This policy explains how the accounting office Χατζάκης Αθανάσιος Ραφαήλ ("we") collects and processes personal data through the website https://mytaxconsultant.gr and the client portal, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.
1. Data controller
- Name: Χατζάκης Αθανάσιος Ραφαήλ
- Tax ID (AFM): 155824413
- Address: Ι. Μαρκάκη 3, 73100 Χανιά
- Email: info@mytaxconsultant.gr
- Phone: +30 694 565 4162
2. What data we process
- Website visitors: details you send through the contact form or appointment request (name, email, phone, message) and technical security data (IP address, device/browser type).
- Clients and portal users: identification and contact details, Tax ID, tax office, business details, tax, accounting, social security and payroll data, documents you upload or we make available to you, messages, appointments, invoicing orders and details of your own customers (invoice recipients), notification preferences, sign-in and document download history.
- We do not ask for special categories of data (e.g. health). If such data is contained in documents needed for the service (e.g. disability certificates for a tax deduction), we process it only for that purpose.
3. Purposes and legal basis
- Providing accounting, tax and advisory services — performance of a contract (Art. 6(1)(b) GDPR).
- Compliance with tax, accounting, social security and anti-money-laundering legislation — legal obligation (Art. 6(1)(c)).
- Replying to contact and appointment requests — pre-contractual steps / legitimate interest (Art. 6(1)(b) and (f)).
- Security of the website and accounts (sign-in logs, protection against attacks) — legitimate interest (Art. 6(1)(f) and Art. 32).
- Informational messages (email, SMS, Viber) that are not necessary for the service — consent (Art. 6(1)(a)), which you can withdraw at any time.
4. Tax ID lookups
When you enter a Tax ID in the invoicing order form, the public registry details may be looked up automatically with the Greek tax authority (AADE) or, for EU businesses, the European Commission's VIES system. AADE informs the holder of the Tax ID about who performed the lookup.
5. Recipients
Your data is accessible only to authorised staff of the office. It is shared only where necessary:
- with public authorities (AADE, e-EFKA, ERGANI, GEMI etc.) to perform the services and comply with the law;
- with the website hosting provider and the email delivery provider;
- with the SMS/Viber provider, only if the service is enabled and you have consented;
- with e-invoicing providers, where required to issue your documents.
Data processing agreements (Art. 28 GDPR) are in place with providers. We do not sell your data or use it for advertising.
6. Transfers outside the EU
We do not transfer data outside the European Economic Area. If this becomes necessary in the future (e.g. through a provider), it will only happen with the appropriate GDPR safeguards.
7. Retention
- Client documents and data: for the duration of our cooperation and then for 10 years or as long as tax legislation requires.
- Unused user accounts: deleted after 10 years of inactivity, unless there is a legal obligation to keep them.
- Security logs (sign-ins, IP addresses): 180 days.
- Contact form messages that did not lead to a cooperation: up to 2 years.
8. Security
We use an encrypted connection (HTTPS), encryption of your documents at rest, two-step verification for office users, automatic sign-out, logging of every document download, protection against attacks and regular checks of the website files. No measure is absolute; in the event of a breach we will notify the authority and you as required by law.
9. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. From your portal account you can:
- download your data (export);
- change your notification preferences;
- request deletion of your account.
For any other request, write to info@mytaxconsultant.gr. We reply within one month. Erasure does not cover data we are legally required to keep.
If you believe the processing infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifisias Ave, 115 23 Athens).
10. Changes
We may update this policy. The date of the last update is shown at the top of the page. We will inform portal users of significant changes.
Last updated: 28/10/2026