{"id":5742,"date":"2024-04-25T15:28:51","date_gmt":"2024-04-25T15:28:51","guid":{"rendered":"https:\/\/kremalis.com\/?page_id=5742"},"modified":"2026-06-09T16:44:29","modified_gmt":"2026-06-09T13:44:29","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/kremalis.com\/el\/privacy-policy-2\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"

Last updated: February 2024<\/span><\/p>\n

Kremalis Law Firm is committed to protecting the privacy of its website visitors. Please<\/span>
\nread the following policy to understand how we collect and use your personal data and<\/span>
\nthe rights you have in relation to this data. Note that Kremalis Law Firm reserves the<\/span>
\nright to amend and update this policy from time to time, so please check this page<\/span>
\nperiodically.<\/span><\/p>\n

    \n
  1. Categories of personal data we collect.<\/strong><\/span><\/li>\n<\/ol>\n

    You are not obliged to provide us with your personal data to access any area of this<\/span>
    \nwebsite. However, when you contact us by email or other means, when you choose to<\/span>
    \nsign up to receive our newsletters or when you decide to apply for a job, we will collect<\/span>
    \nthe necessary data so that we can respond to your requests, send you our emails about<\/span>
    \nnews and updates in areas of interest to you or process your application for any type of<\/span>
    \ncollaboration. Kremalis Law Firm processes – indicatively and not restrictively – the<\/span>
    \nfollowing personal data:<\/span>
    \n– e-mail address<\/span>
    \n– full name<\/span>
    \n– personal data included in your CV<\/span>
    \n– company name<\/span>
    \n– country<\/span>
    \n– job title<\/span>
    \n– any other personal data you send us on your own freewill<\/span><\/p>\n

    We invite you not to disclose sensitive personal data which relate to your racial or ethnic<\/span>
    \norigin, political opinions, religious or philosophical beliefs, trade union membership or<\/span>
    \nnot, genetic data, biometric data, health data or data concerning sexual life or sexual<\/span>
    \norientation. Kremalis Law Firm does not intend to process such information and in case<\/span>
    \nsuch data are disclosed by you, they will be immediately deleted, unless it is necessary<\/span>
    \nto process them if they are connected to obligations, tasks or purposes of Kremalis Law<\/span>
    \nFirm that cannot be fulfilled otherwise and\/or are important for the establishment of a<\/span>
    \nprofessional relationship.<\/span><\/p>\n

    It is our policy to collect only the minimum information needed to complete your request.<\/span><\/p>\n

      \n
    1. Data process purposes and usage.<\/strong><\/span><\/li>\n<\/ol>\n

      We will use your personal data for the below mentioned purposes:<\/span>
      \n– managing and\/or improve our website<\/span>
      \n– managing and promoting collaboration and communication<\/span>
      \n– managing our relationship with you and responding to any request you submit<\/span>
      \nthrough our website<\/span>
      \n– conducting data analysis including, for example, regarding usage of our website<\/span>
      \nand demographic analyses of website users<\/span>
      \n– preventing fraud or criminal activity and safeguarding our technology systems<\/span>
      \nand data security<\/span>
      \n– applicable legal or statutory requirements<\/span>
      \n– requests and communications from competent authorities<\/span>
      \n– recruitment and business development<\/span>
      \n– investigating or preventing security incidents<\/span>
      \n– conducting and analyzing our marketing activities<\/span>
      \n– protecting our rights<\/span><\/p>\n

      We have implemented generally accepted standards of technology and operational<\/span>
      \nsecurity to protect personally identifiable information from loss, misuse, alteration, or<\/span>
      \ndestruction. Only duly authorized persons are provided access to personally<\/span>
      \nidentifiable information collected via our website; such individuals have agreed to<\/span>
      \nmaintain the confidentiality of this information. Your data will be processed both with<\/span>
      \nthe aid of computerized or automated tools and on paper and will be protected<\/span>
      \nthrough appropriate measures to ensure the confidentiality and security of personal<\/span>
      \ndata.<\/span><\/p>\n

