Last updated [18.1.2025]
FOOD LAW EXPERTS
PRIVACY POLICY
INTRODUCTION
1. This Privacy Policy describes and governs how Food Law Experts, having its office address at 23-25 Themistocleous Str., Athens, 106 77, Attika, Greece, (“we”, “us“our”, or “Food Law Experts”), collects, uses, processes, and discloses information, including personal information (the “Personal Data”) of our Clients, potential Clients, persons who communicate or interact with us through our website /www.foodlawexperts.gr/ or any other social media pages we maintain (collectively the “Website”), job applicants and/or visitors or users of the Website.
2. We undertake to meet our legal obligations and handle such Personal Data in accordance with applicable data protection legislation and good business practices.
3. You may read this Privacy Policy, in order to determine whether you wish to provide your Personal Data, or those of third parties, to us.
4. For the purposes of this Policy and in addition to other definitions found herein, the following definitions shall apply:
A “Data Controller” determines the purposes for which and the means by which Personal Data is processed.
A “Data Processor” processes Personal Data on behalf of the Data Controller for the purposes and using the means specified by the Data Controller, in accordance withapplicable legislation.
“Personal Data” is information relating to natural persons who can be identified or are identifiable, directly from the information in question or who can be indirectly identified from that information in combination with other information.
5. Depending on the exact circumstances of each case and for the purposes of this Policy, Food Law Experts may act as a Data Controller and/or as a Data Processor of your Personal Data.
6. If you wish to find out how Food Law Experts processes your Personal Data in a specific situation, please contact us at info@foodlawexperts.gr.
WHAT PERSONAL DATA DO WE COLLECT?
Website Visitors
7. When you visit the Website, we automatically collect information from your computer, tablet, phone or other electronic device used to access the Website without your intervention. This information, which will be collected without your intervention and stored until it is automatically deleted, includes but is not limited to the following:
i. Internet Protocol (IP) address of the requesting Device
ii. Device ID or unique identifier, device type, ID for advertising, and unique device token
iii. Date and time of access
iv. Geo-location information
v. Name and URL of the retrieved file
vi. Website from which access is made (referrer URL)
vii. The browser used and, if applicable, the operating system of your Device and the name of your access provider.
viii. Device and connection information such as statistics on your page views, traffic to and from the sites, ad data, your browsing history, and your web log information.
8. The Personal Data mentioned above are collected automatically through the use of Cookies, web beacons, and similar technologies. You have the option to restrict the information collected on the Website. For more information about Cookies, see our Cookies Policy below.
9. In addition to the above, we may also collect your information (such as your name, email address, phone number, browser used and IP address) when you submit an enquiry or feedback through our Website.
10. We may also collect, use and share Aggregated Data such as statistical or demographic data which does not directly or indirectly reveal a person’s identity. If we combine or connect Aggregated Data with other information in way that it can directly or indirectly identify you, we will treat the combined data as Personal Data and process it in accordance with this Policy.
11. We may collect Personal Data from Third Parties, including technical data from analytics providers such as Google LLC.
Websites Visitors & Withdrawal of Consent
12. With the use of the Website and/or by contacting us through the Contact Form on the Website, you consent to the processing of your Personal Data in accordance with this Privacy Policy. To revoke such consent, you may refrain from using the Website. If you do not wish to use the Website and need to contact us, you may do so via phone or email, found in our contact page or otherwise.
13. In the event that you withdraw your consent, the legality of any processing carried outprior to the withdrawal of your consent will not be affected.
Communication with Us
14. When you communicate with us via email or telephone, or in any other way interact with us, we may collect any of the following data, depending on the case:
i. Name and Surname
ii. Email Address
iii. Telephone Number
iv. Any other Personal Data which you may voluntarily share with us
15. Personal Data shared with us while communicating with us, will be used to facilitate the communication with you and to respond to your enquiries.
Account Holders
16. You may create a Food Law Experts Account (the “Account”) to gain full access and use all features and information on our Website (such as to arrange an appointment with a Food Law Experts representative).
17. To create an Account, you will be required to provide the following data:
i. Name and Surname
ii. Email Address
Provision of Services to You
18. When you wish to engage us for the provision of services to you (the “Services”), you will be required to provide us with information in connection with the following:
i. Identifying information such as your name, telephone number and email address.
ii. Data about a legal case, a transaction, or an enquiry for which you may communicate with us.
iii. Financial and billing information.
iv. Your information when you correspond with us.
v. Any other information necessary for the provision of Services to you.
19. We may be unable and we reserve the right to refuse to provide any Services, enter into any agreements and/or respond to any requests if you fail or refuse to provide us with necessary personal information for the above purposes.
20. Any Personal Data communicated with Food Law Experts in relation to the provision of any Services to you is subject to client confidentiality obligations and may be protected by legal professional privilege.
