Privacy Policy

Effective Date: 29 July 2026
Last Updated: 29 July 2026

The Law Office “PETROS TSANTINIS LAW OFFICE” (hereinafter referred to as the “Law Office”) processes your personal data lawfully and with the utmost respect for your privacy. This Privacy Policy has been prepared to inform you about how we collect, use, process and protect your personal data.

Introduction – Data Controller

The website available at www.tsantinis.gr (hereinafter the “Website”, “we”, “our” or “us”) is owned and operated by PETROS TSANTINIS LAW OFFICE, located at 96–100 Akadimias Street, 10677 Athens, Greece.

Data Controller: Petros Tsantinis
Telephone: +30 210 3213144
Email: info@tsantinis.gr

In the course of communicating with you, providing legal services and promoting our services, the Website collects certain information relating to its visitors, some of which may directly or indirectly identify you.

Under the applicable data protection legislation, certain information constitutes personal data, you are considered a data subject, and we act as the data controller of your personal data.

If you have any questions regarding the processing of your personal data or the exercise of your rights, please feel free to contact us using the details provided above.

Principles Governing the Processing of Your Personal Data

The Website is committed to processing your personal data fairly, lawfully and transparently, in accordance with the applicable data protection legislation.

In particular:

• We process your personal data only for specific, explicit and legitimate purposes and do not further process them in a manner incompatible with those purposes (purpose limitation).
• We collect and process only the personal data that are adequate, relevant and limited to what is necessary for the purposes for which they are processed (data minimisation).
• We make every reasonable effort to ensure that your personal data are accurate and, where necessary, kept up to date, providing you with the opportunity to request their correction or deletion where appropriate (accuracy).
• We retain your personal data in a form that permits identification only for as long as necessary to fulfil the purposes for which they were collected (storage limitation).
• We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage (integrity and confidentiality).

To protect your personal data, the Website implements appropriate technical and organisational security measures, adopts internal security policies, ensures that its personnel and associates are bound by confidentiality obligations, and uses modern security technologies, including SSL encryption and certified hosting providers.

We regularly review these measures and update them whenever necessary in accordance with current best practices and technological developments.

What Personal Data We Process

The Website processes your personal data only when you actively provide them to us, for example by completing a contact form.

Such data may also be stored and managed through business management systems (ERP/CRM) used exclusively by the Law Office for organisational purposes, communication and the handling of enquiries.

This does not apply to certain information collected automatically through cookies (please refer to our Cookie Policy) or other technical information collected automatically during your visit to the Website.

A. Information Collected Automatically

Due to the way the Internet operates, when you visit our Website, our server automatically records your IP address together with certain technical information, including:

• the date and time of your visit;
• the website from which you accessed our Website;
• the type of browser you use;
• your operating system.

The legal basis for processing these data (including their storage in server log files) is our legitimate interest in ensuring the security of our networks, information systems and services against accidental events, unlawful or malicious activities that may compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data (such as denial-of-service attacks), as well as in diagnosing and resolving technical issues.

Google Analytics and Google Consent Mode

The Website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the purpose of collecting statistical information regarding the use and performance of the Website.

Google Analytics may collect information such as the pages you visit, the time and duration of your visit, your approximate geographical area, your device, browser and operating system type, the source through which you accessed the Website and information concerning your interaction with the Website.

Google Analytics is used, and the relevant cookies are stored or accessed, only in accordance with the consent choices you make through the Website’s cookie consent management mechanism. The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR and the applicable electronic communications legislation.

The Website uses Google Consent Mode, through which the behaviour of Google services and tags is adjusted according to your consent choices. Depending on the technical configuration of the consent management mechanism, where you do not provide consent, the relevant cookies will not be stored and Google may receive only limited, cookieless signals for aggregated measurement and statistical modelling purposes.

You may withdraw or modify your consent at any time through the Website’s “Cookie Settings” tool. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Data collected through Google Analytics are retained for the period specified in the relevant service settings and for no longer than fourteen (14) months in relation to user-level and event-level data, unless a different retention period is required under applicable law.

