Last updated: 24 September 2026
This Privacy Policy explains what personal data we collect when you use our website or our services, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to grekodom.com and its other language versions (the “Site”), and to our contacts with you by e-mail, telephone, messaging apps and in person.
1. Who is responsible for your data
The controller of your personal data is GREKODOM DEVELOPMENT ΑΝΩΝΥΜΗ ΚΑΤΑΣΚΕΥΑΣΤΙΚΗ, ΜΕΣΙΤΙΚΗ, ΕΜΠΟΡΙΚΗ ΕΤΑΙΡΙΑ (GREKODOM DEVELOPMENT S.A.), trading as GREKODOM (“Grekodom”, “we”, “us”).
- Registered office: 14th km of the Thessaloniki – Nea Michaniona provincial road, 57001 Thermi, Thessaloniki, Greece
- VAT number: EL800520960 · G.E.MI. number: 127091504000
- Privacy contact: privacygr@grekodom.gr · Telephone: +30 2310 591 431
2. What data we collect and where it comes from
2.1 Data you give us
- Contact and identity data: name, e-mail address, telephone number, city or country, nationality.
- Your enquiry: the property or service you ask about, your requirements (property type, region, size, budget), your message, and preferred dates for a viewing.
- Conversations: what you write in our AI property-search assistant or live chat, and the content of your e-mails, calls and messages with us.
- If you become our client: the data needed for your purchase, sale, rental, construction project or residence-permit application. This can include your date of birth, address, passport or ID details, Greek tax number (AFM), marital status and family members (for residence permits), bank details, and the information we must collect about you and the source of your funds under anti-money-laundering law.
- Newsletter: your name, e-mail address and the regions you are interested in.
2.2 Data collected automatically
- Technical data: your IP address, browser and device type, the pages you visit and when. Our servers record these in their logs.
- Approximate location: when you send an enquiry, we look up the country (and approximate city) of your IP address, so that your enquiry reaches the right office.
- Cookies and similar technologies: see our Cookie Policy. Analytics and advertising cookies are used only with your consent.
2.3 Data from others
We may receive your contact details and enquiry from partner agencies that refer you to us, and, when you become a client, from public registers (for example the land registry and cadastre), lawyers, notaries and banks involved in your transaction.
We do not knowingly collect data from children. Our services are intended for adults, and you must be at least 18 to send us an enquiry.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) | How long we keep it |
|---|---|---|
| Answering your enquiries through our forms, the chats, e-mail, telephone or messaging apps, and sending you properties that match your requirements. | Steps you ask us to take before a contract (Art. 6(1)(b)); our legitimate interest in answering people who contact us (Art. 6(1)(f)). | Up to 3 years after our last contact, unless you become our client. |
| Providing our services for buying, selling or renting property, construction and residence permits, including the agreements, viewings, and cooperation with the other parties to your transaction. | Performance of our contract with you (Art. 6(1)(b)). | For the duration of our relationship, then for as long as needed to meet our legal obligations and to establish or defend legal claims. |
| Anti-money-laundering checks (identity verification, source of funds, sanctions and politically-exposed-person checks), which we are required to carry out as a real estate agency. | Legal obligation under Greek anti-money-laundering law (Law 4557/2018) (Art. 6(1)(c)). | 5 years after our business relationship ends, or longer where the law requires. |
| Accounting and tax: invoices, payments and the records the tax authorities require. | Legal obligation (Art. 6(1)(c)). | For the periods required by Greek tax and accounting law. |
| AI property-search assistant: answering your questions and searching our listings for you. If you ask for a viewing, the assistant passes your details and the conversation to our managers. | Steps you ask us to take before a contract (Art. 6(1)(b)); our legitimate interest in offering a fast property search (Art. 6(1)(f)). | Conversation records: 10 days. Viewing requests are kept as enquiries (see above). |
| Newsletter and marketing: sending you new properties and offers. | Your consent (Art. 6(1)(a)). If you are already our client, we may send you information about similar services of ours unless you object, which you can do at any time (Art. 6(1)(f) and Law 3471/2006, Art. 11). | Until you unsubscribe or withdraw your consent. |
| Running and securing the Site: delivering pages, preventing spam and abuse of our forms (including with Google reCAPTCHA), and finding and fixing faults. | Our legitimate interest in a working, secure website (Art. 6(1)(f)). | Server logs: up to 90 days. |
| Analytics and advertising: understanding how the Site is used and measuring our advertising. This includes telling Meta, in hashed form, that an enquiry took place. | Your consent (Art. 6(1)(a)), given and withdrawn through our cookie settings. | See our Cookie Policy. |
| Legal claims and compliance: establishing, exercising or defending legal claims, and answering lawful requests from authorities. | Legal obligation (Art. 6(1)(c)); our legitimate interest (Art. 6(1)(f)). | For as long as the claim or request requires. |
Where we rely on our legitimate interests, we have weighed them against your rights, and you can object at any time (see section 7).
