Privacy Policy

Last Updated: May 2018

Your privacy is one of our fundamental commitments at Papapetros, Papangelis, Tatagia and Partners Law Firm (hereinafter referred to as “PPT Legal” or “we”).

Therefore, we take outmost care to process your personal data in accordance with the principles set forth in the data protection legislation applicable in Greece, including (EU) Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

Personal data represents any information relating to an identified or identifiable natural person, and an identifiable person is that person that may be identified directly or indirectly, particularly by reference to an identification number or to one or more factors specific to its physical, psychological, mental, economic, cultural or social identity.

This privacy policy regards the personal data of our clients, business partners/suppliers, other persons contacting and visiting us and of the representatives thereof, potential employees, interns or associates and it applies to data collected through our website www.pptlegal.gr, as well as to all other personal data we collect through e-mail or other off-line contacts. The privacy policy describes:

the purposes for which we collect and use your personal data;
the legal basis for the processing;
the categories of personal data we collect from you and process;
the duration of processing of such data;
your rights as data subjects and the manner in which you may exercise them;
to whom we may disclose your personal data

PURPOSES, LEGAL BASIS FOR PROCESSING AND CATEGORIES OF PERSONAL DATA

In the context of your interaction with PPT Legal, you, as a natural person, may be subject to the data processing activities that we perform. Thus, we use your personal data in the following cases:

1. If you are a client or potential client of PPT Legal:

1.1. Providing the legal services requested from us

We use your relevant personal data in order to prepare and provide the services requested from us. For instance, in preparing materials required during the course of litigation and arbitration proceedings, we may have to rely on your personal data of relevance for your case. We rely in this case on the performance of our agreement as legal basis for the processing.

1.2. Communicating with you

We use your contact details in order to communicate with you with respect to your requests and any other relevant business-related matters. We also rely in this case on the performance of our agreement as legal basis for the processing.

1.3 Data processing as obligation imposed by the laws and regulations governing the legal profession

We may process some of your data in the context of providing the services based on legal obligations or obligations imposed upon PPT Legal by the laws and regulations governing the legal profession (e.g., a know-your-client obligation). In such case, the legal basis for the processing is the relevant legal obligation.

1.4 Sending our newsletters

We may also use your contact details in order to provide to you in electronic form our newsletters on relevant developments in the legislation, case law, and authorities’ practice, but only if you have subscribed and, hence, given your express consent to such processing. You can always withdraw your consent expressing thereby your option of not receiving our newsletters in the future by clicking “Unsubscribe” when you receive the respective e-mail or by writing at privacy@pptlegal.gr .

The categories of data processed in the context of our relationship with you are your name, e-mail, phone, fax, address, as well as other personal data you may provide directly to us.

2. If you are a representative or contact person of a PPT Legal’s client or potential client:

2.1. Providing the legal services requested from us

We use your relevant personal data in order to prepare and provide the services requested from us. For instance, we may use the personal data to manage the relationship with the client you represent or we may have to rely on your personal data in preparing materials required during the course of litigation and arbitration proceedings. We rely in this case on the legitimate interest in providing our services according to our area of activity and managing the relationship with our clients.

2.2. Communicating with you

We use your contact details in order to communicate with you with respect to your requests and any other relevant business-related matters. We also rely in this case on the legitimate interest in providing our services according to our area of activity.

2.3 Data processing as obligation imposed by the laws and regulations governing the legal profession

We may process some of your data in the context of providing the services based on legal obligations or the obligations imposed upon PPT Legal by the laws and regulations governing the legal profession (e.g., a know-your-client obligation). In such case, the legal basis for the processing is the legal obligation.

2.4 Sending legal newsletters

We may also use your contact details in order to provide to you in electronic form our newsletters on the relevant developments in the legislation, case law, and authorities’ practice, but only if you have subscribed and, hence, given your express consent to such processing. You can always withdraw your consent expressing thereby your option of not receiving our newsletters in the future by clicking “Unsubscribe” when you receive the respective e-mail or by writing at privacy@pptlegal.gr.

In all cases, the data is provided either directly by you or by the client. The categories of data processed in this context are generally your name, position, e-mail, phone, fax, address, identification data, as well as other personal data provided to PPT Legal, usually by you, as needed to fulfill the above purposes.

3. If you are an employee or other collaborator of a PPT Legal client or potential client:

3.1. Providing the legal services requested from us

3.2. Communicating with you

3.3 Data processing as obligation imposed by laws and regulations governing the legal profession

3.4 Sending legal newsletters

We may also use your contact details in order to provide to you in electronic form our newsletters on relevant developments in the legislation, case law, and authorities’ practice, but only if you subscribed and, hence, given your express consent to such processing. You can always withdraw your consent expressing thereby your option of not receiving our newsletters in the future by clicking “Unsubscribe” when you receive the respective e-mail or by writing at privacy@pptlegal.gr.