In connection with the provision of the service, data may be processed by Google group companies or through infrastructure located outside the European Economic Area. In such cases, the safeguards required under applicable data protection legislation are applied, including adequacy decisions or approved Standard Contractual Clauses.

Further information regarding the categories of cookies used, their duration and the management of your consent choices is available in the Website’s Cookie Policy.

B. Information You Provide to Us

We process personal data that you voluntarily provide when contacting us via our contact form, email or telephone.

Personal data we may collect include:

• Full name
• Email address
• Telephone number

Important Notice

When contacting the Law Office, you should provide only the information necessary for your enquiry and avoid including sensitive personal data relating to yourself or third parties unless such disclosure is necessary for the legal services requested.

Purposes of Processing

We process your personal data for the following purposes:

• to respond to your enquiries and communicate with you;
• to provide the legal or related services you have requested;
• to improve the quality of our services and your experience on our Website;
• to ensure the proper operation and security of the Website;
• to comply with our legal and regulatory obligations; and
• to improve the organisation and efficiency of our internal operations.

Please note that sending us an email, submitting a contact form or contacting us by telephone does not, in itself, create an attorney-client relationship, nor does it automatically result in your inclusion in our client database.

Legal Basis for Processing

Communication

Where you contact us through our contact form, by email or by telephone, we process the personal data you voluntarily provide on the basis of your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). You may withdraw your consent at any time and request the deletion of your personal data, without affecting the lawfulness of processing carried out prior to such withdrawal.

Performance of a Contract / Provision of Legal Services

Where you request legal or related professional services, we process your personal data as necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.

The personal data processed for this purpose may include, among others, your name, address, professional capacity and any other information or documentation you provide to us (including public or private documents, certificates, attestations or similar records), insofar as this is necessary for the provision of our legal services.

Improvement of Our Services

We may process certain information relating to your preferences and interactions with us in order to better understand your needs, improve the quality of our services and enhance your overall experience.

Where such processing is carried out automatically, it is based on our legitimate interest pursuant to Article 6(1)(f) GDPR. In all other cases, where required, processing is based on your explicit consent under Article 6(1)(a) GDPR.

Website Security

For the purpose of maintaining the security, integrity and proper operation of our Website, we may process certain technical information, including your IP address, approximate location and access source.

Such processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.

Compliance with Legal Obligations

We may process personal data where necessary to comply with our legal, regulatory, tax or professional obligations.

Where required by law, certain personal data may also be disclosed to competent public authorities or other authorised recipients.

Such processing is carried out pursuant to Article 6(1)(c) GDPR.

Organisation and Business Administration

In the course of our professional activity, we may process personal data collected from our clients and contacts for internal administrative purposes, including record keeping, file management, communication and the improvement of our internal organisation.

This processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.

Important Notice

You are responsible for ensuring that the personal data you provide to us are accurate and up to date. Information regarding your right to rectify inaccurate personal data is set out below under “Your Rights.”

---

Recipients of Your Personal Data

Access to your personal data is restricted to the authorised personnel and professional associates of the Law Office who process such data strictly on a need-to-know basis and under obligations of confidentiality.

In order to ensure the proper operation of the Website and the efficient provision of our services, certain processing activities may be carried out by carefully selected third-party service providers acting as data processors on our behalf.

These processors act solely in accordance with our documented instructions and only for the purposes described in this Privacy Policy, unless otherwise required by applicable law.

Prior to any transfer of personal data, we implement appropriate technical and organisational safeguards to ensure an adequate level of data protection.

All external processors are contractually bound to comply with the requirements of the GDPR and to implement appropriate security measures protecting your personal data.

Such service providers may include, among others:

• website hosting providers;
• managed hosting providers;
• cloud infrastructure providers;
• providers of technical support and information technology services.

The Law Office, together with its service providers and professional associates, implements appropriate technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Nevertheless, while every reasonable effort is made to safeguard your information, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, to the maximum extent permitted by applicable law, the Law Office disclaims liability for any loss or damage arising from unauthorised access, misuse, disclosure, alteration or destruction of personal data despite the implementation of appropriate security measures.

