Last updated: February 2024
Kremalis Law Firm is committed to protecting the privacy of its website visitors. Please
read the following policy to understand how we collect and use your personal data and
the rights you have in relation to this data. Note that Kremalis Law Firm reserves the
right to amend and update this policy from time to time, so please check this page
periodically.
1. Categories of personal data we collect.
You are not obliged to provide us with your personal data to access any area of this
website. However, when you contact us by email or other means, when you choose to
sign up to receive our newsletters or when you decide to apply for a job, we will collect
the necessary data so that we can respond to your requests, send you our emails about
news and updates in areas of interest to you or process your application for any type of
collaboration. Kremalis Law Firm processes – indicatively and not restrictively – the
following personal data:
– e-mail address
– full name
– personal data included in your CV
– company name
– country
– job title
– any other personal data you send us on your own freewill
We invite you not to disclose sensitive personal data which relate to your racial or ethnic
origin, political opinions, religious or philosophical beliefs, trade union membership or
not, genetic data, biometric data, health data or data concerning sexual life or sexual
orientation. Kremalis Law Firm does not intend to process such information and in case
such data are disclosed by you, they will be immediately deleted, unless it is necessary
to process them if they are connected to obligations, tasks or purposes of Kremalis Law
Firm that cannot be fulfilled otherwise and/or are important for the establishment of a
professional relationship.
It is our policy to collect only the minimum information needed to complete your request.
2. Data process purposes and usage.
We will use your personal data for the below mentioned purposes:
– managing and/or improve our website
– managing and promoting collaboration and communication
– managing our relationship with you and responding to any request you submit
through our website
– conducting data analysis including, for example, regarding usage of our website
and demographic analyses of website users
– preventing fraud or criminal activity and safeguarding our technology systems
and data security
– applicable legal or statutory requirements
– requests and communications from competent authorities
– recruitment and business development
– investigating or preventing security incidents
– conducting and analyzing our marketing activities
– protecting our rights
We have implemented generally accepted standards of technology and operational
security to protect personally identifiable information from loss, misuse, alteration, or
destruction. Only duly authorized persons are provided access to personally
identifiable information collected via our website; such individuals have agreed to
maintain the confidentiality of this information. Your data will be processed both with
the aid of computerized or automated tools and on paper and will be protected
through appropriate measures to ensure the confidentiality and security of personal
data.
3. The legal basis for the process.
– Contractual Purposes. The data will be processed to implement pre-contractual
measures taken at your request, with a view to the possible establishment of the
professional and/or employment relationship. This includes, but is not limited to,
the following purposes: evaluation of your professional profile for the purposes of
establishing an employment or collaboration relationship; administrative-
accounting purposes, in the preparatory phase for the possible stipulation of the
employment or collaboration contract.
– Legal purposes. The data will be processed in accordance with any legal or
regulatory obligations, including labor law, social security and tax obligations.
– Purposes of legitimate interest. Your personal data may be processed to enforce
and defend our rights against any party in case of any litigation.
– Retention purposes. With your explicit consent we may keep the details
contained in your collaboration application and/or cv, in order to assess, if
necessary, your suitability to hold positions other than the one for which you had
submitted your application, when new job positions or collaboration opportunities
are opened, with us.
– Your explicit consent for the process of your personal data, which you have the
right to revoke at any time and with the same ease you have given it.
4. Data communication
For the purposes set out above, Kremalis Law Firm may disclose – in whole or in part
– your personal data to the following categories of data processors:
experts, consultants, auditing companies, technology providers, staff search
services, as independent data controllers or data processors, employees and
members of the Ius Laboris alliance established abroad, as data processors or
independent data controllers. The third-party providers may use their own third-party
subcontractors that may have access to your personal data (sub-processors). It is
our policy to use only third-party providers that are bound to maintain appropriate
levels of security and confidentiality, to process personal information only as
instructed by us, and to flow those same obligations down to their sub-processors.
Some of the aforementioned entities/professionals may be located in countries
outside the European Union or the European Economic Area. In this case, in
compliance with the applicable regulations, your data may also be transferred abroad
to countries not belonging to the European Economic Area and, in particular, to
countries where employees and members of the Ius Laboris alliance are based, in
which Kremalis Law Firm is exclusive member for Greece. Any transfer of data to
countries located outside the European Economic Area will, in any case, be made in
compliance with appropriate measures for the protection of your personal data by
applying the appropriate and pertinent guarantees for the purposes of the transfer,
pursuant to Articles 44 and following of the European Regulation.
In any case, you may obtain further information on the possible transfer of the data
outside the European Economic Area by making a request to us in the manner
indicated in the following paragraphs.
5. Retention Period
Your personal information will not be kept longer than necessary given the purpose
for which we originally collected the data.
Some of your personal data may also be retained where it is required to fulfil legal or
regulatory obligations, to resolve disputes, to prevent fraud and abuse and to enforce
the terms and conditions we have set.
Indicatively:
– We may retain personal data for the time needed in relation to contractual or
precontractual purposes (e.g. commercial or employment relationships) and/or
retain them for future collaborations for a period of at least 6 months after the
initiation of our communication, in case our collaboration did not commence,
except if you object to such data retention.
– We may retain certain categories of personal data for longer in order to comply
with legal or regulatory obligations or to resolve a legal dispute.
– Finally, we may retain different types of personal data for different periods of time
if required by law.
6. Your rights
Without prejudice to the possibility for the Data Subject not to provide his/her own
Data, you may, at any time and free of charge, exercise the following rights:
Right to information and transparency (Articles 12-14 GDPR) It is the right to know
who is processing your data, what they are and the reason for which the process
takes place.
Right of access (Article 15 GDPR) You have the right to request free access to your
personal data held by us.
Right to rectification (Article 16 GDPR) You have the right to request the rectification
of inaccurate personal data and the completion of incomplete data.
Right to erasure (Article 17 GDPR) You have the right to request the erasure of your
personal data under certain conditions, such as when the data is no longer
necessary, you have withdrawn your consent, you think that the data has been
unlawfully processed etc.
Right to restriction of processing (Article 18 GDPR) You have the right to request the
restriction of the processing of your personal data if you think that the accuracy of
your data is contested, the processing is unlawful, the data is no longer needed by
us and/or you object to automated processing.
Right to data portability (Article 20 GDPR) You have the right to request the transfer
of your data to another controller.
Right to object (Article 21 GDPR) You have the right to object to the processing of
your personal data by us, provided that the public interest is not affected.
Right to non-automated individual decision-making, including profiling (Article 22
GDPR) You have the right to object when a decision concerning you is based solely
on automated processing, including profiling, and that decision produces legitimate
effects or significantly affects you.
You also have the right to make a complaint to the Personal Data Protection
Authority to the contacts available at www.dpa.gr.
Requests for the exercise of rights can be addressed to us in writing at the following
email address info@kremalis.gr or by post at:
Kremalis Law Firm
35 Kyrillou Loukareos Str., P.C. 114 75 Athens
A response to such a request shall be provided within one (1) month after receipt
and, in any case, within two (2) additional months if this is required by the complexity
of the request or the general number of requests we have received.
For additional information or questions regarding the processing of personal data, as
well as for any data protection matter, you may contact us at info@kremalis.gr.
