Legal

Privacy Policy

Last updated: May 2025

Data Controller

The data controller is A. LEPOURAS - F. KOSTOPOULOS P.C., trading as LAFK, registered at Megistis 19-21, Kallithea 17673, Attica, Greece. For any questions regarding the processing of your personal data, please contact us at info@la-fk.com or +30 210 9510 510.

Data We Collect

We collect data you voluntarily provide through our contact and technical assessment forms:

  • Contact details: full name, email address, phone number
  • Project information: stage, type, requirements, timeline
  • Technical data: IP address, browser type (automatically logged by the server)

Purpose and Legal Basis

We process your data for the following purposes:

  • Responding to enquiries and scoping potential collaboration — legal basis: performance of a contract / legitimate interests (Art. 6(1)(b) and (f) GDPR)
  • Preparing technical assessments or quotations at your request — legal basis: legitimate interests
  • Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR)

Data Retention

Contact data is retained for up to 3 years from the date of last contact, unless a longer period is required by law. Data related to active contracts is retained for as long as required by tax and commercial regulations (typically 10 years).

Recipients

We do not sell, rent or exchange personal data with third parties for commercial purposes. We may share data with:

  • Technology providers supporting the operation of this site (hosting, email delivery) — under a data processing agreement
  • Public authorities, when required by law

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: to receive a copy of the data we hold about you
  • Right to rectification: to correct inaccurate or incomplete data
  • Right to erasure: to request deletion of your data where there is no lawful basis for retention
  • Right to restriction: to restrict processing under certain circumstances
  • Right to object: to object to processing based on legitimate interests
  • Right to data portability: to receive your data in a structured, machine-readable format

Exercising Rights and Complaints

To exercise any of the above rights, contact us at info@la-fk.com. We respond within 30 days. If you believe that the processing of your data violates applicable law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), 1-3 Kifissias Ave, 115 23 Athens, www.dpa.gr.

Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. All communication between your browser and our server is encrypted via HTTPS/TLS.

Changes to This Policy

We may update this Privacy Policy periodically. Any material changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance of the revised policy.