This notice explains what happens to personal data in connection with elahome.gr. It is written to the General Data Protection Regulation (EU) 2016/679 and Greek data protection law.
The short version: the website itself asks you for nothing. There is no contact form, no account, no login, no payment and no newsletter. We only hold personal data if you choose to write to us, and — once you accept it — whatever the analytics tools measure.
Who is responsible
The controller is [legal entity name], registration or VAT number [registration / VAT number], at [registered address]. For anything about your data, write to [email protected] and mark it for the attention of Viron Labaditis.
We are a very small operation and have not appointed a Data Protection Officer, which at this scale the GDPR does not require.
What we hold, and how we get it
- Your enquiry. If you email, message us on WhatsApp or telephone, we hold whatever you send: your name, your email address or number, and anything you choose to tell us about what you are looking for.
- Measurement data, only after you accept it. Google Analytics records pseudonymous information about the visit — pages seen, roughly how long, approximate location derived from your IP address, device type, browser and where you arrived from. It does not tell us who you are.
- Technical logs. Cloudflare, which hosts and delivers the site, processes technical request data such as IP address and user agent in order to serve pages and protect the site from abuse.
We do not buy lists, we do not profile you, and we make no automated decisions about you.
Why we hold it, and on what legal basis
- To answer you and take the conversation forward — sending the information you ask for, arranging a call or a meeting, and following up. Legal basis: steps taken at your request before entering a contract (article 6(1)(b)), and our legitimate interest in replying to people who contact us (article 6(1)(f)).
- To understand how the site is used and improve it. Legal basis: your consent (article 6(1)(a)). Analytics never runs without it.
- To keep the site up and secure. Legal basis: our legitimate interest in a working, protected website (article 6(1)(f)).
- To meet legal obligations, for example tax and accounting records once a reservation or sale goes ahead. Legal basis: article 6(1)(c).
Who else sees it
We do not sell your data and we do not share it for anyone else’s marketing. It reaches these parties only because they provide the tools we use:
- Google — Analytics and Tag Manager, once you accept them. Google Search Console will also be verified for this site; it reports aggregate search statistics and nothing about individuals.
- Cloudflare — hosting, DNS and content delivery.
- Our email provider — because your message is an email and has to be stored somewhere.
- Meta — if you choose to contact us through WhatsApp, or interact with us on Instagram. Those services run under Meta’s own terms and privacy policy, not ours.
- Cittago — built the site and, where we ask it to, may carry out technical work on it or look at analytics reports on our behalf.
Some of these providers operate outside the European Economic Area, so your data may be transferred there. Such transfers rely on the safeguards each provider offers in its own data processing terms. We are confirming the exact mechanism with each of them and will name it here once verified.
How long we keep it
- Enquiries — for as long as the conversation is live, and for a reasonable period afterwards in case you come back to us. Tell us the enquiry is closed, or ask us to delete it, and we will — unless we are required to keep part of it, for example once a reservation or sale has gone ahead.
- Analytics — for the retention period configured in the Google Analytics property, after which Google deletes the user-level records.
- Contract and accounting records — for as long as Greek law requires.
Your rights
Under the GDPR you have the right to:
- ask what we hold about you, and get a copy;
- have inaccurate data corrected;
- have data erased, where we have no overriding reason or legal duty to keep it;
- restrict or object to processing we base on legitimate interest;
- receive data you gave us in a portable format;
- withdraw your consent to analytics at any time — use Cookie settings in the footer of any page. It is as easy to withdraw as it was to give, and withdrawing does not affect what happened before.
To exercise any of these, write to [email protected]. We will reply within one month.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Hellenic Data Protection Authority, the supervisory authority for Greece (dpa.gr), or to the authority in the EU country where you live.
Children
This site is aimed at adults considering a property purchase. We do not knowingly collect data about children. If you believe a child has sent us personal data, tell us and we will delete it.
Security
The site is static and holds no database of visitors, which removes most of the risk. Your enquiry lives in an email account and, if you used it, in WhatsApp. Access to those accounts is limited to the people who need it. No system is perfectly secure, and we will not pretend otherwise.
Changes
We will update this notice when what we do changes — in particular before analytics goes live, and if we ever add advertising or a form. The current version is always the one on this page.
Last updated: [to be dated on publication].
We will change this notice when the site changes. The version on this page is the one that applies to your visit.