Introduction
In the context of providing our professional services, we may collect and process personal data of individuals, in accordance with applicable Greek law and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter "GDPR").
This Privacy Policy aims to clarify the personal data processing practices we follow, explaining what kind of personal data or other personal information we may collect during your use of our website and services, how and why we collect this information, for what purpose we use your personal data, when and to whom we may disclose information about you, and how you can manage the information about you and exercise your rights as provided by the GDPR.
This privacy notice explains what information we collect from you when you visit our website or use our services. It is multi-layered, so you can easily find the reason we process your personal information and what we do with it. Therefore, we encourage you to read this notice carefully.
Data Controller - Contact Details
Our company "ELENA PONTIKA", based in Athens, 65 September Street, P.C. 104 33, is legally represented by Elena Pontika, who is responsible for processing the personal information we collect from you.
For general information, you can contact us at mail legal@p2klaw.gr or by sending a postal letter to the above address.
Where do we store the information you have given us?
The data we collect from you is stored within the European Economic Area.
Who has access to your data?
Only the relevant departments of our company have access to your personal data on a case-by-case basis. Your personal data will be used exclusively for the specified purpose each time, and the information will not be disclosed or sold to third parties for unrelated purposes.
For certain processes, we cooperate with third-party companies, to whom we transfer some of your data or who have access to your data through our website. This is done solely to provide you with our services. You will find who has access to your personal data on a case-by-case basis and for specific processes as detailed below.
What information do we collect from you?
We learn about you either through our website or through the activities we organize. It is very important for us to know your interests and concerns as it allows us to create and offer the best services for you.
There are various ways you can share data with us. In most cases, you provide us directly with the data through various forms you send us or mainly through our website (for example, when you contact us or participate in contests). In other cases, we collect the information ourselves (for example, when we use cookies to facilitate your navigation and understand how you use our website).
Below you will find detailed activities that include processing your data, purposes, and descriptions.
Remember, it is your responsibility to ensure that the data you provide to us is true and accurate. Otherwise, the user will be responsible for the inaccuracy or falsity of the said data, as well as for any damages that may arise. Our company reserves the right to cancel the relationship with the said user for the above reasons.
Website Navigation
When you enter our website, the following information is automatically sent from the browser of the terminal you use to our website’s server without any action on your part:
- The IP address of the device with internet access that submitted the connection request to our website,
- The date and time of access,
- The name and web address (URL) of the requested file,
- The website from which the access was made (referrer URL),
- The browser you are using, your computer's operating system that can access the internet, and the name of the access provider, and
- If you have consented to the so-called geolocation of your browser or your operating system or other settings of your terminal, these functions are also recorded.
All the above are temporarily stored in a log file.
Purpose and Legal Basis for Processing
The purpose of all the above is to ensure proper connection establishment, guarantee comfortable use of our website, and evaluate the security and stability of the system.
The legal basis for processing is Article 6(1)(f) of the GDPR, which allows us to process data when it is necessary for the purposes of our legitimate interests.
How long do we keep the information you give us?
The data is temporarily stored for the session's completion and then automatically deleted. Once you stop using our website, the geolocation data is deleted.
Who are the recipients of the data?
To manage our website and create and manage Google Analytics, Google AdWords, and generally provide online advertising consulting services, we collaborate with AgileVendors IKE. In the case of an anonymous user (guest user), the cookies are deleted when the browser is closed. For more information, you can visit AgileVendors IKE's website here.
Participation in Contests
Purpose and Legal Basis for Processing
Through our website, our newsletter, or social media, you can participate in contests we organize from time to time. The legal basis for processing is your consent, based on Article 6(1)(a) of the GDPR.
What information do we need and why?
For your participation, we only need your full name, email, and sometimes your phone number to contact you. If you participate through your social media account, we also process the account details that are publicly known on those platforms.
How long do we keep the information you give us?
One month after the contest ends and the winners are announced, your personal information is deleted unless you have opted for another service from us (e.g., newsletter subscription).
Who are the recipients of the data?
The transfer of information you provide during the contest is made only if necessary for its execution (e.g., the contest is conducted by the company offering the prize, or the prize is sent via a cooperating courier company). The relevant information will be stated each time in the contest terms.
