PRIVACY POLICY
Version 1.0 — 11 August 2026
ESTATEREAL respects the privacy of its clients, prospective clients, owners, partners and website visitors. This Policy explains transparently what personal data we process, for which purposes, on which legal bases, to whom they may be disclosed, how long they are retained and what rights data subjects have.
Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, Greek Law 3471/2006 on electronic communications and any other applicable provision. Where relevant, the specific obligations of real-estate brokerage are also subject to legislation on the prevention of money laundering and terrorist financing.
1. DATA CONTROLLER
Data Controller
ER ESTATES SOCIETE ANONYME — trading name ESTATEREAL
Registered office: 1–3 Filellinon Street, Piraeus 185 36, Greece
VAT No.: 802938223 | Tax Authority: KEFODE ATTIKIS | G.E.MI. No.: 185749807000
Tel.: +30 210 26 55000 | E-mail: info@estatereal.gr | Web: www.estatereal.gr
For data-protection matters and to exercise your rights, contact info@estatereal.gr. If a Data Protection Officer (DPO) is appointed in the future, the relevant contact details will be added to this Policy.
2. WHO THIS POLICY APPLIES TO
This Policy applies to natural persons who communicate or transact with ESTATEREAL, including prospective buyers or tenants, owners, sellers or landlords, representatives of legal entities, partners, professionals involved in real-estate transactions and website visitors.
3. PERSONAL DATA WE MAY PROCESS
• Identity and professional data: full name, profession, identity-card/passport details, tax identification number and, where required, representation or beneficial-ownership information.
• Contact data: address, telephone number, e-mail and other contact details you provide.
• Property-interest data: area, property type, price/rent range, search criteria, properties shown, viewings, offers and related correspondence.
• Owner and property data necessary for a mandate, promotion, presentation, sale or lease.
• Transaction and financial data necessary to carry out a brokerage mandate, issue tax documents or comply with legal obligations.
• Due-diligence/KYC data where required by applicable anti-money-laundering legislation.
• Professional communications by e-mail, telephone, contact forms or messaging services, to the extent necessary to handle a request or transaction.
• Technical website-use data, such as IP address, device/browser information, logs and cookie data, depending on the technologies in use.
4. SOURCES OF PERSONAL DATA
As a rule, data are collected directly from you. They may also be obtained lawfully from owners or interested parties, authorized representatives, cooperating brokers, professionals involved in a transaction, listing platforms through which you submit an enquiry, or publicly available sources/registers, where necessary and permitted.
5. PURPOSES AND LEGAL BASES OF PROCESSING
5.1 Performance of a contract or pre-contractual steps
We process data to respond to an enquiry, search for and present properties, arrange viewings, communicate with the parties involved, manage offers and enter into or perform a brokerage agreement.
5.2 Compliance with a legal obligation
We process data where required by tax, accounting, regulatory, judicial or other legal obligations. To the extent that ESTATEREAL is subject to relevant duties as a real-estate broker, processing may include identification and due-diligence measures under anti-money-laundering legislation.
5.3 Legitimate interests
We may process data to secure systems and premises, prevent fraud or abusive behaviour, organize and improve services, document brokerage activity, and establish, exercise or defend legal claims, after balancing the relevant interests against the data subject’s rights.
5.4 Consent
Where required, including for optional commercial communications or non-essential cookies, we request prior, specific and freely given consent. Consent may be withdrawn at any time as easily as it was given, without affecting the lawfulness of processing before withdrawal.
6. COOPERATION WITH OTHER BROKERS AND PROFESSIONALS
For a specific request or transaction, ESTATEREAL may cooperate with lawfully operating estate agencies, property advisers, lawyers, notaries, engineers, accountants and other professionals. Only data necessary for the relevant purpose are disclosed. Where a third party acts as a processor on our behalf, the required contractual safeguards apply.
7. CATEGORIES OF RECIPIENTS
• Authorized ESTATEREAL personnel and partners.
• Owners, sellers, buyers, landlords, tenants or their authorized representatives, to the extent necessary for a particular transaction.
• Cooperating estate agencies or property advisers.
• Lawyers, notaries, engineers, accountants, banks or other professionals when requested by the client or necessary for the transaction.
• Technology, hosting, e-mail, CRM, cloud, security or other service providers supporting our operations.
• Public, tax, judicial, supervisory or other competent authorities where there is a legal obligation or lawful request.
8. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
Some technology providers may process data outside the European Economic Area. Where this occurs, ESTATEREAL uses appropriate GDPR safeguards, such as an adequacy decision, Standard Contractual Clauses or another lawful mechanism, as applicable. Information about relevant safeguards is available on request.
9. RETENTION PERIOD
We retain personal data only for as long as necessary for the purpose for which they were collected and as required by law. In setting retention periods, we consider the duration of the contractual relationship, tax/accounting and regulatory duties, due-diligence obligations and limitation periods for potential claims. At the end of the relevant period, data are securely deleted or anonymized unless further retention is required by law.
Data used solely for optional commercial communications are retained until consent is withdrawn or the right to object is exercised, unless another lawful basis for retention applies.
10. COMMERCIAL COMMUNICATIONS
Where permitted, ESTATEREAL may send information about new properties, services, investment opportunities, company news or promotions. When consent is required, communications are sent only after the recipient has made a positive choice. You may opt out at any time through info@estatereal.gr or the unsubscribe mechanism in the relevant electronic communication.
11. DATA-SUBJECT RIGHTS
Depending on the legal basis and circumstances, you have rights to information, access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Where applicable, you also have the rights under Article 22 GDPR regarding decisions based solely on automated processing.
To exercise a right, send a request to info@estatereal.gr. We may request information reasonably necessary to verify your identity. Requests are handled within the time limits and subject to the restrictions provided by the GDPR.
12. RIGHT TO LODGE A COMPLAINT
If you believe that processing of your data infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). We encourage you to contact us first so that we can try to resolve the matter.
13. SECURITY
We take appropriate technical and organizational measures, proportionate to the risk, to protect data against unauthorized access, loss, alteration, destruction or unlawful disclosure. Access is restricted to persons who need it to perform their duties.
14. WEBSITE AND COOKIES
The website may use cookies and related technologies. Technically necessary cookies may be used without prior consent where strictly necessary to provide a service requested by the user. For non-essential categories, such as analytics or advertising cookies, prior consent is requested through the cookie-management mechanism. Further information is provided in ESTATEREAL’s Cookie Policy.
15. AUTOMATED DECISION-MAKING
As at the date of this Policy, ESTATEREAL does not make decisions producing legal or similarly significant effects based solely on automated processing. If this changes, the Policy will be updated and the required information will be provided.
16. CHANGES TO THIS POLICY
ESTATEREAL may amend this Policy when legislation, services, information systems or processing activities change. The current version will be posted at www.estatereal.gr/privacy with a clear latest-update date.
17. CONTACT
ESTATEREAL — ER ESTATES SOCIETE ANONYME
1–3 Filellinon Street, Piraeus 185 36, Greece
Tel.: +30 210 26 55000
E-mail: info@estatereal.gr
Web: www.estatereal.gr