Introduction

This policy applies to the company “HANIKIAN LAW FIRM”, hereafter referred to as the company.
The company is committed to protecting the personal information collected when you use our website and other services. This Privacy Policy sets out its commitment to protect personal data regarding its collection, use, transmission and retention.

Collection and use of Personal Data

The company has designed a standardized contact form on its website in order to facilitate communication with any interested party. This form is used for any queries or requests and directs them to the appropriate department or staff member. In order to manage and respond to your inquiries and requests, we may collect and store your full name, e-mail, address, contact details and any other information you may have provided to us. This information is used strictly to satisfactorily respond to your inquiries or requests and will not be disclosed to third parties except as set forth in this policy or where disclosure is required or permitted by law.
In addition, we provide the company’s phone numbers for a more direct communication if this is required.
For the legal processing of your data we recognize a legal basis before processing the personal data. In the above cases, the legal basis for the processing of personal data on our part is the granting of your express consent for the processing, by submitting the respective form only in case you agree with this policy.

Transfer of Personal Data

The company may transfer personal data that has been collected to the extent that this is reasonably necessary for the management of legal operations. In addition, we may transfer personal data when such processing is necessary to comply with a legal obligation to which we are subject.

Retention of Personal Data

The company undertakes not to retain personal data for a period longer than necessary and we will ensure that we delete it securely.

Rights of Subjects

Right of Access

The company considers that the personal data collected directly from the subjects is accurate and complete. Individuals can access their own personal data using the Subject’s Rights Request.

Right to Correction and Erasure

The data subject may request the updating, erasure or removal of any information held about him, and any third party who processes or uses the data must also comply with this request. An erasure request can only be refused if an exception applies. The right to Erasure can be exercised using the Application for the Exercise of Subject Rights.
The company is obliged to delete personal data when any of the following apply:

• the personal data are no longer necessary for the purposes for which they were collected or processed
• the data subject withdraws their consent and there is no other lawful basis for processing
• the data subject objects to the processing carried out on the basis of the legitimate interests of the Data Controller and there are no other overriding legitimate grounds for the processing
• the personal data has been processed unlawfully.

If the request to delete the personal data has been received, the identification has been confirmed, the request meets one of the above requirements and there is no legitimate reason to object to the processing, the company must delete the relevant data in its entirety.
If the company cannot delete the personal data, it will ensure that:
• cannot or will not attempt to use the personal data to justify any decision about an individual or in a way that affects that individual in any way
• does not give any other organization access to personal data
• protects personal data with appropriate technical and organizational security, and undertakes to permanently delete the information if, or whenever, it becomes available.

Right to Restriction of Processing

The data subject has the right to request from the administrator, restriction of processing using the Subject’s Rights Exercise Request.

Right to Object

The subject has the right to object, at any time and for reasons related to his particular situation, to the processing of personal data concerning him using the Application for the Exercise of Subject Rights.

Right to Data Portability

Upon request, the data subject should have the right to receive a copy of the personal data in a structured format using the Data Subject Rights Request.
These requests should be processed within one (1) month, provided that there is no undue burden and it does not compromise the privacy of individuals. A data subject may also request that their data be transferred directly to another system. This request must be implemented free of charge.
If the company cannot fully respond to this request within one (1) month, the Data Protection Officer should nevertheless provide the following information to the Data Subject, or his legally authorized representative within the time period that has been determined:
• An acknowledgment of receipt of the request
• Any information discovered to date
• Details of any information or amendments requested, which will not be given to the data subject, the reason(s) for the refusal, and any procedures available for appealing the decision
• An estimated date by which the remaining responses will be provided
• An estimate of any costs to be paid by the data subject (e.g. where the request is excessive in nature) and
• The name and contact details of the Data Protection Officer.

Amendments

In the event that the company chooses to change this Privacy Policy, we will post the changes on the company website.