DRAFT TO COMPLETE
Privacy notice
This page is a draft. Before the service goes live, complete the bracketed fields and verify that it accurately describes the business’s tools, collaborators and actual practices.
1. Who is responsible for your data
[Business legal name], [postal address], [privacy contact email], [telephone]. If a Data Protection Officer has been appointed, their contact details are: [details or ‘none appointed’].
2. Data we process
When you contact us, we may process your name, contact details, country of residence and a description of your request. If we take on your case, identity details, authorizations and documents relevant to that procedure may be needed. We request only what is necessary to review and handle the case. Do not send identity documents or sensitive information in your initial inquiry.
3. Purposes and legal bases
We use your details to respond to your inquiry and, if we agree to proceed, to provide the service and communicate about your case. The legal basis is taking steps before entering into a contract or performing a contract (GDPR Article 6(1)(b)). Where tax or accounting records must be kept, compliance with a legal obligation applies (Article 6(1)(c)). Any other purposes or special-category data will be assessed and explained before processing.
4. Who receives the data
Depending on the case, data may be shared with the competent Greek authority and professionals needed to deliver the service, such as lawyers, notaries or translation professionals. The hosting, email and secure storage providers selected may also have access: [providers/categories]. We share only necessary data and apply appropriate agreements and safeguards.
5. Transfers outside the EEA
[Complete after selecting providers and mapping any transfers: countries, adequacy decision or appropriate safeguards, and how to obtain a copy.]
6. Retention and security
Data is retained for as long as needed to answer an inquiry or complete a case, and afterwards as required by applicable obligations or to establish, exercise or defend legal claims. [Specify retention periods by data category.] Access to documents is limited to authorized persons; [insert the actual technical and organizational safeguards].
7. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your data, or object to processing. Where processing is based on consent, you may withdraw it without affecting processing already carried out. To exercise a right, write to [privacy email]. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
8. Required data, cookies and changes
Some information is necessary to respond to your inquiry or take on your case; without it, we may be unable to assist you. [Describe cookies and any analytics/advertising tools after technical setup.] This prototype does not make automated decisions about your requests. We will update this notice when services or processing practices change. Last updated: [date of final approval].