KCH LAW is a legal office in Athens, Greece (hereinafter referred to as  “KCH Law Firm”, or “we” or “us” or “our”).

Purpose of this Policy

Protecting your privacy is very important to us. We are committed to protecting and safeguarding the information you provide to us as well as the information we collect while operating our business. This Policy is intended to assist you in making informed decisions when accessing our website and using our Services and/or to understand how your personal information may be processed by us as a result of providing legal services or when you apply to work at KCH Law Office. Hence, please read carefully this Policy along with the Terms of Use of our website and our Cookies Policy to understand how we collect, use and store your personal data.

KCH Law Office reserves the right to amend and update this Policy from time to time; please regularly check this page to be informed about changes, if and when they occur.

How we process data
We process personal data according to this Privacy Policy and in conformity with the applicable legislation, including the General Data Protection Regulation EU 2016/679 (henceforth the “GDPR”) and the relevant data protection laws and regulations applicable in Greece. We solely process personal data on servers within the EU/EEA.

In order for us to provide the services you request, we need your personal data. This Policy describes how we process personal data we collect when you engage with us in order to receive our services and more precisely in connection with:

• engaging our legal and/or other services;
• as a result of your involvement with one of our clients
• abiding by our statutory duty on anti-money laundering and knowing our clients policy and in general complying with our legal obligations;
• managing subscriptions, marketing and other marketing material requests when applicable;
• accepting our invitations to and participation in our events;
• evaluating and recruiting personnel;
• cookies used on our website;
• safeguarding our legitimate interests;

 

What personal data do we collect?

We collect and process information provided to us by or on behalf of our clients and their respective executives, agents, consultants and staff for the purpose of rendering legal services. This collection and processing of personal data is justified by the scope of our function and is based on our legitimate interest as a law firm providing professional legal services, in accordance always with our commitment to inviolable trust towards our clients.

Personal data may be provided to us (e.g. personal information relating to any of our corporate clients' or prospective clients' officers or personnel, opponent or vendor or purchaser or personal information relating to their legal or other advisors or personnel, as the case may be). The personal data collected is not limited only to the kind of information that can be found on a business card, such as names, titles/position, company name, work addresses, e-mail addresses and phone numbers, but may include other identifiable information.

We also collect images from the recordings of the CCTV cameras installed in our premises to protect the physical integrity of our property, but also the safety of our staff and third parties entering the supervised area.

We further collect background information and personal data necessary not only to fulfil our statutory obligations in relation to conflict checks, anti-money laundering, knowing our clients procedures but also to prepare for legal proceedings or defend a claim or render the required legal services to our clients. To such effect we may collect and process personal data of third parties (court officers, witnesses, and other individuals involved in the legal proceedings we handle.

If you are a potential applicant to join our team, the personal data collected is limited to:

• Your name and job title;
• Contact information including email address;
• Curriculum vitae, including your age and/or gender if you provide it to us, your education, employment history and any other information relevant to the potential recruitment that you agree to provide to us;

What is the legal basis and our legitimate interests for the processing of personal data?

We process personal data i) on the basis of our legitimate interests to provide legal services and advice to our clients (such processing is required in the aim of our clients’ legitimate interests to obtain legal advice and representation), ii) on the basis of a legitimate interest in order to comply with obligations related to the operation of our business such as maintaining our accounts, record keeping, billing and tax compliance purposes and finally, and iii) in order to meet our legal and regulatory obligations

We process special categories of personal data only if required i) for the exercise or defence of legal claims, ii) based on your consent, iii) for employment and social security law related purposes and iv)  for reasons connected with a statutory provision for reasons of public interest.

How and when do we share the personal data we collect?

We may share personal information with a variety of third parties as necessary. We sub-contract third parties, after careful selection and following  an appropriate  due diligence conduct, as well as  execution of contractual documentation to ensure that these third parties process personal information appropriately, offering the required level of protection  and according to our legal and regulatory obligations.

