This Privacy Policy explains the purposes for which your personal data is collected, how it is used, with whom it may be shared, and the rights you have.
Data controller
The organisation responsible for processing your personal data:
- Company
- Estora Residency
- Brand
- Estora Residency
- Contact
- Contact form
- Website
- www.estoraresidency.com
Personal data we collect
The following personal data may be collected through our website and communication channels:
- Identity and contact details: first name, last name, email address and phone number.
- Communication content: messages and requests you send through the contact form, WhatsApp or Telegram.
- Investment preferences: information you voluntarily share about property, investment budget and Golden Visa.
- Technical data: IP address, browser type, device information and a technical summary of website use. Server and error logs do not store name, phone or email.
- Cookie data: necessary technical cookies used to run the site, keep it secure and remember language. We do not use advertising or tracking cookies.
We aim to process only the data needed to provide our services and respond to your enquiries. This site is not directed at anyone under eighteen; we do not knowingly collect children’s data.
Purposes of processing
Your personal data may be processed for the following purposes:
- Responding to your enquiries.
- Providing information about property and investment opportunities.
- Assessing your requests about Golden Visa and related services.
- Contacting you about property options that may suit you.
- Improving website performance and user experience.
- Complying with legal obligations.
- Protecting our legal rights and managing potential disputes.
Marketing communications are sent only where a valid prior consent is required and has been obtained.
Legal bases for processing
Your personal data is processed on appropriate legal bases under the GDPR and applicable data-protection law. Depending on the nature of the processing, these may include:
- Taking pre-contractual steps at your request.
- Complying with legal obligations.
- Protecting the controller’s legitimate interests.
- Obtaining your explicit consent for specific processing.
The contact form relies on your consent. An enquiry cannot be sent without the consent checkbox. You may withdraw consent at any time; withdrawal does not affect processing already carried out.
Sharing with third parties
Your personal data may be shared, where necessary and on an appropriate legal basis, with:
- Website hosting and technical infrastructure providers.
- Communication and email service providers.
- Qualified legal, accounting and advisory professionals.
- Service providers needed to fulfil your request.
- WhatsApp or Telegram, if you choose those channels.
- Competent public authorities.
Your personal data is not sold for commercial purposes.
International transfers
Depending on where our service providers or technical infrastructure are located, your personal data may be transferred outside the European Economic Area.
Where such a transfer takes place, the legal safeguards and protections required under the GDPR are applied.
Retention
Your personal data is kept for as long as needed for the purposes for which it was collected, or for the periods required by applicable law.
An enquiry is kept until we have replied and then for a reasonable period for disputes or legal duty. As a rule this is no more than twelve months; longer retention applies only if required.
When the retention period ends, your data is deleted, destroyed or anonymised in line with applicable law.
Data security
Appropriate technical and organisational measures are applied to protect your personal data against unauthorised access, loss, alteration or unlawful use.
Published listings show city, district and an approximate map pin at neighbourhood resolution. Door coordinates and full address are not shown on the public page. EXIF and GPS data are stripped from listing images before publication.
Transmission of data over the internet cannot be guaranteed to be completely risk-free.
Your rights under the GDPR
Subject to applicable conditions, you have the following rights under the GDPR:
- To know whether your personal data is being processed.
- To request access to your personal data.
- To request rectification of inaccurate or incomplete data.
- To request erasure of your data where the legal conditions are met.
- To request restriction of processing in certain cases.
- To exercise your right to data portability.
- To object to processing based on legitimate interests.
- To withdraw consent where processing is based on consent.
To exercise your rights, contact us through the contact form on this site.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) about the processing of your personal data.
Links to other websites
Our website may contain links to third-party websites. Estora Residency is not responsible for those sites’ privacy practices. We recommend that you review their own privacy policies.
Changes to this policy
This Privacy Policy may be updated to reflect changes in law or in our services.
The current policy is always published on our website. The version in force is the one shown with the date at the top of this page.
Contact
You may contact us with questions or requests about privacy and the processing of your personal data.
- Brand
- Estora Residency
- Contact
- Contact form
- Cookie Policy
- Cookies page
- Website
- www.estoraresidency.com