Last updated: 12 November 2026.

Main changes: We updated the description of hosting and how you can access the office’s public reviews.

1. Who we are

The controller for the website ck-taxservices.gr is CK ACCOUNTING & TAX SERVICES Ε.Ε., trading as CK Accounting & Tax Services, General Commercial Registry (GEMI) number 170898603000, with its registered office at 42 Adrianeiou Street, Athens, postcode 115 25.

For personal data matters, you can contact [email protected] or write to the address above. Office telephone: 210 677 0004.

This notice covers browsing the website and your initial contact with us. Engaging us for accounting or tax work is a separate stage and requires a separate notice about the necessary documentation, recipients and retention of your client file.

2. When you contact us

The form asks for your name and email. You may also provide a telephone number and message. Along with your enquiry, we receive your acknowledgement that you have read the policy. When you contact us by email or telephone, we receive the information you share with us. Online submission involves processing technical details, such as your IP address and the referring page, to manage and protect the form.

We use this information to consider your enquiry and respond. If you ask us to take steps before entering into a contract with you, processing is based on the pre-contractual steps you request (Article 6(1)(b) GDPR). For general enquiries and business correspondence, the basis is our legitimate interest in managing communications with prospective clients and business representatives, under Article 6(1)(f).

The form cannot be submitted without a name, a valid email address and selection of the ‘I have read the Privacy policy’ checkbox. This box is initially unchecked and confirms that you have been informed; it is not consent to every type of processing. Without a sufficient description, we may be unable to provide a meaningful response. Submitting the form does not add you to a marketing list.

Do not use the form to send TAXISnet passwords, card details, tax documents or sensitive personal data. If documentation is needed, we will agree on an appropriate way to send it. Also avoid providing third-party information that is unnecessary for your initial enquiry.

3. Browsing, search and security

To display the website, the hosting infrastructure receives technical data, such as your IP address, access time, requested page address and browser details. These may be included in logs used for operation, debugging and responding to malicious requests. The basis is our legitimate interest in secure and reliable operation, under Article 6(1)(f) GDPR.

Search uses the term you enter and includes it in the results page address. The term may therefore remain in your browser history or technical logs. Do not search using confidential information. The forms also have aggregate view counts by page and day.

There are no visitor accounts or client portal. We do not use the website to make decisions based solely on automated processing that have legal or similarly significant effects on you, nor do we automatically assess tax eligibility.

4. Public reviews and articles

The website links to the office’s Google Business Profile, where you can read public reviews. Articles may include information about authors or people mentioned in the publication. The relevant source is identified in the content.

Publishing these articles serves our legitimate interest in presenting the office’s professional activities, taking account of individuals’ rights, under Article 6(1)(f). If published information concerns you, you can request a correction or object to its use by emailing us. Information being public does not remove your rights.

5. Who may have access

Enquiries are accessible to the relevant members of the office. Providers of hosting, technical support and email services are involved in operating the website and communications to the extent required for their services. Messages may be retained in the form management system and business correspondence.

When you open the map or visit its services, Google also processes information under its own privacy policy. Article publishers and social networks are independent destinations when you follow their links. We do not send them form enquiries for this purpose. Information may also be disclosed to competent authorities where a specific legal obligation applies.

6. Cookies and the optional map

Cookies and local storage (localStorage) retain information in your browser. Some uses support functions you request, while others require prior consent. Simply browsing does not constitute consent to optional functions.

Language: the Polylang feature’s pll_language cookie may remember the website language. Its default lifetime is one year.
WordPress administration: cookies such as wordpress_test_cookie, wordpress_logged_in_* and wp-settings-* support administrator login and preferences. They are not all set for every ordinary visitor. The test cookie lasts for the session, while settings cookies may last for one year. Login duration depends on the remember-me choice.
Map choice: our website saves ck_map_consent in localStorage when you activate the map. It contains the activation choice, its version and the dates it was recorded and expires. It is valid for 180 days so that we can remember your choice. Visits do not renew this period.
Google Maps: when the interactive map loads, your browser connects to Google and sends details such as your IP address. Google cookies may be used, depending on your settings and whether you are signed in. See Google’s cookie information.

Before loading, a locally stored image is shown without connecting to Google for the map. You activate it by tapping or deliberately dragging the image horizontally, or by pressing Enter/Space on your keyboard. This action opens the connection to Google. Vertical scrolling does not record a new activation choice. This optional connection requires consent under Article 6(1)(a) GDPR and the applicable cookie requirements.

With a valid saved choice, the map loads automatically on subsequent visits only when the contact section appears on screen. A new choice is required after expiry. If your browser does not allow storage, activation applies only to the current page. Selecting ‘Withdraw Google Maps consent’ deletes the saved choice, removes the interactive map and restores the image. This does not delete data or cookies Google has already received. Our address remains available without activation.

You can control and delete cookies through your browser; blocking necessary cookies may affect the corresponding functions.

7. How long data is retained

For contact enquiries, the criteria are completion of the response, any outstanding follow-up you have requested and the need to document a particular transaction or claim. Initial contact does not in itself justify indefinite retention. If we begin working together, the necessary information becomes part of the relevant professional file, subject to separate rules.

For technical records, the criteria are investigating incidents and resolving problems. For public content, we consider whether it remains current and accurate, and any request for correction or removal.

8. Transfers outside the EEA

Where personal data is transferred outside the European Economic Area in connection with the above services, the transfer is permitted only in accordance with GDPR requirements, such as a valid adequacy decision or appropriate safeguards. For information about recipients, processing countries and safeguards relating to your data, and how to obtain a copy of those safeguards, please email us.

9. Your rights

You may request access and rectification and, where the legal conditions are met, erasure, restriction and portability. Portability concerns data you have provided where automated processing is based on consent or a contract. The right to erasure is not absolute, particularly where retention is required by law or for legal claims.

You may object to processing based on legitimate interests on grounds relating to your particular situation. Continuing such processing then requires compelling legitimate grounds that override your interests, or grounds relating to legal claims. Where consent is used, you may withdraw it without affecting the lawfulness of earlier processing.

Send your request to [email protected]. We respond without undue delay and within one month of receiving your request. If an extension is needed because of the complexity or number of requests, we will inform you within the first month, explaining the reasons, of an extension of up to two further months. Requests are generally free of charge. If there are reasonable doubts about your identity, we may request only the additional information necessary.

You have the right to complain to the Hellenic Data Protection Authority or another competent supervisory authority. The link leads to the Authority’s instructions for submitting a complaint. For a complaint about failure to fulfil a right, the Authority asks you to exercise that right with us first. For other cases, follow the Authority’s instructions.

10. Protection and updates

The forms include validation checks and protection against automated spam submissions. No measure guarantees absolute security. The website is intended for people seeking professional services and has no age-verification mechanism.

The policy will be updated when functions or processing practices change materially. The date and main changes appear at the beginning so that you can see what has changed.