{"id":48030,"date":"2025-12-17T08:09:16","date_gmt":"2025-12-17T08:09:16","guid":{"rendered":"https:\/\/koumentakis.dev.beetroot.gr\/privacy-policy\/"},"modified":"2026-06-02T13:23:57","modified_gmt":"2026-06-02T13:23:57","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<div class=\"wp-block-beetblocks-free-text wp-block is-layout-flow wp-block-beetblocks-free-text-is-layout-flow\"><div class=\"is-layout-flow\">\n<h2 class=\"wp-block-heading\"><strong>PRIVACY &amp; PERSONAL DATA PROTECTION POLICY<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The purpose of this Policy is to ensure that you are clearly and transparently informed about the cases in which personal data are processed by our Company, your rights as data subjects whose data are subject to processing, as well as the safeguards implemented by the Company to ensure compliance with the applicable national and EU legal framework, on the protection of personal data.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Brief Definitions:<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cPersonal data\u201d are defined as any information that relates to an identified or identifiable living individual (Data Subject), (hereinafter \u201cData\u201d).<br>\u201cData processing\u201d is any operation or set of operations which is performed on or relates to Data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br>The \u201cdata controller\u201d is defined as the person that determines the purposes for which and the means by which Data is processed.<br><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Principles of Lawful Processing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Data processing takes place in accordance with the following principles (pursuant to Article 5 GDPR):<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(a)<\/strong> Principle of lawfulness, fairness, and transparency: Data must be processed lawfully and fairly, in a transparent manner in relation to the Data Subject.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(b)<\/strong> Principle of purpose limitation: Data must be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(c) <\/strong>Principle of data minimisation: Data must be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(d) <\/strong>Principle of accuracy: Data must be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, are erased or rectified without delay.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(e)<\/strong> Principle of storage limitation: Data must be kept in a form which permits identification of Data Subjects for no longer than is necessary for the purposes for which the Data are processed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(f) <\/strong>Principle of integrity and confidentiality: Data must be processed in a manner that ensures appropriate security and protection against unauthorised or unlawful processing, as well as against accidental loss, destruction, or damage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(g)<\/strong> Principle of accountability of the data controller: The data controller shall be responsible for, and be able to demonstrate compliance with the GDPR before supervisory authorities and courts.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">I. General Provisions \u2013 Protection of Personal Data <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. Data Controller<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1.1.<\/strong> The law firm operating under the name \u201cKOUMENTAKIS &amp; ASSOCIATES\u201d, with its registered office in Thessaloniki, at 1 Morkentaou Street, P.C. 54 622 (hereinafter the \u201cCompany\u201d).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1.2<\/strong>. Contact details:<br>(a) Telephone number: +30 2310 278084<br>(b) Email address: <a href=\"mailto:info@klaw.gr\">info@klaw.gr<\/a><br>(c) Postal address: 1 Morkentaou Street, P.C. 54 622, Thessaloniki.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. General Principles<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.1.<\/strong> The Company collects and processes your Data in accordance with the applicable EU and national legislation on the protection of personal data, namely Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation, hereinafter \u201cGDPR\u201d), Law 4624\/2019, as well as the Decisions, Guidelines, and Opinions of the Hellenic Data Protection Authority (HDPA), other competent Independent Authorities, and the European Data Protection Board (hereinafter the \u201cLegal Framework\u201d).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.2.<\/strong> Any information provided under this Policy, as well as any information provided upon your request (and any related action taken), is provided free of charge, unless the request is manifestly unfounded, excessive, or repetitive (Article 12(5) GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.3.