We also recommend that you take appropriate precautions when transmitting personal information online, including maintaining secure browser settings and using up-to-date antivirus software.

Should we become aware of a personal data breach likely to affect your rights and freedoms, we will take all measures required under the GDPR, including notifying you where such notification is legally required.

Where and How Long We Store Your Personal Data

Personal data collected through this Website are stored in secure information systems hosted on cloud infrastructure provided by third-party service providers and managed through professional managed hosting platforms.

All hosting and processing activities take place within data centres located inside the European Union.

Appropriate technical and organisational safeguards are implemented in accordance with the General Data Protection Regulation (GDPR) to protect personal data against unauthorised access, loss, alteration or disclosure.

Your personal data are retained only for as long as necessary to fulfil the purposes for which they were collected, unless a longer retention period is required by applicable law or is necessary for the establishment, exercise or defence of legal claims.

Retention periods are determined by taking into account, among other things:

• the purpose of processing;
• our statutory and regulatory obligations;
• the duration of any contractual relationship;
• applicable limitation periods under Greek law.

As an example, where you contact us through our contact form, by email or by telephone without subsequently becoming a client, your personal data will normally be retained for up to three (3) months, after which they will be permanently deleted, unless a contractual relationship is established or another legal obligation requires their retention.

Your Rights

Under the General Data Protection Regulation (GDPR) and the applicable data protection legislation, you have the following rights in relation to your personal data:

• Right of Access – You have the right to obtain confirmation as to whether we process your personal data and, where that is the case, to request access to such data.
• Right to Rectification – You have the right to request the correction of inaccurate or incomplete personal data.
• Right to Erasure (“Right to be Forgotten”) – Under certain circumstances, you may request the deletion of your personal data.
• Right to Restriction of Processing – In specific cases provided by law, you may request that we restrict the processing of your personal data.
• Right to Object – You may object, under certain conditions, to the processing of your personal data, particularly where processing is carried out for direct marketing purposes (such as newsletters).
• Right to Data Portability – Where technically feasible and applicable, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.

Where the processing of your personal data is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

You also have the right to lodge a complaint with the competent supervisory authority.

Hellenic Data Protection Authority (HDPA)
1–3 Kifisias Avenue
115 23 Athens, Greece

Please note that, where the provision of personal data is required by law or is necessary for entering into or performing a contract, failure to provide such data may prevent us from fulfilling our legal or contractual obligations or from providing the requested services.

Personal Data Breaches

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, and where notification is required under the GDPR, the Law Office will inform you without undue delay.

The protection of your personal data and compliance with applicable data protection legislation are of paramount importance to the Law Office.

For security reasons, and before responding to any request relating to the exercise of your rights, we may ask you to provide additional information necessary to verify your identity.

As a general rule, we will respond to your request without undue delay and, in any event, within one (1) month of receiving it.

Where necessary, taking into account the complexity and number of requests, this period may be extended by up to two (2) additional months, in accordance with Article 12 GDPR. In such cases, you will be informed of the extension and the reasons for the delay within one month of your request.

If a request is manifestly unfounded or excessive, particularly because of its repetitive nature, the Law Office reserves the right, as permitted by Article 12 GDPR, either to charge a reasonable administrative fee or to refuse to act on the request.

If you believe that we process your personal data in violation of the applicable data protection legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

Hyperlinks to Third-Party Websites

This Website may contain hyperlinks to third-party websites solely for the convenience of its users.

The inclusion of such hyperlinks does not constitute any endorsement, approval or recommendation by the Law Office regarding the content, products, services or policies of those third-party websites.

Access to and use of any third-party website is entirely at your own risk.

We encourage you to review the privacy policy and terms of use of every website you visit, as the Law Office bears no responsibility for the content or privacy practices of third-party websites.

Changes to this Privacy Policy

The Law Office reserves the right to amend or update this Privacy Policy at any time without prior notice.

Where material changes are made, we will take reasonable steps to inform users through this Website or by other appropriate means.

Nevertheless, you are encouraged to review this Privacy Policy periodically in order to remain informed of any updates.

Your continued use of this Website following the publication of any amendments constitutes your acceptance of the revised Privacy Policy.