4. If you are a business partner or supplier of PPT Legal:

4.1. Maintaining our contractual relationship with you

We use your relevant personal data in order to maintain our contractual relationship with you. We rely in this case on the performance of our agreement as legal basis for the processing.

4.2. Communicating with you

We use your contact details in order to communicate with you with respect to any relevant business-related matters. We also rely in this case on the performance of our agreement as legal basis for the processing.

4.3 Data processing as obligation imposed by laws and regulations governing the legal profession

We may process some of your data in the context of providing the services based on legal obligations or the obligations imposed upon PPT Legal by the laws and regulations governing the legal profession. In such case, the legal basis for the processing is the legal obligation.

The categories of data processed in the context of our relationship with you are your name, e-mail, phone, fax, address, as well as other personal data you may provide directly to us.

5. If you are a representative, contact person, employee or other collaborator of a PPT Legal’s business partner or supplier:

5.1. Maintaining our contractual relationship with our business partner or supplier

We use your relevant personal data in order to maintain our contractual relationship with our business partner or supplier. We rely in this case on the legitimate interest in ensuring that the contractual relationship is managed properly.

5.2. Communicating with you

We use your contact details in order to communicate with you with respect to any relevant business-related matters. We also rely in this case on the legitimate interest of ensuring that the contractual relationship is adequately carried out.

5.3 Data processing as obligation imposed by laws and regulations governing the legal profession

We may process some of your data in the context of providing the services based on legal obligations or the obligations imposed upon PPT Legal by the laws and regulations governing the legal profession. In such case, the legal basis for the processing is the legal obligation.

In all cases, the data is provided either directly by you or by the business partner. The categories of data processed in this context are generally your name, position, e-mail, phone, fax, address, identification data, as well as other personal data provided to PPT Legal, usually by you, as needed to fulfill the above purposes.

6. If you are an employee of PPT Legal:

6.1. Maintaining our contractual relationship with you

We use your relevant personal data in order to maintain our contractual relationship with you. We rely in this case on the performance of our agreement as legal basis for the processing.

6.2. Communicating with you

We use your contact details in order to communicate with you with respect to any relevant employment-related matters. We also rely in this case on the performance of our agreement as legal basis for the processing.

6.3 Data processing as obligation imposed by laws and regulations governing the legal profession

We may process some of your data in the context of providing the services based on legal obligations or the obligations imposed upon PPT Legal by the laws and regulations governing the legal profession. In such case, the legal basis for the processing is the legal obligation.

The categories of data processed in the context of our relationship with you are your name, e-mail, phone, fax, address, bank account details, Tax ID/Tax Identification Number and some sensitive data such as maternity or sick leaves, medical certifications etc., as well as other personal data you may provide directly to us.

If you provide PPT Legal with personal data about your spouse, domestic civil/ partner, and/or dependents (e.g. for emergency contract or benefits administration purposes), it is your responsibility to inform them of their rights with respect to such data and that you may disclose their personal data to PPT Legal for these purposes. You are also responsible for obtaining the consent of these individuals (unless you can provide such consent on their behalf) if such consent is required by law for the collection, use, storage, transfer and processing of their personal data.

7. If you are an Associate Lawyer of PPT Legal:

7.1. Maintaining our contractual relationship with you

We use your relevant personal data in order to maintain our contractual relationship with you. We rely in this case on the performance of our agreement as legal basis for the processing.

7.2. Communicating with you

We use your contact details in order to communicate with you with respect to any relevant cooperation-related matters. We also rely in this case on the performance of our agreement as legal basis for the processing.

7.3 Data processing as obligation imposed by laws and regulations governing the legal profession

We may process some of your data in the context of providing the services based on legal obligations or the obligations imposed upon PPT Legal by the laws and regulations governing the legal profession. In such case, the legal basis for the processing is the legal obligation.

The categories of data processed in the context of our relationship with you are your name, e-mail, phone, fax, address, bank account details, Tax ID/Tax Identification Number, as well as other personal data you may provide directly to us.

8. If you are a job/internship applicant:

We use the personal data contained in the CVs we receive in order to assess the applicants’ qualifications for a position within PPT Legal, including in relation to our internship program. We base our processing on the legal basis of entering into and performing of the agreement.

The categories of data processed in the context of our relationship with you are your name, e-mail, phone, fax, address, personal data included in CVs, education and training details, professional qualifications, as well as other personal data you may provide directly to us.

9. If you are a visitor of our premises:

We use your personal data in order to ensure the security of our premises, assets and personnel. In this case, we base our data processing on the legitimate interest of PPT Legal, namely the protection of such premises, assets and personnel.

