Privacy and Data Protection Notice

This Privacy and Data Protection Notice describes the information that Charalampous & Associates Law Office collects about you, how we use and protect this information and the choices you may make regarding the use of your personal data.

We recognize that privacy and data protection are ongoing responsibilities. Accordingly, we may update and amend this Notice from time to time. We encourage you to periodically review this Notice to ensure that you remain informed of any updates.

1. Who we are

We are Charalampous & Associates Law Office, a Greek law office based in Athens, Greece, providing legal and advisory services across a broad range of practice areas, including litigation, corporate and commercial law, healthcare law, data protection and privacy, technology and digital law, regulatory compliance, real estate and dispute resolution.
For any questions regarding this Notice or the processing of your personal data, you may contact us at: info@charalampous-law.com
 

2. What Type of Information Do We Collect?

​

Depending on the nature of our relationship and services provided, we may collect and process the following categories of personal data:

2.1. Identification Information
We may collect names, surnames, trade names, company names, professional titles and other identifying information of clients, prospective clients, counterparties and professional contacts.

2.2. Contact Information
We may collect email addresses, telephone numbers, postal addresses and other contact details necessary for communication and the provision of our services.

2.3. Billing and Financial Information
We may collect information necessary for invoicing, tax compliance and accounting purposes, including Tax Registration Numbers (TRN/VAT numbers), billing addresses and related financial information.

2.4. Professional and Case-Related Information
In the context of providing legal services, we may process information and documentation relevant to legal matters, transactions, disputes, compliance assessments, litigation or advisory work.
 

2.5. Recruitment Information
Where individuals apply for employment, traineeships or collaboration opportunities with our office, we may process CVs, educational background, professional experience, qualifications and related recruitment information.

2.6. Website and Communication Data
Where applicable, we may collect information submitted through our website, contact forms or professional communications.

2.7. Special Categories of Personal Data
Given the nature of legal services, we may occasionally process special categories of personal data where necessary for the establishment, exercise or defense of legal claims, compliance with legal obligations or where otherwise permitted under applicable law. We always seek to minimize such processing and apply enhanced confidentiality and security safeguards.
 

3. Where Do We Obtain Your Information From?

We obtain personal data directly from you, from your authorized representatives, from publicly available sources, from counterparties or professional advisers (legal or not) involved in a matter and from information provided during the course of our professional relationship.

We do not sell personal data to third parties.

4. How Do We Use Your Information?

We process personal data solely for legitimate professional and business purposes, including:

•    providing legal and advisory services; 
•    communicating with clients and professional contacts; 
•    managing legal matters, transactions and disputes; 
•    complying with legal, regulatory, tax and professional obligations; 
•    handling billing and administrative matters; 
•    evaluating recruitment applications; and 
•    maintaining the security and operation of our office and systems. 
 

5. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

5.1. Contractual Necessity
Processing may be necessary for the performance of a contract, engagement or mandate or in order to take steps prior to entering into such relationship.

5.2. Legal and Regulatory Obligations
Processing may be necessary for compliance with applicable legal, regulatory, professional, tax, anti-money laundering or court-related obligations.

5.3. Legitimate Interests
Processing may also be necessary for the purposes of our legitimate professional and business interests, including the proper management and protection of our legal practice and services.

5.4. Consent
Where required by law, we may rely on your consent for specific processing activities. You may withdraw such consent at any time.

6. How Long Do We Retain Your Information?

We retain personal data only for as long as necessary for the purposes for which it was collected, including for the provision of legal services, compliance with legal and professional obligations, dispute resolution, recordkeeping requirements and the protection of legal rights and interests.
Retention periods may vary depending on the nature of the engagement and applicable legal or regulatory requirements.
For additional information regarding data retention practices, you may contact us at info@charalampous-law.com.
 

7. Safeguards and Security Measures

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, loss, misuse, alteration or destruction.

Such measures may include:
•    restricted access to systems and files; 
•    confidentiality obligations; 
•    secure servers and IT infrastructure; 
•    encryption and authentication mechanisms; 
•    cybersecurity monitoring and incident management procedures; 
•    secure storage and destruction practices; and 
•    internal policies regarding data handling and retention. 
Access to personal data is limited to individuals who require such access for legitimate professional purposes.
 

8. Sharing of Information

Where necessary and appropriate within the context of our professional activities, we may share personal data with:
•    external legal advisers and professional consultants; 
•    courts, authorities, regulators or public bodies; 
•    accountants, auditors and compliance providers; 
•    IT and cloud service providers; 
•    counterparties, banks, notaries or transaction participants; and 
•    other service providers assisting us in the delivery of our services. 

Any such sharing is limited to what is necessary and subject to appropriate confidentiality and data protection safeguards.
 

9. Your Rights

Subject to applicable law, you may have the following rights regarding your personal data:

9.1. Right of Access
You may request access to the personal data we hold about you.

9.2. Right to Rectification
You may request correction of inaccurate or incomplete personal data.

9.3. Right to Erasure
Under certain circumstances, you may request the deletion of your personal data.

9.4. Right to Restriction or Objection
You may request restriction of processing or object to certain processing activities.

9.5. Right to Data Portability
Where applicable, you may request to receive your personal data in a structured and commonly used format.

9.6. Right to Withdraw Consent
Where processing is based on consent, you may withdraw such consent at any time.
You also have the right to lodge a complaint with the competent supervisory authority in Greece: Hellenic Data Protection Authority
Further information is available at: Hellenic Data Protection Authority
 

10. International Transfers of Personal Data

As a general principle, personal data is processed within the European Economic Area (EEA). Where transfers outside the EEA are necessary, appropriate safeguards will be implemented in accordance with applicable data protection legislation, including the GDPR.

11. How to Contact Us

For any questions regarding this Privacy and Data Protection Notice or the processing of your personal data, you may contact:
Charalampous & Associates Law Office
71 Alexandras Avenue, 11474, Athens, Greece
Email: info@charalampous-law.com
Telephone: +30 210 6467476
Website: www.charalampous-law.com

12. Version Information – Changes and Updates

This Privacy and Data Protection Notice was last updated in May 2026.
We reserve the right to amend or update this Notice at any time. Any updated version will be published on our website and will become effective upon publication.