''In the business of delivering results...''

Privacy Notice

Updated: 24.01.2022

Privacy Notice

This Privacy Notice describes how Ballas Pelecanos & Associates L.P.C. (10 Solonos Street, Kolonaki, 10673 Athens, Greece, +30 210 36 25 943), a limited liability professional partnership (hereinafter, the “Firm”, “we”, “us”, “our”) collects, uses, shares and otherwise processes Personal Data (defined below) as data controller (within the meaning of applicable data protection regulation).

This Privacy Notice applies to persons who (i) engage our legal services (clients and prospective clients of the Firm, including transaction counterparties and litigants other than our clients), (ii) access our website www.ballas-pelecanos.com ("Website"), (iii) participate in our recruitment activities (job candidates), or (iv) supply goods and services to us.

References in this Privacy Notice to “you” or “your” are references to individuals whose Personal Data we process. In this Privacy Notice, "Personal Data" means any information that (either in isolation or in combination with other information processed by the Firm) enables you to be identified or recognized, directly or indirectly, as an individual; it does not include anonymous data. We are committed to respecting and protecting your privacy.

1. The types of Personal Data we collect 2

2. How your Personal Data is collected. 3

Data collected directly from you. 3

Data collected from publicly available sources. 3

Data collected on our Website when using cookies and other tracking technologies. 4

Data collected by third parties. 4

Aggregated data. 5

3. How we use your Personal Data. 5

4. How we share your Personal Data. 7

Suppliers and service providers. 7

Other recipients. 7

Sharing of Personal Data in the course of the legal services we provide. 8

International transfers of Personal Data. 8

5. Cookies and other tracking technologies. 8

Types of cookies. 9

First party (Firm) cookies. 10

Third party cookies. 10

How do I change my cookie settings?. 14

6. Data retention. 14

7. Security of your Personal Data. 15

8. Your Rights. 15

Right of access. 15

Right to rectification. 15

Right to erasure. 15

Right to restriction. 15

Right to object 16

Right to data portability. 16

Right to lodge a complaint with the DPA.. 16

9. How to contact us. 16

10. Changes to this Privacy Notice. 16

1. The types of Personal Data we collect

The types of Personal Data that we collect about you, depend on the context of your interaction with us. For example, we may collect personal information when you assign a case to us, when you contact us via the contact form in our Website, when you subscribe to our newsletters, etc. As applicable and depending on the specific purpose for which we need your Personal Data, we may collect the following categories of Personal Data about clients/ prospective clients, users of our Website, our suppliers and job applicants:

Basic identification and contact data

Name, title, organization, phone number, email address and other contact details.

IT and device data

Information about your use of our Website, including data collected using cookies, other tracking technologies (e.g. IP address, browser type and version, time zone setting and location, operating system of your device, etc.), and our WiFi facilities.

Legal service-related data

Personal data necessary for the performance of our legal services, which may be contained in documents, correspondence and other materials processed for the needs of handling assigned files and cases for clients.

Financial data

Bank account and other billing and payment details.

Marketing and communications data

including your marketing and communication preferences and information that you provide when subscribing to our newsletter (name, position, email address); we also track when you receive and read marketing communications from us.

Job applicant data

Data provided by job applicants in connection with employment opportunities with the Firm (applicable is also a separate recruitment privacy notice).

CCTV data

CCTV footage and other information obtained through use of premises entry control CCTV system.

Where we have a statutory duty to collect your Personal Data (for instance, for compliance with “know your customer” legislation) or under the terms of a contract that we have with you and you fail to provide the Personal Data when requested, we may not be able to perform the contract and offer you our legal services. Not providing your Personal Data may also result in other types of disadvantages for you, e.g., we may not be able to respond to your request or question or provide you with marketing communication that we believe you would find valuable.

2. How your Personal Data is collected

We collect Personal Data directly from you, from publicly available sources, on our Website, or from third parties.

Data collected directly from you

We collect Personal Data, which, as applicable and relevant, you provide to us in the context and for the needs of your direct interaction with us, including when:

- You communicate with us, filling-in forms on our Website, by email or post, or speaking to us in person or over the telephone, e.g., in order to enquire about our services or in order to apply for a job opening;

- You assign project, work, file or case to us;

- You subscribe to our publications, newsletters and marketing material;

- You provide supplier services to us;

- You use our Website;

- You visit our offices.

