal Data we hold, to whom we disclose it, how long we store it, and whether automated decision-making is used.
o You have the right to rectify inaccurate Personal Data.
Should you identify an error in your Personal Data, you may submit to us a request for the rectification of the inaccurate Personal Data and the completion of any missing information τη συμπλήρωση ελλιπών (e.g. correction of your name), so that it is complete and accurate.
o You have the right to erasure.
You may request us to erase your Personal Data, if it is no longer necessary to the aforementioned purposes of processing.
o You have the right to the portability of your Personal Data.
You may request us to provide you, in a readable format, with the Personal Data you have provided to us or request us to transmit them to another Data Controller.

You have the right to the limitation of the processing
You may request us to limit the processing of your personal data for as long as the examination of your objections as to the processing is pending.
o You have the right to withdraw consent/object to the processing of your Personal Data.
You may object to the processing of your Personal Data at any time or revoke your consent, where it has been required, and we will stop processing your Personal Data, unless there are other compelling and legitimate reasons that override your right, or unless it is no longer necessary for the aforementioned processing purposes.
The above rights correspond to the data subject rights provided for under the GDPR.

12. How can you exercise your rights?
You can exercise your rights by contacting us through any of the contact methods listed in the “Contact” section of our website, specifying your request to exercise your rights:
Once we receive your request, a specific form will be sent to you to fill out for the purpose of processing it.

13. When do we respond to your Requests?
We respond to your Requests free of charge and without delay, and in any case within (1) month upon receiving it. However, if your Request is complex or if you have submitted a large number of Requests, we will notify you within the month should we need to request an extension of an additional (2) two months, within which we will respond to you.
If your requests are manifestly unfounded or excessive, particularly due to their repetitive nature, we may charge a reasonable fee, taking into account the administrative costs of providing the information or taking the requested action, or we may refuse to act on the Request, providing you with a reasoned response.

In case you do not receive a response within the time limit specified above or if the response you received was unsatisfactory or if your matter has not been resolved, you have the right to file a complaint with the Hellenic Data Protection Authority (HDPA) (www.dpa.gr).

14. Do we use automated decision-making, including profiling, when processing your Personal Data?
We do not make decisions or engage in profiling based on the automated processing of your Personal Data.

15. What is the applicable law regarding our processing of your Personal Data?
The applicable law is the Greek law, as set forth in accordance with the General Data Protection Regulation 679/2016, and, in general, the applicable national and European legislative and regulatory framework for the Protection of Personal Data. The courts of Athens have jurisdiction over any disputes that may arise in connection with your Personal Data.

16. How will you be informed of any amendments to the present Privacy Policy;
We update this Policy whenever necessary. If there are significant changes to the Policy or to the way we use your Personal Data, we will publish the updated version on our website and notify you by any appropriate means.

We encourage you to review this Policy at regular intervals so that you remain informed about how your Personal Data are protected.
This Privacy Policy was last updated on 1 September 2026.