Kyriakides Georgopoulos Law Firm is a law firm incorporated in Greece as a partnership pursuant to Greek legislation, registered under the Athens Bar Association number 080009 and with head offices at 28 Dimitriou Soutsou Str., GR-11521 Athens, Greece (hereinafter referred to as “KG Law Firm”, or “we” or “us” or “our”).

Purpose of this Policy

We are committed to protecting and safeguarding the information you provide to us as well as the information we collect while operating our business. This Policy is intended to assist you in making informed decisions when accessing our website and using our Services and/or to understand how your personal information may be processed by us as a result of providing legal services or when you apply to work at KG Law Firm. Hence, please read this Policy carefully along with the Terms of Use of our website and our Cookies Policy to understand how we collect, use and store your personal data.

KG Law Firm reserves the right to amend and update this Policy from time to time; please check this page regularly to be updated about potential amendments.

Description of our data processing practices

We process personal data according to this Privacy Policy and in accordance with the applicable legislation, including the General Data Protection Regulation (EU) 2016/679 (hereinafter the “GDPR”) and the relevant data protection laws and regulations applicable in Greece.

This Policy describes how we process personal data we collect when you engage with us and more precisely in connection with:

engaging our legal and/or other services;
as a result of your involvement with one of our clients;
abiding by our statutory duty on anti-money laundering and and Know Your Client (KYC) procedures and in general complying with our legal obligations;
managing subscriptions, marketing and other marketing material requests;
accepting our invitations to and participation in our events; We may use and publish photographs and audiovisual material showing your image, with or without your name, only where you have provided consent, and exclusively for the purposes of documenting, communicating or promoting Firm‑organized events. Your participation in such activities is not conditional upon providing consent for the use of your image.
evaluating and recruiting personnel, selecting scholarship recipients; For this purpose, we use a third-party provider, Workable Software Limited (hereinafter “Workable”), acting as our data processor, to assist with our process.
cookies used on our website;

Please see below for further information on how we process your data:

What personal data we collect
What are the processing purposes, the legal basis and our legitimate interests for the processing of personal data
How and when do we share the personal data we collect
International Data Transfers
Cookies
Confidentiality & Security
Retention period
Your rights
Contact details

1. What personal data do we collect?

We collect and process information provided to us by or on behalf of our clients and their respective executives, agents, consultants and staff for the purpose of rendering legal services. This collection and processing of personal data is justified by the scope of our function and is based on our legal and contractual obligations as a law Firm providing professional legal services, always in accordance with our commitment to safeguarding the trust our clients place in us.

KG Law Firm is primarily engaged by corporate entities and as such those legal entities are not data subjects. However, even within that context, personal data may be provided to us (e.g. personal information relating to any of our corporate clients’ or prospective clients’ officers or personnel, opponent or vendor or purchaser or personal information relating to their legal or other advisors or personnel, as the case may be). The personal data collected is not limited only to the kind of information that can be found on a business card, such as names, titles/position, company name, work addresses, e-mail addresses and phone numbers, but may include other identifiable information. In case an entity provides us with data of its personnel, it warrants that it has informed them of the processing of their personal data by our law Firm pursuant to applicable legislation, where necessary.

We further collect personal data necessary not only to fulfil our statutory obligations in relation to conflict checks, anti-money laundering, know our clients’ procedures but also to prepare for legal proceedings or defend a claim or render the required legal services to our clients. To such effect, and subject to the nature of the legal services, we may collect and process personal data of third parties that are relevant to the legal services and to the case we are handling (court officers, witnesses, and other individuals involved), in accordance with ethical standards and rules applicable to our profession, such as the Lawyer’s Code of Conduct.

Where we collect third parties’ personal data (such as opposing parties, witnesses, or other individuals involved in a case) in the course of a client mandate, such data is typically obtained from our client, from public authorities, court records, or other legitimate public sources relevant to the legal services provided.

Specifically:

Data Subjects	Categories of personal data
Clients [potential, current, and former clients]	Identification data	full name, ID, authorization, proxy etc.
	Contact information	email address, telephone number, address, etc.
	Financial information	financial data necessary for payment processing and invoice management or relevant legal claims.
	Case specific information	preliminary information in order to check for potential conflict of interest, provision of offers, etc., information relating to the client’s file (personal data provided with reference to a case or any matter), data produced in the course of our services (e.g. certifications and other documents), data collected from third parties or public sources, etc.
Third parties	Identification data	Any information regarding a case of a client and/or a negotiation process that is absolutely necessary for the provision of our legal services.
	Contact information
	Case specific information
Job applicants for lawyer, trainee, and administrative staff positions; applicants to KG Early Careers initiatives (e.g. summer internship, open-day events)	Identification data	full name, job title
	Contact information	email address, telephone number, address, etc.
	Application Information	Curriculum vitae, education, employment history, age and gender, video interview recordings (where applicable); information provided through direct interactions (e.g. emails, interview discussions, other correspondence); details of your visits to Workable’s Website including, but not limited to, traffic data, location data, weblogs and other communication data, the site that referred you to Workable’s Website and the resources that you access; and any other personal data provided and/or data produced by us during the application/ interview/ evaluation process.
Scholarship applicants;	Identification data	full name, age and gender, copy of ID card or passport
	Contact information	email address, telephone number, address, etc.
	Application Information	Curriculum vitae, education, employment history, other qualifications, correspondence with foreign universities in which you intend to undertake postgraduate studies, recommendation letters, financial information, proof of completion or exemption from military obligations, information provided through direct interactions (e.g. emails, interview discussions); video interview recordings (where applicable); details of your visits to Workable’s Website including, but not limited to, traffic data, location data, weblogs and other communication data, the site that referred you to Workable’s Website and the resources that you access; and any other personal data provided and/or data produced by us during the application/ interview/ evaluation process.
Participants in Firm-organized events/activities.	Identification data and image	Photographs and audiovisual material captured during Firm‑organized events, with or without your name
Website users	Information on users’ website browsing sessions and activities	Please refer to our Cookie Policy for more information.

2. What are the processing purposes, the legal basis and our legitimate interests for the processing of personal data?

In general, we process personal data i) for the fulfilment of our legal obligations (i.e., to comply with applicable laws, ii) for the fulfilment of our contractual obligations, iii) pursuant to our legitimate interests and iv) on the basis of your consent.

Specifically:

Personal Data	Processing purposes	Legal bases for the processing
Clients [potential, current, and former clients] Identification data Contact information Financial information Case specific information	Client identification Conflicts checks Fulfilment of tax obligations Account maintenance and billing Compliance with applicable laws	Fulfilment of our legal obligations Compliance with necessary due diligence requirements for identity verification. Fulfilling our legal and regulatory obligations in relation to the provision of our services as provided by applicable laws. Compliance with applicable tax laws.
	Assessment of a case Provision of an offer/price quote Communication regarding the provision of legal services Provision of legal services Charging of services fees and invoicing of our services Retention of a data archive of the client	Fulfilment of our contractual obligations We collect and process any data necessary within the context of a client’s request or mandate for the provision of legal services, in order to properly manage and execute these services, in the client’s best interest.
	Sending of our Newsletter	Consent We communicate with you through our newsletter in order to inform you about our news and activities and/or inform you about our legal services, under your lawfully obtained consent.
Third parties Identification data Contact information Case specific information	Provision of legal services. We may process third party data and transfer it to public authorities or administrative parties in order to fulfil our contractual obligations towards our clients, in the course of the provision of our legal services	Legitimate Interest We process your data based on our legitimate interest, namely providing our legal services to our clients, pursuant to applicable laws and the Lawyers’ Code and Code of Conduct
	Voluntary provision of third party data about a case we are handling.	Consent Where applicable, and where our legitimate interest is not the basis for the processing, we shall require your consent prior to any processing activity.
Job applicants for lawyer, trainee, and administrative staff positions; applicants to KG Early Careers initiatives (e.g. summer internship, open-day events) Identification data Contact information Application Information	Administration of the application and recruitment process, including the identification of applicants, communication with candidates, and organization and conduct of interviews. Evaluation of candidates’ suitability for the position, including assessment of application materials, qualifications and interview performance. Identification and contact of potential candidates through sourcing activities, where applicable Establishment, exercise or defence of legal claims arising from the recruitment process	Legitimate interest We process your personal data where this is necessary for our legitimate interests, namely identifying, contacting and selecting suitable candidates or establishing, exercising or defending legal claims.
	Contact with candidates in relation to future jobs or other professional opportunities	Consent We retain your personal data and may contact you regarding future job or other professional opportunities where you have provided your consent. You may withdraw your consent at any time.
Scholarship applicants; Identification data Contact information Application Information	Administration of the application and selection process, including the identification of applicants, communication with candidates, organisation and conduct of interviews Evaluation of candidates’ suitability for the scholarship, including assessment of application materials, qualifications and interview performance	Pre-contractual measures and performance of a contract We process your personal data where this is necessary in order to take steps at your request prior to entering into a contract or to fulfil our contract obligations.
	Establishment, exercise or defence of legal claims arising from the selection process	Legitimate interest We may process your personal data where this is necessary for the establishment, exercise or defence of legal claims.
	Compliance with applicable legal obligations	Legal obligation We may process your personal data where this is necessary to comply with our legal or regulatory obligations.
Participants in events/activities Image, in photos and videos, with or without your name	Archiving, communication and promotion of Firm-organized events through our newsletter or our website and social media channels	Consent We will request your consent through the event application process, which you may provide voluntarily. Your decision will not affect your participation in our events.
Website Users Information on users’ website browsing session and activities For more information on the use of Cookies, please refer to our Cookie Policy.	Enabling proper operation of our website and basic functionalities as you request via essential cookies.	Legitimate interest We collect personal data via cookies to ensure the proper functioning of our website.
	Analysis of the performance of our website through the use of analytical/ performance (non-essential cookies)	Consent We collect your personal data via non-essential cookies for analysis purposes only on the basis of your consent.

We may also process special categories of personal data, such as in relation to health, political opinions, trade union membership. We will do so only if required i) based on your consent, ii) for the establishment, exercise or defence of legal claims and iii) for reasons connected with a statutory provision for reasons of public interest.

3. How and when do we share the personal data we collect?

We may share personal information with a variety of third parties as necessary. We sub-contract third parties, after careful selection, following appropriate due diligence, and conducting appropriate contractual documentation to ensure that these third parties process personal information lawfully, offering the required level of protection, according to our legal and regulatory obligations.

We share personal information with the following categories of data recipients:

Professional advisers such as lawyers, accountants and insurers.
Government and regulatory/supervising authorities and agencies, courts and tribunals.
Tax authorities and Corporate Registries.
Banking Institutions.
Third parties which carry out outsourcing services such as, by way of indication, translation services, confidential waste disposal, IT systems or software providers, IT Support service providers, HR management platforms, document and information storage providers, postal or courier providers who assist us in delivering documents related to a matter or postal marketing campaigns, social media providers or design and content creation platform providers. Such providers process your personal data on our behalf to the extent necessary for the execution of the required services.
Third parties engaged in the course of the services we provide to clients, such as opposing party and their lawyers, court bailiffs, witnesses, notaries, interpreters, experts, technical advisors, arbitrators, mediators, accountants and tax advisors.
Associated law firms around the world, or law firms belonging to the same legal network.
Web analysis service providers who assist us with client insight analytics, such as Google Analytics.

4. International Data Transfers

We mainly process personal data within the EU/EEA. Where we process data using Workable’s Services for evaluation and recruitment of personnel purposes, personal data may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”).

In case it is necessary to transfer any personal data outside the EEA, we will implement all the appropriate safeguards, including the conclusion of Standard Contractual Clauses, in order to ensure safety of such transfers and compliance with the principles under the GDPR.

