Privacy Policy (Data Protection)

Introduction: Our company respects your privacy and protects any personal data it may collect. The processing of personal data is governed by the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, and any other applicable legislation and guidance issued by competent authorities. This policy explains how we collect, use and protect your data when you visit the website pkaccounting.gr.

Data Collection: We do not collect personal data through contact forms, registrations or similar mechanisms on our website, as we do not provide a contact form or newsletter service. The only information we receive from visitors derives from the use of cookies (see the Cookie Policy below). Specifically, we use Google Analytics cookies for traffic analysis. During your browsing, Google Analytics may collect anonymous information such as IP address (in anonymised form), browser type, pages visited, duration of visits, and other information about how you use the website. This data is not used to directly identify you and is limited to aggregated statistical information.

Additionally, if you choose to contact us via telephone, email or other communication channels provided on the website, you may provide certain personal data (e.g. name, email address, telephone number, and any information included in your message). This data will be used solely to respond to your request and provide our services (e.g. providing information or preparing a potential collaboration). It will not be used for other purposes without a lawful basis for processing.

Data Processed in the Context of Service Provision: In the course of providing accounting and tax services, we may collect and process additional personal data of our clients, such as identification data (e.g. Tax Identification Number, Social Security Number, ID number, insurance registration number), contact details, and financial/tax-related data. This data is necessary for the performance of the contract and compliance with legal obligations. Such processing is carried out with strict confidentiality and in accordance with GDPR requirements.

Legal Basis for Processing: Your personal data is processed lawfully in accordance with the GDPR. In particular: (a) For data collected through analytics cookies (Google Analytics), the legal basis is your consent, in accordance with Article 6(1)(a) GDPR — such cookies are installed only if you provide explicit consent through the cookie mechanism (see Cookie Policy). (b) For personal data voluntarily provided by you when contacting us (e.g. via email or telephone), processing is necessary to respond to your request — this may be considered as pre-contractual processing at your request and/or based on our legitimate interest in responding to enquiries and providing our services. (c) For personal data processed in the context of providing accounting and tax services, processing is necessary for the performance of a contract, compliance with legal obligations, and, where applicable, for the protection of our legitimate interests.

Use of Data and Purposes: The personal data we collect is limited to what is strictly necessary for the following purposes:

• Website traffic analysis: Google Analytics cookies help us understand how users interact with our website (e.g. which pages are visited, how often, etc.), allowing us to improve our content and services. This data is anonymous and is not used to identify you. According to applicable guidelines, analytics cookies are not considered technically necessary and therefore require prior consent.
• Communication and Service Provision: If you provide contact details (such as name, email, telephone number) in order to contact us or request information, we will use this data solely to communicate with you and fulfil your request (e.g. respond to an enquiry or provide a service quotation).

Personal data is not subject to automated decision-making or profiling by our office.

Video Surveillance (CCTV): Our premises are equipped with a CCTV system for the protection of persons and property. The processing of such data is carried out in accordance with applicable legislation and the guidance of the Hellenic Data Protection Authority. Relevant information is also provided through appropriate signage in the monitored areas. Image data is retained only for the minimum necessary period and in any case in accordance with applicable regulatory guidelines.

Data Sharing and Disclosure: We treat your personal data with responsibility and confidentiality. We do not sell, rent or exchange your data with third parties. Access to data is limited to: (a) authorised personnel and partners who are bound by confidentiality obligations, and (b) data processors acting on our behalf, namely third-party service providers used for the operation of the website. In particular, we use Google Analytics (Google LLC or Google Ireland Ltd.) for traffic analysis, which acts as a data processor. Google may process this data on servers outside the European Union (e.g. in the United States), but is contractually bound to apply appropriate safeguards in accordance with GDPR (such as Standard Contractual Clauses). Data collected via Google Analytics is anonymised (e.g. IP masking) and is not shared with other third parties, unless required by law or competent authorities.

Data Retention: We retain your personal data only for as long as necessary for the purposes for which it was collected. Specifically, data collected through Google Analytics is stored for the duration defined by the respective cookies (see Cookie Policy), while aggregated statistical data may be retained for internal analysis purposes. If you provide personal data in the context of communication, it will be retained only as long as necessary to process and complete your request and any subsequent cooperation. If no cooperation arises, your data will be deleted no later than 12 months from our last communication (and possibly earlier if no longer needed). In case of a professional engagement, certain data may be retained for longer periods in accordance with legal and tax obligations (e.g. retention of accounting records as required by law).

Data Subject Rights: Under the GDPR, you have the following rights regarding your personal data:

• Right to be informed: to be informed about the processing of your personal data (what data we collect, for what purposes, to whom it is disclosed, how long it is retained, etc.).
• Right of access: to obtain confirmation as to whether we process your personal data and to receive a copy of the data we hold about you.
• Right to rectification: to request the correction of any inaccurate or incomplete personal data concerning you.
• Right to erasure (“right to be forgotten”): to request the deletion of your personal data, under the conditions set out in the Regulation (e.g. where the data is no longer necessary or where you withdraw your consent).
• Right to restriction of processing: o request the restriction of processing of your personal data in certain cases (e.g. if you contest the accuracy of the data or the lawfulness of the processing).
• Right to data portability: to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to request its transfer to another data controller, where technically feasible (this applies to data processed by automated means based on your consent or for the performance of a contract).
• Right to object: to object at any time to the processing of your personal data carried out on the basis of legitimate interests. In such a case, we will cease processing unless we demonstrate compelling legitimate grounds which override your rights and freedoms.
• Right to withdraw consent: where processing is based on your consent (e.g. analytics cookies), you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right not to be subject to automated decision-making: (as mentioned above, we do not apply such practices on our website; however, in general, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you).

You may exercise your rights at any time by submitting a relevant request. To do so, or if you have any questions, please contact us using the contact details provided on our website. We will respond as soon as possible and in any case within the legal deadlines (within one month, in accordance with Article 12 GDPR, unless an extension is justified).

Data Security: We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Although no system can be completely secure, we apply modern security practices (such as HTTPS, firewalls, and controlled access to information) to safeguard your data.

Cookies: As stated above, we use only third-party analytics cookies (Google Analytics) and no advertising or tracking cookies. Cookies are small text files stored on your browser when you visit a website. For more information, please refer to our Cookie Policy. In accordance with applicable legislation, your consent is required for non-essential cookies. Upon your first visit, you are informed about cookies and asked to provide your consent. You may withdraw your consent or change your preferences at any time.

Data Controller and Contact: The data controller is the Accounting Office Konstantina Panagiotou, based in Greece. For any questions regarding this Privacy Policy or to exercise your rights, you may contact us info@pkaccounting.gr or by phone at (0030) 2107568785. We will respond to your requests promptly and in accordance with our legal obligations.

Right to Lodge a Complaint: If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA): Address: 1-3 Kifisias Ave., 115 23 Athens, Greece Tel: +30 210 6475600 Email: contact@dpa.gr Website: www.dpa.gr

Policy Updates: This Privacy Policy may be updated from time to time, particularly if there are changes in the operation of the website or the legal framework. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the website constitutes acceptance of any updated version.

Last updated: 17/03/2026