By way of indication, we share personal information with:

• Professional advisers such as lawyers, accountants and insurers.
• Government and regulatory/supervising authorities and agencies, courts and tribunals.
• Tax authorities and Corporate Registries.
• Banking Institutions.
• Third parties which carry out outsourcing services such as, by way of indication, translation services, confidential waste disposal, IT systems or software providers, IT Support service providers, document and information storage providers,  postal or courier providers who assist us in delivering documents related to a matter or postal marketing campaigns.
• Third parties engaged in the course of the services we provide to clients, such as opposing parties and their lawyers, court bailiffs, witnesses, notaries, interpreters, experts, technical advisors, arbitrators, mediators, accountants and tax advisors.
• Associated law firms around the world, or law firms belonging in the same legal network as us.
• Web analysis service providers who assist us with client insight analytics, such as Google Analytics.
• Images from the recordings of the CCTV cameras in our premises.

Cookies

We may also obtain information about your use of our website through the use of cookies. Cookies are small data files that, based on your consent, are installed on your computer when you visit our website, to make your experience easier. Cookies may be used to enable you to use certain website features, store your preferences, recognize you, monitor and maintain information about your use of our website. Please visit our Cookies Policy to find out more about the cookies we use and how to manage and delete cookies.

Confidentiality & Security

We are committed to keeping the personal information provided to us secure. To this effect we have implemented appropriate information security policies, rules, technical and organisational measures to protect the integrity, confidentiality, transparency and accessibility of the personal information we have in our possession against unauthorised access, misuse, disclosure, unauthorised modification, unlawful destruction or accidental loss.

No information system can however be 100% secure, therefore we cannot guarantee the total security of your information. In addition, we cannot guarantee or be held liable for the security of the information transmitted to us by other networks (internet, wireless networks etc.).

All our professional advisers, employees and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of such personal information.

We shall retain your personal information for as long as necessary to fulfil the purpose for which we collect it and in particular to comply with legal, accounting or reporting regulations. The appropriate retention period will vary and will depend primarily on the purpose for which we collect and process your personal information, its nature, the potential risk of harm from unauthorised use or disclosure of the same and finally the applicable legal requirements including the statute of limitations periods according to its personal data category.

When it comes to the processing of images from our CCTV cameras’ recordings, we keep the data for fifteen (15) days, after which it is automatically deleted. In the event that we discover an incident during this period, we isolate part of the video and keep it for up to forty-five (45) days, in order to investigate the incident and initiate legal proceedings to defend our legal interests. If the incident involves a third party, we will retain the video for up to one hundred eighty (180) days.  

Your rights

You have the following rights in relation to the personal information we hold about you. You may exercise any of your rights by contacting us at the e-mail address This email address is being protected from spambots. You need JavaScript enabled to view it.

• Right of access and rectification

The right to be informed about your personal data collected and how it is being processed and the right to request the correction of inaccurate or incomplete personal data.

• Right to erasure and to withdraw your consent

The right to request that your personal data be erased and, in cases where the processing is based on your consent, the right to withdraw your consent at any time.

• Right to restriction of processing

The right to limit processing of your personal data.

• Right to object

The right to object to certain processing of your personal data such as processing for direct marketing purposes or when we otherwise rely on our own or someone else’s legitimate interest to process your personal information.

• Right to opt-out

The right to opt out of future marketing activities at any time, by clicking the “unsubscribe” button on any of our send outs or by e-mailing This email address is being protected from spambots. You need JavaScript enabled to view it.

• Right to data portability

The right to request that any transfer of personal data is made in a structured, commonly used and machine-readable format.

• Right to lodge a complaint with the supervisory authority

You also have the right to lodge a complaint with the Greek Data Protection Authority or any other Data Protection Authority of the Member State you choose.

Contact details

If you wish to exercise any of your rights above or you have any questions or concerns in relation to
this policy, please use our contact details which may be found under This email address is being protected from spambots. You need JavaScript enabled to view it..