PERSONAL DATA PROTECTION POLICY

Date: 30.6.2025

This Privacy Policy (the “Policy”) describes in detail the procedures followed by the Law Firm “VERA ALEXANDROPOULOU AND ASSOCIATES LAW FIRM” (“Data Controller”), as the administrator of the website, for the collection, storage and processing of personal data of its users, in accordance with Regulation (EU) 2016/679 (“General Data Protection Regulation” – GDPR), as well as Law 4624/2019, the applicable national legislation on personal data protection. The term “user” or “visitor” refers to any natural person who has access to our website, browses its content or uses the services provided, either as a registered user or as a simple visitor.

  1. Collection and Processing of Personal Data

Our website may collect and process personal data of its users in the following cases:

  • Submitting access requests to posted texts: When users wish to gain access to selected texts, by submitting a relevant request via email.
  • Contact via the contact form: When users contact us for questions or information.
  • Interaction with external links: When users follow hyperlinks that lead to third-party websites.

The personal data collected through the website are as follows:

  • Full name
  • Email address
  • Professional status
  • Contact phone number
  • Home or work address
  • IP address and navigation data
  • Preferences and interests in relation to the services provided
  1. Legal Basis for Data Processing

The collection and processing of users’ personal data is carried out in accordance with the following legal bases:

  • User consent: When users provide their data voluntarily for a specific purpose. The user’s consent to the processing of their personal data is provided through clear actions, such as through:
  • Completing and submitting electronic contact forms or requests on the website.
  • Explicit acceptance of the terms and conditions when submitting a request for access to the texts.
  • Explicit acceptance of the use of cookies through the relevant browser settings.
  • Subscription to newsletters or other information services.

The user has the right to withdraw their consent at any time, without affecting the lawfulness of the processing already carried out based on the consent before its withdrawal.

  • Fulfillment of contractual obligations: In cases where processing is necessary for the provision of services.
  • Compliance with legal or regulatory requirements: When data processing is required by law.

The reference to more than one lawful basis for processing does not imply a change of basis (“lawful basis swapping”) that would undermine data subjects’ rights. Rather, it acknowledges that in some cases, multiple lawful bases may legitimately apply to the same processing activity.

  1. Use and Purposes of Data Processing

The personal data collected is used exclusively for the following purposes:

  • Processing and managing requests for access to texts
  • Contacting users for informational or support purposes
  • Compliance with legal or regulatory obligations
  • Improving our website services and user experience

We may share your data with cooperating service providers, legal advisors, universities, other social institutions or competent authorities, if this is necessary for the fulfillment of the processing purposes or if required by law. In any case, the communication takes place within the European Union and in compliance with applicable data protection legislation. In the event that the communication extends outside the European Union, our Policy will be updated accordingly.

  1. User Rights

We recognize the rights of individuals regarding the protection of their personal data. Thus, individuals have the right to:

  1. Request access to the personal data that concerns them.
  2. Request the correction of incorrect, inaccurate or incomplete personal data.
  3. Request the erasure of personal data when it is no longer necessary or if the processing is unlawful. In some cases the right to erasure is limited and will be assessed on a case-by-case basis under strict conditions.
  4. Object to the processing of personal data for reasons relating to their particular situation, subject to Article 21(6) of the GDPR.
  5. Submit a request to restrict the processing of personal data in specific cases.
  6. Express their opinion and challenge the decision of the Data Controller regarding the processing of their personal data.
  7. Submit a complaint to the Personal Data Protection Authority via a web portal (https://www.dpa.gr/el/syndesi/prosvasi)

To exercise your rights, please contact us at privacy@theprro.com

  1. Data Retention and Security

Personal data is retained only for the period of time necessary to fulfill the purposes for which it was collected. We take strict technical and organizational measures to protect data from unauthorized access, alteration or loss.

  1. Changes to the Policy

We reserve the right to modify or update the Policy at any time as deemed necessary. Any change will be posted on our website and will be effective from the date of posting.

For any questions or requests regarding this Policy, you can contact us at privacy@theprro.com

  1. Data Controller Details

VERA ALEXANDROPOULOU AND ASSOCIATES LAW FIRM

Address: K. Mavromichali 3, Piraeus, Postal Code 18545

Contact Tel.: +302104121980

Create your account