Subscription to our e-newsletter
Purpose and Legal Basis for Processing
The purpose of data collection is to provide you with the service of informing you about news related to our company and its field, contests, and general news in our area of activity. With the data we collect, we create usage profiles, categorized by email address, to better tailor advertising offers in the form of newsletters to your personal interests. The legal basis for processing is your consent based on Article 6(1)(a) of the GDPR.
What information do we need?
Your email address.
Who has access to your data?
To send emails, we collaborate with AgileVendors IKE, which provides us with the MailChimp service.
With your consent to receive newsletters, your data is sent to the above company AgileVendors IKE, which offers us the use of the MailChimp platform. Through this platform, we analyze your usage behavior on our website and newsletters. This means we are informed and collect data on whether you received the newsletters if you opened them, as well as your browsing details, such as your geographic location, IP address, the device and connection you used when visiting, and the browsing software. Additionally, we may collect and aggregate information linked to third parties, such as demographic and browsing data. To ensure you did not make an error when entering your email address, we established a double-opt-in process: after entering your email address in the designated field, we will send you a confirmation link. Only if you select this confirmation link will your email address be sent to AgileVendors IKE for newsletter distribution.
How long do we keep the information you give us?
We will keep your details for newsletter distribution, as well as the data we collect from emails and statistics, for as long as you have consented to receive newsletters. If you do not open the newsletters for a year, we will consider your account inactive and notify you of your impending removal from the newsletter recipients' lists.
You can withdraw your consent to receive the newsletter at any time with future effect by unsubscribing via our website. You will find the unsubscribe link at the end of each newsletter.
Data Processing for Advertising Purposes
Google Analytics
When you visit the website https://p2klaw.gr, we use a third-party service, Google Analytics, to collect log files and details about your browsing on our site.
The data sent includes:
- The IP address of the device with internet access that submitted the request,
- The date and time of access,
- The name and URL of the requested file,
- The website/application from which access was made (referrer URL),
- The browser you are using, your computer's operating system that can access the internet, and the name of the access provider, stored on our website's server in a log file,
- The operating system of your mobile device if you visit the website via a mobile device,
- The type of mobile device and its settings,
- The serial numbers corresponding to your device and its parts,
- The referring website (the website that led you to ours),
- Actions regarding how you use our website, such as sections you visit.
Our website may collect information about the exact location of your mobile device using geolocation and technologies such as GPS (global positioning system), Wi-Fi (wireless local area network), Bluetooth, or proximity to a cell tower. Most mobile devices and browsers allow you to revoke permission to collect such information using the device or browser settings. If you have questions about how to prevent information collection on your exact location, we recommend contacting your mobile device's technical support provider, device manufacturer, software provider, or browser provider. All the above information is processed in a non-identifiable way (it is anonymized).
The data is stored for 50 months for marketing and statistical purposes and then automatically deleted. Once
you stop using our website, the geolocation data is deleted.
Cookies
You can read more about the cookies we use here.
Purpose and Legal Basis for Processing
The purpose of collecting your personal data is to analyze usage behavior within our online presence and newsletters. Evaluating usage behavior includes specifically the areas of the website you visit and which links you activate there.
The legal basis for processing is our legitimate interest under Article 6(1)(f) of the GDPR. If you have given your consent (e.g., to receive newsletters), the legal basis for processing is your consent under Article 6(1)(a) of the GDPR. Processing existing customers' data for advertising purposes is considered our company's legitimate interest.
What information do we collect?
Each time you visit our website, your IP address and the last time you logged in are automatically sent to us.
Why do we need this information?
With the data we collect, we create personalized usage profiles categorized by person or email address, so our advertising offer in the form of newsletters or ads on the website can be better tailored to your personal interests and improve our online offers.
Right to Object
You can exercise your right to object to data processing for the mentioned purposes at any time, free of charge, and with future effect, by contacting us at legal@p2klaw.gr.
Your data will be deleted from the respective email distribution lists if you withdraw your consent to specific advertising media or object to certain advertising media. If you exercise your right to object, your contact email address will be excluded from future data processing for advertising purposes within a reasonable timeframe.
Who are the recipients of the data?
Links to Other Websites
You may find links to and from our partners' websites, advertisers, and other third parties on our website, which are not covered by this privacy notice. We encourage you to read the privacy policy notice on the websites you visit before entering any personal data on them.