Giving us your data is voluntary. However, we cannot answer an enquiry without contact details, and we cannot provide our services or complete a transaction without the data that the contract and the law require.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
4. Who we share your data with
We do not sell your personal data. We share it only as follows:
- Our staff and offices who handle your enquiry or your case.
- The other parties to your transaction, as far as needed: the seller, owner or developer of the property, lawyers, notaries, engineers, translators and banks.
- Public authorities where the law requires it, such as the tax authorities, the land registry and cadastre, the migration authorities (for residence permits), the anti-money-laundering authority, courts and the police.
- Service providerswho process data on our behalf, under contracts that require them to protect it:
- Microsoft (e-mail and office software; Microsoft Clarity for analytics, with your consent)
- Google (reCAPTCHA spam protection, maps and videos on our pages, and, with your consent, Google Analytics and Google Ads)
- Meta (Facebook Pixel and Conversions API, with your consent)
- OpenAI (the language model behind our AI property-search assistant; data sent through its API is not used to train its models)
- JivoSite (our live chat)
- IPinfo and ipapi.co (country and city lookup from IP address)
- our e-mail delivery providers (for our newsletter and notifications)
The Site, its databases and its files are hosted on our own servers in Thessaloniki, Greece.
5. Transfers outside the European Economic Area
- United States: Google, Meta, Microsoft, OpenAI, IPinfo and ipapi.co may process your data in the United States. These transfers are made under the EU–U.S. Data Privacy Framework, for companies certified under it, or under the European Commission’s standard contractual clauses.
- Russian Federation: our live chat service, JivoSite, processes the chat and the technical data of visitors to our pages on servers in the Russian Federation, a country for which the European Commission has not recognised an adequate level of data protection.
You can ask us for a copy of the safeguards we use by writing to privacygr@grekodom.gr.
6. How we protect your data
We use technical and organisational measures appropriate to the risk. These include encrypted connections (TLS), access to personal data restricted to the staff who need it, authentication, firewalls, protection against malware, and regular backups. No system is completely secure, but we work to prevent unauthorised access, loss, alteration and disclosure of your data, and we will tell you and the authorities about a data breach where the law requires.
7. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased, where there is no longer a reason for us to keep it;
- restrict how we use your data while a question about it is resolved;
- receive the data you gave us in a machine-readable format and have it transferred to another organisation (portability);
- object to processing based on our legitimate interests, and, at any time and without giving a reason, to direct marketing;
- withdraw your consent at any time, without affecting what we did before you withdrew it. For cookies, use “Cookie settings” at the bottom of every page. For our newsletter, use the unsubscribe link in any of our e-mails.
To exercise these rights, write to privacygr@grekodom.gr. We will answer within one month, which can be extended by two further months for complex requests; we will tell you if it is. It is free of charge. We may ask you to confirm your identity, so that we do not disclose your data to someone else.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Avenue, 11523 Athens, Greece, www.dpa.gr, or with the data protection authority of the EU country where you live or work. We would appreciate the chance to resolve your concern first.
8. Changes to this policy
We update this policy when the way we process personal data changes. The date at the top shows when it was last updated. If we make significant changes, we will make them clear on the Site and, where appropriate, tell you directly.
