Privacy Policy of K&P Knowledge Portal
Welcome to K&P Knowledge Portal (hereinafter also referred as the “Portal”) that gives you the opportunity to read our articles regarding the fields of our expertise, and to be informed about latest news related to our firm’s activities and recent legislation and case law, by creating an account and/or subscribing to our Newsletter or by signing in with your LinkedIn account. By subscribing to our Knowledge Portal Newsletter, at your preference, you shall receive e-mail notifications when new posts are uploaded. The full content of this Portal is accessible only from the Registered Users. Non-registered Users have limited access to the content of the Portal.
Our law firm was established in 1963 and has since grown and expanded steadily. At Karatzas and Partners Law Firm (“K&P” or “We” or “Our Law Firm”) we appreciate all those who need to be informed about complex legal issues, legislative developments and recent case law that may influence their cases or raise questions.
Our Law Firm is solid to protecting your Personal Data and has adopted this Privacy Policy in order to be transparent and inform you about the way we collect and process Personal Data related to you, the Portal’s users, that either have opted to create an account and use the Portal (hereinafter also referred as the ”Registered Users”) or use the Portal without having created an account (hereinafter also referred as the ”Non-registered Users”), in line with the EU General Data Protection Regulation (Regulation 2016/679 – GDPR) and the Greek applicable legislation in conjunction with the existing decisions and guidelines of the competent authorities (overall the “applicable Data Protection Legislation”) in specific in relation to the present Portal.
The Law Firm “Karatzas and Partners Law Firm”, located in Athens, The Orbit, 115 Kifissias Ave, PC 115 24, tel.2103716000 FAX 2103234363, [email protected] is the Controller regarding all data processed in the Knowledge Portal.
For anything related to the processing of your personal data by “K&P”, in accordance to this Policy, you can contact us at any time, at the following details:
email: [email protected]
Letter: The Orbit-5th floor,115 Kifissias Ave., PC 115 24 (ATT: DPO)
Contact Phone: +30 2103713600
For Registered Users: We collect the data that are necessary in order for you to create an Account to gain access to the Portal, namely name, surname, job position, company, e- mail, password. Data are filled in at your discretion either by you or by allowing to be extracted by LinkedIn. Also, we may collect your name, surname, email address, telephone number (optionally), message and other data you may wish to provide us in case you choose to send us a message by using our contact form.
We collect your email address if you provide to us your consent to receive Knowledge Portal Newsletter from us. You can unsubscribe at any time from the Knowledge Portal Newsletter the list by using the unsubscribe button in the emails you receive from us or by sending us a request at [email protected].
We collect and process your Personal Data by you and or by automated means/cookies. You are able to find more information about our cookies included in our Cookie Policy.
Ιf you wish to delete your account you may send us an e-mail at [email protected] , at any time. You are able to learn more about your rights on paragraph 9 below.
For Non-registered users: We collect your IP address and may also collect your name, surname, email address, telephone number (optionally), message and other data you may wish to provide us in case you choose to send us a message by using our contact form.
The following table summarizes the purposes of processing, the data we collect and process by purpose and the corresponding legal basis: Purpose of Processing Data Processed Legal Basis
You are able to get access to and by informed by the Portal by creating an account.
Identification Data: Name, Surname
Identifier: e- mail address
Professional Data: Job Position, Company
We process your data collected by you, when you opt to subscribe to the Portal based on your consent.You have the right to withdraw your consent freely at any time by sending us a request at [email protected]
You shall use your own secret password to sign in the Portal
Logs of entrance e-mail address
You will create a unique password that can only be used by you. We recommend you to keep it secret and safe and not to share it with other people. We process your password when you use it to log in to the Portal based on our legitimate interest to keep security measures, to reassure that only Registered Users will have full access to the Portal and to identify you in order to avoid unsolicited access to the Portal. We ensure you that our legitimate interest has been fairly balanced against your privacy and does not affect your fundamental rights and freedoms. We might use your email address also if we need to contact you for security or other operational issues related to the Portal based on our legitimate interest to contact you for this type of matters that serve your interests too. You are able to object to the processing by demonstrating that your own rights override our legitimate interest by sending us a request at [email protected]. You are able to find more information about this right in para. 9 below.
In order to keep you informed about our latest posts, we will be sending you e- mails that include K&P’s news and notification of new articles uploaded on the Portal’s microsite.
Identification Data: Name, Surname
Communication Data: e- mail
We shall communicate with you in order to inform you about new posts and articles of K&P by sending you the respective general informative e-mail.You have the right to withdraw your consent freely at any time by using the unsubscribe button or by sending us a request at [email protected].
You are eligible to contact with us at your initiative by completing the respective form.
Identification Data: Name, Surname
Communication Data: e- mail phone number (optional)
Message: Other data you provide us at your own initiative
We process your Personal Data that you choose to provide us with by completing our communication form.You have the right to withdraw your consent freely at any time by sending us a request at [email protected]. If you withdraw your consent before we communicate with you, we shall not be able to reply to your message.
Notice:
a) Regarding processing of your Personal Data by LinkedIn, you will need to refer to the respective text of its Privacy Policy. LinkedIn Ireland Unlimited Company is Joint Controllers with Karatzas and Partners Law Firm restrictively for processing your Personal Data, if you choose to sign in to the Knowledge Portal with your LinkedIn account.
b) Where consent is the legal basis of processing of your Personal Data,the withdrawal of your consent is valid for the future.