Data Recipients, Following a Legal Obligation
Judicial and prosecutorial authorities in the event of claims or criminal acts.
Contacting Us
Purpose and Legal Basis for Processing
Whenever you contact us with general inquiries about our company or our products/services, we keep the information you give us to respond to your requests.
The legal basis for processing is Article 6(1)(f) of the GDPR, i.e., our company's legitimate interest.
What information do we need?
We need information about you so we can contact you, specifically your name, phone number, and email, as well as the content of the letters or emails you have sent us.
Why do we need this information?
We use your personal information to respond and keep a record of our communication with you.
How long do we keep the information you give us?
The information about you is deleted six months after your last communication with us.
Your Rights
We are committed to maintaining the confidentiality of your personal data and ensuring you can exercise your rights. You can exercise your rights free of charge by sending us an email at legal@p2klaw.gr, simply stating the reason for your request and the right you wish to exercise.
If we consider it necessary to confirm your identity, we may request a copy of a document proving your identity.
Specifically, regardless of the purpose or legal basis on which we process your data, you have the following rights:
- Right to Information: You have the right to be informed clearly, transparently, and understandably about how we use your personal data and your rights.
- Right of Access to Your Personal Data: You have the right to be informed by us if we are processing your data. If we process your data, you can request information about the purpose of the processing, the type of data we hold, to whom we give it, how long we store it, if there is automated decision-making, and your other rights, such as correction, data deletion, restriction of processing, and filing a complaint with the Data Protection Authority.
- Right to Rectify Inaccurate Personal Data: If you find an error in your data, you can submit a request to us to correct it (e.g., name correction or address change update). However, by actively providing your personal data to us in any way, you guarantee that it is true and accurate and agree to notify us of any changes or modifications. The user bears sole responsibility for any losses or damages caused to our website, the person responsible for the website, or any third party due to incorrect, inaccurate, or incomplete information in the registration forms. Please remember that you should generally provide only your personal data, not third-party data unless permitted according to this Privacy Notice.
- Right to Erasure/Right to be Forgotten: You can request us to delete your data if it is no longer necessary for the above processing purposes. However, your right to erasure may not be satisfied if there is a pending dispute or legal conflict with our company.
- Right to Data Portability: You can request to receive your data in a readable format or ask us to transfer it to another data controller.
- Right to Restrict Processing: You can request us to restrict the processing of your data while your objections to processing are being examined.
- Right to Object to Data Processing: You can object to processing your data or withdraw your consent, and we will stop processing your data if there are no other compelling and legitimate reasons that override your right.
Additionally, you have the right to object to processing your data for advertising purposes. You can withdraw your consent at any time:
- By following the related settings in the emails sent to you (unsubscribe),
- By disabling cookies, changing your browser settings. For more information, you can visit our Cookies Policy here,
- By contacting us directly here,
- Right not to be Subject to Automated Decision-Making: You have the right to object when a decision that concerns you is based solely on automated processing and significantly affects you or would have legal consequences for you.
When do we respond to your requests regarding personal data?
We respond to your requests free of charge, without delay, and in any case within one (1) month from when we receive your request. However, if your request is complex or if there are many requests, we will inform you within the month if we need to extend it by another two (2) months, within which we will respond to you.
If your requests are manifestly unfounded or excessive, especially due to their repetitive nature, our company may impose a reasonable fee, considering the administrative costs for providing the information or executing the requested action or refuse to proceed with the request.
Right to Complain to the Supervisory Authority
You have the right to file a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data violates the applicable national and regulatory data protection framework. The competent supervisory authority in Greece is the Hellenic Data Protection Authority (postal address: Kifisias 1-3, Athens / www.dpa.gr, tel. 2106475600).
How will you be informed of any amendments to this Privacy Notice?
We will update this Privacy Notice whenever necessary. If there are significant changes to the Privacy Notice or how we use your personal data, we will post it prominently on our website. We encourage you to read this Privacy Notice periodically to know how your data is protected.
If you wish to contact us regarding any issues related to your Data processing and the exercise of your rights, you can reach us at (+30) 210 825 3580 or by email at legal@p2klaw.gr.