Privacy Policy
Privacy Policy
Last updated: 12 August 2026
Aegean Properties (“we”, “us”, “our”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and Greek Law 3471/2006 on electronic communications.
1. Data controller
Aegean Properties
- Registered address: Lesvonaktos 18, Mytilene 811 00, Lesvos, Greece
- Email: info@aegeanproperties.gr
- Telephone: +30 693 875 5412
We have not appointed a Data Protection Officer, as the conditions of Article 37 GDPR do not apply to us. For any matter relating to your personal data, please contact us at the details above.
2. What personal data we collect
2.1 Data you give us
| Category | Examples |
|---|---|
| Identity | First name, surname |
| Contact details | Email address, telephone number, country of residence |
| Enquiry content | The property you are interested in, your requirements (type, area, budget), the message you send us, your preferred contact method and language |
| Viewing and appointment data | Dates, times and location of viewings you arrange with us |
2.2 Data we collect automatically
| Category | Examples |
|---|---|
| Technical data | IP address, browser type and version, operating system, device type, language settings |
| Security data | Login attempts and blocked requests recorded by our firewall and security systems |
The Site does not use analytics tools, advertising trackers or profiling cookies. We do not build visitor profiles and we do not track your browsing behaviour.
2.3 Data we collect if you become a client
If you proceed to an engagement (brokerage, valuation, engineering services or transaction support) we additionally process: identity document details, tax registration number (ΑΦΜ), address, property ownership and title deed data, bank details for invoicing, and contract and invoicing records. This data is not collected through the Site.
2.4 Special categories of data
We do not seek to collect special categories of personal data (health, religious or political beliefs, etc.). Please do not include such information in your messages to us.
2.5 Children’s data
The Site is not addressed to minors and we do not knowingly collect data from persons under 18.
3. How we collect data
- When you complete a contact or enquiry form on the Site
- When you email us, call us or contact us via social media
- From our security infrastructure (firewall, CDN) for the protection of the Site
- From third parties, where a property owner or a collaborating professional gives us your details in the context of a transaction
4. Purposes of processing and legal bases
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Responding to your enquiry and providing information about properties | Art. 6(1)(b) — steps taken at your request prior to entering into a contract |
| Arranging and conducting viewings | Art. 6(1)(b) |
| Performing a brokerage, valuation or engineering services contract | Art. 6(1)(b) — performance of a contract |
| Maintaining a record of the properties and requirements you are interested in, so that we can suggest matching properties | Art. 6(1)(f) — our legitimate interest in serving prospective clients effectively |
| Sending newsletters or commercial communications about new listings | Art. 6(1)(a) — your consent; or Art. 11(3) of Law 3471/2006 (soft opt-in) for existing clients regarding similar services, with an opt-out in every message |
| Complying with anti-money-laundering obligations (customer due diligence, record keeping, reporting) | Art. 6(1)(c) — legal obligation under Law 4557/2018 |
| Complying with tax and accounting obligations | Art. 6(1)(c) — legal obligation |
| Security of the Site, prevention of abuse, fraud and attacks | Art. 6(1)(f) — legitimate interest in maintaining the security of our systems |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) — legitimate interest |
Where we rely on legitimate interest, we have carried out a balancing exercise and consider that our interest does not override your rights and freedoms. You may request further information on this assessment at any time.
5. Recipients of your data
We do not sell your personal data and we do not share it with advertising networks. We may disclose it to:
- Our personnel and in-house professionals (engineers, energy inspectors, valuers, legal advisers) to the extent necessary for their duties.
- Property owners, where you request information about, or a viewing of, a specific property. Only the data necessary to progress your enquiry is disclosed.
- Collaborating professionals (notaries, lawyers, accountants, surveyors) where necessary for a transaction you have instructed us on.
- Service providers acting as processors on our behalf, bound by a data processing agreement under Article 28 GDPR. These fall into the following categories:
- website hosting provider
- content delivery network, DNS and security services provider (Cloudflare, Inc.)
- email service provider
- accounting and invoicing software provider
- Public authorities (tax authorities, the Hellenic Anti-Money Laundering Authority, judicial and law enforcement authorities) where required by law.