Data collected from publicly available sources

We collect Personal Data from any publicly availably source, including public registers, such as businessregistry.gr/ Γ.Ε.ΜΗ, Land Registries, IP Registries, etc.

Data collected on our Website when using cookies and other tracking technologies

We use cookies and other tracking technologies and we may collect information about how you use our Website, technical data (including data and time of access, data volume transmitted, status of transmission, browser type, version and language, browser plug-in types and versions, your internet protocol (IP) address, operating system and interface, time zone setting and location, language and version of browser software) and profile data, including your referral website, pages you visit, actions you take, patterns of page visits and information from forms you fill in. On the basis of your prior consent, we may use your data in order to deliver communication relevant to you based on the use of cookies. For further details on this and how to opt-out of such processing, please see the 'Cookies and other tracking technologies' section of this Privacy Notice.

Data from third parties

We receive some of the above-mentioned technical data and services from analytics providers, such as Google.

Processing your Personal data if you are not our client

Even if you are not our client or otherwise directly related to us, we may need to process your Personal Data to provide legal services to a client. We may collect such Personal Data, relevant to a case that we handle or to a legal proceeding that we conduct, by our client or publicly available sources. The legal basis for processing your Personal Data under these circumstances, would be our legitimate interests, our client’s legitimate interest or those of another third party; and/or the need to comply with legal or regulatory obligations. If you have any questions about how we process your Personal Data, you may contact us at [email protected].

Aggregated data

We may process aggregated data, such as statistical or demographic data, for any purpose. While aggregated data may be derived from your Personal Data, these are not considered Personal Data, as such data does not directly or indirectly reveal your identity (e.g. we may aggregate your usage data to calculate the percentage of users accessing a specific Website feature); however, if we combine aggregated data with your Personal Data so that it can directly or indirectly identify you, we shall treat the combined data as Personal Data which will be used in accordance with this Privacy Notice.

3. How we use your Personal Data

We process your Personal Data in accordance with applicable data protection legislation (including the GDPR, Law 4624/2019 supplementing the GDPR and ePrivacy Law 3471/2006), when we have a legal basis for processing, only if and to the extent that at least one of the following applies:

§ processing is necessary for the performance of a contract which we are about to enter into or have entered into with you as a party or in order to take steps at your request prior to entering such contract (Contract);

§ processing is necessary for compliance with a legal obligation to which we are subject (Legal obligation);

§ processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data; for instance, such legitimate interests include (a) monitoring of how you use the Website in order to ensure the efficient and secure operation, also for reasons of fraud and misuse detection and prevention; (b) the improvement of our services (Legitimate interests);

§ where you have provided your consent to processing your Personal Data; this is, mainly, when you request that we make marketing communication with you, or when you subscribe to newsletters and legal alerts, also in order to use certain cookies and tracking technologies (you have the right to withdraw consent to electronic marketing at any time by following the unsubscribe instructions in such marketing materials or by contacting us at [email protected]; for further details on tracking technologies and how to opt-out of such processing, please see the 'Cookies and other tracking technologies' section of this Privacy Notice) (Consent)

We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.

Our legal basis for processing your Personal Data will depend on the Personal Data concerned and the specific context in which we process it. In the table below you can review the purposes for which we use your personal data and the legal bases we rely upon to do so:

Purpose for processing

 

Types of Persona Data

Legal basis for processing

To contract with you and provide legal services to you; also, in order to administer our relationship with you as a client. This may also include processing of personal data of transaction counterparties and litigants other than our clients

- Basic identification and contact data

- Legal service-related data

- Financial data

- Contract

- Legal obligation

- Legitimate interests (conflict of interest checks, securing payment of fees and debts, notifications to you, e.g., regarding changes in this Privacy Notice)

To respond to your inquiries or communications

- Basic identification and contact data

- Legal service-related data

- Legitimate interests (promotion of our client services and ensuring that we offer best client services)

To comply with our legal obligations, e.g., with the Firm's tax reporting obligations, “know your client” obligations, etc.; also, to respond to legal process or requests for information issued by government/ judicial/ police authorities