5. Cookies

We may also obtain information about your use of our website through the use of cookies. Please visit our Cookies Policy to find out more about the cookies we use and how to manage and delete cookies.

6. Confidentiality & Security

We are committed to keeping secure any personal information provided to us. To this effect, we have implemented appropriate information security policies, rules and technical and organizational measures to protect the integrity, confidentiality, transparency, availability and accessibility of the personal information we have in our possession against unauthorized access, misuse, disclosure, unauthorized modification, unlawful destruction or accidental loss.

However, no information system is 100% secure, therefore we cannot guarantee the total security of your information. In addition, we cannot guarantee or be held liable for the security of the information transmitted to us through other networks (internet, wireless networks etc.).

All our professional advisers, employees and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of such personal information.

7. Retention period

We shall retain your personal information for as long as necessary to fulfil the purpose for which we collect it and in particular to comply with legal, accounting or reporting regulations. The applicable retention period depends primarily on the purpose for which we process your personal information, its nature, the potential risk of harm from unauthorized use or disclosure, and any applicable legal requirements including statutory limitation period. At the end of the retention period, we ensure that your personal data will be permanently deleted or anonymized.

In respect of unsuccessful job applicants, scholarship applicants and applicants to KG Early Careers initiatives, we retain your personal data for the duration of the recruitment process and up to twelve (12) months from the date of collection. Upon expiry of this retention period, such data are securely deleted automatically by Workable, our recruitment system.

Personal data of unsuccessful applicants may be retained for a longer period, up to five (5) years following the end of the calendar year in which the recruitment or selection process took place, where necessary for the establishment, exercise or defence of legal claims.

Personal data regarding successful applicants may be retained for up to five (5) years following the end of the calendar year during which the relevant employment or scholarship relationship ended, as applicable.

Where you have provided your consent for the retention of your personal data in order to be contacted regarding future job or other professional opportunities, we will retain your data for up to twelve (12) months from the date of collection. You may withdraw your consent at any time, in which case your data will be deleted.

Where we process your personal data in order to comply with legal obligations or where this is necessary for the establishment, exercise or defence of legal claims, we may retain such data for longer periods, up to twenty (20) years or until the final resolution of the relevant legal proceedings, in accordance with applicable law.

8. Your rights

You have the following rights in relation to the personal information we hold about you. You may exercise any of your rights by contacting us at the e-mail address kgprivacy@kglawfirm.gr.

Right of access and rectification

The right to be informed about your personal data collected and how it is being processed and the right to request the correction of inaccurate or incomplete personal data.

Right to erasure

The right to request that your personal data be erased. Please note, we may not always be able to fulfil your request if the data is required to comply with a legal obligation or for other legitimate reasons permitted under the GDPR.

Right to withdraw your consent

The right to withdraw your consent at any time, in cases where the processing is based on your consent, by sending an email at kgprivacy@kglawfirm.gr.

With respect to photos and videos showing your image, upon receiving your consent withdrawal, we will stop using them in future publications, remove them from our records and, where technically feasible, from online content.

Right to restriction of processing

The right to limit processing of your personal data.

Right to object

The right to object to certain processing of your personal data such as processing for direct marketing purposes or when we otherwise rely on our own or someone else’s legitimate interest in processing your personal information.

Right to opt-out

The right to opt out of future marketing activities at any time, by clicking the “unsubscribe” button on any of our send outs or by e-mailing kgprivacy@kglawfirm.gr.

Right to data portability

The right to request that any transfer of personal data is made in a structured, commonly used and machine-readable format.

Right to lodge a complaint with the supervisory authority

You also have the right to lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias ave, P.C. 115 23, Athens, on its website: www.dpa.gr.

9. Contact details

If you wish to exercise any of your rights above or you have any questions or concerns in relation to this policy, please use our contact details which may be found under kgprivacy@kglawfirm.gr.

Last Updated 16/7/2026