Privacy Policy

Who we Are and How to Communicate with Us

Welcome to a website owned and administered by the company with the company name «Machas & Partners» and, having its registered seat at 8, Koumpari str., 106 74, Athens, Greece [herein referred as “we” or “the Company”].

If you have any doubts or queries regarding this Privacy Policy or if you want to exercise any of your rights included herein below, in chapter “Your Rights” of this Privacy Policy, you may contact us by sending a letter in the following address: 8, Koumpari str., 106 74, Athens, Greece or an e-mail in the following e-mail address:


Use of our website (hereinafter the “Website”) is subject to the present Privacy Policy & Trackers Policy (e.g., Cookies), hereinafter both Privacy Policy & Trackers Policy are referred as “Privacy Policy”. Privacy Policy has been updated to ensure compliance with the EU General Data Protection Regulation (GDPR) and Law 4624/2019.

The Company is committed to respecting and protecting your privacy. This Privacy Policy describes how, as controller within the meaning of GDPR, collects and processes the personal data and other information of you, the users of our website, and how our Website uses cookies or other identification technologies.

More specifically, the company, acting as a controller, in accordance with the Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter referred to as “GDPR”) and the relevant provisions of Greek legislation on the protection of personal data, as applicable, hereby informs you regarding: a) the kind of your personal data that we collect, b) the source of their collection, c) the reason for their collection and processing, d) the categories of their recipients, e) the time of their retention, f) their transmission outside the EU, g) your rights as data subjects.

The Privacy Policy may be amended from time to time, whenever needed, without prior notice to you. The amendments will apply on the date they are published in. We encourage you to regularly review the Privacy Policy.

If you do not agree with the use of your data according to Privacy Policy, please stop using the Website.

The Website is not intended for use by minors (under 18 years old). We do not collect personal data related to minors.

Not providing your personal data may in certain cases result in disadvantages for you, e.g., we may not be able to provide you with a service, or respond to your request, or provide you with marketing that we believe you would find valuable.

The Website may contain links to websites, platforms and/or applications, which does not control. This policy shall not apply to information collected through any other website, services, products, platforms, or practices of companies that we do not control. The Company is not responsible for any personal data protection practices pertaining to websites, services, products, platforms of other companies.

When and How we Collect your Personal Data

Data we collect directly from you

When you visit the Website and when you contact us, we may collect and process certain personal data of you for you to be able to benefit from the functionalities and services offered via the Website and also in order to understand the need for our services and to improve the way we operate. When you merely browse the Website, we do not collect your personal data, except for those cookies that are necessary for the technically smooth operation of the Website and for those for which you have given us your consent (please see in more detail the section “How we use cookies” of the Privacy Policy).

The Company will also collect and process certain information about you when you make a voluntary job request by any means (e.g., e-mail or via the form “Join our Team” of our Website).

Furthermore, when you submit your email address to the Newsletter Box, the Company will start to send promotional messages to your registered email address that we believe would be of interest specifically to you (“personalized”) (legal basis = your consent). In order to send you “personalized” messages, we monitor your online (and occasionally, where appropriate, your offline) habits and use data analytics to assess your behavior in order to better evaluate the products that may be of interest or benefit to you. Doing so requires us to collect several different categories of personal data. The Company uses a number of analytics tools to help us understand your behavior in terms of what you like and dislike about our various products and assess the overall effectiveness (success rates) of the messages sent.

Categories & Types of Collected Data

More specifically, when you use the “Contact Us” form of our Website, we collect and process information about you that you directly provide to us, which may include ordinary personal data such as: name, email address, country, the reason for your communication and the content of the communication that you address to us. We will use this information to communicate with you. We collect some of your personal data for communication purposes, such as to answer your requests for information and to better understand your expectations and needs.

We will also collect and process certain ordinary information about you when you make a voluntary job request (e.g., processing your CV, your identity and contact details, information about your education and work experience).

We also use cookies and other tracking technologies and we may collect information about the way you use our Website, technical data including data and time of access, data volume transmitted, status of transmission, browser type, version and language, browser plug-in types and versions, your internet protocol (IP) address, operating system and interface, time zone setting and location and profile data, including your referral website, pages you visit, actions you take, patterns of page visits and information from forms you fill in. Based on your prior consent, we may use your data in order to deliver advertising relevant to you based on the use of cookies. For further details on this and how to opt-out of such processing, please see the ‘How we use cookies and other tracking technologies (trackers)’ section of this Privacy Policy.
In case you consent to the use of trackers (e.g., cookies), we receive statistical data on visitors’ behavior on the website as well as browsing behavior (e.g., statistics or analytical performance cookies) from analytics providers.

Legal Basis for the Processing

We will only process your personal data when the law allows us to, that is, when we have a legal basis for processing. In a case per case basis, we may carry out the processing of your personal data on the following legal bases:

  • You have provided your consent to the processing of your data for one or more specific purposes (e.g., when you contact us, for the installation and use of certain types of cookies, for the newsletter, when you sent to us a job application, or when you ask from us to keep your CV for the possibility of a future collaboration.
  • The processing is necessary for the purposes of the legitimate interests pursued by (or those of a third party), provided that your fundamental rights do not override such interests; such legitimate interests include:
    (a) monitoring in order to ensure the efficient and secure running of the Website and fraud and misuse detection and prevention;
    (b) the improvement of our services and our Website;
    (c) monitoring how our Website is used, e.g. via data analytics, to help us improve the layout and information available on our website, our services, marketing, and customer relationship.