- Legal and professional advisers, in the context of a legal claim.
The map on our Site. The map on the contact section is built with the open-source Leaflet library. Map tiles are loaded from CARTO’s servers, using OpenStreetMap data. When tiles load, your IP address is transmitted to the tile provider, as happens with any external web asset. No cookies or other storage technologies are placed on your device.
6. International transfers
Our servers and our principal processors are located within the European Economic Area. Certain infrastructure providers (in particular Cloudflare) may process technical data outside the EEA, including in the United States. Such transfers take place on the basis of the European Commission’s adequacy decision for the EU–US Data Privacy Framework, where the recipient is certified under it, or otherwise on the basis of the European Commission’s Standard Contractual Clauses together with supplementary measures where necessary.
You may request a copy of the relevant safeguards by contacting us.
7. Retention periods
| Data | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | 2 years from last contact |
| Client files (brokerage, valuation, engineering) | 5 years from the end of the business relationship, or 20 years where necessary for the defence of legal claims relating to real property |
| Anti-money-laundering records (Law 4557/2018) | 5 years from the end of the business relationship or the occasional transaction |
| Accounting and tax records | As required by tax legislation (currently 5 years, extended where an audit is pending) |
| Newsletter subscriptions | Until you withdraw your consent |
| Server and security logs | Up to 12 months |
On expiry of the relevant period, data is deleted or irreversibly anonymised.
8. Security
We apply appropriate technical and organisational measures, including: encrypted transmission over HTTPS/TLS, a web application firewall and protection against automated attacks, restricted and role-based access to personal data, regular software updates, encrypted backups, and confidentiality undertakings from personnel and collaborators.
No system is entirely secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the Hellenic Data Protection Authority in accordance with Articles 33 and 34 GDPR.
9. Cookies
The Site uses strictly necessary cookies only. These are exempt from the prior consent requirement under Article 4(5) of Law 3471/2006 and Recommendations 1/2020 and 2/2020 of the Hellenic Data Protection Authority.
| Cookie | Source | Purpose | Duration |
|---|---|---|---|
pll_language | Our site (Polylang) | Remembers the language you selected | 1 year |
__cf_bm | Cloudflare | Distinguishes human visitors from automated bots | 30 minutes |
cf_clearance | Cloudflare | Confirms a successful security check | Up to 1 year |
_lscache_vary | Our site (LiteSpeed) | Serves the correct cached version of a page | Session |
We do not use analytics, advertising, targeting or social media cookies. Because no non-essential cookies are placed, no consent banner is displayed. If such technologies are added in future, your consent will be requested beforehand and this Policy will be updated.
You may block or delete cookies through your browser settings. Blocking strictly necessary cookies may affect the operation of the Site.
10. Your rights
Under the GDPR you have the right to:
- Access your personal data and obtain a copy
- Rectification of inaccurate or incomplete data
- Erasure (“right to be forgotten”), where the conditions of Article 17 GDPR are met
- Restriction of processing in the cases set out in Article 18 GDPR
- Data portability for data processed on the basis of consent or contract, by automated means
- Object to processing based on legitimate interest, and to object at any time to processing for direct marketing purposes
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal
- Not be subject to a decision based solely on automated processing producing legal or similarly significant effects — we do not carry out such processing
To exercise these rights, contact us at info@aegeanproperties.gr. We will respond within one month, which may be extended by two further months for complex requests. We may ask you to verify your identity. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
11. Complaints
If you consider that your rights have been infringed, you may lodge a complaint with:
Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) Kifissias Avenue 1-3, 115 23 Athens, Greece Telephone: +30 210 6475600 Website: www.dpa.gr
We would appreciate the opportunity to address your concerns first, so please consider contacting us before submitting a complaint.
12. Changes to this Policy
We may update this Policy to reflect changes in our practices or in the law. The “Last updated” date at the top indicates the current version. Where changes are material, we will notify you by a prominent notice on the Site or, where appropriate, by email.
13. Contact
Aegean Properties Lesvonaktos 18, Mytilene 811 00, Lesvos, Greece Email: info@aegeanproperties.gr Telephone: +30 693 875 5412