Privacy Policy (GDPR)
Last updated: 4 August 2026. This notice describes the processing of personal data when you use this website and the contact or scheduling services available through it.
1. Data controller
The controller is attorney Dimitris Lintas Lawyer, Leontos Sofou 10, Thessaloniki, 8th Floor, tel. +30 6972 600 500, email [email protected]. For any data-protection matter, you may contact the controller directly.
2. Purposes and data categories
Depending on the feature you use, we process:
- your name, email, telephone number, selected matter category, message content and any files you choose to submit, to receive and assess a contact request;
- technical data such as IP address, device and browser data, referrer URL and request logs for operation, security and abuse prevention.
Do not submit sensitive data, criminal-offence data or information about third parties before the office asks for it. If you voluntarily include it, processing is limited to what is necessary to assess the request and establish, exercise or defend legal claims, subject to the GDPR conditions and professional secrecy obligations that apply.
3. Legal bases
For responding to an inquiry and preparing a possible engagement, processing is based on Article 6(1)(b) GDPR (steps at the data subject’s request before a contract). For security, automated-abuse prevention and operational records, processing may rely on Article 6(1)(f) GDPR, based on the legitimate interest in protecting the service and professional confidentiality. Article 6(1)(c) applies where processing is required by law. Special-category and criminal-offence data are processed only under the relevant conditions of Articles 9 and 10 GDPR and applicable Greek law.
4. Recipients and service providers
The website may use hosting and Cloudflare/Turnstile for security, Resend for email delivery, Gmail for the office mailbox, and Google Calendar/People for the administrative panel. For appointments, guests you choose to invite receive the invitation and relevant details through Google Calendar. Embedded Google Maps and Google Fonts communicate directly with Google when loaded. Providers receive only the data needed for their service and are subject to applicable processing agreements and confidentiality obligations.
5. Transfers outside the EEA
Depending on account configuration and service, the providers above may process data outside the European Economic Area, including in the United States. Where required, transfers rely on an adequacy decision, participation in the EU–US Data Privacy Framework or Standard Contractual Clauses, together with required supplementary measures. You may request a copy of, or further information about, the relevant safeguards.
6. Retention
Personal data are retained only as long as necessary for the purpose collected. Active matter files and limited client-contact records may be retained during the engagement and afterward where required by professional, legal, tax, limitation, or claims-related obligations. Closed files and non-engaged enquiries are periodically reviewed and deleted when no longer necessary.
7. Your rights
You may request access, rectification, erasure or restriction, and may object to processing based on legitimate interests. Where applicable, you also have a right to data portability. To exercise a right, email [email protected]. No decision with legal or similarly significant effect is made solely by automated processing; Turnstile’s automated check is used only for abuse prevention. You may also complain to the Hellenic Data Protection Authority.
8. Security
Encrypted connections and technical and organisational measures proportionate to the risk are used. Email delivery and external providers nevertheless involve the risks described in their respective policies.