Privacy Policy

Last updated: May 2026

1. Who we are

This website is operated by Nadia Karabatsou Legal Support & Consulting, with offices at 16 Marangou Street, Glyfada, Attica, Greece ("we", "us", "our"). Our primary contact email is kfk@karampatsos.com.

2. What data we collect

We collect personal data you provide directly to us through this website, including: your name, email address, country of residence, the service you are enquiring about, and any information you include in your enquiry message. We also collect standard web analytics data (see Section 5).

3. How we use your data

We use the information you submit to respond to your enquiry, to assess how we can help you, and to contact you in relation to that enquiry. We do not sell, rent or share your personal data with third parties for marketing purposes. We may share data with professional service providers who assist us in operating the practice (e.g. secure email providers, calendar booking systems), where those providers process data on our behalf and under appropriate data protection agreements.

4. Legal basis for processing

Where you submit an enquiry, we process your data on the basis of your consent (provided by the consent checkbox on the contact form) and/or our legitimate interest in responding to legal enquiries. Where you become a client, we process your data as necessary for the performance of our legal services agreement.

5. Analytics

This website uses Google Analytics 4 to collect anonymised usage data (pages visited, time on site, general geographic region). This data is processed only where you have consented to analytics cookies. You can withdraw consent at any time using the cookie preference centre.

6. Data retention

Enquiry data from non-clients is retained for 12 months. Client data is retained for the duration of the engagement and for the legally required retention periods thereafter (typically 10 years under Greek Bar regulations).

7. Your rights

You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to our legal obligations); withdraw consent at any time; and lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

8. Cross-border data transfers

If you are located outside the EU/EEA, your data may be processed in the EU. Where we transfer data outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.

9. Contact

For any data protection enquiry, email us at kfk@karampatsos.com with the subject "Data Protection".