Privacy Policy
Last updated: 22 October 2026
This policy explains how the law office of Vasileios A. Apostolidis (“we”, “us”) handles personal data collected through this website, apostolidis-law.com, and when you contact us about a possible legal matter or a job. Once you instruct us on a matter, the engagement letter and our professional duty of confidentiality also apply.
1. Who is responsible for your data
The controller is Apostolidis A. Vasileios Law Offices, Skoufa 26, Kolonaki, 106 73 Athens, Greece.
Email: [email protected] · Phone: +30 231 311 3829
We have not appointed a Data Protection Officer. Send any privacy question to [email protected].
2. What we collect, why, and for how long
| When | What we collect | Why, and legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| You send the contact form | Name, email, your message | To answer you, and to assess whether we can help: steps before a possible engagement (Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)) | Up to 12 months if no engagement follows. If you instruct us, it becomes part of the client file (see “Clients” below) |
| You request a consultation | Name, email, phone or WhatsApp number, in-person or video meeting, a short description of your matter | To arrange the meeting and check for conflicts of interest: steps before a possible engagement (Art. 6(1)(b)). If your description contains sensitive data (for example health data or information about criminal offences), we use it only to assess and pursue legal claims (Art. 9(2)(f), Art. 10) | As for the contact form |
| You apply for a job | First and last name, email, phone, position, preferred office, cover note, CV (PDF), your consent | To consider your application: steps before a possible employment contract (Art. 6(1)(b)) and your consent to keep your CV for future openings (Art. 6(1)(a)) | Deleted automatically after 12 months, sooner if you ask |
| You email or phone us | What you send us and your contact details | As for the contact form | As for the contact form |
| You visit the website | IP address, browser, pages requested, date and time (server and security logs kept by our hosting provider) | To run and protect the website: legitimate interest (Art. 6(1)(f)) | A short period set by the hosting provider |
| You accept analytics cookies | How you use the site, recorded by Microsoft Clarity (clicks, scrolling, pages, session recordings with all text masked) and counted by Google Analytics (pages viewed, how you arrived, length of visit), device and browser type, approximate location | To understand and improve the website: your consent (Art. 6(1)(a)). Nothing loads until you click Accept | Clarity: session recordings 30 days, aggregated reports up to 13 months. Google Analytics: at most 14 months |
| You click “Show map” on the Offices page, or you have clicked “Accept” in the cookie banner | Your IP address is sent to the OpenStreetMap Foundation, which supplies the map images (see section 3). Nothing is sent before either | To show where our offices are: your consent or your request (Art. 6(1)(a)) | Not kept by us |
Clients. If you become a client, we also process the data needed to act for you: identification documents and checks required by anti-money-laundering law (Law 4557/2018), correspondence, documents and billing details. We keep client files for as long as Greek law and the Lawyers’ Code require and as long as claims arising from the engagement can be brought. The engagement letter gives the details.
Your accessibility settings (text size, contrast and so on) are stored only in your own browser and never sent to us.
We do not sell personal data, do not use it for advertising, and do not use it for automated decisions about you.
3. Who receives your data
- Hostinger (Hostinger International Ltd., Cyprus) hosts the website and its database, and delivers it through its content delivery network.
- Our email provider delivers form messages and job applications to our mailbox (WP Mail SMTP sends them through our email account).
- Microsoft Corporation (Microsoft Clarity), only after you accept analytics cookies. Microsoft processes the data as our processor.
- Google Ireland Limited (Google Analytics), only after you accept analytics cookies. Google processes the data as our processor, with its advertising features switched off.
- OpenStreetMap Foundation (United Kingdom), which supplies the map images, only after you click “Show map” or “Accept” in the cookie banner. The Foundation receives your IP address to deliver the images.
- Courts, public authorities, other parties and their lawyers, notaries, experts and translators, where this is necessary to act on your matter, always within our duty of confidentiality.
- Authorities, where the law requires us to disclose information.
4. Transfers outside the EU
Microsoft and Google may process data in the United States. Microsoft and Google are certified under the EU-US Data Privacy Framework. The OpenStreetMap Foundation, which supplies the map images, is in the United Kingdom, which the European Commission recognises as providing adequate protection; its images are delivered through a content delivery network that may use servers outside the EU. For other transfers we rely on the European Commission’s standard contractual clauses or, where they apply, on the exceptions in Article 49 GDPR. Ask us for details or a copy of the safeguards.
If your matter involves our Dubai office, your data may be shared with that office in the United Arab Emirates where this is needed to act for you (Art. 49(1)(b) and (e) GDPR).
5. Your rights
You can ask us to:
- give you access to your data and a copy of it;
- correct or complete it;
- delete it;
- restrict how we use it;
- give it to you, or to someone else, in a portable format.
You can also:
- object to processing based on our legitimate interests;
- withdraw your consent at any time. This does not affect what we did before. For analytics, use “Cookie settings” at the bottom of every page.
Email [email protected]. We answer within one month. Some rights are limited by our professional duty of confidentiality and by the legal obligation to keep certain records.
You have the right to complain to the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr), or to the authority where you live or work.
6. Professional secrecy
As lawyers we are bound by professional secrecy under the Greek Lawyers’ Code (Law 4194/2013). Please do not send confidential documents through the website forms before we have confirmed that we can act for you and that there is no conflict of interest.
7. Security
We use encrypted connections (HTTPS), restricted access and up-to-date software. Job applications are stored in a folder that cannot be opened from the web. No system is completely secure; tell us immediately if you think your data is at risk.
8. Children
This website is not intended for anyone under 18, and we do not knowingly collect their data through it.
9. Changes
We update this policy when our practices change. The date at the top shows the latest version.
Based on the CC0 legal templates by General Legal, PC (general.legal), adapted for this website.