EPIRUS REAL ESTATE

Article 1 — Identity and Contact Details of the Data Controller

Epirus Real Estate ("we", "us", "our") is the Data Controller responsible for your personal data as defined under Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation — "GDPR") and Greek Law 4624/2019.

We are a licensed real estate agency operating in the Epirus region of Greece, covering Ioannina, Preveza, Arta, and Igoumenitsa.

For all data protection matters, you may contact us directly:

• Email: tatosxristos@gmail.com
• Phone: +30 694 486 6469
• Address: Parga, Préveza, Greece, 48062

Article 2 — Definitions

For the purposes of this Privacy Policy, the following definitions apply in accordance with Article 4 of the GDPR:

• Personal Data: means any information relating to an identified or identifiable natural person ("data subject").
• Processing: means any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• Data Controller: means the natural or legal person who determines the purposes and means of processing personal data.
• Data Processor: means a natural or legal person who processes data on behalf of the controller.
• Consent: means any freely given, specific, informed, and unambiguous indication of the data subject's wishes.
• Legitimate Interests: means processing necessary for legitimate interests pursued by Epirus Real Estate, provided those interests are not overridden by fundamental rights and freedoms.

Article 3 — Legal Basis for Processing (Article 6 GDPR)

We only process your personal data when we have a valid legal basis to do so:

3.1 Contractual Necessity (Article 6(1)(b) GDPR)

Processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract to which you are a party. This applies when you request property viewings, receive property listings, or engage us in a real estate transaction.

3.2 Legal Obligation (Article 6(1)(c) GDPR)

Processing is necessary to comply with Greek or EU law, including retention of transaction records under Greek tax law and anti-money laundering obligations.

3.3 Legitimate Interests (Article 6(1)(f) GDPR)

Processing is necessary for responding to enquiries, improving our website, preventing fraud, and maintaining system security, where these interests are not overridden by your rights.

3.4 Consent (Article 6(1)(a) GDPR)

Where we rely on consent, such as for marketing communications or non-essential cookies, you may withdraw consent at any time by emailing tatosxristos@gmail.com.

Article 4 — Categories of Personal Data We Collect

We collect data you provide directly, including your name, email, telephone number, property preferences, budget range, enquiry content, and identity documents where required for a formal transaction. We may also collect IP address, browser and device information, pages visited, cookie identifiers, and basic profile data from third parties such as Facebook. We do not collect or process special categories of personal data as defined under Article 9 GDPR.

Article 5 — Purposes of Processing

Article 6 — Data Retention (Article 5(1)(e) GDPR)

Personal data is kept only for as long as necessary or as required by law: general enquiry data for 2 years; engagement data for 1 year after engagement; transaction records for 10 years; anti-money laundering records for 5 years; analytics data for 26 months; marketing consent records until withdrawal plus 1 year; and cookie consent logs for 1 year. At the end of each period, data is securely deleted or anonymised.

Article 7 — Your Rights as a Data Subject (Articles 15–22 GDPR)

You may exercise free of charge your rights of access, rectification, erasure, restriction of processing, data portability, and objection. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

How to exercise your rights

Submit a request by emailing tatosxristos@gmail.com or calling +30 694 486 6469 with the subject line "Data Subject Request." We will respond within 30 calendar days and may request proof of identity.

Article 8 — Recipients and Transfers of Personal Data

Personal data is accessible only to authorised team members. Where necessary, we may share it with notaries, lawyers, property owners, Google LLC, Meta Platforms Ireland Ltd, Greek tax authorities, law enforcement, or courts. We do not sell, rent, or trade personal data. Where data is transferred outside the EEA, appropriate GDPR safeguards, including Standard Contractual Clauses, are used.

Article 9 — Cookie Policy

Cookies are small text files placed on your device to remember preferences and understand website use. We may use _ga and _gid for analytics (2 years / 24 hours), _fbp for Facebook marketing (90 days), and cookieconsent to remember your choice (1 year). You may accept, refuse, or customise cookies and change your preferences through your browser settings.

Article 10 — Data Security (Article 32 GDPR)

We implement HTTPS encryption, password-protected internal systems, restricted need-to-know access, and regular security reviews. Where required, we will notify the HDPA of a reportable breach within 72 hours and notify you without undue delay.

Article 11 — Complaints and Supervisory Authority

You may complain to the Hellenic Data Protection Authority (HDPA), www.dpa.gr, Kifissias 1-3, 115 23 Athens, Greece, telephone +30 210 6475600, email contact@dpa.gr. Please contact us first at tatosxristos@gmail.com, +30 694 486 6469, Parga, Préveza, Greece, 48062.

Article 12 — Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, technology, or legal requirements. We will update the version number and date and notify you directly of significant changes where appropriate.

Article 13 — Governing Law

This policy is governed by the laws of Greece and Regulation (EU) 2016/679 (GDPR). Disputes are subject to the competent courts of Preveza, Greece.

Epirus Real Estate
Parga, Préveza, Greece, 48062
tatosxristos@gmail.com | +30 694 486 6469

This policy complies with GDPR (EU) 2016/679 and Greek Law 4624/2019.