Privacy Policy

Last updated: July 30, 2026

Protecting the personal data of our visitors and clients is a priority for us. This Privacy Policy explains what data we collect through the pistopoiimenosektimitis.gr website, for what purpose, on what legal basis, and what your rights are.

1. Data Controller

For any matter related to the processing of your personal data, you may contact us using the above details.

2. What Data We Collect

We collect the following categories of data:

• Contact form data: full name, contact phone number, email address (optional), property type and any message/comments you send us.
• Technical browsing data: IP address, browser/device type and version, pages visited — see details in our Cookie Policy.
• Assignment data: should you proceed with a property valuation engagement, you may provide us with additional information (e.g. identification details, title deeds, property details) in the context of carrying out that specific engagement — such data is collected outside the website and is governed by our agreement.

3. Purposes of Processing

We use your data to: (a) respond to your request via the contact form, (b) provide you with information about our services, (c) prepare a quote or undertake a property valuation at your request, (d) fulfil our statutory tax/accounting obligations.

4. Legal Basis for Processing

Processing is based on: your consent (Article 6(1)(a) GDPR) when you complete the contact form, taking steps prior to entering into a contract or performance of a contract (Article 6(1)(b) GDPR) when you proceed with a valuation engagement, and compliance with a legal obligation (Article 6(1)(c) GDPR) for tax/accounting purposes.

5. Data Retention Period

Data submitted via the contact form is retained for as long as necessary to process your request and for up to 12 months from our last communication, unless a business relationship is established, in which case the statutory retention periods for accounting/tax records apply (at least 5 years, in accordance with applicable tax legislation).

6. Data Recipients

Your data is not sold, rented or commercially disclosed to third parties. It may be accessed, to the extent necessary, by: company personnel, as well as external associates/service providers who support us technically (e.g. website hosting provider, email/contact form service provider), who act as Data Processors, bound by corresponding contractual confidentiality obligations. In addition, the website uses Google Analytics, Google Tag Manager, and Meta (Facebook) Pixel for traffic analytics and advertising performance measurement; in this context, navigation data may be transferred to Google LLC and Meta Platforms, Inc., in accordance with the privacy policies of these providers. This processing takes place only after your consent via the website\u2019s cookie banner.

7. Transfers of Data Outside the EU/EEA

To the extent that third-party services based or hosted outside the European Union/EEA are used (e.g. software/email providers), any data transfer takes place only to providers that comply with GDPR safeguards (e.g. Standard Contractual Clauses). Specifically, Google LLC and Meta Platforms, Inc. (USA), used for Analytics/Tag Manager and Facebook Pixel respectively, apply Standard Contractual Clauses and/or participate in the EU-U.S. Data Privacy Framework for lawful data transfers outside the EU/EEA.

8. Your Rights

Under the GDPR, you have the right to: access your data, rectify inaccurate data, erasure ("right to be forgotten"), restriction of processing, data portability, object to processing, and withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal. To exercise your rights, contact us using the details in Section 1.

9. Right to Lodge a Complaint

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23, Athens, Greece, tel.: +30 210 6475600, www.dpa.gr).

10. Data Security

We take appropriate technical and organisational measures (e.g. encrypted HTTPS connection, restricted access) to protect your data from unauthorised access, loss or misuse.

11. Minors

The Website is not directed at minors under the age of 16, and we do not knowingly collect data from minors.

12. Cookies

For information regarding the cookies used by the Website, please refer to our Cookie Policy.

13. Amendments to this Policy

This Privacy Policy may be revised periodically. Any amendment will be posted on this page with an updated revision date.