The categories of data processed in this context are your name as well as other personal data you may provide directly to us.

10. If you are a user of our Internet website:

We use the personal data we collect from you when you visit our Internet site, www.pptlegal.gr, in order monitor the traffic and improve the content of the website. We base this data processing activity on our legitimate interest in ensuring the proper functioning of our Internet website, as well as its improvement.

The categories of data processed in this context are the hour and date of accessing the Internet website and the IP address from which our Internet website was accessed.

The Internet

Given that the internet is a global environment, using the internet to collect and process personal information necessarily involves the transmission of information on an international basis. Therefore, by browsing this web site and communicating electronically with us, you acknowledge and agree to our processing of personal information in this way. The transmission of information via the internet is not completely secure. Although we do our best to protect personal information, we cannot guarantee the security of your information transmitted to this web site; any transmission is at your own risk. Once we have received your information, we will use appropriate procedures and security features to try to prevent unauthorised access.

This web site may, from time to time, contain links to other web sites which are outside of our control and are not covered by this Privacy Policy. We do not accept any responsibility or liability for other sites’ privacy policies. If you access other web sites using the links provided, please check their policies before submitting any personal information.

CCTV

PPT Legal uses closed circuit television (CCTV) images to provide a safe and secure environment for employees and for visitors to the Company’s business premises, such as clients, customers, contractors and suppliers, and to protect the Company’s property. Records of CCTV recordings will be retained and deleted within 15 days from the date on which the relevant recording was made.

DATA SECURITY

PPT Legal maintains reasonable technical, administrative, organizational and physical security measures and controls on the basis of requirements and standards set by applicable data protection law, including the GDPR, in order to secure any Personal Data collected through the PPT Legal services. These security measures and policies will continue to be monitored to align with the internationally recognized standards and the most current industry best practices.

PROVIDING THE PERSONAL DATA

When the data is required directly from you, PPT Legal kindly asks you to provide all categories of personal data we request for the aforementioned purposes, as otherwise we shall not be able to carry out our activity (including, among others, to provide you with our services).

If you provide to PPT Legal the personal data of other natural persons, we kindly ask you to communicate to them, before such disclosure to us the modality in which PPT Legal intends to process their personal data, as described in this Privacy Policy.

DISCLOSURE OF YOUR PERSONAL DATA

While as a rule we shall not disclose your personal data to any third parties, we may disclose personal information: to successors in title to our business; to any of our affiliated firms and entities; to suppliers and external agencies that we engage to process information on our and your behalf including to provide you with information that you have requested; to third parties (including, but not limited to, professional indemnity insurers, brokers, auditors and other professional advisors); to our clients in the course of providing services, and where disclosure is required by law or any regulatory authority, all as reasonably required for the purposes set out in this Privacy Policy.

If you attend an event organised or hosted by us, we may disclose your details to others who attend or participate in the organisation of that event (as notified to you).

DURATION OF PROCESSING

We intend to keep your personal data as long as necessary for the fulfillment of the purposes outlined above, as well as afterwards, according to our internal policies and the legal obligations incumbent upon us.

In case the data is not collected in the context of our services to you, such data will be kept for as long as necessary in order to attain the purpose of the envisaged data collection.

YOUR RIGHTS

In your capacity as data subjects, the GDPR provides you with a series of rights including:

the right of access – allowing you to obtain confirmation that your personal data is being processed by us and, if affirmative, the relevant details of such processing activities;
the right to rectification – allowing you to rectify your personal data if inaccurate;
right to erasure – allowing you to obtain the erasure of your personal data in certain cases (e.g., if the data is no longer necessary in relation to the purposes for which it was collected);
right to restriction – allowing you to obtain the restriction of processing your personal data in certain cases (e.g., when you contest the accuracy of your personal data, for a period enabling us to verify such accuracy);
the right to object – allowing you to object to further processing of your personal data within the conditions and limits set forth by law;
right to data portability – allowing you to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format or to transmit this data to another data controller.

We are happy to ensure your exercise of these rights.

You may exercise your aforementioned rights and find out more about such rights by filing with us, as data controller, a written request at PPT Legal, 15 Filikis Eterias Square, 106 73 Athens, Greece or by e-mailing us at mail@pptlegal.gr.

You also have the right to file a complaint with the data protection authority.

We are committed to always treat your requests with the utmost attention and address any queries you may have in the shortest time possible.

VERSIONS TO THIS PRIVACY POLICY

This Privacy Policy is in force as of May 1, 2018.

This Privacy Policy may be updated from time to time. Any updates will become applicable within 15 days as of the publication of the new version on PPT Legal’s website.