<\/strong> The Company\u2019s website and services are not intended for use by minors. The Company does not collect Data of minors under the age of fifteen (15) without the consent of their parent or legal guardian (in accordance with Article 8 GDPR and Article 21 of Law 4624\/2019). Your Data may be used to carry out age verification checks. In any event, the Data of a minor under the age of fifteen (15), in the absence of the required parental or guardian consent, shall be deleted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. Rights of the Data Subject<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Under the applicable Legal Framework, the following rights are recognised:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(a)<strong> Right to Information (Articles 12 \u2013 14 GDPR)<\/strong><br>You have the right to be informed clearly and accurately about the collection and use (processing) of Data concerning you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(b) Right of Access (Article 15 GDPR)<\/strong><br>You have the right to request confirmation from the Company as to whether personal data concerning you are being processed, as well as to receive a copy of such Data. In addition, you have the right to request information regarding the purposes of processing, the categories of personal data concerned, the recipients or categories of recipients, the storage period, the exercise of your rights, any available information on the source of the Data\u2014where such Data have not been collected directly from you\u2014and the existence of automated decision-making, including profiling, as well as meaningful information about the logic involved, and the significance and envisaged consequences of such processing. <br>This Policy provides an overview of the philosophy underlying the regulatory framework governing Data protection. Updates, further elaboration, and clarifications may be provided upon submission of a relevant request for the exercise of the right of access. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(c) Right to Rectification (Article 16 GDPR)<\/strong><br>You have the right to request the rectification of inaccurate Data concerning you, where any information has changed or has been incorrectly recorded, as well as the completion of incomplete Data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(d) Right to Erasure (Article 17 GDPR)<\/strong><br>You have the right to request the full or partial erasure of Data concerning you, where such Data are no longer necessary in relation to the purposes for which they were collected, where you withdraw your consent, or where the Data are processed in a manner you consider unlawful or inconsistent in relation to the purposes for which they were collected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(e) Right to Restriction of Processing (Article 18 GDPR)<\/strong><br>You have the right to request restriction of the processing of Data concerning you:<br>(i) where you consider the processing unlawful and oppose the erasure of your Data, requesting instead the restriction of their use;<br>(ii) where the Data are no longer necessary for the purposes of the processing but you do not wish their erasure;<br>(iii) where you have exercised the right to object, pending verification of whether the legitimate grounds of the Company override your rights as Data Subject; or<br>(iv) where you have exercised the right to rectification, for the period required by the Company to examine the request.    <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(f) Right to Data Portability (Article 20 GDPR)<\/strong><br>You have the right to receive Data concerning you, which are processed by automated means (excluding paper documents), in a structured, commonly used, and machine-readable format, as well as the right to request that the Company transmit such Data directly to another data controller, without hindrance and without your intervention.<br>The exercise of this right is subject to the following conditions:<br>(i) the processing is based on consent [pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR] or on a contract [pursuant to Article 6(1)(b) GDPR];<br>(ii) the Data concern you and have been provided by you; and<br>(iii) the exercise of the right does not adversely affect the rights and freedoms of others.   <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(g) Right to Object (Article 21 GDPR)<\/strong><br>You have the right to object, at any time and on grounds relating to your particular situation, to the processing of Data concerning you which is based on the existence of a legitimate interest [Article 6(1)(f) GDPR], including profiling.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(h) Right not to be subject to automated individual decision-making, including profiling (Article 22 GDPR)<\/strong><br>You have the right to object where a decision concerning you is based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(i) Right to withdraw consent (Article 7(3) GDPR)<\/strong><br>You have the right to withdraw your (if any) consent at any time, by exercising the relevant right in accordance with the provisions set out below (under section 4).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4. Exercise of the Rights of the Data Subject<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.1.