This Privacy Policy explains how Iphigenia Andonakou / Andonakou Law Firm processes personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and, in relation to storing or accessing information on a user's terminal equipment, Greek Law 3471/2006.

The controller for data collected through the website is Iphigenia Andonakou / Andonakou Law Firm, 44 Alexandras Avenue, 114 73 Athens, Greece. For data-protection matters, you may use the website contact form and clearly state that your request concerns personal data, or contact the office by telephone or post.

Depending on how the website is used, we may process identification and contact data such as name, the email address entered by the user in the form, telephone number, subject and message content, together with technical security and operational data such as IP address, language, timestamps and basic logs. Cookie preferences are stored so that your choices can be applied.

Please do not send through the general contact form more sensitive or confidential information than is necessary for an initial contact. If an enquiry contains special-category data or information relating to legal claims, such data are processed only to the extent necessary and only where an appropriate legal basis and professional confidentiality obligation apply.

Contact-form data are used to receive, assess and manage enquiries and, where requested, to take steps before a possible legal engagement. Depending on the circumstances, processing may rely on pre-contractual steps taken at the data subject's request, legitimate interests in secure and effective communications, compliance with a legal obligation, or the establishment, exercise or defence of legal claims.

Legal updates by email and optional analytics or marketing cookies are used only where the relevant consent has been given. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Access is limited to persons who need the data for the relevant purpose and who are subject to confidentiality obligations. Hosting, technical support, security, email and other service providers may act as processors under GDPR requirements. If third-party analytics or marketing tools are enabled in the future, they are loaded only in accordance with the user's consent choices.

The core operation of the website is not intended to transfer personal data outside the European Economic Area. If the use of a specific third-party provider involves an international transfer, it will take place only where a permitted Chapter V GDPR mechanism applies and the required safeguards are in place.

Data are retained only for as long as necessary for the purpose for which they were collected and as required to protect legitimate interests or comply with legal and professional obligations. Enquiries that do not result in a legal engagement are reviewed and deleted when there is no longer a reasonable need to retain them. If a matter is formally instructed, relevant data become part of the client file and are governed by the applicable retention and professional-secrecy obligations.

Strictly necessary cookies are used for security, sessions and storing consent choices. Optional analytics or marketing cookies are not activated before the user makes the relevant choice. Preferences can be changed at any time through “Cookie Settings” in the footer.

Subject to the conditions of the GDPR, you may have rights of access, rectification, erasure, restriction, objection and, where applicable, data portability. Where processing is based on consent, you may withdraw that consent at any time. You may exercise your rights through the contact form by clearly stating the nature of your request.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority if you consider that processing infringes applicable data-protection law.

Appropriate technical and organisational measures are applied to protect data against unauthorised access, alteration, loss or unlawful use. Electronic communications cannot, however, be regarded as entirely risk-free; for particularly sensitive material, please first contact the office to agree an appropriate transmission method.

This policy may be updated when the website's functions, providers or applicable regulatory framework change. The date of the latest update is shown at the top of this page.