Privacy notice
What is a Privacy Notice A privacy notice is a document that publishes the way a business (here Michael Papadopoulos LLC), gathers, holds, communicates, and manages your information. It fulfils a legal requirement to protect your ‘right to privacy’ and our responsibilities as a business.
You have the right to be informed about the collection and use of your personal information. This is a requirement of the Data Protection Legislation and this Privacy Notice aims to provide you with the information relating to:
(a) how we lawfully use your information;
(b) the purpose; and
(c) the manner in which your information is controlled and remains secure giving you an opportunity to review and object to how your information is being processed.
Michael Papadopoulos LLC is the controller for the personal information we process, unless otherwise stated.
This Privacy Notice applies to personal information about you, any of your employees, officers, directors, agents, contractors or consultants or any of your customers, suppliers or any other relevant individual that you engage with in the ordinary course of business held by Michael Papadopoulos LLC and, to the extent that the Data Protection Legislation applies to the processing of such information.
In this Policy:
"Data Protection Legislation" means the EU General Data Protection Regulation 2016/679; together with all other applicable legislation relating to privacy or data protection; and where we use the terms "personal data", "data subject", "controller", "processor" and "process" (and its derivatives), such terms shall have the meanings given to them in the Data Protection Legislation.
Using your information
We may collect and process information relating to you in order to provide our services to you. We shall process any information we collect in accordance with Data Protection Legislation and the provisions of this Notice.
This Notice sets out how we collect and use your personal data and which rights and options you may have in this respect.
Michael Papadopoulos LLC commits to value the personal information entrusted to the firm and make sure the firm respects that trust.
The kind of information we hold about you
The personal information we collect may include, and may be categorised into “information categories”:
-
Identity data such as your name, date of birth (Identifiers)
-
postal address, including your home address (where you have provided this to us), business address, telephone number, mobile phone number, fax number and email address, details of next of kin (Contactors)
-
Financial data (including bank details/payment history, tax rates and information in relation to investments). Further financial and/or business information necessarily processed in a project or client contractual relationship or voluntarily provided by you (Financials)
-
employment status, information about an individual’s professional qualifications (Career)
-
Information collected from publicly available resources, integrity data bases and credit agencies where this is relevant to the services offered to you
-
Other personal data regarding your preferences where it is relevant to legal services that we provide (Services)
-
Details of your visits to our premises or websites visited (Usage).
Some of the information that we collect about you may include special categories of personal data (Sensitive Information, such as information on racial or ethnic origin, criminal or alleged criminal offences). We will usually seek separate permission from you or them in writing to process these special categories of personal data.
If you fail to provide us with this information, or you object to us processing such information, as a consequence, we may be prevented from providing our services to you or continuing to manage your matter(s) with us (for example because the collection of personal data is required to process your instructions or orders or to carry out legally required compliance screening).
How is your personal information collected?
The majority of personal information we process is provided directly by you (Direct Collection)
-
When you seek legal advice or any other legal and/or corporate and administrative services from us;
-
When you make an enquiry or otherwise interact on our website;
-
When you offer to provide or provide services to us and/or clients.
In some circumstances, we collect personal data about you from a third party source. For example, we may collect personal data from your organisation, other organisations with whom you have dealings, government agencies, an information or service provider or from public registers or from other freely available resources such as; companies registries or other registries, LinkedIn, job sites, directory listings, electoral databases, charities/law firm publications and general internet searches.
Legal collection: This method relates to information collected to satisfy any legal or regulatory requirements such as; anti money laundering purposes, data incidents (breach notification), the prevention of criminal/fraudulent activity, IRC matters, codes of conduct issues, legal judgments or freedom of information requests. We may collect information about criminal convictions and offences, when it can be demonstrated that Michael Papadopoulos LLC requires the information for legal or regulatory purposes, such as ‘background checking’.
Michael Papadopoulos LLC may collect information (Technical collection) based on your access/browsing habits on platforms such as our client portal and website.
How we use your information
We may use your personal information for one or more of the following purposes:
-
Providing legal advice or other services or things you may have requested that relate to our services or necessary for the performance of a client instruction or other contract with you (on the basis of your contract with us);
-
Compliance with our legal obligations (such as record keeping obligations), compliance screening or recording obligations (e.g. for anti-money laundering, financial and credit check and fraud and crime prevention and detection purposes), which may include automated checks of your contact data or other information you provide about your identity against applicable sanctioned-party lists and contacting you to confirm your identity in case of a potential match or recording interaction with you which may be relevant for compliance purposes. To comply with our legal and regulatory obligations and requests anywhere in the world, including reporting to and/or being audited by national and international regulatory bodies. To comply with court orders and/or defend our legal rights (our legal and regulatory obligations);
-
For any purpose related and/or ancillary to any of the above or any other purpose for which your personal data was provided to us;
-
Where you have expressly given us your consent (your consent), we may process your personal data also for communicating with you through the channels you have approved to keep you up to date on the latest legal developments, announcements, and other information about our services, products and technologies (including client briefings, newsletters and other information) as well as our events and projects.
