PRIVACY POLICY
Last updated: September 2026
1. Introduction
The protection of the personal data and privacy of visitors to cskypraios.gr is an important priority for the Law Firm of Konstantinos Sot. Kypraios & Associates – CSK LAW.
This Privacy Policy describes how personal data are collected, used, stored and protected during your visit to the website, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Greek legislation and the relevant decisions and guidelines of the competent authorities.
This Policy primarily concerns data processing carried out through the website. The processing of personal data in the context of a specific engagement or the provision of legal services may also be subject to additional information obligations, as well as to the professional confidentiality obligations applicable to lawyers.
2. Data Controller
The controller responsible for the processing of personal data through the website is:
Law Firm of Konstantinos Sot. Kypraios & Associates – CSK LAW
15 Pindarou Street, Kolonaki, Athens
Email: info@cskypraios.gr
Tel.: +30 213 046 7589
Mobile: +30 695 6584 134
Website: cskypraios.gr
3. Personal Data We Collect
Depending on how you use the website, we may collect data such as your full name, email address, telephone number and the content of messages you send through the contact form or by email.
If a newsletter subscription service is used, your email address and, where applicable, information concerning your consent may be collected.
During browsing, technical information may also be collected, such as IP address, device and browser type, date and time of access, pages visited, log files and information generated through cookies or similar technologies.
4. Information Included in Requests for Legal Support
Due to the nature of the firm’s services, a message sent by a visitor may contain information of a particularly personal or confidential nature.
Please do not submit through the standard contact form more personal data than are necessary for an initial communication, particularly special-category personal data, unless this is strictly necessary and prior communication with the firm has taken place.
Where, in the context of a request for legal services, special categories of personal data or data relating to criminal proceedings are disclosed, such data are processed only to the extent necessary and permitted by applicable law for the assessment or provision of the relevant legal services.
Sending a message through the website does not, by itself, constitute acceptance of a case or establish a lawyer–client relationship.
5. Purposes and Legal Bases of Processing
Personal data may be used to respond to questions or contact requests, assess a request for possible legal services, provide services where an engagement has been established, fulfil legal or professional obligations, and ensure the security and proper operation of the website.
Depending on the circumstances, the relevant processing may be based on the performance of a contract or on steps taken at the request of the data subject prior to entering into a contract, compliance with a legal obligation, the legitimate interests of the firm, or the consent of the data subject. The relevant legal bases are provided, in particular, under Article 6 of the GDPR.
For the sending of newsletters or other optional informational communications, consent is relied upon where required.
For optional analytics or other tracking technologies through cookies, processing takes place only after the visitor has provided the required consent.
6. Cookies and Tracking Technologies
The website uses cookies and may use related technologies for technical functionality, storage of user preferences and, where consent has been provided, statistical analysis or other optional features.
Further information is provided in the separate Cookie Policy.
7. Recipients of Personal Data
Personal data may be accessible, only to the extent necessary, to authorised members and associates of the firm, providers of hosting services, technical support and cybersecurity services, newsletter or other service providers acting on behalf of the firm.
Personal data may also be disclosed to public authorities or other bodies where required by law or where necessary for the establishment, exercise or defence of legal claims.
Service providers are granted access only to the data necessary for the provision of their services and, where required, are bound by appropriate confidentiality and data-protection obligations.
8. Transfers of Data Outside the European Economic Area
Certain technical service providers may process data outside the European Economic Area.
Where such a transfer takes place, the safeguards provided for under the GDPR are applied, such as adequacy decisions issued by the European Commission or appropriate contractual safeguards, depending on the circumstances.
9. Data Retention
Personal data are retained only for as long as necessary for the purpose for which they were collected.
For contact requests, consideration is given to the period required to complete the relevant communication and to address any subsequent issues that may arise.
Where communication results in the acceptance of a legal matter, the relevant data may be retained for a longer period in accordance with applicable legal and professional obligations, record-keeping requirements and the relevant limitation periods.
Newsletter data are retained until consent is withdrawn or the user unsubscribes from the relevant service.
Technical data and log files are retained for as long as necessary for security and technical-operational purposes.
10. Data Security
CSK LAW implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction or unlawful disclosure.
These measures are reviewed and adjusted in accordance with technological developments, the nature of the data and the relevant risks.
11. Your Rights
Under the GDPR and subject to the conditions provided by law, you have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability where applicable, and to object to certain forms of processing.
Where processing is based on consent, you also have the right to withdraw your consent at any time.
To exercise your rights, you may contact:
Before fulfilling a request, additional information may be requested solely for the purpose of verifying the identity of the applicant, where necessary.