(Information on Processing of Personal Data)
(CLIENTS)
Protecting personal data and ensuring that it is processed lawfully and appropriately is a key priority in the provision of our services.
This Notice explains how we collect and process your personal data, as well as the personal data of your family members that you provide to us in connection with our business relationship.
1. DATA CONTROLLER & CONTACT DETAILS (as applicable)
OIKOS PROPERTY DEVELOPMENTS I.K.E.
Address: 137 Syngrou Avenue, Nea Smyrni, 17121, Greece
Telephone: (+30) 210-9430790
Email: info@oikosdevelopments.com
Data Protection Officer contact details: dpo@oikosdevelopments.com
OIKOS SIGNATURE DEVELOPMENTS I.K.E.
Address: 137 Syngrou Avenue, Nea Smyrni, 17121, Greece
Telephone: (+30) 210-9430790
Email: info@oikosdevelopments.com
Data Protection Officer contact details: dpo@oikosdevelopments.com
Each of the above companies is hereinafter referred to in this Notice, as applicable, as the “Company”.
2. PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA
The Company collects and processes its clients’ personal data primarily to manage and carry out our business relationship smoothly and effectively. Depending on the services provided, the purposes of processing may include assessing a potential business relationship with you, entering into our agreement with you, obtaining a residence permit for you and your family members, communicating with you about your property in Greece, assisting you and your family when you visit Greece (for example, airport transfers, local transportation and hotel bookings), and managing your property if you choose to appoint us to do so.
The Company will not use your personal data for purposes other than those described in this Notice without informing you in advance and, where required, obtaining your approval.
3. PERSONAL DATA WE PROCESS
To provide the above services and fulfil the purposes described in this Notice, you may provide us with personal data such as your full name, father’s and mother’s names, home address, contact details (telephone number, email address, etc.), date and place of birth, occupation, a copy of your passport and passport details (issuing authority, issue date, expiry date, photograph and copies of all passport pages), birth certificate, family status certificate, information required for the residence permit process for you and your family, copies of your temporary and permanent residence permits, any power of attorney granted to the Company, information contained in agreements you enter into with the Company and in property purchase and/or lease agreements, copies of those agreements, your bank account number, the address and other details of the property you purchase, information relating to payments made towards the purchase of the property, and information relating to your stay in Greece when you visit the country (such as flight details to and from Greece, arrival/departure/stay dates, hotel details, and itineraries or transportation arranged by the Company). You may also provide some of the above information about your family members and children, whether minors or adults, including their names and copies of their passports.
4. LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA
Depending on the circumstances, we may process your personal data on one or more of the following legal bases:
- Taking steps at your request before entering into a contract, and entering into and performing our agreement with you, including any agreement for the purchase or lease of property (Article 6(1)(b) of the General Data Protection Regulation).
- Compliance with the Company’s legal and regulatory obligations under the applicable Greek and European legal framework (Article 6(1)(c) of the General Data Protection Regulation).
- The pursuit, safeguarding and protection of the legitimate interests of the Company and its clients, where applicable (Article 6(1)(f) of the General Data Protection Regulation). Such legitimate interests may include developing and improving our services, ensuring the smooth and continuously improving operation of the Company, and establishing, exercising or defending legal claims by the Company before courts or administrative or judicial authorities, or in out-of-court proceedings, for the protection of the rights of the Company or third parties.
- In certain cases, your explicit consent (Article 6(1)(a) of the General Data Protection Regulation), which you may freely provide for specific processing purposes. Where we rely on your consent, you will be given a separate form containing all necessary information before you provide it.
5. HOW LONG WE KEEP YOUR PERSONAL DATA
We keep your personal data for the duration of our business relationship and until all actions necessary to fulfil the purposes for which the data was collected have been completed. After our business relationship ends and those purposes have been fulfilled, we retain the data for as long as required by the laws applicable to the Company. Where processing is based on the Company’s legitimate interests, the data is retained for as long as necessary to pursue those interests. Where processing is based on your consent, the personal data is retained until you withdraw that consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
6. WHO MAY ACCESS YOUR PERSONAL DATA
Your personal data may be accessed by authorised employees of the Company where this is necessary for the performance of their duties.
All Company employees are contractually bound to maintain the confidentiality of the information and personal data they process.
7. RECIPIENTS OF YOUR PERSONAL DATA
Where necessary for the purposes described in this Notice, your personal data may be disclosed to third-party recipients outside the Company. These may include, for example, agents, lawyers, notaries, engineers, banks, insurance providers, real estate agents, drivers and transfer companies, hotels, as well as providers of IT services, cloud services and technology tools that support the Company’s activities.
Your personal data is disclosed only where this is necessary to fulfil the relevant processing purpose or to enable the Company to comply with its legal obligations. In all cases, personal data is shared subject to appropriate confidentiality requirements.
8. USE OF TECHNOLOGY TOOLS & TRANSFERS OUTSIDE THE EEA
To provide its services and improve the efficiency of its business processes, the Company uses certain providers of IT services, cloud services and technology tools, including tools that use artificial intelligence technologies to support the automated preparation of contractual and administrative documents.
These providers act on behalf of the Company as data processors and are contractually required to process personal data only on the Company’s instructions and in accordance with applicable data protection law, subject to strict confidentiality obligations.
In some cases, these providers may be located outside the European Economic Area (EEA) or may store personal data outside the EEA. In such cases, transfers are protected by appropriate safeguards under the General Data Protection Regulation (GDPR), such as the European Commission’s approved Standard Contractual Clauses (SCCs), or by another appropriate transfer mechanism available under applicable law.
9. SECURITY OF YOUR PERSONAL DATA
Your personal data is kept in a secure environment with controlled access. The Company is committed to ensuring that its clients’ personal data is collected and processed lawfully. The Company implements appropriate technical and organisational measures to protect personal data and continuously works to safeguard the data it processes against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or unauthorised access.
10. YOUR RIGHTS
You may ask for a copy of your personal data, request that it be transferred to another data controller, ask us to correct or delete it, request restriction of its processing, or object to its processing. Some of these rights may be subject to limitations where the Company is required by law to retain or process the data. In all cases, we will respond to your request within the time limits provided by law.
You also have the right to lodge a complaint about the processing of your personal data with the Hellenic Data Protection Authority (www.dpa.gr).
To exercise any of the above rights, or if you have any question or complaint about the processing of your personal data, you may contact the Company’s Data Protection Officer at: dpo@oikosdevelopments.com.