Privacy policy

This page explains which personal data we collect through greecetax.eu, why we need it, how long we keep it and what your rights are, under the EU General Data Protection Regulation 2016/679 (GDPR) and Greek Law 4624/2019.

Data controller

For any question about your data, you can email or call us using the details above.

What data we collect

Through the contact form we only collect what you give us:

• full name, email and country of residence (required),
• phone number with country code and the topic you are interested in (optional),
• the message you write to us.

Please do not enter your Greek tax number (AFM), Taxisnet (AADE) credentials, passport or ID numbers or other sensitive information in the form. If we need documents from you, we will agree on a secure way to exchange them. We will never ask for your Taxisnet (AADE) password by email or message.

When you call us, email us or message us on Viber or WhatsApp, we process the details you give us in the same way.

If you allow it, we also collect visitor statistics with Google Analytics (see “Cookies and visitor statistics”).

Purpose and legal basis

• To reply to your request and arrange a first meeting (including by video call). Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request before a possible engagement (Art. 6(1)(b)).
• If we start working together, your details become part of your client file and are governed by our agreement and by our obligations under Greek tax and accounting law (Art. 6(1)(b) and (c)).

We do not use your details for advertising or newsletters, and we do not sell them or give them to third parties for their own purposes.

How long we keep it

If we do not start working together, we delete your request no later than 12 months after our last contact, or sooner if you ask us to. If you become a client, your details are kept for as long as the law requires for accounting and tax records.

Who has access

Form submissions are sent by email to our office and are seen only by the people handling your request. The website and email are hosted by Hostinger, on servers in the European Union. Hostinger processes data only on our behalf, as a data processor. If you accept statistics cookies, Google is also a processor for visitor statistics (see below).

If you choose to contact us via Viber or WhatsApp, your messages pass through those services under their own terms and privacy policies. The Viber and WhatsApp buttons on this site are plain links: nothing is loaded from those services until you tap them.

Cookies and visitor statistics

We use Google Analytics 4 by Google Ireland Limited to see how many people visit the site, where they come from and which sections they read. Google Analytics only loads if you click “Accept” in the cookie notice. If you click “Reject” or make no choice, it does not load and no statistics cookies are set.

With your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Greek Law 3471/2006) the cookies _ga and _ga_… are set, lasting up to 2 years. Google Analytics does not store your IP address. We have turned off Google signals and all advertising features. Data is kept in Google Analytics for up to 14 months. Google may process data on servers in the USA and is certified under the EU-US Data Privacy Framework.

You can change your choice at any time from Cookie settings, which is also at the bottom of every page. Your choice is stored in your browser and we ask again after 6 months.

Apart from Google Analytics, the site does not load any other third-party services (such as Facebook or Google Fonts) and does not use advertising cookies. Fonts are served from our own server.

Like every website, the server logs technical details of visits (e.g. IP address, time, page) for security and proper operation. These logs are deleted automatically after a short period.

Your rights

You have the right to request:

• access to your data and a copy of it,
• correction of inaccurate data,
• erasure,
• restriction of processing,
• portability, i.e. receiving your data in a machine-readable format,
• to object to processing.

You can also withdraw your consent at any time. Withdrawal does not affect processing carried out lawfully before it. For any of the above, email us at info@greecetax.eu. We will reply within one month at the latest.

If you believe the processing of your data breaches the law, you can lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave, 115 23 Athens, Greece, www.dpa.gr) or with the data protection authority of the EU country where you live or work.

Security

The site only works over an encrypted connection (HTTPS), so form data is transmitted securely. Access to the site administration and email is limited to authorised persons.

Changes to this policy

If anything changes in the way we process your data, we will update this page. The date of the last update is shown at the top of the page.