Last updated: 21 October 2026
This policy explains which personal data we collect through lawdika.gr, why and on what legal basis, how long we keep it and what rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
Data controller
Dimitropoulos & Associates Law Firm
25is Martiou 14, 502 00 Ptolemaida, Greece
Phone: +30 24630 28792
Email: [email protected]
What we collect and why
Online appointments
When you book an appointment we collect your full name, mobile number, email, how you would like to meet (at the office or by video call), the day and time and, if you add one, a short description of your matter. We use them to schedule the appointment and to send you a confirmation by email and SMS, an SMS reminder before the meeting and a cancellation link.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
Please do not include sensitive information in the description, for example about your health or criminal matters. We will discuss it at the appointment.
Contact form
When you send us a message we collect your full name, email, phone (if given) and the message itself, so that we can reply.
Legal basis: our legitimate interest in replying to people who contact us and, where the message concerns a possible instruction, steps taken before entering into a contract (Article 6(1)(f) and (b) GDPR).
Secure document upload
If we send you a secure upload link, the files you upload are stored on the website’s server in a folder that cannot be reached from the internet, and only the firm’s lawyers can access them. We use them solely to handle your matter, and they are covered by legal professional privilege.
Legal basis: performing the instruction you have given us (Article 6(1)(b) GDPR).
Website security
We use Cloudflare Turnstile to protect our forms from automated abuse. The server also logs technical details of each visit (IP address, date and time, page, browser) for security purposes.
Legal basis: our legitimate interest in running the website securely (Article 6(1)(f) GDPR).
Who has access to your data
Only the firm’s lawyers and office staff see your data. To run the website and the appointment service we use the following providers, who process data on our behalf and on our instructions:
- Google (Google Workspace): appointment calendar, email and, for video calls, Google Meet.
- Routee (AMD Telecom S.A.): confirmation and reminder SMS.
- Cloudflare: content delivery and protection for the website, Turnstile.
- VoovodeNET: website hosting and maintenance.
We do not sell data or use it for advertising. Data is disclosed to public authorities only where the law requires it.
Third-party content
Our pages load fonts from Google Fonts, icons from cdnjs (Cloudflare) and, on the contact page, a map from OpenStreetMap. To show this content your browser connects to their servers, which receive your IP address.
Transfers outside the EEA
Some of these providers, such as Google and Cloudflare, may process data outside the European Economic Area. Where they do, the transfer relies on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep data
- Appointment requests that are declined or cancelled are deleted from the calendar straight away.
- Appointments that take place stay in the office calendar as a record of meetings. If you instruct us, your details are kept in the case file for as long as the law and the Code of Conduct for Lawyers require.
- Contact form messages are kept for as long as we need to reply to and deal with your request.
- Files sent through secure upload are deleted from the server once they are no longer needed for your matter.
- Server access logs are deleted automatically after about ten days.
Cookies
This website does not use analytics or advertising cookies. It only uses cookies that are strictly necessary for it to work, which do not need consent:
- landing_visited: remembers that you chose to enter the law firm’s site, so the choice page is not shown again (7 days).
- pll_language: remembers the website language (1 year).
- ld_sd_ok: keeps you signed in to the secure document upload page (1 hour).
- Cloudflare may store technical information for the Turnstile security check.
Your rights
You have the right to access your data and to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. The right to erasure may be limited where the law requires us to keep the data.
To exercise your rights, email us at [email protected]. We will reply within one month.
If you believe the processing of your data breaks the law, you can complain to the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr).
Changes
We update this policy when the way the website works changes. The date of the last update is shown at the top of the page.