<\/strong> For the exercise of your rights, as well as for any information relating to the processing of Data concerning you, you may send an email to our email address or a letter to our postal address, submit your request in person, or contact us by telephone at our contact number (see in particular section 1.2).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.2.<\/strong> For each of the above rights you exercise, the Company shall respond within one (1) month from receipt of the request. In cases of objective difficulty, complexity of the request, or due to the number of requests, the Company may respond within a maximum total period of three (3) months. In the event of an extension, the Company is required to inform you within one (1) month of receipt of the request of such extension together with the reasons for the delay. In the event of a justified refusal by the Company to comply with your request for lawful reasons, expressly provided for in the GDPR, the Company shall inform you accordingly within one (1) month (Article 12(3) GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.3.<\/strong> Where the Company considers that one of the above rights is exercised in a manifestly unfounded manner, or that your request is excessive or repetitive, it reserves the right to charge a reasonable fee or to refuse to act on the request (Article 12(5) GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.4. <\/strong>Where the Company has reasonable doubts as to your identity -when you submit a request to exercise any of the above rights- it may request the provision of additional information necessary to confirm your identity before processing the request (Article 12(6) GDPR).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.5.<\/strong> Where the Company delays beyond the period provided for above (under section 4.2) in responding to your request, as well as in any case where you believe that your rights are being infringed or that the Company is not complying with its obligations, you can file a complaint with the competent supervisory authority (for Greece, the Hellenic Data Protection Authority: 1-3 Kifissias, P.C. 115 23 Athens, Tel.: +30 210 6475600, email: <a href=\"mailto:contact@dpa.gr\">contact@dpa.gr<\/a>) or to seek judicial remedy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5. Recipients of the Data \u2013 Transfers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.1.<\/strong> Your Data are not intended to be transferred to any organisation outside the Company, with the exception of:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(a) hosting service providers and providers of electronic systems and network support services of the Company &#8211; solely for the purpose of performing their contractual obligations towards the Company;<br>(b) judicial, prosecutorial, and police authorities, as well as auditing, tax, or other administrative authorities, where required by legislative provisions or court decisions, or following lawful requests made in the exercise of their duties;<br>and, specifically within the framework of the mandate for handling a case and to the extent necessary:<br>(c) competent judicial and\/or public and\/or administrative authorities and services (indicatively: cadastre, land registry, tax authorities, etc.); and<br>(d) any partners and collaborating service providers (indicatively: postal services, subcontractors &#8211; associate lawyers, accountants, etc.), on the basis of a relevant contract between them and the Company, and exclusively for the purpose of fulfilling the relevant contract and\/or completing your mandate (e.g. courier services), to the extent necessary, and subject to strict contractual obligations of confidentiality and compliance with the applicable Legal Framework by all parties involved.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.2.<\/strong> Your Data are not transferred outside the European Union (EU).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6. Safeguards<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We assure you that the Company will exhaust every technical and organisational measure to protect your Data and will make optimal, minimal, and strictly necessary use and processing thereof, as required by the Legal Framework, strictly and exclusively in relation to the purposes for which they are processed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7. Hyper-links<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Company\u2019s website may contain hyperlinks to third-party websites or to social media pages. This Policy does not cover or regulate cases of Data processing that take place following navigation to third-party websites or social media pages. <br><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">II. Special Provisions for Specific Categories of Data Subjects <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The special provisions of this Policy apply cumulatively together with the above general provisions (under Section I).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(A) NEWSLETTER RECIPIENTS<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A.1. Data:<\/strong> Contact details, and in particular the email address, of the Company\u2019s (potential) clients and, in general, its partners and parties transacting with the Company, as well as their legal representatives and executives.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A.2. Purpose of Processing<\/strong>: The processing and retention of the above Data, which were provided in the context of any transaction and\/or the provision or potential provision by us of legal services, is carried out (also) for the purpose of informing you about recent legislative developments, as well as about the Company\u2019s services and activities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A.3. Legal Basis for Processing<\/strong>: The legal basis for the processing is, on the one hand, the promotion of the Company\u2019s legitimate interest in maintaining contact with its network and, on the other hand, the safeguarding of your legitimate interest in receiving direct information on current legal issues, services, and activities of the Company [pursuant to Article 6(1)(f) GDPR and Article 11(3) of Law 3471\/2006], while always preserving your right to object to further receipt of such communications.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A.4. Data Retention Period:<\/strong> For the fulfilment of the above processing purpose, namely informing you about current legislative changes\/developments, as well as our services and activities, we consider it reasonable and necessary to retain your relevant Data for as long as we are able to provide this service, provided that you have not objected to receiving such communications during this period.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A.5. Rights of Data Subjects:<\/strong><br>Data Subjects have the following rights (see explanation under section 3): right of access, right to rectification, right to restriction, right to object, and right to erasure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(B) CLIENTS AND POTENTIAL CLIENTS<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B.1. Data:<\/strong> Identification details (e.g. full name, father\u2019s name, mother\u2019s name, gender, date of birth, capacity, marital status), contact details (e.g. postal\/email address, telephone number), transaction details (e.g. invoicing details, bank account details), and financial data (e.g. assets\/financial status).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B.2. Purpose \u2013 Legal Basis of Processing:<\/strong><br>(a) At the pre-contractual stage, and in particular where you complete an electronic contact form on our website or contact us directly via email or telephone, the purpose of processing is:<br>(i) to respond to your requests for information regarding the services we provide; and<br>(ii) to examine the possibility and framework of your transaction with the Company (or with the legal entity you represent or on behalf of which you contact the Company).<br>The legal basis for the processing is your consent [pursuant to Article 6(1)(a) GDPR], which is provided by completing and submitting the contact form (or, respectively, by sending an email and\/or making a telephone call), as well as the Company\u2019s legitimate interest in pursuing its statutory objectives by responding to the requested communication for the purpose of examining the potential assignment of a case [pursuant to Article 6(1)(f) GDPR].<br>(b) Where you choose to entrust the Company with the handling of your case (i.e. where a transaction is concluded), the Data you have provided at the pre-contractual stage (as well as any Data you will provide in the context of the mandate) will be processed for the purpose of implementing our mandate-based contractual relationship, as well as for compliance with tax legislation and the Lawyers\u2019 Code.<br>The legal basis for the processing is the performance of the mandate contract for the handling of your case, as well as compliance with legal obligations, in conjunction with the provisions on mandate under the Lawyers\u2019 Code [pursuant to Article 6(1)(b) and (c) GDPR, respectively].<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B.3. Data Retention Period:<\/strong><br>(a) The Data referred to under B.2(a) above will be retained for three (3) years and will thereafter be deleted &#8211; subject to the preceding provision regarding the email address.<br>(b) The Data referred to under B.2(b) above will be retained for as long as required under tax legislation. However, pleadings and any other documents constituting intellectual property of the Company will be retained indefinitely, notwithstanding the revocation of the mandate on your part. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B.4. Rights of Data Subjects:<\/strong><br>Data Subjects have the following rights (see explanation under section 3): right to withdraw consent, right of access, right to rectification, right to erasure, right to restriction, right to Data portability, and right to object.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(C) PERSON ENTERING THE COMPANY\u2019S PREMISES<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.1. Data:<\/strong> Image Data of a person entering the Company\u2019s premises.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.2. Purpose of Processing:<\/strong> In order to safeguard the rights of individuals present on the Company\u2019s premises (indicatively: (potential) clients, employees, external partners, etc.), as well as to protect the Company\u2019s property and interests, a closed-circuit television (CCTV) system operates, continuously recording movement in the entrance corridor of the Company\u2019s registered office.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.3. Legal Basis for Processing &#8211; Legitimate Interest Assessment: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.3.1. <\/strong>The legal basis for processing is the Company\u2019s legitimate interest in ensuring the protection, indicatively and among others, of the persons present on the Company\u2019s premises, as well as of the building facilities, assets (e.g. case files, client data), and the Company\u2019s equipment in general [pursuant to Article 6(1)(f) GDPR].<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.3.2.<\/strong> The Company\u2019s legitimate interest consists in the need to protect its premises and the assets located therein from unlawful acts, such as, indicatively, damage to property, theft, or malicious actions. The same applies to safeguarding the life, physical integrity, health, and property of our employees and third parties lawfully present on the Company\u2019s premises. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.3.3.<\/strong> Only image Data are collected and are stored for a specific period of time. Recording is limited to the entrance corridor of the Company\u2019s registered office, without taking place in areas where private life could be disproportionately affected, including the right to the protection of personal data of the persons whose image is recorded. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.4. Specific Provisions on Access \u2013 Transfer: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.4.1. <\/strong>The recorded material is accessible only to authorised personnel responsible for the security of the premises.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.4.2.<\/strong> The material is not transferred to third parties, except in the following cases:<br>(a) to competent judicial, prosecutorial, and police authorities where it contains data necessary for the investigation of a criminal offence concerning persons or assets of the data controller; (b) to competent judicial, prosecutorial, and police authorities where they lawfully request such data in the exercise of their duties; and (c) to the victim or the perpetrator of a criminal offence, where the data may constitute evidence of the offence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.5. Data Retention Period: <\/strong>The Data are retained for fifteen (15) calendar days from the time of recording, after which they are automatically deleted. Where, within this period, an incident affecting persons or assets is identified, a relevant segment of the video is isolated and retained in a separate file for up to one (1) month, for the purpose of investigating the incident and initiating legal proceedings to protect the Company\u2019s legitimate interests. Where the incident concerns a third party, the video is retained for up to three (3) months (in accordance with Guideline 1\/2011 of the Hellenic Data Protection Authority). <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C.6. Rights of Data Subjects: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data Subjects have the following rights (see explanation under section 3): right of access, right to restriction, right to object, and right to erasure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>(D) JOB APPLICANTS \/ POTENTIAL PARTNERS<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">D.1. Data: Identification details (e.g. full name, gender, date of birth), contact details (e.g. postal\/email address, telephone number), marital status, capacity, education, Curriculum Vitae, and Data relating to prior employment\/professional experience.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>D.2. Purpose &#8211; Legal Basis of Processing: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(a) Evaluation of job applicants\/potential partners as to whether they meet the requirements for recruitment for a specific position within the Company or, respectively, for entering into a partnership with the Company.<br><br><br>The legal basis for the collection of the Data is the Company\u2019s legitimate interest in recruiting specialised and suitable personnel or, respectively, in partnering with specialised and suitable partners [pursuant to Article 6(1)(f) GDPR].<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br>(b) Informing candidates about the possibility of recruitment for future positions within the Company or, respectively, of future partnership with the Company.