Transmission to Third Parties

The company reserves the right to disclose your personal data to any member of its affiliate/or any subsidiary companies (parent company and its subsidiaries) for its compliance with a legal obligation or for the purposes of the legitimate interests pursued by (or those of a third party), provided that your fundamental rights do not override such interests.

International Transfers of Personal Data

The company transfers personal data in accordance with applicable laws. Your personal data are not transferred outside the EU/EEA. To the extent that, in the context of and for the needs of the above-mentioned purposes, your personal data need to be transferred outside the EU, such data transfer will take place in accordance with applicable law and will ensure an adequate level of data protection. By way of entering into appropriate data transfer agreements based on Standard Contractual Clauses, which are accessible upon request at or taking other measures to provide an adequate level of data protection, establishes or confirms that all data recipients will provide an adequate level of protection for your personal data.

Retention Period

Generally, we retain your personal data for as long as needed by legislation, depending on the purpose and type of processing.

More specifically, your personal data will be retained for as long as necessary in order to review the content of your communication and respond to it (e.g., making an appointment without assigning a case). Once the purpose for which the data processing is achieved, we will either delete your personal data or anonymize your personal data, unless there are reasons to retain it by law.

In case you send voluntarily to us a job request, your personal data is deleted within one month of your job request receive if there is no relevant interest. In case of approval of your application for employment, you will be informed at the stage of assuming your duties about the way that we will process your personal data as “employer” or associate. If, in case of your job application rejection, you ask us to keep your CV details for the possibility of future collaboration, your personal data are retained for the time period you have given your consent.

Your Rights

You may exercise, as the case may be, the rights deriving from the applicable Greek Legislation and the GDPR which are as follows: a. the right of information (article 13), b. the right of access (article 15), c. the right to rectification (article 16), d. the right to erasure “right to be forgotten” (article 17), e. the right to restriction of processing (article 18), f. the right to data portability (to receive your personal data in a structured and commonly used format – article 20 where applicable) and g. the right to object (article 21) which applies to certain data processing activities In addition, as we require your explicit consent to process your personal data, you have the right to withdraw your consent at any time by contacting us by following the instructions below.

More specifically your rights are the following:

Right of access
You may contact us to explain to you if and which data is retained for you, as well as the way we process such data. You may also request a copy of your personal data which is retained for you.

Right to rectification
If you believe that your data is not accurate or needs to be updated, you have the right to obtain the rectification of inaccurate personal data and to have incomplete data completed.

Right to erasure
Under certain circumstances, e.g., personal data are no longer necessary, you withdraw consent, the data have been unlawfully processed, you have the right to obtain the erasure of personal data.

Right to restriction of processing
If you believe that your data is not accurate or their processing is unlawful or you think that does no longer needs your data or you have objections to automated processing, you have the right to obtain the restriction of processing.

Right to object
You have the right to object to processing your personal data on grounds relating to your situation, unless, among other reasons, there are compelling and legitimate grounds for the processing which override your interests, rights and freedoms. You also have the right to object when a decision concerning you is based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you (the law provides exceptions which apply).

Right to data portability
You have the right to receive the data concerning you in a structured, commonly used and machine-readable format, as well as the right to transmit that data to another entity (controller), indicated by you too.

If you have provided your consent with regard to specific collection, process and use of your personal data, you may withdraw that consent at any time. The previously mentioned withdrawal of consent applies only in the future.

You can find more information regarding your rights on the Hellenic Data Protection Authority’s (HDPA) website here.

In case you exercise any of your rights, we will take all appropriate measures available for the satisfaction of your request within thirty (30) days – with the possibility of extension according to the applicable law- following the receipt of the relevant request. We may either inform you on the acceptance of your request or on any objective grounds that hinder the processing of your request.

Right to lodge a complaint with the Authority
We inform you that you have the right to lodge a complaint with the HDPA for issues regarding the processing of your personal data. HDPA is located in Athens (1-3, Kifisias Avenue, 115 23). With regard to HDPA’s competency and the submission of a complaint, you may visit HDPA’s webpage (

Data Security

Considering the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing.

The Company applies throughout the data processing procedure, the appropriate technical, physical, and administrative security measures for the protection and security of the personal data from loss, misuse, damage or modification, unauthorized access and disclosure, in compliance with article 32 of the GDPR 679/2016, in order to ensure the appropriate security level against those risks. Those include, among others, as the case may be: a) application of encryption protocols b) the ability to ensure confidentiality (article 90 GDPR 679/2016), integrity, availability, and resilience of processing systems and services on an ongoing basis, c) the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident, d) a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing. Moreover, takes measures so as to ensure that any individual person acting under the authority of the data controller or of the processor, who has access to personal data, shall not process those data except on instructions from the data controller and limits access to your personal information to authorized employees.

How we Use Trackers (e.g., cookies)

The Company may collect identification details of Website’s users, using related technologies, such as cookies and other trackers. The Website uses Cookies.

Cookies are pieces of information, in the form of very small text, usually consisting of letters and numbers, which are stored in the browser used by the individual Customer/User (Chrome, Mozilla Firefox etc.), assisting us to make the Website work more efficiently.

Cookies do not in any way cause damage to users’ computers or files stored on them.

Information stored in cookies is used for identification purposes. In this way we manage to operate the Website in an efficient way for the service we offer. The Website uses Cookies to provide Clients/Users with information, to perform the services provided through it, and to improve the level of service provided.

Under no circumstances will the cookies contain personal information or information that will allow anyone to contact the Website’s visitors by phone, email, etc. Additionally, using cookies does not provide access to your computer’s documents or files.

Additionally, cookies help us evaluate the performance and traffic of our website, thus improving its presentation and content, according to the preferences of our visitors.