The proper functionality of the Portal is based on our collaboration with suppliers and co-workers that ensure the appropriate level of data protection; in this context your Personal Data may be processed by other recipients such as IT specialists that provide maintenance, technical support, hosting and email campaign company, marketing or other consultants that “K&P” collaborates with. In order to comply with the respective obligations of the applicable Data Protection Legislation we have signed all the necessary agreements (DPAs, DPEs) according to the role that the recipients have on the processing of your Personal Data. Additionally, we have taken all the appropriate security measures during the disclosure of your Personal Data to ensure their protection.
We make sure that all data processing takes place within the European Union or a third country that has an adequacy decision adopted by the European Commission. In case your Personal Data are transferred to third countries without adequacy decision we shall conduct the respective TIA and take all the appropriate contractual, technical and organizational measures and safeguards to comply with the principles of the applicable Data Protection Legislation regarding safe data transfers to third countries (where and if applicable).
he time retention of your Personal Data is relevant to the purpose collected and the legal basis of their processing. When your Personal Data are processed based on consent such as data relevant to your account, email address when you subscribe to our Knowledge Portal Newsletter, or your communication data we retain them as long you agree/consent on their processing; when you opt out to the creation of your account or to receive communication, we delete the respective Personal Data. We keep the right to maintain your Personal Data further based on our legitimate interest to use them in case of need for the establishment, exercise or defense of legal claims related to the Knowledge Portal in a separate file.
“K&P” respects your rights regarding the processing of your Personal Data. We need to identify you in order to implement your rights, so, you need to provide us with your precise data. You can exercise your rights after you send us an accurate application of your rights to the contact information above, when the following conditions apply:
Right of Access (article 15)
You can request to:
Right to Rectification (article 16)
You can request to rectify inaccurate personal data. “K&P” may seek to verify the accuracy of the data before it rectifies it.
Right to Deletion / Right to Erasure (article 17)
You can request “K&P” to erase your Personal Data in case:
“K&P” is not obliged to comply with your request to erase such data if the processing is necessary:
Restriction of processing (article 18)
You can ask us to restrict the processing (i.e. store but not process) of your personal data when:
Right to Data Portability (article 20)
When processing is based on your consent and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format, or you may request to be transferred directly to another controller. However, this right concerns only the data provided by the data subject and not any data produced by the controller based on already collected data.
Right to Object (article 21)
You may at any time object to any processing of your personal data, which is based on the legitimate interest of “K&P” or performance of a task carried out for reasons of public interest.
If you exercise your right to object, “K&P” has the right to demonstrate compelling legitimate grounds for the processing which override the rights and freedoms of the data subject, however your fundamental rights and freedoms will not be affected.
Right not to be subject to automated individual decision making, including profiling (article 22)
“K&P” doesn’t make decisions based solely on automated processing of your Personal Data for the purposes of the Knowledge Portal. In any case, we inform you that you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Opt-out (from consent)
You have the right to withdraw your consent, where consent is the basis for the processing. Any withdrawal is valid for the future and any processing conducted by “K&P” up until the point of withdrawal, is lawful.
Right to file a complaint before the competent Supervisory Authority
You have the right to lodge a complaint with the local competent Supervisory Authority that may occur in relation to all processing activities undertaken by “K&P”. In Greece, the competent Authority to which you may address your complaint is the Hellenic Data Protection Authority, situated at Kifissias Avenue (str. No 1-3, PC 11523). You may find more information on how to exercise your right to lodge a complaint here. You can find a list with all the EU Authorities here.
However, since your privacy is a top priority for us, we strongly advise you to reach us for any issues you may be facing regarding our use of your personal data. We would gladly try to find an amicable solution to manage your requests, so we encourage you to contact us by any means.
Procedure to exercise your rights:
Identity
“K&P” fully respects the confidentiality of all files that include Personal Data. Conversely, we are entitled to ask you proof to identify you in order to fulfill your rights.
Cost
Data subjects will not have to pay for the exercise of their rights in relation to Personal Data unless the request to acquire access to information is manifestly unfounded or excessive. In that case “K&P” can a) charge the data subject with a reasonable fee under the specific circumstances, taking into account the administrative costs of providing the information or communication or taking the action requested or b) refuse to act on the request. “K&P” will inform you for any possible charge before it completes the request.
Timetable
“K&P” aims at answering data subjects’ valid requests the latest within one (1) month from their receipt, unless the request is complicated or data subjects have submitted multiple requests, in which case “K&P” has the right to answer to them within three (3) months from the receipt of the request. In case “K&P” needs more than one month for the reasons mentioned above, “K&P” will inform you accordingly within one month of receipt of the request. “K&P” may ask you if you want to explain what exactly you wish to receive or what is your concern. This will help “K&P” to act more quickly in relation to your request. In any case you should mention specific, accurate and true data and/or facts so that we can answer and/or satisfy accurately your request. Otherwise, “K&P” reserves its right for any faults that are outside of its control. Additionally, “K&P” can reject requests that are unfounded, excessive, abusive, made in bad faith or are illegitimate in the framework of the legal provisions.
In line with the provisions of GDPR, “K&P” implements the appropriate technical and organizational measures and strict security procedures, for the protection of your Personal Data and information to prevent unauthorized disclosure, use, conversion or destruction. Our principle is to keep all Personal Data in secure files.
This Privacy Policy enters into force beginning the date of its issuance. In case it is necessary to comply with new requirements imposed by applicable laws, guidelines or technical requirements or in the course of a revision or change of “K&P” processes and practices we reserve the right to amend the current Privacy Policy by uploading our new policy in the Knowledge Portal and/or informing you by directly contacting you at your communication data.