1.Who we are
The data controller for your information is ΚΑΣΤΕΛΛΙΑΝΑΚΗΣ ΛΕΩΝΙΔΑΣ ('Heraklion Properties', 'we', 'us'). For any matter regarding your data, please contact us using the details below.
- Company Name
- ΚΑΣΤΕΛΛΙΑΝΑΚΗΣ ΛΕΩΝΙΔΑΣ
- Registered Office Address
- ΣΕΛΗΝΗΣ 0, 71500, ΗΡΑΚΛΕΙΟ
- GEMI Number
- 193965027000
- VAT Number
- 163364441
- Phone
- +306970150848
2.At a glance
- We only collect what you send us via the contact form or directly by email, phone, or WhatsApp.
- We use your details only to respond to you and discuss a potential partnership.
- We do not sell your data and do not use it for advertising.
- The website does not use tracking or advertising cookies and does not track you.
3.What data we collect and why
- Contact form: full name, email, phone, property type, and your message. We use these to respond to your request and, if you wish, to make a partnership proposal. Legal basis: taking steps prior to entering into a contract at your request and our legitimate interest in responding to those who contact us (Article 6(1)(b) and (f) GDPR).
- Email, phone, or WhatsApp: contact details and communication content, for the same purpose and with the same legal basis.
- Technical data: when you visit the website, the hosting provider temporarily logs your IP address and browser details so the website operates securely. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
- Traffic statistics: we aggregately measure which pages are read, from which country, and on what device, using Vercel Web Analytics, as well as how fast pages load using Vercel Speed Insights, without cookies and without identifying you personally. Legal basis: our legitimate interest in improving the website.
Providing your details is optional, but without them, we cannot respond to your message. We do not make automated decisions and do not create profiles.
4.Who we share data with
We do not sell or rent your data. We share it only with providers who help us operate the website and our communications, and who process it on our behalf:
- Vercel Inc. (USA): website hosting, traffic statistics, and speed measurement.
- Cloudflare, Inc. (USA): security check (Turnstile) on the contact form to protect against spam and automated bots. For the check, it processes your IP address and technical browser details.
- Papaki (Greece): our email provider, through which contact form messages and your emails are sent and received.
We share data with public authorities only when required by law.
5.Transfers outside the EU
Certain providers process data outside the European Union, primarily in the USA. The transfer takes place with the safeguards provided by the GDPR: the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
6.How long we keep data
- Messages and contact details: for 24 months from our last communication. If we start a partnership, we keep them for the duration of it and for as long as required by law after it ends (e.g., for tax purposes).
- Technical logs of the hosting provider: from a few hours up to a few days.
- Traffic statistics: these are not linked to you. The temporary visit identifier is deleted within 24 hours.
8.Links to other services
The website contains links to WhatsApp, Google Maps, Facebook, and Instagram. When you open them, you are transferred to those services, which apply their own privacy and cookie policies.
9.Your rights
Under the GDPR (Articles 15–22), you have the right to:
- access your data and receive a copy of it
- correct inaccurate or incomplete details
- request deletion of your data
- restrict the processing
- object to processing based on our legitimate interest
- data portability, meaning receiving your data in a common, readable format
To exercise any right, please email us at info@heraklionproperties.gr.
10.Right to complain
If you believe the processing of your data violates the law, you can file a complaint with the Hellenic Data Protection Authority (Kifissias 1-3, 115 23 Athens, tel. +30 210 6475600, www.dpa.gr). We would, however, appreciate it if you contact us first so we can resolve it together.
11.Security
The website operates only via an encrypted connection (HTTPS), and only those on our team who need to respond to you have access to your messages. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.
12.Minors
The website is intended for property owners and not for minors. We do not knowingly collect data from children.
13.Changes to the policy
We may update this policy when the way the website operates or legislation changes. The date of the last update is displayed at the top of the page.