Privacy policy

Controller and scope of this policy

This policy explains how MBS Law (Morfopoulos & Partners Law Firm), 7 Ippokratous Street, 106 79 Athens, Greece, registered with the Athens Bar Association, collects and uses personal data when you visit this website or contact us through it. It does not cover how we handle personal data once we have agreed to act for a client; that is governed by the engagement itself, our professional duty of confidentiality and, where relevant, a separate agreement.

We are the controller for the personal data described in this policy. If you have any question about it, email info@mbslaw.gr or write to us at the address above.

What personal data we collect

The only personal data we collect through this website is what you choose to give us in the contact form: your name and phone number (required), and your email address and company or organisation (optional), together with the content of your message. Please do not include sensitive information, such as health data or criminal record data, in your message unless it is genuinely necessary for us to understand your enquiry.

Like most websites, our hosting infrastructure automatically processes limited technical data for every visit, such as IP address, browser type, and the date and time of the request, to keep the site secure and working correctly. We do not combine this data with the contact form or use it to identify individual visitors.

The site also uses a single cookie to remember your language choice. See our Cookie Policy for details.

Purposes and legal basis

We use the details you send us through the contact form to reply to your enquiry and to work out whether we are able to help and are free to accept the matter. We do this on the basis of the consent you give when you tick the box on the form, which you can withdraw at any time by emailing us; withdrawing consent does not affect the lawfulness of anything done before you withdrew it, and does not undo a reply we have already sent.

If your enquiry leads to us acting for you, we process personal data connected with the engagement to perform it, to comply with our legal and professional obligations (including, where they apply, anti-money-laundering and client due-diligence rules), and in pursuit of our legitimate interest in running our practice properly. From that point, the terms of the engagement and our professional duty of confidentiality also govern how we use your information.

We process the limited technical data described above on the basis of our legitimate interest in keeping the website secure and operating correctly, and we use the language cookie only to provide the feature you asked for.

We do not use personal data collected through this website for marketing, do not build profiles from it, and do not make any decision about you using automated means alone.

Recipients of your data

Your data is seen by the lawyers and staff who need it to answer your enquiry or handle your matter, all of whom are bound by confidentiality and, in the case of lawyers, professional secrecy.

We also share it with service providers who process it on our behalf and under our instructions, in particular the provider we use to deliver contact-form messages to our mailbox, and our website hosting and IT infrastructure providers. When you view our Contact page, the embedded Google map is loaded directly from Google, which processes technical data under its own privacy policy; see our Cookie Policy for details.

We may also disclose personal data to courts, regulators, the Athens Bar Association or other public authorities where the law requires it, or to establish, exercise or defend legal claims. We do not sell personal data and do not share it for third-party advertising.

International transfers

Some of the providers mentioned above, including our email-delivery provider and Google, may process data outside the European Economic Area, including in the United States. Where that happens, we rely on the European Commission's standard contractual clauses, an applicable adequacy decision, or another safeguard recognised by data protection law. You can ask us for more information about these safeguards at any time.

How long we keep your data

We keep enquiries that do not lead to an engagement for as long as reasonably needed to deal with your query and any follow-up, and then delete them, unless we need to keep them for longer to deal with a complaint or a legal claim.

Where we act for you, we keep your file for the duration of the engagement and afterwards for as long as our professional and legal obligations require, and in any event for as long as needed to defend the advice we gave or to meet applicable limitation periods.

Technical log data is kept only for the short period needed for security and troubleshooting, and is then deleted or anonymised.

Your rights

Subject to the conditions and exceptions in the General Data Protection Regulation (GDPR), you have the right to ask us for access to, and a copy of, your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to our processing of it; to receive the data you gave us in a portable format; and, where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, email info@mbslaw.gr or write to us at the address above. We may need to verify your identity before responding, and we will do so within the time limits set by the GDPR.

If you are unhappy with how we handle your personal data, you have the right to complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), www.dpa.gr, though we would welcome the chance to address your concern directly first.

Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and confidentiality obligations on everyone who handles it. No method of transmission or storage is completely secure, but we review these measures as our website and practice evolve.

Children

This website and its contact form are aimed at businesses and adults seeking legal services, not at children. We do not knowingly collect personal data from children through this website; if you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time, for example to reflect changes to the website or to data protection law. The date at the top shows when it was last revised, and the current version always applies.

Contact us and complaints

Questions about this policy or about how we handle your data are always welcome: email info@mbslaw.gr or write to us at MBS Law (Morfopoulos & Partners Law Firm), 7 Ippokratous Street, 106 79 Athens, Greece. See "Your rights" above for how to complain to the Hellenic Data Protection Authority.