        \n
      1. The legal basis for the process.<\/strong><\/span><\/li>\n<\/ol>\n

        – Contractual Purposes.<\/u> The data will be processed to implement pre-contractual<\/span>
        \nmeasures taken at your request, with a view to the possible establishment of the<\/span>
        \nprofessional and\/or employment relationship. This includes, but is not limited to,<\/span>
        \nthe following purposes: evaluation of your professional profile for the purposes of<\/span>
        \nestablishing an employment or collaboration relationship; administrative-<\/span>
        \naccounting purposes, in the preparatory phase for the possible stipulation of the<\/span>
        \nemployment or collaboration contract.<\/span>
        \n– Legal purposes.<\/u> The data will be processed in accordance with any legal or<\/span>
        \nregulatory obligations, including labor law, social security and tax obligations.<\/span>
        \n– Purposes of legitimate interest.<\/u> Your personal data may be processed to enforce<\/span>
        \nand defend our rights against any party in case of any litigation.<\/span>
        \n– Retention purposes.<\/u> With your explicit consent we may keep the details<\/span>
        \ncontained in your collaboration application and\/or cv, in order to assess, if<\/span>
        \nnecessary, your suitability to hold positions other than the one for which you had<\/span>
        \nsubmitted your application, when new job positions or collaboration opportunities<\/span>
        \nare opened, with us.<\/span>
        \n– Your explicit consent<\/u> for the process of your personal data, which you have the<\/span>
        \nright to revoke at any time and with the same ease you have given it.<\/span><\/p>\n

          \n
        1. Data communication<\/strong><\/span><\/li>\n<\/ol>\n

          For the purposes set out above, Kremalis Law Firm may disclose – in whole or in part<\/span>
          \n\u2013 your personal data to the following categories of data processors:<\/span>
          \nexperts, consultants, auditing companies, technology providers, staff search<\/span>
          \nservices, as independent data controllers or data processors, employees and<\/span>
          \nmembers of the Ius Laboris alliance established abroad, as data processors or<\/span>
          \nindependent data controllers. The third-party providers may use their own third-party<\/span>
          \nsubcontractors that may have access to your personal data (sub-processors). It is<\/span>
          \nour policy to use only third-party providers that are bound to maintain appropriate<\/span>
          \nlevels of security and confidentiality, to process personal information only as<\/span>
          \ninstructed by us, and to flow those same obligations down to their sub-processors.<\/span><\/p>\n

          Some of the aforementioned entities\/professionals may be located in countries<\/span>
          \noutside the European Union or the European Economic Area. In this case, in<\/span>
          \ncompliance with the applicable regulations, your data may also be transferred abroad<\/span>
          \nto countries not belonging to the European Economic Area and, in particular, to<\/span>
          \ncountries where employees and members of the Ius Laboris alliance are based, in<\/span>
          \nwhich Kremalis Law Firm is exclusive member for Greece. Any transfer of data to<\/span>
          \ncountries located outside the European Economic Area will, in any case, be made in<\/span>
          \ncompliance with appropriate measures for the protection of your personal data by<\/span>
          \napplying the appropriate and pertinent guarantees for the purposes of the transfer,<\/span>
          \npursuant to Articles 44 and following of the European Regulation.<\/span><\/p>\n

          In any case, you may obtain further information on the possible transfer of the data<\/span>
          \noutside the European Economic Area by making a request to us in the manner<\/span>
          \nindicated in the following paragraphs.<\/span><\/p>\n

            \n
          1. Retention Period<\/strong><\/span><\/li>\n<\/ol>\n

            Your personal information will not be kept longer than necessary given the purpose<\/span>
            \nfor which we originally collected the data.<\/span><\/p>\n

            Some of your personal data may also be retained where it is required to fulfil legal or<\/span>
            \nregulatory obligations, to resolve disputes, to prevent fraud and abuse and to enforce<\/span>
            \nthe terms and conditions we have set.<\/span><\/p>\n

