Privacy policy
Last updated:
Who is responsible for your data
The data controller is Ατομική Επιχείρηση KONONENKO OLGA του VLADIMIR, trading as Epirus Assets, Megalou Alexandrou 124, 45333 Ioannina, Greece, tax number (ΑΦΜ) 158710998. For any question about your data, write to info@epirusassets.com.
What we collect
- Forms on the website (consultation, guide, floor plans and prices, cost calculator): your name, email, phone or messenger number, and, if you fill them in, preferred contact method, citizenship, budget and the parameters of your cost calculation (price, number of family members).
- Technical details sent with a form: the page you sent it from and advertising campaign labels in the link (UTM tags).
- Messages you send us by email, WhatsApp or Telegram.
We do not ask for passport, financial or health data through the website. Documents needed for a purchase or an application are handled later, directly by the lawyer, under a separate agreement.
Why we use it and on what legal basis
- To answer your request, send you properties, the guide or a calculation, and arrange a consultation: steps taken at your request before a contract (Article 6(1)(b) GDPR) and your consent (Article 6(1)(a)).
- To accompany a purchase once you become a client: performance of our brokerage agreement (Article 6(1)(b)).
- To meet legal obligations, including tax and anti-money-laundering rules that apply to real estate brokers (Article 6(1)(c)).
- To understand which pages and campaigns bring requests: our legitimate interest (Article 6(1)(f)). Analytics cookies are used only with your consent; see the cookie policy.
Who receives your data
- Service providers that process data on our behalf: HubSpot (customer relationship management; our account is hosted in HubSpot's EU data centre) and Google (email via Google Workspace).
- The independent lawyer who checks the property and files the application, once you decide to proceed.
- The developer of a property you want to reserve, to the extent needed for the reservation and purchase.
- Licensed agents of the official citizenship-by-investment programme of São Tomé and Príncipe, who advise on second citizenship, only if you tick the separate consent box in the consultation form.
HubSpot and Google may process data outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. The second-citizenship agents may be located outside the European Economic Area; we pass your contact details to them only on the basis of your explicit consent (Article 49(1)(a) GDPR).
How long we keep it
We keep requests that did not lead to a purchase for up to 24 months after our last contact, then delete them. Client data is kept for as long as Greek tax and anti-money-laundering law requires. You can ask us to delete your data earlier, unless the law requires us to keep it.
Your rights
You can ask for access to your data, correction, deletion, restriction of processing, data portability, and object to processing based on legitimate interest. You can withdraw consent at any time without affecting earlier processing. Write to info@epirusassets.com; we answer within one month.
You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).
Messengers
If you contact us through WhatsApp or Telegram, those services process your messages under their own privacy policies.
Changes
We update this policy when our processing changes. The date at the top shows the latest version.