Privacy Notice
The Law Firm “MORFO KOUTSOMICHALI & ASSOCIATES LAW FIRM” with distinctive title “MKLAWADVISORS” based in 1 Avrilianis str, Nea Smyrni, Athens tel. +30 6971724845, e-mail: info@mklawadvisors.com, (hereinafter referred to as the “Law Firm“), in its capacity as Data Controller, collects and further processes your personal data, only if absolutely necessary, for explicit and legitimate purposes, based on Regulation (EU) 2016/679, Law 4624/2019, as in force.
Definitions
For the purposes of this notice, the following terms have the following meanings:
-
“Personal Data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
-
‘Special categories of personal data’ means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
-
‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available; association or combination, restriction, deletion or destruction.
-
‘controller’ means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, or the specific criteria for its appointment may be provided for by Union or Member State law. For the purposes of this policy, the Law Office acts as Data Controller.
-
‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
-
‘Consent’ means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
-
“Existing Legislation”: The current EU and National regulatory framework on the protection of personal data, namely the General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”), Hellenic Laws 4624/2019 and 3471/2006, the Court of Justice of the European Union (hereinafter “CJEU”) jurisprudence as well as the Decisions, Directives and Opinions of the European Data Protection Board (hereinafter “EDPB”) and the Personal Data Protection Authority (hereinafter “HDPA”).
Which personal data do we process?
The personal data we may process in the context of handling the case include:
● Identification data (e.g. full name, patronymic and maiden name, ID number, gender, date and place of birth).
● Contact data [e.g. postal and e-mail address, telephone number (landline, mobile).
● Any other information relevant to your case (including any special categories).
● Information collected from publicly available sources, such as the Hellenic General Commercial Register.
The personal data we may process through the website includes:
● Identification Data (Full Name).
● Contact Data (telephone, email).
● Data included in the communication.
Data we collect automatically:
When you use our Site, we also collect information automatically, some of which may constitute personal data. These include information such as language settings, IP address, location, device settings, device settings, device operating system, activity data, time of use, redirect URL, status report, user information (information about browser version), operating system, browsing result (single visitor or registered customer), browsing history, type of data viewed. We may also collect data through cookies. For information on the use of cookies, click here.
For what purpose and on what lawful basis do we process your personal data?
We may process your personal data for the following purposes only:
● Providing legal advice or services that you may have requested from the Law Firm.
Where you have expressly given us your consent, we may - where required - also process your personal data for the following purposes:
● Communicate with you through the channels you have approved, as mentioned above, to keep you informed of the latest legal developments, announcements and other information about us, through newsletters, newsletters, etc.
We process the personal data we collect as above solely on an appropriate lawful basis.
● The provision of legal services that you commission and wish to receive from us. (e.g. fulfilment of our contractual obligations towards you or actions prior to the conclusion of the contract, Article 6 para. 1(b) GDPR).
● Communication between users of the website and the Law Firm (Article 6 par. 1(f) GDPR, Article 6(1)(f) GDPR, Article 11(1)(f) GDPR, Article 11(1)(f) GDPR. 1 or 3 & Article 6 para. 1(a) or (f) GDPR).
● Consent given under certain circumstances, as defined by the legal framework, in order to receive updates about our services, news, etc.
● With regard to special categories of data, we process them when necessary for the establishment, exercise or defence of legal claims or when the courts act in their judicial capacity (Article 9(2)(f) GDPR).
Where is your personal data shared?
● Lawyers - Partners (including mediators), consultants or experts involved in your case.
● We may share your personal data with third parties to whom we assign any of our rights or obligations. In addition, for the purposes of the Golden Visa process, we may share your data with associated agents if and only if the latter are acting in a specific capacity as intermediaries, as the case may be.
● We may disclose your personal data to courts, law enforcement authorities, regulatory authorities when necessary to establish, exercise or defend a legal claim or in the context of alternative dispute resolution.
In all cases, Law Firm retains control over and remains fully responsible for your personal data and uses appropriate safeguards required by applicable law to ensure the integrity and security of your personal data. In these cases, we sign agreements with the third parties to whom we assign processing of personal data on our behalf, in order to ensure that processing takes place in accordance with the current legislative framework and that any natural person may freely exercise the rights conferred upon the latter.
How long do we keep your personal data?
Your personal data will be deleted when it is no longer reasonably necessary for the purposes set out above and more specifically according to the following criteria:
● Where processing is required by law, your personal data will be stored for as long as required by the relevant provisions.
● Where the processing is based on the provision of legal services and/or the establishment, exercise or defence of legal claims or whenever the courts act in their judicial capacity, your personal data will be retained until such claims are settled and the relevant legal services are provided or until the limitation period of any claims against our company has expired or in accordance with the letter of undertaking.
● Where you withdraw your consent (where applicable) and we are not legally obliged or otherwise permitted to continue to store such data. It is clarified, however, that the withdrawal of your consent does not affect the lawfulness of the processing based on your consent for the period prior to the withdrawal.
Transfer of your personal data to third countries:
Your personal data will only be transferred to locations within the European Union (EU) or the European Economic Area (EEA).
What rights do you have in relation to your personal data?
Right of access:
You have the right to be informed and to check the lawfulness of the processing. Therefore, you enjoy the right of access to your data and to receive additional information about the processing.
Right of rectification:
You have the right to study, correct, update or modify your personal data by contacting us at the above-mentioned contact details.
Right of erasure:
You have the right to request the erasure of your personal data if we process it with your consent or to protect our legitimate interests. In all other cases, such as when providing legal services or complying with a legal obligation, this right may be subject to limitations or may not exist at all.
Right to restrict processing:
You have the right to request the restriction of the processing of your personal data in the following cases: (a) where the accuracy of your personal data is contested and until the corresponding verification is completed; (b) where you object to the erasure of your personal data and request, instead of erasure, the restriction of their use; (c) where your personal data are not required for the purposes of the processing, but are required for the establishment, exercise or defence of legal claims; and (d) where you object to the processing of your personal data.
Right to object to processing:
You have the right to object at any time to the processing of your personal data based on our legitimate interest.
Right to data portability:
You have the right to receive your personal data free of charge in a format that allows you to access, use and process it by a commonly used processing method. In addition, you have the right to request, where technically feasible, that the data be transferred to another controller. This right exists for data that you have provided and that are processed by automated means following your consent or the performance of a contract.
Right to withdraw consent:
Where processing is based on your request (to receive updates, you have the right to freely withdraw it; withdrawal of your consent does not affect the lawfulness of processing based on consent in the period prior to the withdrawal of that consent.
To exercise any of the aforementioned rights, you may contact our Law Firm at the postal address 1 Avrilianis str., Nea Smyrni, Athens tel. (+30) 6971724845, e-mail: info@mklawadvisors.com and it will respond promptly [in any case within thirty (30) days from the submission of the request], informing you in writing of the progress of the satisfaction of your request.
Right to lodge a complaint with the Hellenic Data Protection Authority
You have the right to lodge a complaint with the Hellenic Data Protection Authority via its website (www.dpa.gr), through the portal https://eservices.dpa.gr/ .
Personal data security
The Law Firm implements appropriate technical and organizational measures to ensure the processing of personal data and to prevent accidental loss or destruction and unauthorized and/or unlawful access to data, use, modification or disclosure.
Update of the Privacy Policy
This Privacy Policy was last updated in November 2024. We reserve the right to update and change this from time to time to reflect any changes in the way we process your personal data or changing legal requirements. In the event of such changes, we will post the amended Privacy Policy on our website. The changes will take effect as soon as they are posted on this website.
Last updated: 08/02/2025