            Indicatively:<\/span><\/p>\n

            – We may retain personal data for the time needed in relation to contractual or<\/span>
            \nprecontractual purposes (e.g. commercial or employment relationships) and\/or<\/span>
            \nretain them for future collaborations for a period of at least 6 months after the<\/span>
            \ninitiation of our communication, in case our collaboration did not commence,<\/span>
            \nexcept if you object to such data retention.<\/span>
            \n– We may retain certain categories of personal data for longer in order to comply<\/span>
            \nwith legal or regulatory obligations or to resolve a legal dispute.<\/span>
            \n– Finally, we may retain different types of personal data for different periods of time<\/span>
            \nif required by law.<\/span><\/p>\n

              \n
            1. Your rights<\/strong><\/span><\/li>\n<\/ol>\n

              Without prejudice to the possibility for the Data Subject not to provide his\/her own<\/span>
              \nData, you may, at any time and free of charge, exercise the following rights:<\/span><\/p>\n

              Right to information and transparency (Articles 12-14 GDPR)<\/u>\u00a0It is the right to know<\/span>
              \nwho is processing your data, what they are and the reason for which the process<\/span>
              \ntakes place.<\/span><\/p>\n

              Right of access (Article 15 GDPR)<\/u>\u00a0You have the right to request free access to your<\/span>
              \npersonal data held by us.<\/span><\/p>\n

              Right to rectification (Article 16 GDPR)<\/u>\u00a0You have the right to request the rectification<\/span>
              \nof inaccurate personal data and the completion of incomplete data.<\/span><\/p>\n

              Right to erasure (Article 17 GDPR)<\/u>\u00a0You have the right to request the erasure of your<\/span>
              \npersonal data under certain conditions, such as when the data is no longer<\/span>
              \nnecessary, you have withdrawn your consent, you think that the data has been<\/span>
              \nunlawfully processed etc.<\/span><\/p>\n

              Right to restriction of processing (Article 18 GDPR)<\/u>\u00a0You have the right to request the<\/span>
              \nrestriction of the processing of your personal data if you think that the accuracy of<\/span>
              \nyour data is contested, the processing is unlawful, the data is no longer needed by<\/span>
              \nus and\/or you object to automated processing.<\/span><\/p>\n

              Right to data portability (Article 20 GDPR)<\/u>\u00a0You have the right to request the transfer<\/span>
              \nof your data to another controller.<\/span><\/p>\n

              Right to object (Article 21 GDPR)<\/u>\u00a0You have the right to object to the processing of<\/span>
              \nyour personal data by us, provided that the public interest is not affected.<\/span><\/p>\n

              Right to non-automated individual decision-making, including profiling (Article 22
              \nGDPR)<\/u>\u00a0You have the right to object when a decision concerning you is based solely<\/span>
              \non automated processing, including profiling, and that decision produces legitimate<\/span>
              \neffects or significantly affects you.<\/span><\/p>\n

              You also have the right to make a complaint to the Personal Data Protection<\/span>
              \nAuthority to the contacts available at www.dpa.gr.<\/span><\/p>\n

                \n
              1. Information Security Policy<\/strong><\/span><\/li>\n<\/ol>\n

                At KREMALIS Law Firm, we recognize the importance of information security and its <\/span><\/p>\n

                role in supporting our objectives, maintaining our clients’ trust, and complying with legal <\/span><\/p>\n

                and regulatory requirements.\u00a0We are committed to full compliance with both the applicable <\/span><\/p>\n

                legal and regulatory\u00a0<\/span>requirements regarding information security, as well as the requirements <\/span><\/p>\n

                of the\u00a0international standard ISO 27001:2022.<\/span><\/p>\n

                We are dedicated to ensuring integrity, confidentiality, and availability of information<\/span><\/p>\n

                as a fundamental requirement of our firm. Our information security objectives include:<\/span><\/p>\n