<br>The legal basis for processing is the consent of the job applicant [pursuant to Article 6(1)(a) GDPR].<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>D.3. Data Retention Period: <\/strong>For the purpose of processing relating to the assessment of suitability for filling a position or entering into a partnership with the Company, the relevant Data (under D.1) are retained for a reasonable and necessary period of twelve (12) months from receipt of the Curriculum Vitae (provided that no employment contract has been concluded or that the applicant has not become a partner of the Company), after which the Data are deleted.<br>Data of job applicants\/potential partners may be retained for a longer period of up to two (2) years, provided that the applicant has given relevant consent, after which they are deleted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>D.4. Rights of Data Subjects: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>D.4.1.<\/strong> In relation to the processing under D.2(a): Data Subjects have the following rights (see explanation under section 3): right of access, right to rectification, right to restriction, right to object, and right to erasure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>D.4.2. <\/strong>In relation to the processing under D.2(b): Data Subjects have the following rights (see explanation under section 3): right of access, right to rectification, right to restriction, right to Data portability, right to erasure, and right to withdraw consent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>E. WEBSITE VISITORS \/ USERS<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>E.1.<\/strong> During each visitor\u2019s\/user\u2019s interaction with our website, Data are collected, which include the following:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(a) IP address, (b) website navigation data through the installation of data-collection programs such as \u201ccookies\u201d, (c) website usage timestamp, (d) connection device details (operating system, browser software), (e) referrer headers, (f) data identifying the web browser and its version, as well as (g) statistical data collection images (web beacons) and tags.<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For more information regarding the terms of use of our website and the Cookies Policy, please refer here.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>E.2.<\/strong> In addition, during the use of our website, Data are collected through the completion of the contact form (indicatively for the submission of any request or inquiry).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>E.2.1. Data:<\/strong> Identification details (e.g. full name, father\u2019s name, mother\u2019s name, gender, date of birth, capacity, marital status), contact details (e.g. postal\/email address, telephone number), transaction details (e.g. invoicing details, bank account details), and financial data (e.g. assets\/financial status).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>E.2.2. Purpose \u2013 Legal Basis of Processing: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br>The purpose of the processing is to respond to the requested communication and to examine the possibility and framework of your transaction with the Company (or with the legal entity you represent or on behalf of which you contact the Company).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br>The legal basis for the processing is your consent [pursuant to Article 6(1)(a) GDPR], which is provided by completing and submitting the contact form, as well as the Company\u2019s legitimate interest in pursuing its statutory objectives by responding to the requested communication [pursuant to Article 6(1)(f) GDPR].<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>E.2.3.<\/strong> Data Retention Period: The retention period is determined exclusively on the basis of the content of the request\/inquiry submitted through the contact form.<br><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br>The Data are retained for the period required to achieve the purposes of the processing necessary for the fulfilment of the request\/inquiry, taking into account the provisions set out above (under Section II, A to D) for the specific categories of Data Subjects.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">E.2.4. Rights of Data Subjects:<br>Data Subjects have the following rights (see explanation under section 3): right to withdraw consent, right of access, right to rectification, right to erasure, right to restriction, right to Data portability, and right to object.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For the exercise of your rights, as well as for any information regarding this Policy and the processing of Data concerning you, you may send an email to: <a href=\"mailto:info@klaw.gr\">info@klaw.gr<\/a>, send a letter to our postal address: 1 Morkentaou Street, P.C. 54 622, Thessaloniki, submit your request in person, or contact us by telephone at +30 2310 278084.<\/p>\n\n\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-48030","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy - Koumentakis &amp; Associates<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy - Koumentakis &amp; Associates\" \/>\n<meta property=\"og:url\" content=\"https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Koumentakis &amp; Associates\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-02T13:23:57+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"18 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/privacy-policy\\\/\",\"url\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/privacy-policy\\\/\",\"name\":\"Privacy Policy - Koumentakis &amp; Associates\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/#website\"},\"datePublished\":\"2025-12-17T08:09:16+00:00\",\"dateModified\":\"2026-06-02T13:23:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/privacy-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/privacy-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/privacy-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0391\u03c1\u03c7\u03b9\u03ba\u03ae\",\"item\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/\",\"name\":\"\u039a\u039f\u03a5\u039c\u0395\u039d\u03a4\u0391\u039a\u0397\u03a3 & \u03a3\u03a5\u039d\u0395\u03a1\u0393\u0391\u03a4\u0395\u03a3 \u0394\u03b9\u03ba\u03b7\u03b3\u03bf\u03c1\u03b9\u03ba\u03ae \u0395\u03c4\u03b1\u03b9\u03c1\u03b5\u03af\u03b1\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/#organization\",\"name\":\"\u039a\u039f\u03a5\u039c\u0395\u039d\u03a4\u0391\u039a\u0397\u03a3 & \u03a3\u03a5\u039d\u0395\u03a1\u0393\u0391\u03a4\u0395\u03a3 \u0394\u03b9\u03ba\u03b7\u03b3\u03bf\u03c1\u03b9\u03ba\u03ae \u0395\u03c4\u03b1\u03b9\u03c1\u03b5\u03af\u03b1\",\"url\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/KOUMENTAKIS-ASSOCIATES.svg\",\"contentUrl\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/KOUMENTAKIS-ASSOCIATES.svg\",\"caption\":\"\u039a\u039f\u03a5\u039c\u0395\u039d\u03a4\u0391\u039a\u0397\u03a3 & \u03a3\u03a5\u039d\u0395\u03a1\u0393\u0391\u03a4\u0395\u03a3 \u0394\u03b9\u03ba\u03b7\u03b3\u03bf\u03c1\u03b9\u03ba\u03ae \u0395\u03c4\u03b1\u03b9\u03c1\u03b5\u03af\u03b1\"},\"image\":{\"@id\":\"https:\\\/\\\/koumentakis.dev.beetroot.gr\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy - Koumentakis &amp; Associates","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Privacy Policy - Koumentakis &amp; Associates","og_url":"https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/","og_site_name":"Koumentakis &amp; Associates","article_modified_time":"2026-06-02T13:23:57+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"18 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/","url":"https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/","name":"Privacy Policy - Koumentakis &amp; Associates","isPartOf":{"@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/#website"},"datePublished":"2025-12-17T08:09:16+00:00","dateModified":"2026-06-02T13:23:57+00:00","breadcrumb":{"@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0391\u03c1\u03c7\u03b9\u03ba\u03ae","item":"https:\/\/koumentakis.dev.beetroot.gr\/en\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/#website","url":"https:\/\/koumentakis.dev.beetroot.gr\/en\/","name":"\u039a\u039f\u03a5\u039c\u0395\u039d\u03a4\u0391\u039a\u0397\u03a3 & \u03a3\u03a5\u039d\u0395\u03a1\u0393\u0391\u03a4\u0395\u03a3 \u0394\u03b9\u03ba\u03b7\u03b3\u03bf\u03c1\u03b9\u03ba\u03ae \u0395\u03c4\u03b1\u03b9\u03c1\u03b5\u03af\u03b1","description":"","publisher":{"@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/koumentakis.dev.beetroot.gr\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/#organization","name":"\u039a\u039f\u03a5\u039c\u0395\u039d\u03a4\u0391\u039a\u0397\u03a3 & \u03a3\u03a5\u039d\u0395\u03a1\u0393\u0391\u03a4\u0395\u03a3 \u0394\u03b9\u03ba\u03b7\u03b3\u03bf\u03c1\u03b9\u03ba\u03ae \u0395\u03c4\u03b1\u03b9\u03c1\u03b5\u03af\u03b1","url":"https:\/\/koumentakis.dev.beetroot.gr\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/#\/schema\/logo\/image\/","url":"https:\/\/koumentakis.dev.beetroot.gr\/wp-content\/uploads\/2026\/06\/KOUMENTAKIS-ASSOCIATES.svg","contentUrl":"https:\/\/koumentakis.dev.beetroot.gr\/wp-content\/uploads\/2026\/06\/KOUMENTAKIS-ASSOCIATES.svg","caption":"\u039a\u039f\u03a5\u039c\u0395\u039d\u03a4\u0391\u039a\u0397\u03a3 & \u03a3\u03a5\u039d\u0395\u03a1\u0393\u0391\u03a4\u0395\u03a3 \u0394\u03b9\u03ba\u03b7\u03b3\u03bf\u03c1\u03b9\u03ba\u03ae \u0395\u03c4\u03b1\u03b9\u03c1\u03b5\u03af\u03b1"},"image":{"@id":"https:\/\/koumentakis.dev.beetroot.gr\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/pages\/48030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/comments?post=48030"}],"version-history":[{"count":3,"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/pages\/48030\/revisions"}],"predecessor-version":[{"id":48034,"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/pages\/48030\/revisions\/48034"}],"wp:attachment":[{"href":"https:\/\/koumentakis.dev.beetroot.gr\/en\/wp-json\/wp\/v2\/media?parent=48030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}