- Basic identification and contact data

- IT and device data

- Legal service-related data

- Financial data

- CCTV data

- Legal obligation

To recruit associates and other personnel

- Basic identification and contact data

- Job applicant data

- Contract

- Legitimate interests

To send newsletters, legal alerts, marketing communications and other information or materials that may interest you

 

- Marketing and communications data

- Consent

To monitor how you use the Website in order to ensure its efficient and secure operation and for reasons of fraud and misuse detection and prevention

- IT and device data

- Legitimate interests

To exercise, establish or defend our legal rights (including before Courts)

- Basic identification and contact data

- IT and device data

- Legal service-related data

- Financial data

- CCTV data

 

To contract with you as a new supplier and manage our relationship with you

- Basic identification and contact data

- Financial data

- Contract

- Legal obligation

4. How we share your Personal Data

Suppliers and service providers

We engage external service providers, who act as data processors on behalf and under the instructions of the Firm, to provide certain services to the Firm, including IT and system administration services, for instance, website service provider (hosting and administration), communications service provider (for newsletters services), IT support service providers, translation service providers, document and information storage providers, postal or courier providers. When providing such services, the said external service providers may process your Personal Data.

Other recipients

We may share, in compliance with applicable data protection laws, Personal Data with law enforcement authorities, governmental authorities, competent independent regulatory/ supervising authorities, competent courts and other judicial authorities, our professional external advisers, counsels or consultants, including lawyers, auditors, accountants and insurers providing relevant services to us. In case of a merger or acquisition, personal data may be transferred to the third parties being involved in the merger or acquisition. We may also share your Personal Data with third party organisations and entities for the purposes of obtaining feedback or references in relation to legal services provided to you (for instance, legal directories like “The Legal 500”).

Sharing of Personal Data in the course of the legal services we provide

We may share your Personal Data, as and to the extent needed, with third parties engaged in the course of the services we provide to clients, including court bailiffs, notaries, opposing parties and their legal counsels, technical experts/ advisors, court experts and witnesses. We may also share your Personal Data with other law firms and affiliated lawyers to provide you with legal services.

International transfers of Personal Data

We transfer Personal Data in accordance with applicable laws. To the extent that, in the context of and for the needs of the above-mentioned purposes, your Personal Data need to be transferred outside the EU/EEA, such data transfer will take place in accordance with applicable law and we will ensure an adequate level of data protection. By way of entering into appropriate data transfer agreements based on Standard Contractual Clauses, which are accessible upon request at [email protected], or taking other measures to provide an adequate level of data protection, we have established or confirmed that all data recipients will provide an adequate level of protection for your Personal Data. Any onward transfer will be subject to appropriate onward transfer requirements, as required by applicable law.

5. Cookies and other tracking technologies

Our Website uses cookies, therefore, when you visit our Website, a cookie may be installed in your device. A cookie is a small text file that is downloaded onto ‘terminal equipment’ (e.g., your computer or smartphone) when you access the website. It allows us to recognise your device, gather information about your usage patterns when you navigate our website, store some information about your preferences or past actions, improve your online experience and enhance your personalized experience. Cookies may also be used in order to provide communication tailored to your interests and to analyse the effectiveness of such advertising.

You can opt in or out of cookies at any time – except strictly necessary cookies (these are used to help make our website work efficiently) and you can delete cookies installed on your device at any time, prevent new cookies being saved and receive notification before installation of a new cookie by configuring your browser software.

When certain types of cookies require your prior consent in order to be installed and used, you will be asked through a relevant banner displayed on the front page of the website. If you choose not to enable or to delete certain cookies, you will still be able to browse our website, but some of the functionality of our website will be restricted.

Types of cookies

We may use ‘persistent’ cookies, as well as 'session-based' cookies. A 'persistent' cookie will remain for a period of time set for that cookie. A 'session-based' cookie is allocated only for the duration of your visit to our Website and automatically expires when you close down your browser.

Strictly necessary cookies (always active): These cookies are necessary for the Website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.

Functional cookies: These cookies enable the Website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Targeting cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Performance cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Website. They help us to know which pages are the most and least popular and see how visitors move around the Website. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our Website and will not be able to monitor its performance.

First party (Firm) cookies

Name of tracker/ cookie

Category of tracker/ cookie

Purpose of use

Duration of operation

Controller/ host

Recipients of data

Consent

Strictly Necessary Cookies

This cookie is set by the cookie compliance solution from Quantcast. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users’ browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor.

1 year

Firm

Quantcast (www.quantcast.com)

AlertBoxClosed

Strictly Necessary Cookies

This cookie is set by websites using certain versions of the cookie law compliance solution from Quantcast. It is set after visitors have seen a cookie information notice and, in some cases, only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie contains no personal information.

1 year

Firm

Quantcast (www.quantcast.com)

ASP.NET_SessionId

Strictly Necessary Cookies

General purpose platform session cookie, used by sites written with Miscrosoft .NET based technologies. Usually used to maintain an anonymised user session by the server.

Session

Firm

-

Third party cookies

Name of tracker/ cookie

Category of tracker/ cookie

Purpose of use

Duration of operation

Controller/ host

Recipients of data

__atuvc

Functional Cookies

This cookie is associated with the AddThis social sharing widget which is commonly embedded in websites to enable visitors to share content with a range of networking and sharing platforms. It stores an updated page share count.

1 year

AddThis

AddThis (www.addthis.com)

__atuvs

Functional Cookies

This cookie is associated with the AddThis social sharing widget which is commonly embedded in websites to enable visitors to share content with a range of networking and sharing platforms.

a few seconds

AddThis

AddThis (www.addthis.com)

_gat_gtag_

Targeting Cookies

Google Analytics

a few seconds

Google

Google (https://policies.google.com/privacy?hl=en-US)

awxxxx

Targeting Cookies

Used to attribute commission to affiliates when you arrive at the website from an affiliate referral link. It is set when you click on one of our links and used to let the advertiser and us know the website from which you came.

2 years

Google

Google (https://policies.google.com/privacy?hl=en-US)

_gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx

Targeting Cookies

Google Analytics

a few seconds

Google

Google (https://policies.google.com/privacy?hl=en-US)

_gid

Performance Cookies

This cookie name is associated with Google Universal Analytics. It stores and updates a unique value for each page visited.

1 day

Google

Google (https://policies.google.com/privacy?hl=en-US)

_ga

Performance Cookies

This cookie name is associated with Google Universal Analytics. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.

2 years

Google

Google (https://policies.google.com/privacy?hl=en-US)

uvc

Targeting Cookies

Tracks how often a user interacts with AddThis.

1 year

AddThis

AddThis (www.addthis.com)

xtc

Targeting Cookies

This domain is owned by AddThis. AddThis provides web widgets that site owners embed into their pages or other content to enable visitors to create and share links to the content across social networks. They also make use of the data collected to provide advertisers and marketers with profile information for targeted behavioral advertising.

1 year

AddThis

AddThis (www.addthis.com)

GPS

Targeting Cookies

YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

a few seconds

Google

Google (https://policies.google.com/privacy?hl=en-US)

VISITOR_INFO1_LIVE

Targeting Cookies

This cookie is used as a unique identifier to track viewing of videos.

180 days

Google

Google (https://policies.google.com/privacy?hl=en-US)

YSC

Targeting Cookies

YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.

Session

Google

Google (https://policies.google.com/privacy?hl=en-US)

test_cookie

Targeting Cookies

This domain is owned by Doubleclick (Google). Doubleclick is Googles real time bidding advertising exchange.

a few seconds

Google

Google (https://policies.google.com/privacy?hl=en-US)

IDE

Targeting Cookies

This domain is owned by Doubleclick (Google). Doubleclick is Googles real time bidding advertising exchange.

1 year

Google

Google (https://policies.google.com/privacy?hl=en-US)

PREF

Targeting Cookies

This is a common Google cookie, used across several of their services. Stores user preference, can be used to personalise ads on google searches.

3,5 years

Google

Google (https://policies.google.com/privacy?hl=en-US)

__atuvc

Targeting Cookies

This domain is owned by AddThis. AddThis provides web widgets that site owners embed into their pages or other content, to enable visitors to create and share links to the content across social networks. They also make use of the data collected to provide advertisers and marketers with profile information for targeted, behavioural advertising.