-
Because processing is necessary for purposes of our legitimate interests in a lawful capacity by taking both your right to privacy and the needs of the business in delivering services to you into consideration.
Direct marketing
With regard to marketing communication, we will only provide you with such information after you have opted in and provide you the opportunity to opt out anytime if you do not want to receive further marketing communication from us. We will never send ‘direct marketing’ communications to you.
Information sharing
Sharing your information with others
We may share your personal data in the following circumstances:
1. If you are a client, or are contracted to or are an agent of a client, we may disclose your personal data to:
other advocates, lawyers, counsel, legal consultants, or experts duly engaged with your instructions in your matter; or
foreign counsel for the purpose of obtaining foreign advice;
2. We may share your personal data with companies providing services for money laundering checks, credit risk reduction and other fraud and crime prevention purposes and companies providing similar services, including banks and financial institutions, and regulatory bodies with whom such personal data is shared;
3. We may share your personal data with courts, law enforcement agencies, regulators or lawyers or other parties where it is reasonably necessary for the establishment, exercise or defence of a claim, or for the purposes of a dispute resolution process.
Otherwise, we will only disclose your personal data when you direct us or give us permission, however on occasions we may be required to disclose your information without your consent subject to our legal or professional obligations, when disclosure has been requested by a court, regulatory authority, law enforcement agency or professional body.
Personal data about other people which you provide to us
If you provide personal data to us about someone else (such as one of your directors or employees, or someone with whom you have business dealings) you must ensure that you are entitled to disclose that personal data to us and that, without our taking any further steps, we may collect, use and disclose that personal data as described in this Privacy Notice. In particular, you must ensure the individual concerned is aware of the various matters detailed in this Privacy Notice, as those matters relate to that individual, including our identity, how to contact us, our purposes of collection, our personal data disclosure practices (including disclosure to overseas recipients), the individual’s right to obtain access to the personal data and make complaints about the handling of the personal data, and the consequences if the personal data is not provided (such as our inability to provide services).
Data Security
In addition to our legal duties to keep your information confidential in the course of offering legal services to you, Michael Papadopoulos LLC will take appropriate technical and organisational measures to keep your personal data confidential and secure in accordance with our internal procedures covering the storage, disclosure of and access to personal data. Personal data may be kept on our personal data technology systems or in hardcopy in paper files.
Up-to-date personal data
If any of the personal data that you have provided to us changes, for example if you change your email address or if you wish to cancel any request you have made of us, or if you become aware we have any inaccurate personal data about you, please let us know by sending an email to michael@papadopouloslaw.eu. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete Personal Data that you provide to us.
How long we keep your information
We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for. This includes for example the purposes of satisfying any legal, regulatory, accountancy or reporting requirements as part of a contract.
To determine the appropriate retention period for personal data, we consider the amount, nature, sensitivity, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information, whether we can achieve those purposes through other means, and the applicable regulatory or legal requirements.
What are your rights?
In summary, you have the:
right to know how your Information is processed;
right to obtain copies of the information Michael Papadopoulos LLC holds, including how it’s processed and by whom;
right to correct any mistakes made to your information;
right to request that your information is deleted (in certain circumstances);
right to object if you feel your information is not being processed securely or lawfully;
right to restrict the use of your information in specific areas, such as ‘marketing’ communications.
You may also make a complaint to us if you have a concern about our handling of your personal information.
If you wish to do any of the above please send an email to michael@papadopouloslaw.eu . We may request that you prove your identity by certain acts (e.g. by providing us with a copy of a valid means of identification) in order for us to comply with our security obligations and to prevent unauthorised disclosure of information.
We will consider any request or complaint we receive and provide a response in a timely manner.
If you are not satisfied with our response to you, you may take your complaint to the Data Protection Commissioner Office at:
1 Iasonos Street,
1082 Nicosia, Cyprus
Tel.: +357 22 818 456
Fax: +357 22 304565
E-mail: commissioner@dataprotection.gov.cy
Revisions to this Privacy Notice
This Privacy Notice was issued in June 2018. This Privacy Notice is aligned to the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. We reserve the right to update, revise, amend and change this Privacy Notice from time to time in order to reflect any changes to the way in which we process your personal information or due to legal requirements. In case of any such revisions or changes, we will post the revised Privacy Notice on our website. The changes or revisions will take effect as soon as they are posted on our website www.papadopouloslaw.eu.
How to contact us
If you would like to contact us with any queries or comments, please send an email to michael@papadopouloslaw.eu.