Last updated: 17/06/2025
1. General
1.1 The Lawyer
Eleni Spiropoulou, daughter of Alkiviadis, is a Lawyer at the Athens Bar Association admitted before the Supreme Court of Greece (Reg. No. 24208), certified Mediator and Data Protection Officer (DPO), with office located at 40 Mavromichali Street, Athens, Attica, 106 80, Greece, tel. +30 210 3388528, email: info@spiropoulou.com (the "Lawyer", the "Law Firm" or "we").
1.2 The Website
The Lawyer owns and manages the website www.elenaspiropoulou.gr (the "Website"), under the domain name elenaspiropoulou.gr. All references to the "Website" concern exclusively this specific web address.
2. The Privacy Policy
We fully respect your right to privacy and personal data protection and we take appropriate measures to comply with the applicable European and national data protection laws, in particular the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019, as well as the decisions and opinions of the Hellenic Data Protection Authority ("HDPA") and the European bodies and supervisory authorities.
For this purpose, we have adopted this data protection policy (the "Privacy Policy" or the "Policy") to inform the visitors of our Website (the "users" or "you") about the processing of their personal data through this Website.
This Policy applies to you when you use the Website in any way and by any means (e.g., desktop, mobile phone, laptop, etc.), including when you visit or browse the Website, fill out the relevant contact form to request us to contact you, and generally when you interact with any function, feature, or content of this Website.
Through this Privacy Policy, we aim to explain how we collect, process, and share your personal data in the above circumstances, the lawful purposes for which we carry out each processing activity (or series of activities) performed with or without the use of automated means, and the legal basis for such processing (i.e., the lawful reason allowing us to process personal data in the manner and for the purpose stated).
You should carefully read this Policy, which has been written in the simplest and clearest possible terms to facilitate your understanding and to help you make a free and informed decision as to whether you wish to provide your personal data to the Lawyer for the purposes mentioned below.
Please do not access or use the Website, in whole or in part, if you have not carefully read this Policy. Accessing or using the Website means that you have been informed of this Policy and that you fully and unreservedly agree to its terms.
3. Data Controller
The Data Controller of your personal data within the meaning of the GDPR is the Lawyer, whose details are specified at the beginning of this Policy. This means that the Lawyer is responsible, according to the GDPR, for the processing and protection of your personal data.
For data protection matters, you can contact us directly at +30 210 3388528 or at info@spiropoulou.com.
4. What personal data do we collect and how? What are the purposes and legal bases of processing?
4.1 We collect personal data either provided directly by you through the Website or automatically collected upon your access and navigation.
4.1.1 Data you provide to the Lawyer
When browsing the Website, you may request that we contact you by completing the relevant contact form integrated into the Website, providing identification data (full name), contact details (email), subject, and a free-text message where you can provide further details regarding the reason you wish us to contact you.
We collect this data to identify you, prepare accordingly in relation to the reason you contact us, and communicate with you via email to promptly and effectively address your request. The legal basis for processing is the taking of steps at your request prior to entering into a contract if you wish us to contact you (Article 6(1)(b) GDPR), or the performance of our contract with you if you have already entrusted us with your case and you want us to contact you regarding that case (Article 6(1)(b) GDPR). In any case, the legal basis is also the performance of our contract represented by the Website Terms of Use, which you fully and unreservedly accept prior to submitting the contact request (Article 6(1)(b) GDPR).
4.1.2 Automatically collected data
a. Technical data
When you access and navigate the Website and click on various fields or links it contains, certain technical information is automatically collected by our server and logged in log files stored on it. This includes information regarding your device, operating system, browser, network connection, and IP address. Temporary storage of the IP address is necessary to enable the Website to be displayed on your device. We further store this data to ensure the proper, lawful, and secure operation of the Website, the security of navigation, and the integrity, availability, and confidentiality of information and data processed. The legal basis for the temporary storage of data and log files is our legitimate interest (Article 6(1)(f) GDPR) in taking actions that ensure the proper functioning, lawfulness, security, and efficiency of our Website.
b. Data collected through the use of cookies
When you access and browse the Website and click on various fields or links that may be contained therein, we install and store cookies, and during each subsequent visit to the Website we automatically access the relevant information in accordance with our Cookie Policy. Through cookies we collect.
(i) We collect cookie data for the operation of the Website. The legal basis for the processing is our legitimate interest in ensuring that our Website is displayed, operates, and is used securely, effectively, and lawfully (Article 6(1)(f) GDPR).
(ii) We collect cookie data to improve the functionality of the Website. The legal basis for the processing is the consent you actively provide for the installation and use of “preference cookies” (Article 6(1)(a) GDPR).
(iii) We collect cookie data to improve the content, presentation, and performance of the Website and the overall user experience during browsing.
This concerns information in the form of statistical data resulting from the analysis of users’ behavior on the Website. The legal basis for the processing is the consent you actively provide for the installation and use of “performance cookies” (Article 6(1)(a) GDPR).
For more information about cookies, please visit our Cookie Policy.
4.2 We may transfer to third parties either data you voluntarily provide to us or data automatically collected during your browsing of the Website, in order to comply with a request from law enforcement authorities, judicial authorities, or other competent authorities. The legal basis for the processing is the fulfillment of our legal obligations and our legitimate interest in assisting law enforcement authorities in the prevention or detection of crimes (Article 6(1)(c) and (f) GDPR). We may also transfer such data to third parties for the protection and defense of our legal rights. The legal basis for the processing is our legitimate interest in asserting our rights through judicial or extrajudicial means (Article 6(1)(f) GDPR).