Job Applicants
21. When you apply for a position at Food Law Experts, we may collect the following information to examine your job application and decide whether to conclude an Employment Agreement with you:
i. Name & Surname
ii. Gender
iii. Date & Place of Birth
iv. Nationality
v. Phone Number
vi. Email Address
vii. Residential Address
viii. Education
ix. CV and Prior Work Experience
22. If we conclude an Employment Agreement with you, we will maintain the Personal Data collected as part of your job application and additional data that we may request, in accordance with our Staff Privacy Policy which will be communicated to you at the time of your hiring.
23. You are not obliged to provide us with the Personal Data mentioned above, however, if you choose not to share such Data, we may not be able to examine your application or notify you for future job vacancies with Food Law Experts.
USE OF PERSONAL DATA
24. We will only use your Personal Data to fulfil the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose of collection. If we need to use any PersonalData for an unrelated purpose, we will notify you to explain the legal basis for such use and where required, ask for your consent.
SPECIAL CATEGORY PERSONAL DATA
25. Except as provided herein, we do not collect any Special Category Personal Data about you (such as details about your race or ethnicity, religious or philosophical beliefs, political opinions, information about your health and genetic and biometric data, or any information about criminal convictions and offences).
26. Irrespective of the above and depending on the specific circumstances of each case, you may be required to provide information about your health and information about criminal convictions and offences, such as for your employment with Food Law Experts or the provision of Services to you.
PURPOSES & LEGAL BASIS FOR PROCESSING
27. Depending on how you interact with us, we will collect and process your Personal Data:
i. To provide Services to you. This includes providing support, updating, improving, securing and personalising our Services.
ii. To contact you about any Services or provide any information requested by you.
iii. To comply with our legal obligations and applicable legal and compliance requirements.
iv. Prevent, detect, mitigate, and investigate fraudulent or illegal activities.
v. To conclude an Employment Agreement with you.
28. When processing your Personal Data, we may rely on one or more of the following Legal Bases:
i. Processing is necessary for the provision of our services. If your Personal Data are not provided or not provided accurately, we may be unable to provide any Services and/or support.
ii. For the safeguarding of our legitimate interests of running our business, monitoring our website and developing our business.
iii. To comply with a legal obligation to which we are subject.
iv. You have consented to the processing of your Personal Data for the specific purpose.
SHARING OF PERSONAL DATA
29. Under specific circumstances, we may be legally obliged to share your Personal Data. In such cases, we may share your Personal Data with third parties, including government agencies and external auditors. We may also be legally required to share your Personal Data under a court order.
30. We may disclose your Personal Data to third parties as follows:
i. Disclosure to Food Law Experts affiliates or to third parties, where such disclosure is necessary for the performance of the intended purposes (such as to meet our contractual obligations to you). Data recipients include, among others,
our Accountants and the IT service providers who may have access to our systems. Such receiving parties are bound by appropriate Data Processing Agreements.
ii. Disclosure is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data.
iii. You have expressly consented to this.
iv. We are legally required to disclose such data.
31. When disclosure of your Personal Data is required, we try to restrict the Personal Data disclosed to what is directly relevant and necessary for the accomplishment of the specified purpose.
DATA RETENTION
32. We will retain your Personal Data for as long as it is necessary and relevant for our operations and for the purposes for which this was collected (the “Data Retention Period”).
33. When you visit our Website, we will retain any Personal Data collected for a period of 6 months from the date of each Website visit to monitor our Website performance and traffic.
34. When you communicate with us, we will retain any Personal Data shared with us for a period of 6 months from the date of such communication, to be able to follow up on your enquiry.
35. Where we transact with you for the provision of goods or services, we will retain your Personal Data for as long as we provide or receive goods or services from or to you or for as long as there is a legal basis for retention and processing.
36. Where the business relationship or transaction between you and Food Law Experts has terminated or lapsed, we will retain any Personal Data collected for this purpose for a period not exceeding 7 years, to comply with national laws (such as applicable statutes of limitation), prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigation and take other actions permitted or required by applicable laws.
37. Irrespective of the above, we will retain Personal Data collected until any payment obligations have been fully settled and for a period not exceeding 7 years thereafter, to comply with national laws (such as applicable statutes of limitation), prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigation and take other actions permitted or required by applicable national laws.
38. Where a transaction between you and Food Law Experts is completed, we will maintain any accounting records and any Personal Data in relation to the transaction for a period not exceeding 7 years to comply with applicable legislation, and in particular to comply with relevant record-keeping obligations.
39. If you apply to work with Food Law Experts and your application is unsuccessful, we will retain the Personal Data collected for this purpose for a period of 3 months from the date of filling of the position you have applied for, to notify you of any job vacancies of similar positions with Food Law Experts within this period. If you have explicitly consented to this, we may retain the Personal Data collected as part of your job application for a period of 2 years, to notify you of any job vacancies of similar positions with Food Law Experts within this period.
40. You may at any time withdraw your consent to being notified for future job vacancies with Food Law Experts by sending a relevant request via email. We will stop the processing of your Personal Data and delete any copies maintained. The lawfulness of any processing of your Personal Data performed by Food Law Experts prior to the withdrawal of your consent will not be affected.
