Privacy Policy Cookies & Tracking Technologies

What Are Cookies
Cookies are small text files stored on your device by websites you visit. They are widely used to enable website functionality, enhance user experience, and collect information about browsing behavior. On our website, cookies allow for a smoother and more personalized visit while helping us better understand how visitors interact with our content.
There are two types of cookies:
• Session cookies, which are temporary and deleted once you close your browser.
• Persistent cookies, which remain on your device until they expire or are manually deleted.
The cookies we use do not personally identify you. They are primarily used to recognize your browser, unless you voluntarily provide identifying information (e.g., by completing a contact form or personalizing your preferences).
Why We Use Cookies
As a law firm, we are committed to providing an informative and user-friendly online experience. We use cookies to:
• Remember your preferences (e.g., language or region)
• Understand how users navigate our website
• Maintain website security and performance
• Recognize repeat visitors
These tools help us improve the structure, content, and accessibility of our site.
Use of Third-Party Tools
Our website may also use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect data such as your IP address, browser type, and pages visited, in order to analyze traffic and improve website performance.
This data is processed by Google and stored on servers in the United States. Google does not associate your IP address with any other data it holds. You can read more about Google’s privacy practices here:
👉 https://policies.google.com/privacy?hl=en
To opt out of Google Analytics tracking, you may install the browser add-on available at:
👉 https://tools.google.com/dlpage/gaoptout?hl=en

Managing Cookies
You can choose to accept or reject cookies at any time by adjusting your browser settings. Most browsers accept cookies automatically, but you can modify your settings to decline them if you prefer.
Please note that disabling cookies may affect the functionality of certain parts of our website, such as access to secure areas or saved preferences.
For more information on how to manage cookies in your browser, visit:
👉 www.allaboutcookies.org
GDPR Privacy Policy

1. Introduction
This Privacy Policy (hereinafter referred to as the “Privacy Policy”) describes how the Law Office (hereinafter the “Law Office”) collects, processes, and protects personal data received from individual clients in the course of providing legal services.
The Law Office is the creator and legal owner of all rights to the website www.lexaiconsulting.com (hereinafter the “Website”), which it updates and may modify for use by the users of our online platform (hereinafter the “Users”).
With this Policy, we wish to inform our clients and website users that our Law Office treats privacy and personal data with the utmost respect and safeguards them accordingly. Our goal is to ensure transparency regarding the personal data we collect and how we process it, in accordance with the General Data Protection Regulation (EU 2016/679 – “GDPR”) and Greek Law 4624/2019.

2. Definitions of Personal Data (Article 4 GDPR)
To help clients and website users better understand this Policy, below are some essential definitions from the GDPR:
A. “Personal Data”: Any information relating to an identified or identifiable natural person (“Data Subject”).
B. “Data Subject”: A person who can be identified, directly or indirectly, in particular by reference to an identifier such as name, ID number, location data, online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
C. “Processing”: Any operation or set of operations performed on personal data (with or without automated means), such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, combination, restriction, erasure, or destruction.
D. “Controller”: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
E. “Processor”: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Controller.
F. “Recipient”: A natural or legal person, public authority, agency, or another body to which personal data are disclosed. Public authorities that may receive data in the course of a particular inquiry shall not be regarded as recipients.
G. “Third Party”: Any person or entity other than the Data Subject, Controller, Processor, and persons authorized to process data under the direct authority of the Controller or Processor.

3. Categories of Personal Data & Data Controller
In the context of providing legal services, the Law Office acts as the Data Controller and may process the following categories of personal data from its clients and website users:
• Identification data (e.g., full name, Tax ID, ID card number, Social Security Number)
• Contact information (e.g., address, telephone number, email)
• Case-related information (e.g., legal documents, legal arguments, evidence)
• Special categories of data (e.g., health data, criminal convictions), if necessary for establishing, exercising, or defending legal claims
• Cookies usage, if consented by the user via our website. Cookies are necessary for website functionality or for creating anonymous aggregate statistics that help us understand user behavior and improve site structure. No personal identification is possible through this method.
The Law Office adheres to the following principles of data processing in accordance with Article 5 GDPR:
a) Lawfulness, fairness, and transparency
b) Purpose limitation
c) Data minimization
d) Accuracy and regular updating
e) Storage limitation
f) Integrity and confidentiality through appropriate technical and organizational measures.

4. Purposes of Processing
The personal data of our clients and website users are processed for the following purposes:
• Drafting and executing client contracts and managing our professional relationship
• Providing legal advice and representation before courts or authorities
• Complying with legal and regulatory obligations
• Communicating with clients or users and third parties relevant to legal cases
• Handling contact requests via our online contact form or email
• Sending updates to users about www.lexaiconsulting.com activities (e.g., via newsletter)
• Improving our services and optimizing website performance.

5. Legal Basis for Processing (Article 6 GDPR)
We collect or receive data either directly from clients or website users, through forms or other means, or indirectly (e.g., via cookies to analyze site use).
The legal bases for processing may include, as applicable:
• Consent of the data subject (e.g., for receiving newsletters) – Article 6(1)(a)
• Contract performance or pre-contractual steps – Article 6(1)(b)
• Compliance with a legal obligation – Article 6(1)(c)
• Protection of vital interests – Article 6(1)(d)
• Legitimate interests pursued by the Controller or a third party – Article 6(1)(f)
• Establishment, exercise, or defense of legal claims – Article 9(2)(f) (for special categories of data).

6. Data Protection Officer
The Data Protection Officer (DPO) for the Law Office is:
Aikaterini Kanellopoulou, attorney-at-law (Athens Bar No. 23982)
Address: 23 Pentelis Ave., Vrilissia, Athens, GR-15235
Phone: +30 6955 382076
Email: lexaiconsulting@gmail.com

7. Data Subject Rights
As a client or user, you have the following rights under the GDPR:
a) Right to information and transparency (Articles 12–14)
b) Right of access to your personal data (Article 15)
c) Right to rectification of inaccurate or incomplete data (Article 16)
d) Right to erasure (“right to be forgotten”) under specific conditions (Article 17)
e) Right to restrict processing (Article 18)
f) Right to data portability (Article 20)
g) Right to object to processing (Article 21)
h) Right to lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr


To exercise any of the above rights or for inquiries, you may contact us at: lexaiconsulting@gmail.com
These rights are subject to the limitations of Article 23 GDPR.

8. Data Sharing with Third Parties
Your personal data may be disclosed to:
• Judicial authorities, bar associations, or public bodies
• Collaborating professionals (e.g., lawyers, experts), under confidentiality obligations
We do not transfer data outside the EU unless adequate data protection is ensured.

9. Data Retention Period
Personal data are retained for as long as necessary to fulfill the processing purpose and in accordance with legal or professional retention obligations (e.g., tax or legal practice requirements).

10. Data Security
The Law Office implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, or accidental loss.

11. Policy Updates
This Privacy Policy may be updated at any time. We encourage you to review it regularly. In case of modification, the date of the latest update will be noted. The most recently updated version is considered applicable at all times.