Privacy Policy
Last updated: October 10, 2026
We respect your privacy. This page explains in plain language what data we collect through this website, why, who we share it with, how long we keep it and what rights you have under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.
1. Who is the data controller
The controller is the Kalligas Accounting and Tax Practice – KalligasTax (Andreas and Konstantinos Kalligas), 48 Naxou Street, 166 74 Glyfada, Greece.
For anything about personal data, contact us at [email protected] or call 210 960 0160.
2. What data we collect
When you use the contact form we receive what you type: your name, email, phone number, topic, whether you want a reply or an appointment, a preferred date and time (optional) and your message.
Please do not put passwords (for example TAXISnet), card numbers or other highly sensitive data in the message. If we need documents, we will ask for them through a secure channel.
Like any website, the server that hosts it processes technical connection data (such as IP address, time and browser type) to run the site and keep it secure.
3. Why we use it and on what legal basis
- Replying to your request and arranging an appointment. Legal basis: taking steps at your request before entering a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering people who write to us (Art. 6(1)(f) GDPR).
- Security and proper operation of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
The tick box on the form confirms that you have read this Policy and agree that we use your details to contact you. We do not use your data for advertising, profiling or automated decisions, and we never sell it.
Giving us your details is optional, but without a name, email and phone number we cannot reply.
4. Who receives your data
We do not sell or hand over your data for commercial purposes. We share it only with providers that process it on our behalf (processors), as far as needed for the form to work:
- Formsubmit (formsubmit.co): a service that receives the form content and forwards it to the practice’s email.
- Google (Gmail): the email service where we receive and keep messages.
- Cloudflare: hosting and delivery of the website.
We may also disclose data to public authorities where the law requires it.
5. Transfers outside the European Economic Area
The providers in section 4 may process data outside the EEA, notably in the United States. Where available, transfers rely on a European Commission adequacy decision (for example the EU–US Data Privacy Framework) or on standard contractual clauses. You can ask about the safeguards that apply using the contact in section 1.
6. How long we keep it
- Requests that do not lead to an engagement: up to 24 months after the last contact, then deleted.
- If you become a client, your data is kept for the duration of the engagement and afterwards for as long as tax and accounting law requires.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent at any time without affecting earlier processing. To exercise them, write to [email protected]. We will reply within one month.
If you believe your rights are being infringed, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifissias Ave., 115 23 Athens).
8. Cookies and external services
This website does not use tracking cookies, analytics or advertising tools. It only stores your language preference on your device (localStorage) if you choose English. It contains no personal data.
- Google Maps: loaded only if you press “Show map”. Google then receives your IP address and may set cookies.
- YouTube videos: playback starts only when you press a video and is served from youtube-nocookie.com. Video thumbnails are loaded from YouTube servers (i.ytimg.com), so YouTube receives your IP address.
- Fonts: hosted on this website itself, with no connection to Google.
External services have their own privacy policies.
9. Security
The website uses an encrypted connection (HTTPS) and messages are kept in an email account with restricted access. No system is completely secure, so please avoid sending sensitive documents through the form.
10. Changes
If we change this Policy, we will publish the new version on this page and update the date.