ATHENS FINANCIAL SERVICES considers the protection of the personal data and privacy of its clients, partners and website visitors a fundamental priority.
This Policy describes how we collect, use, store and protect personal data when you visit and use www.afs.gr, communicate with us and, where applicable, receive our services.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, Law 3471/2006 where applicable, and current Greek and European legislation.
1. Data controller
The data controller is:
ATHENS FINANCIAL SERVICES PC
General Commercial Registry (GEMI) number: 129096803000
Website: www.afs.gr
Telephone: +30 210 8317702
Email: info@afs.gr
For personal data protection matters, please contact:
2. Browsing the website
Browsing most of the website does not require you to provide your name, email address or telephone number.
However, certain technical data may be collected automatically during your visit, including your IP address, device and browser type, operating system, security information and technical information about website use.
Additional data is collected when visitors choose to provide it, for example through a contact form, a request for a quotation or another available online service.
Data collection through cookies and similar technologies is governed by the AFS Cookies Policy and the visitor's consent choices.
3. Personal data we may collect
Depending on how you contact us and the service requested, we may collect:
Full name.
Business name.
Email address.
Telephone number.
Contact details.
Information included in messages, requests or forms.
Information needed to prepare a quotation or begin a business relationship.
Data required to provide accounting, tax, payroll, advisory or related services.
Technical data about access to and use of the website.
Data collected through cookies or similar technologies where the required legal basis exists.
4. Purposes of processing
Personal data may be used for:
Answering enquiries and contact requests.
Preparing and sending quotations.
Taking steps before entering into a contract.
Performing our contract with you.
Providing accounting, tax, payroll, advisory and related services.
Meeting tax, social security, employment, accounting and other legal obligations.
Providing customer support and assistance.
Managing our business relationship.
Securing our information systems and website.
Preventing fraud, misuse or unauthorised access.
Measuring traffic and improving the website where the required consent has been given.
Sending updates, newsletters or promotional communications where an appropriate legal basis exists.
Establishing, exercising or defending legal claims.
5. Legal basis for processing
Depending on the purpose and circumstances, processing may be based on:
Your consent.
Performance of a contract or steps taken at your request before entering into a contract.
Compliance with a legal obligation applicable to AFS.
The legitimate interests of AFS or third parties, provided these are not overridden by the data subject's fundamental rights and freedoms.
Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. Contact forms and requests
When you submit a message through the contact form or another website form, we use the information you provide to handle and respond to your request.
Submitting a contact form does not, in itself, constitute consent to receive advertising messages. The separate optional newsletter choice is unchecked by default. We record that choice, terms and privacy acceptance, the timestamp and statement version with your enquiry and forward them to the marketing team through Microsoft 365. There is no automatic subscription to an external platform. You may withdraw consent by contacting AFS.
Information submitted through a form may be used to prepare a quotation or for pre-contractual communication when your request concerns a potential business relationship with AFS.
7. Newsletters and information communications
AFS may send newsletters, tax or business updates, service updates and, where permitted by law, commercial communications.
These are sent where an appropriate legal basis exists, such as the recipient's consent or another situation permitted by applicable law.
Recipients can stop receiving promotional electronic communications by using the unsubscribe link or contacting us.
Stopping promotional communications does not affect necessary operational or contractual communications relating to an active business relationship.
8. Sharing data with third parties
AFS does not sell personal data.
Before an enquiry is registered, a verification code is sent to the supplied email through Microsoft 365. Codes expire after 10 minutes, with attempt and resend limits to prevent abuse. The application retains keyed cryptographic hashes of the email and code and timestamps, not readable codes. Temporary records are deleted on the next code request after 24 hours since their last send. Verification proves access to the email, not personal identity or telephone ownership, and is not marketing consent.
With prior, separate cookie consent, optional Google Analytics, Google Ads and Meta Pixel integrations may send technical browsing data, ad-click identifiers and successful enquiry events to Google and Meta for analytics, ad measurement and retargeting. We do not send form fields, email addresses or telephone numbers in these events or enable enhanced/advanced matching. Integrations remain inactive without configuration and consent. You may reject or separately withdraw analytics and advertising consent in Cookie settings without restricting the public website. Technology, duration and potential processing outside the EEA are described in the Cookies Policy.
Providing our services, meeting legal obligations or operating our information systems may require certain data to be shared with third parties.
Depending on the circumstances, recipients may include:
Authorised AFS personnel and partners.
Accountants, tax professionals, legal advisers, auditors and other professional partners.
Providers of information systems, cloud services, hosting, email, telecommunications, cybersecurity and other technology services.
