Legal
Privacy and cookies
Last updated: 14 September 2026. In case of any discrepancy, the Greek version prevails.
This policy explains how personal data is processed, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
1. Data controller
- Controller
- Stavroula Psarrou, Attorney at Law
- Address
- [TO BE COMPLETED: street, number, postcode] Athens, Greece
- spsarou@gmail.com
- Phone
- [TO BE COMPLETED]
2. What data we process
When you visit this website
This website has no forms, user accounts, analytics, advertising or embedded social media. Fonts are served from this website itself, not from third parties.
To deliver pages to your browser and protect the website from attacks, the hosting provider processes technical connection data: IP address, browser and device type, the page requested, date and time.
When you contact the office
When you send an email or call, we process what you share with us: your name, contact details, a description of your matter and any documents. If we take on your case, we also process the data needed to carry out the engagement.
3. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Secure operation of the website and protection against misuse | Legitimate interest, Art. 6(1)(f) |
| Replying to your enquiry and steps before an engagement | Art. 6(1)(b) |
| Carrying out the engagement and providing legal services | Art. 6(1)(b) |
| Compliance with tax and legal profession obligations | Art. 6(1)(c) |
| Special categories of data, where needed to establish, exercise or defend legal claims | Art. 9(2)(f) |
No decisions are made solely by automated means and no profiling takes place.
4. Recipients
Your data is protected by professional secrecy and is never sold or used for advertising. Access is limited to what is necessary for:
- Cloudflare, Inc., as hosting and security provider of the website,
- Google, as provider of the office email service,
- courts, public authorities, bailiffs, notaries and associates, where required to handle your case,
- the office accountant, for invoicing data.
5. Transfers outside the European Economic Area
Cloudflare and Google may process data outside the EEA, including in the United States. Such transfers rely on the EU and US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or the European Commission’s Standard Contractual Clauses.
6. Retention
- Technical visit data: for a short period, as set by the hosting provider’s policy.
- Correspondence without an engagement: deleted when no longer needed and within 12 months at the latest.
- Case files: for as long as the law requires or as needed to establish, exercise or defend legal claims.
- Tax records: for the period required by tax law.
7. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Some rights may be limited where professional secrecy or another legal obligation requires it, as provided by Law 4624/2019.
To exercise your rights, email spsarou@gmail.com. You will receive a reply within one month.
You may also lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr.
8. Cookies
This website does not use cookies for analytics, advertising or tracking, which is why no cookie banner is shown.
To protect the website against automated attacks, Cloudflare may store the following strictly necessary cookies on your device. They do not require consent under article 4(5) of Greek Law 3471/2006.
| Cookie | Purpose | Duration |
|---|---|---|
| __cf_bm | Distinguishing people from automated programs | 30 minutes |
| cf_clearance | Confirming that a security check was passed | Up to 30 minutes |
You can delete or block cookies in your browser settings.
9. Security
This website is served only over an encrypted connection (HTTPS), loads no third party code and applies measures against attacks and against being embedded in other websites.
10. Changes
This policy may be updated. The version published on this page, with the last updated date at the top, always applies.
See also the Legal notice and terms of use.