Soteriou & Mathaiou Law Office
Last updated: 10/08/2026
1. Introduction
Soteriou & Mathaiou Law Office (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (soterioumathaioulaw.com) or otherwise interact with us, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Cyprus data protection law.
Data Controller:
Soteriou & Mathaiou Law Office
Stasandrou 9, Office 103, 1060 Nicosia, Cyprus
Email: info@soterioumathaioulaw.com
Phone: +357 99149130
2. What Personal Data We Collect
Depending on how you interact with our website, we may collect:
- Contact form submissions: name, email address, phone number, and the content of your message
- Communications: information you provide when contacting us by phone, email, or WhatsApp
- Technical data: IP address, browser type, device information, and pages visited, collected automatically through cookies and similar technologies
- Google Reviews: if you leave a review of our firm on Google, this may be publicly displayed on our website via a third-party review widget
We do not knowingly collect personal data from individuals under the age of 18 without appropriate consent.
3. How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiries and provide legal consultation
- To communicate with you regarding legal services you have requested
- To maintain client relationships and case records, where you become a client
- To improve our website and understand how visitors use it
- To comply with our legal and regulatory obligations, including obligations under the Cyprus Bar Association’s rules of professional conduct
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Consent — where you have voluntarily provided your data through our contact form or by contacting us directly
- Contract — where processing is necessary to provide legal services you have requested
- Legal obligation — where we are required to retain certain records under Cyprus law or professional conduct rules
- Legitimate interests — for website analytics and improving our services, provided this does not override your fundamental rights
5. Confidentiality and Legal Professional Privilege
As a law firm, any information shared with us in the context of seeking legal advice is treated as strictly confidential and, where applicable, subject to legal professional privilege, in accordance with Cyprus law and the rules of professional conduct of the Cyprus Bar Association.
6. Data Sharing
We do not sell your personal data. We may share your information with:
- Third-party service providers who support our website and business operations (e.g., website hosting, email services)
- Professional advisors, courts, or regulatory authorities, where necessary to provide legal services or comply with legal obligations
- Google (for the display of reviews via embedded widgets) and other analytics or communication tools used on our website
We do not transfer personal data outside the European Economic Area (EEA) unless appropriate safeguards are in place in accordance with GDPR.
7. Cookies
Our website may use cookies and similar technologies to improve your browsing experience, analyse website traffic, and enable certain features (such as embedded review widgets). For more details, please see our [Cookie Policy].
8. Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this policy, including to comply with legal, accounting, or reporting requirements. Client file records are retained in accordance with the retention periods required under Cyprus law and professional conduct rules.
9. Your Rights Under GDPR
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data, subject to our legal obligations to retain certain records
- Restrict or object to certain processing of your data
- Data portability, where technically feasible
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us at info@soterioumathaioulaw.com.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus if you believe your data protection rights have been violated.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last updated.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Soteriou & Mathaiou Law Office
Stasandrou 9, Office 103, 1060 Nicosia, Cyprus
Email: info@soterioumathaioulaw.com
Phone: +357 99149130 / +357 96758478