5. Recipients of your personal data
Your data is not transferred to third parties, except in the following cases:
(a) Suppliers who need access to users’ personal data in order to provide their services (e.g., IT service providers, hosting service providers, etc.). All our suppliers are bound by specific confidentiality agreements that ensure the protection of your data.
(b) Authorized partners who have access to users’ personal data only when necessary (e.g., for handling your requests) and are bound by specific confidentiality agreements.
(c) Public or independent authorities, such as the Public Prosecutor’s Office, the Cyber Crime Division, the Hellenic Data Protection Authority (HDPA), etc., when such transfer is necessary for our compliance with a legal obligation or legal process, or in order to contribute to the prevention or investigation of crimes, or for the protection of the users of the Website or any other person, or for the protection of our rights, or for the prevention or investigation of crimes and other unlawful acts against us, the users of the Website, or any other person.
(d) Third-party partners placing cookies. Certain cookies are placed by third-party service providers. These partners have access to information related to cookies, which under certain circumstances may constitute personal data (for more information about cookies, please refer to our Cookie Policy).
6. How long do we retain your data?
We retain your personal data for the shortest possible period, in compliance with the principle of storage limitation. In particular, we will retain your data for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Finally, we retain log files for no longer than two years. For the retention period of cookies, please refer to our Cookie Policy.
7. Data transfers outside the EEA – Security measures
7.1 Your personal data is stored on servers within the European Economic Area (EEA) and is not transferred outside of it. However, certain cookies are placed by our partners (third-party providers) who provide their services to us and, for reasons of efficiency, some of our partners’ servers may be located outside the EEA. Therefore, information collected through the use of cookies may be transferred outside the EEA. We assure you that such information is transferred with adequate safeguards and in complete security. For more information about cookies, please visit our Cookie Policy.
7.2 We always process your data in strict confidence, in accordance with the provisions set out in the applicable legislation. To this end, we adopt technical and organizational measures in order to ensure the security of your data and to prevent any accidental, unlawful, improper, or unauthorized access, alteration, damage, destruction, or other processing, taking into account the state of technology, the nature of the data, and the risks to which it is exposed.
8. Links to third-party websites
The Website may contain links (such as links, hyperlinks, etc.) that, when clicked, will direct you to third-party websites. Please consult the respective privacy policies to understand how those websites use your personal data. The Lawyer bears no responsibility for the processing of personal data carried out by the linked websites.
9. What are your rights regarding your data?
9.1 We want to ensure that you are able to effectively exercise the rights provided by law in relation to your personal data. For this purpose, we inform you that for as long as we retain your data, you can exercise your rights free of charge. However, if your requests are clearly unfounded, excessive or repetitive, we may charge a reasonable fee. In particular, you have the right to:
(a) Access: The right to obtain confirmation as to whether or not your data is being processed by the Lawyer and the right to access such data.
(b) Rectification: The right to request the correction, updating or completion of your data if it is incorrect, inaccurate or incomplete.
(c) Erasure: The right to request the deletion of your data. This right may be fulfilled by the Lawyer if:
- The data is no longer necessary for the purposes for which it was collected or otherwise processed and there is no longer a lawful reason for its retention,
- You withdraw the consent given or object to the processing in accordance with the law,
- The data has been unlawfully processed,
- The data must be erased to comply with a legal obligation of the Lawyer as Data Controller, or
- The data concerns a child.
(d) Restriction of processing: The right to restrict the processing of your data where:
- Its accuracy is contested so that we can verify the accuracy of the personal data,
- The data has been unlawfully processed but you oppose the erasure of the data,
- The data is no longer necessary for the purposes for which it was collected, but you still need it for the establishment, exercise, or defense of legal claims, or there is another lawful purpose or legal basis for the processing, or
- You have exercised your right to object to the processing and we are verifying that objection.
(e) Data portability: The right to receive the data you have provided to the Lawyer in a structured, commonly used and machine-readable format, and to transmit that data to another Controller without hindrance where the legal basis for processing is consent or the performance of a contract and the processing is carried out by automated means.
(f) Objection: The right to object at any time to the processing of your data where the legal basis for the processing is the legitimate interests of the Lawyer, including profiling.
(g) Withdrawal of consent: Where the processing of your data is based on your consent, you may withdraw that consent at any time, with effect for the future and without affecting the lawfulness of the processing based on your consent prior to its withdrawal.
The Lawyer will review your request and respond to you within one month of its receipt or, taking into account the complexity of the request and the total number of requests, will inform you of an extension of the response period for up to two additional months.
9.2 For any issue that arises regarding the processing of your data and the exercise of your above rights, you can contact us by phone at +30 210 3388528 or by e-mail at info@spiropoulou.com.
9.3 If you are not satisfied with the processing of your data by us or with our response to your request to exercise the above rights, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):
Phone: +30 210 6475600
Email: contact@dpa.gr
Postal address: 1-3 Kifisias Avenue, 115 23 Athens, Greece
10. Privacy Policy amendments
We reserve the right to unilaterally amend this Privacy Policy at any time, with or without prior notice, always in compliance with applicable law or whenever we deem it necessary. With respect to your data, the Policy that applies is the one posted at the time of your visit to the Website. In the event of a modification of this Policy, we are committed to updating the “last updated” date that appears at the beginning of this document.
11. Contact
If you have any questions or comments regarding the protection of your data or if you would like to learn more information, please do not hesitate to contact us at info@spiropoulou.com.