Privacy Policy

1. Overview

Ktimatoemporiki Real Estate ("we", "us", "our") processes your personal data under the EU General Data Protection Regulation (GDPR) and Greek national data protection law. This policy explains what data we collect, how we use it, who we share it with, and what rights you have.

2. Data we collect

We collect personal data from the following sources:

• Information you submit directly through our forms (enquiries, property assignment, valuation requests, contact)
• Documents and information shared during property transactions
• Communications with us (telephone, email, messaging platforms)
• Third-party providers — credit reporting bodies, other credit providers or authorized agencies
• Publicly available data accessed through authorized third parties
• For corporate clients: information from your employer or representatives

3. Why we use your data

We process personal data on these legal grounds:

1. Contractual necessity — executing the real estate or related services you have requested.
2. Legitimate interests — running our business, communicating with clients, improving our services.
3. Legal obligations — compliance with Greek and EU regulations, including anti-money-laundering law.
4. Fraud and financial crime prevention.
5. Litigation, disputes and legal defense.
6. Regulatory reporting to national and international bodies where required.

4. Communications monitoring

We may monitor verbal and electronic communications (telephone, fax, sms, instant messaging, email) for legal, regulatory and quality assurance purposes. Monitoring may use automated tools and random review of communications.

5. Disclosure

We do not sell your personal data. We may share data with:

• Service providers and vendors who support our operations
• Settlement agents, banks, clearing houses and other transaction parties
• Credit reference and fraud prevention agencies
• Regulatory and law-enforcement bodies, where legally required
• Prospective business buyers or sellers in the context of a corporate transaction
• Any party you have explicitly authorized

6. How we protect your data

• Physical and technical safeguards on systems holding personal data
• Information security oversight at corporate level
• Classification of information resources by sensitivity
• User authentication and access limitations on a need-to-know basis
• Security standards required of all third-party vendors

7. Data retention

We retain personal data as long as necessary to meet legal, regulatory and business requirements. Extended retention may apply during litigation, investigations or regulatory proceedings.

8. Marketing communications

We may contact you about products or services we believe are relevant. Where required by law, we will obtain your consent first. You can opt out at any time by emailing info@ktimatoemporiki.gr.

9. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request rectification of inaccurate data
• Request erasure of your data
• Restrict the processing of your data
• Object to processing
• Receive your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, email info@ktimatoemporiki.gr.

10. Cookies

Our website uses cookies for functionality and analytics. See our Cookies Policy for details.

11. Policy updates

We may modify this policy from time to time. Updates are noted by a revised "last updated" date on this page.

12. Contact

For privacy-related enquiries, contact our Data Protection Office:

Email: info@ktimatoemporiki.gr
Chania: 65 Daskalogianni Str., 73100 — +30 28210 56 600
Athens: 78 Poseidonos Avenue, Alimos 174 55 — +30 21500 00 250
Rhodes: 4th Km Rhodes-Lindos, 85100 — +30 22410 29 006

Last updated: May 2026