41. Irrespective of the above, we may retain your Personal Data for a longer period that prescribed above in the event that a complaint has been submitted and which involves us, or if we reasonably believe that there is a prospect of litigation in respect of our relationship with you.
42. After the Data Retention Period has elapsed or when we have no legal basis to process your data, we will delete all copies of your Personal Data in a secure manner in accordance with this Policy. In cases where we may anonymise you Personal Data for research and/or statistical purposes, we may retain this information indefinitely without further notice to you.
INTERNATIONAL TRANSFERS
43. We do not share your Personal Data with other recipients outside the European Economic Area. If such a need arises, we will only share your Personal Data in accordance with the terms of this Policy and we will integrate the European Commission’s Standard Contractual Clauses in our agreements with data recipients outside the European Union. We will also ensure that they are bound by contractual confidentiality obligations and that they have appropriate safeguards and procedures in place.
SECURITY MEASURES
44. We are committed at all times to process your Personal Data in a confidential manner and in accordance with applicable laws and regulations.
45. For this purpose, we adopt measures of a technical and organizational nature required to guarantee the security and integrity of your Personal Data, depending on the state of the technology, the nature of the stored data, the medium of storage and the risk of data being accidentally lost, used or accessed in an unauthorised way.
46. We have appropriate security measures in place to prevent Personal Data from being accidentally lost or used or accessed in an unauthorised way. We limit access to your Personal Data to those who have a genuine business need to have access to it. Those processing your Personal Data will do so only in an authorised manner and are subject to a duty of confidentiality.
47. We also use firewalls and active Antivirus Software and Advance Threat Protection Subscriptions, data encryption, restrictions and controls on physical access to data stored in physical location(s). When possible and appropriate, we try to anonymize data and impose limitations on use.
48. We cannot guarantee that Personal Data you provide us with will not be intercepted while being transmitted to us over the internet or otherwise, with such transmission being at your own risk.
49. We have procedures in place to deal with any suspected Personal Data security breach. We will notify you and any applicable regulator of a suspected Personal Data security breach where we are legally required to do so.
YOUR RIGHTS
50. You have the following rights as regards your Personal Data:
i. Request Access: You have the right to request access to your Personal Data.
ii. Request to Correct Personal Data: You may request that we correct any incomplete or inaccurate data we hold about you, though we may need to verify the accuracy of the new data you provide to us.
iii. Request the Erasure of Personal Data: You may request that we delete or remove any Personal Data where there is no valid legal basis for us continuing to process it.
iv. Object to Processing of Personal Data: Where there is something about your particular situation which makes you want to object to processing because it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data.
v. Request Restriction of Processing: This enables you to ask us to suspend the processing of your Personal Data if you want us to establish the data’s accuracy or where the use of such data is unlawful but you do not want us to
erase it, where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims, or where you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
vi. Request the Transfer of Personal Data: You may request that we provide you, or a third party of your choice, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used to perform a contract with you.
vii. Withdraw Consent: You may withdraw your consent to the processing of your Personal Data by emailing us, at any time where we are relying on consent to process your Personal Data.
viii. Not to be subject to a Decision Based Solely on Automated Processing: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
HANDLING OF DATA SUBJECT REQUESTS AND COMPLAINTS
51. If you wish to exercise any of the rights set out above, contact us via email.
52. We do not normally charge any fees for access to your Personal Data (or to exercise any of the above rights). We may charge a reasonable fee if a request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with a request in these circumstances.
53. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
54. We try to respond to all legitimate requests within one (1) month of receipt. It may take us longer than a month (up to an additional two (2) month period) if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
55. We do not warrant, undertake and/or represent error-free performance under this Privacy Policy. We will use all reasonable efforts to comply with this Privacy Policy and shall take immediate rectification actions in the event of a breach of this Privacy Policy. We shall not be liable for any incidental, consequential or punitive damages relating to a breach of this Privacy Policy.
56. You have the right to file a complaint with the Data Protection Authority in the EU Member State of your residence, place of work or place of an alleged infringement, on any matter related to how we collect and process your Personal Data.
57. The relevant supervising authority in Greece is the Hellenic Data Protection Authority. You can visit the Hellenic Data Protection Authority’s website for more information at /www.dpa.gr/.
LINKS TO OTHER WEBSITES
58. The Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies and/or procedures. When you leave our Website, we encourage you to read the Privacy Policy of every website you visit.
CHANGES TO THIS PRIVACY POLICY
59. We may amend the information contained in this Privacy Policy when we consider this appropriate or as required due to changes in applicable legislation. Should we do so, we will update the Notice as published on our Website, but are not obliged to send you an email or in any other way inform you of the changes effected. You may assess such changes and, as the case may be, object or unsubscribe from any service or functionality.
60. We recommend that you review this Privacy Policy at frequent intervals to be kept up to date with any amendments introduced. We will update the “Last Updated” date at the beginning of this Privacy Policy. Any changes make to this Privacy Policy are effective as of this Last Updated date and replace any prior Privacy Policy versions.
61. In case you need any clarifications about the processing of your Personal Data, contact us via email at info@foodlawexperts.gr.