Banks, financial institutions or payment providers where required for a particular service or transaction.
Public authorities and bodies, including the Independent Authority for Public Revenue (AADE), e-EFKA, GEMI and other competent services, where required to provide services or by law.
Judicial, administrative, tax or supervisory authorities where disclosure is required by law.
Partners processing personal data on behalf of AFS are bound, where required, by appropriate contractual data protection and confidentiality obligations.
9. Data received from third parties
In certain cases, AFS may receive personal data from third-party sources where necessary to provide its services or where permitted by law.
Such sources may include clients, legal representatives, partners, public registers, competent public authorities or other people and organisations lawfully entitled to provide the information to us.
This data is used only for the purposes for which it was lawfully obtained.
10. Transfers outside the European Economic Area
Some technology providers or partners may process data in countries outside the European Economic Area.
Where such transfers take place, AFS takes appropriate measures to ensure that the safeguards required by the GDPR apply, such as European Commission adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.
11. Cookies
The website uses cookies and may use similar technologies for proper operation, security, improving the visitor experience, statistical analysis and, where the necessary consent has been given, marketing purposes.
Not all cookies are the same and not all are necessary for the website to function.
Strictly necessary cookies support functions essential to the website's proper operation and security and may be activated without consent where the legal requirements are met.
Statistical, analytics, marketing, advertising cookies and other non-essential technologies are activated only where the required consent exists.
Details of cookie categories, providers, purposes and duration are described in the separate Cookies Policy.
Visitors can manage and change their choices through the website's cookie management mechanism.
12. IP addresses and technical data
Your IP address and other technical device data may be recorded when you visit the website.
This information may be used for security, diagnosing technical problems, protecting information systems, statistical analysis where permitted, and ensuring the website operates correctly.
We do not use IP addresses to arbitrarily identify individual visitors.
13. Location data
The public website does not request access to your device's geographical location.
14. Minors
AFS services are not primarily directed at minors.
We do not seek to collect minors' personal data through the public website without an appropriate legal basis or, where required, consent from the holder of parental responsibility.
If we discover that a minor's data has been submitted without a lawful basis, we will take appropriate measures in accordance with applicable law.
15. Data retention
Personal data is not retained indefinitely.
It is kept for as long as necessary for the purpose for which it was collected and subsequently for any period required or permitted by applicable tax, accounting, social security, employment or other legislation.
Data may also be retained for as long as necessary to establish, exercise or defend legal claims.
Contact requests that do not lead to a business relationship are retained only for a reasonable period in accordance with the purpose for which they were submitted.
Where processing is based solely on consent, withdrawal is taken into account in accordance with legal requirements.
A deletion request does not automatically mean that all data can be deleted if a legal obligation or another lawful basis for retention exists.
16. Security of personal data
AFS implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction or unlawful disclosure.
Measures are adapted to the nature of the data, the technologies used and the relevant risks.
Examples may include encryption in transit, controlled access to information systems, authentication mechanisms, activity logging, backups, cybersecurity tools and incident management procedures.
Despite these measures, no information system or means of electronic transmission can be considered completely secure.
AFS therefore reviews and improves its safeguards where necessary.
17. Your rights
Under the GDPR and subject to the conditions laid down by law, you have the right to:
Be informed about the processing of your personal data.
Access data concerning you.
Rectify inaccurate or incomplete data.
Have personal data erased where the relevant conditions are met.
Restrict processing.
Object to processing.
Data portability, where applicable.
Withdraw consent where processing is based on consent.
Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where this right applies.
Exercising a right does not mean it will be granted without exception in every case. Lawful exceptions or data retention obligations may apply.
To exercise your rights, please contact:
AFS may request only the information strictly necessary to verify the requester's identity and protect data against unauthorised disclosure.
18. Right to lodge a complaint
If you believe that the processing of your personal data infringes applicable law, you have the right to contact the competent supervisory authority.
In Greece, the competent authority is:
Hellenic Data Protection Authority
The right to lodge a complaint does not limit any other administrative or judicial remedies available to you.
19. Links to third parties
The website may contain links to third-party websites or online services.
These links are provided for visitors' convenience and do not mean that AFS controls or endorses those websites' data protection practices.
This Policy does not apply to processing independently carried out by third-party providers through their own websites or services.
We recommend reviewing the privacy policies of the relevant providers.
20. Policy updates and amendments
AFS may update this Policy to reflect changes in legislation, its services, business processes or the technologies it uses.
The current version is published at www.afs.gr and states the date of its last update.
Where a change is material and the law requires it, appropriate notice will be provided.
For any questions about personal data processing, please contact: