N&A Law Firm is a law partnership with registered offices in Athens (Athens Bar Association Number 80827) at 34 Asklipliou Street, 10674 Athens.
At N&A we value your privacy. N&A is committed to protecting any personal data you may provide to us. We strive to ensure compliance with the EU General Data Protection Regulation (GDPR) and Law 4624/2019 regarding personal data protection, which came into force in Greece on 29.08.2019
Our Privacy Policy aims to inform you about the kind of personal data we collect at N&A, how we use, process, and protect it and what your rights are in respect to such processing.
“Personal data” is information about an identified or identifiable individual, as defined by the above applicable legislation, and includes information such as name, e-mail address, telephone number etc.
“Processing” means any act or set of acts, performed with or without the use of automated means, in relation to personal data or sets of personal data, such as the collection, registration, organization, structure, storage, adaptation or alteration, retrieval of information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, erasure or destruction.
Below is N&A’s policy concerning personal data and how we treat it.
N&A reserves the right to modify this Policy, without prior notice, to ensure compliance with the applicable legislation. Any modification shall come into effect from the time it is posted on the site. Consult our policy regularly to monitor any changes.
PERSONAL DATA COLLECTED BY N&A
N&A collects and processes the following personal data:
1. Personal information like your name and contact details.
2. Financial Data related to your invoicing and payment related information including credit/debit card details, bank account information, etc.
3. Know Your Client information that you provide us with in the context of the diligence we must perform for compliance with AML/FT legislation.
4. Profile Information, such as information about your communication preferences and information about how you use our website(s), including the services you viewed or searched for, page response times, download errors, length of visits and page interaction information, referring website (a site that has led you to ours) or application. For more information, please refer to our Cookies Policy;
5. Technical information that is collected during your visits to our website, including the Internet Protocol (IP) address, browser type and version, device type, time zone setting, browser plug-in types and versions, operating system and platform, type of mobile device and its settings; unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device; device and component serial numbers online activity on other websites, applications, or social media; communications to us or regarding us on social media. For more information, please refer to our Cookies Policy;
6. Personal Data provided to N&A by or on behalf of our clients or that we generate to provide our services, and which may include special categories of data.
7. N&A may collect information about you from our interaction on social media.
8. Third party personal data you may provide us with. You are responsible to ensure that such third parties are cognizant of how their personal data will be used by N&A, and have given their consent for disclosure to N&A and use of the same by N&A.
HOW N&A USES YOUR PERSONAL DATA
N&A processes your personal data to perform its contractual obligations and / or in compliance with other legal obligations. We will process personal data to conduct our business, provide legal services to our clients, register our client, process invoices and payments, for accounting and auditing purposes, for the performance of conflict checks, for compliance with AML/FT legislation, to exercise or defend our legitimate interests or comply with court orders, and to communicate with you.
N&A may also use your personal data to process employment applications or for recruitment purposes. If you have provided us your personal data for recruitment, it will only be used in this context.
Moreover, N&A may process personal data on the legal basis of consent, granted and provided by you after you have been previously informed, under this Policy, of the type of data, the purpose(s), the extent of the processing and the recipients of such data. You are entitled to revoke your consent at any time.
In any case, by using N&A’s services, you accept this Policy and are bound by its terms.
By completing the website contact form and upon your consent, the Firm collects, as a minimum, the following personal data of the visitors/users: name and e-mail address. For the fulfillment of the purposes of the contract, the Firm collects indicatively the following personal data: name, address, occupation, telephone, e-mail, etc.
The aforementioned personal data is processed only for the following purposes: a) communication with the Firm, at your own request; b) receiving information regarding our services and any other information you wish to know; c) to fulfill the purposes of our contractual relationship; d) to recruit new employees and f) to comply with the obligations imposed by laws and regulations (including anti-money laundering laws) and for the establishment or defense of a legal claim. Your personal data shall not be used for purposes other than those listed above, unless we have obtained your prior permission or unless this is required or permitted by applicable law.
Transfer and Retention of Personal Data
Our Firm does not share or transmit your personal data to third parties unless this is required by law or is a necessary action to fulfill our contractual obligation to you..
Storage and Time of Retention of Personal Data
N&A stores your personal data on secured servers within the European Union and will not transfer it or store it outside the European Economic Area.
N&A will keep your personal data for so long as necessary to fulfill the purpose for which it was collected per this Policy. This may include the fulfillment by N&A of legal, accounting, or reporting requirements. It may also include the advance or rebuttal of legal claims until such time as the prescription period expires. Your personal data will be retained by N&A for so long as your contract is in force or required by applicable laws or necessary to defend against possible claims. N&A will delete your data as soon as it becomes unnecessary for any of the above purposes.
Data disclosed to N&A through the web site contact form are stored for a period of one (1) year, unless otherwise stated by applicable law.
CVs of candidates that were not recruited by our firm are deleted six (6) months from receipt.
Security
N&A applies appropriate technical and organizational measures to protect your personal data.
N&A employs security technologies and organizational procedures to protect your personal data, including access controls, firewalls, antivirus and secure servers.
N&A attorneys and staff are bound by confidentiality undertakings.
Data subject’s rights
Once you have provided us with your personal data, you may exercise your rights (Article 15 and subsequent of Regulation (EU) 2016/679 – GDPR and articles 33 et seq of the Law), including the right of access, the right to rectification, the right to restriction of processing, the right to be forgotten and the right to data portability, where technically feasible, by contacting us by email at [email protected].
Where the processing is based on your consent, you are entitled, at any time, to withdraw your consent. You have the right of recourse to the Hellenic Data Protection Authority for issues concerning the processing of your personal data.
For more information, visit the HDPA’s website as www.dpa.gr.
Should you exercise any of your above rights, N&A shall do its best to respond in writing within one (1) month.
We encourage you to keep your personal settings and personal data complete and current. Where applicable laws require so, we will ask you to “opt-in” or affirmatively consent to the processing of your personal data.