1 year

AddThis

AddThis (www.addthis.com)

__atrfs

Targeting Cookies

This domain is owned by AddThis. AddThis provides web widgets that site owners embed into their pages or other content, to enable visitors to create and share links to the content across social networks. They also make use of the data collected to provide advertisers and marketers with profile information for targeted, behavioural advertising.

a few seconds

AddThis

AddThis (www.addthis.com)

__atuvs

Targeting Cookies

This domain is owned by AddThis. AddThis provides web widgets that site owners embed into their pages or other content, to enable visitors to create and share links to the content across social networks. They also make use of the data collected to provide advertisers and marketers with profile information for targeted, behavioural advertising.

a few seconds

AddThis

AddThis (www.addthis.com)

loc

Targeting Cookies

Stores the visitors geolocation to record location of sharer.

1 year

AddThis

AddThis (www.addthis.com)

uvc

Targeting Cookies

Tracks how often a user interacts with AddThis.

1 year

AddThis

AddThis (www.addthis.com)

How do I change my cookie settings?

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit ec.europa.eu, or www.aboutcookies.org or www.allaboutcookies.org.

Find out how to manage cookies on popular browsers:

6. Data retention

Your Personal Data will be retained for as long as necessary to fulfil the purposes we collected it for, e.g., for as long as necessary to provide you with the legal services requested or until you unsubscribe from receiving our newsletters. Once the data processing purpose is completed, we will either delete your personal data or anonymize your personal data, unless statutory retention requirements apply (e.g., in order to comply with regulatory and accounting requirements, or for the establishment or defence of legal claims).

Cookies are stored on a per-session basis only, to aid your navigation of our website. Persistent cookies may be set to store display-related preferences. For further details on how to control cookies, please see the 'Cookies and other tracking technologies' section of this Privacy Policy.

If you would like to know more about the retention periods that we apply to your Personal Data, please contact us at [email protected].

7. Security of your Personal Data

Considering the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing.

8. Your Rights

Under the conditions provided in the relevant legislation, you have the following rights regarding the protection of your Personal Data:

Right of access

You may contact us in order to inform you and explain to you whether or not we process your data, the categories of such data, as well as how we process them. You can also request a copy of your Personal Data which we process.

Right to rectification

If you believe that your data are inaccurate or are missing, you have the right to request the rectification or the completion thereof.

Right to erasure

Under appropriate circumstances, such as, when the data are no longer necessary or if you have withdrawn your consent, you can request us to proceed with erasure of the data.

Right to restriction

If you believe that your data are inaccurate or that processing is unlawful or that we no longer need the data or you have objections to the automated processing (if applicable), you have the right to request the restriction of processing.

Right to object

You may object to the processing of your personal data by us on grounds relating to your particular situation, except if there are, inter alia, compelling legitimate grounds for the processing which override your interests, rights and freedoms. If applicable, you also have the right to object when you are subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (statutory exceptions apply).

Right to data portability

You may request to receive the data concerning you in a structured, commonly used and machine-readable format, as well as to transfer those data to another organisation (controller), which you will indicate to us.

Right to lodge a complaint with the DPA

You have the right to lodge a complaint with the competent Data Protection Authority of Greece (Greek DPA) on matters relating to the processing of your Personal Data. The Greek DPA is located in Athens (Kifisias 1-3, P.C. 11523). Regarding the competence of the Greek DPA and the way to file a complaint, you can visit the website thereof (www.dpa.gr).

More detailed information on your rights is available on the website of the Greek DPA (here), which we encourage you to visit.

9. How to contact us

If you have concerns or questions regarding this Privacy Notice or if you want to exercise any of your rights mentioned in the ‘Your rights’ sections of this Privacy Notice, please contact us at 10 Solonos Street, Kolonaki, 10673 Athens, Greece or at [email protected].

10. Changes to this Privacy Notice

We may update this Privacy Notice (e.g., in order to reflect a change in the applicable legal framework or a change in our practices) and will revise the date at the top of this document to reflect the date when such update occurred.