PRIVACY POLICY

1. Introduction
ANASTASIOS TSEVRENIS & ASSOCIATES LLC (hereinafter "the Firm", "we", "us", or "our"), operating from 10 Labrou Katsoni strt, Nicosia, 1082, Cyprus, is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Cyprus Data Protection Law (Law 125(I)/2018).

2. Data Controller
The Data Controller responsible for your personal data is:
  • Company Name: ANASTASIOS TSEVRENIS & ASSOCIATES LLC
  • Address: 10 Labrou Katsoni strt, Nicosia, 1082, Cyprus
  • Emails: tsevrenis@gmail.com | anastasios@tsevrenis-law.com
Given the size and nature of our operations, the Firm is not required to appoint a Data Protection Officer (DPO). All inquiries regarding data protection should be directed to the emails above.

3. Personal Data We Collect
We collect and process personal data necessary for the provision of legal services, website optimization, and communication. This includes:
  • Identity Data: Name, surname, ID/Passport number.
  • Contact Data: Email address, phone number, physical address.
  • Financial Data: Bank account details, billing and tax information.
  • Special Categories of Data: Personal data relating to family law, litigation, or criminal convictions, provided strictly within the context of legal representation.
  • Technical Data: IP address, browser type, and cookies collected via our website.

4. How We Collect Your Data
We collect personal data through:
  • Direct interaction when you contact us via email, phone, or the contact form on our website.
  • The initiation and execution of a legal retainer agreement.
  • Automated technologies (cookies) when you navigate our website.

5. Legal Basis for Processing
We process your data under the following legal bases:
  • Performance of a Contract: To provide legal services and execute your mandates.
  • Legal Obligation: To comply with anti-money laundering (AML) regulations, tax laws, and court orders.
  • Legitimate Interests: For the management and security of our legal practice and website.
  • Consent: Where you have explicitly provided consent (e.g., website contact form).

6. Data Storage and Security
Your personal data is stored securely. Digital client files and case management data are processed using Zygos, a specialized, secure legal software compliance framework. We implement strict technical and organizational measures to prevent unauthorized access, loss, or alteration of your data.

7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory retention periods under Cyprus law (typically 6 to 10 years following the conclusion of a legal case or transaction).

8. Disclosure of Your Data
We do not sell or rent your data. Your data may be shared only with:
  • Courts, judicial authorities, and opposing parties as required during legal proceedings.
  • Authorized third-party service providers (e.g., IT support, cloud services, external auditors) bound by strict confidentiality agreements.

9. Your Rights
Under the GDPR, you have the following rights:
  • Right to access your personal data.
  • Right to rectify inaccurate data.
  • Right to erasure ("right to be forgotten").
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw consent at any time.
To exercise your rights, contact us at anastasios@tsevrenis-law.com. If you believe your rights have been violated, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy).