Personal Data Protection

1. Privacy Policy

The responsible party for the processing of personal data, i.e. the Spitogatos website, considers that the privacy of visitors and registered users is a fundamental and non-negotiable right which must be guaranteed in the exercise of its activity.

The portal Spitogatos is diligently engaged in research to better protect personal data when processing user information derived from the visit or usage of the portal's services, its application, and its services with the development and implementation of technological measures to prevent the, unwanted by users, usage of personal data, in order to ensure that the processing of personal data is conducted in accordance with the rights, fundamental freedoms and the dignity of the subjects of personal data, with particular reference to privacy and personal identity.

We kindly ask the user to read the terms of the privacy policy of our website in order to be informed about the information collected by him, when he visits the Spitogatos website and uses its services, how this information may be used and shared, how this information is protected and what are his rights. By visiting the portal and using the Spitogatos web services, the user gives us consent to collect and process his or her personal data, as detailed in this chapter of the Privacy Policy.

2. Collection of browsing data

The information systems, processes and computational techniques that govern the operation of our website and our application during their operation, derive some personal data, and this "collection" is automatically performed by the access and operation mechanisms and the protocols used on the Internet.

More specifically, every time a user connects to the Spitogatos website and its application, each time he calls or requests content, and each time an action is taken, such as the submission of a contact form, the access data are stored at the online systems of our website in the form of table or linear data files.

This category includes data such as IP addresses, computer domain names used by users, linked to our website and application, the user's browser in the form of URI (Uniform Resource Identifier), the date and time of the form or request submission to the server, the amount of data transmitted, the numerical code indicating the state of the response from the server, and other parameters related to the operating system and environment of the user’s computer.

This data can be used by Spitogatos for the sole purpose of obtaining anonymous statistical information about the usage of the website and the application in order to identify pages, at which the user exhibits preference and therefore provide appropriate content.

Additionally, the above data may be used to investigate liability in the event of a delinquent behavior or a criminal offence generated against the website and its application or to the detriment of its users, at the request of the competent supervisory authority.

3. User categories

In relation to the usage of the website and its application, users are divided into two categories: private users and professionals users on real estate or other related industries (such as real estate agents, construction companies, transport companies, renovation companies and other professionals and businesses related to the sector).

In relation to the usage of the website and its application, users are divided into two categories: private users and professionals users on real estate or other related industries (such as real estate agents, construction companies, transport companies, renovation companies and other professionals and businesses related to the sector).

Private users may, for the most part, have access to certain services anonymously (e.g. property search), while for other services such as - but not limited to - posting ads, automatically receiving updates and property alerts, or storing favorite searches or ads, it is necessary to register before usage. Professional users have access to the services that are intended specifically to them always after registration.

4. Purpose of Data Processing

The data collected through our website and its application are treated in fully legal and appropriate manners and in accordance with the principles of proportionality and legality and within the framework of the relevant provisions of the EU General Data Protection Regulation 679/2016 (hereinafter referred to as "the Regulation") and will be strictly used to achieve the best possible delivery of our services.

In addition to the automatic collection of the browsing data referred to in the preceding paragraph, the user is entitled to voluntarily provide personal information, collected from Spitogatos solely by completing a certain input field (hereinafter referred to as the "Contact Form"), which is proposed for users to submit their data to the website and its application. Contact forms are of different types, depending on the type of service the user intends to use.

For professional users, Spitogatos may collect their personal data on its website and its application through online registration forms, online administration system for professionals, direct contact or by contract signing.

In several applications and services of our website, the user has the ability to transmit personal information (e.g., email address, name, telephone number, zip code, and other personal information). The submission of this data is voluntary and explicit and includes any data necessary for the purpose of the particular service requested.

The personal data provided by the user will be recorded and stored in protected electronic forms and will be processed with the most appropriate security measures. The connection and integration of this data to other electronic files or databases will also be possible.

In particular, through the service of contacting real estate agents, construction companies and other companies, as mentioned above, private users or other real estate advertisers (hereinafter referred to as "Advertisers"), the property publishing service (hereinafter referred to as "Property Advertising" ), the service of promoting the user property search or property request to real estate agencies, and the property entrustment service to other companies and related real estate professionals (hereinafter "Request submission"), personal information data collected in order to meet the requirements of these services will necessarily be disclosed to the advertisers, on the website and its application and will be allowed to follow any subsequent processing of the same information and personal data.

Sending of email messages to the email addresses that may be present on the website and its application, entails acquisition of the owner's personal information from the sender. This email address, along with other personal data collected, is necessary to respond to requests that are submitted and to provide the specific services requested.

The data will be processed, either electronically or in paper form, mainly through the usage of automated and non-automated processes, and this processing should be done directly either by the Spitogatos or by a third party acting as a processor on behalf of the Spitogatos or by a third party to the Spitogatos, as a manager and/or processor as well as by service providers as managers and / or processors in accordance with the provisions of Article 4 of the Regulation.

Appropriate security measures are in place to prevent unintentional or unauthorized use of data, access by unauthorized parties and data loss. No data is collected from the site and its application, without the necessary consent, in cases where it does not serve the provision of the website’s service.

6. Nature of data provision

The provision of data is optional, but in the event of a refusal to provide personal data that is necessary for the conduction of the service requested, then it will not be possible to conduct the service. In case the provision of data is not necessary, the data controller will be able to process the applications and perform the required services mentioned in the above paragraph.

7. Processing Methods

The data controller will process the data in accordance with the provisions of the General Data Protection Regulation of EU 679/2016 and any applicable national law, ensuring full compliance with these legal provisions, as well as with the relevant provisions of this law (personal data protection) contractual arrangements agreed between the parties, namely the user and the controller through this website. Data shall be recorded and processed in a document and a computer, in accordance with the principle of proportionality and always in the light of the aforementioned purposes and, in any case, of the security and confidentiality of personal data. The data controller will process the personal data, either directly or in person, or by using third party services acting as internal, or possibly external, structures or as representatives, in any case on behalf of the controller (Spitogatos).

In accordance with the current legislative regime, and in particular in accordance with the provisions of the Regulation, a system of verification against spam email is activated by means of a response to communications made available to users. Registered data can only be identified for the sole purpose of detecting illegal activities or content that do not comply with the General Terms and Conditions of Use of our website, but under no circumstances will they be processed or disclosed to third parties for commercial or advertising purposes.

8. Data Security

Data collected and processed should be protected by natural and reasonable methods, in order to minimize the risks of unauthorized access, dissemination, loss and destruction of data in accordance with the applicable provisions.

Portal Spitogatos takes all necessary technical and organizational measures for the security and protection of the user's personal data from accidental or non-accidental destruction, loss, unauthorized modification, disclosure or access and from any other unlawful processing of the personal data it manages. However, despite the bona fide and all possible effort on our website to store users' personal data in a secure operating environment that is not open to the public, it is noted that there is no complete or perfect security and Spitogatos cannot guarantee that there will be no unintended disclosures of the user's personal data. The latter must immediately update our website in case their contact information has been lost, stolen or used without his permission. In such a case, and once it is found that we are at fault, we will remove the contact information of the user from his or her account and we will update our records accordingly.

The Spitogatos reserves the right to perform - but not be limited to - actions such as: a) recording and storing any visitor-user communication with the website, including email and questionnaire replies to its employees, customers (e.g. individuals, brokers, transport companies, etc.) or other persons, b) investigating any claim in the event that a communication fails to comply with its terms and conditions and deciding at its sole discretion to withdraw or request the withdrawal of such communication; c) withdrawing photos and generally submitted data and information by the user that is considered offensive, illegal or inconvenient or that does not comply with its terms and conditions; d) deleting registered users, when they do not comply with its terms and condition, after giving them prior notice.

9. Field of communication and dissemination of data

The data provided by the user will be shared and used exclusively by the data controller (Spitogatos) and by the companies designated as data controllers, i.e. the processors or the third parties authorized by the data controller within the meaning of the terms of Article 4 of the Regulation. As mentioned above, for some services, data are shared with companies that cooperate or use the services of the controller (e.g. real estate agents who are aware of all applicants' personal information or real estate information, banks or credit brokers to provide mortgages or other loans and other related financial services related to the sale of property), with the sole purpose of providing the services requested by the user.

In these cases, companies act independently and Spitogatos is not responsible for processing the data from them. Also, Spitogatos is not responsible for content and compliance with the Privacy Policy of websites that it does not manage.

10. Data transfer in foreign countries

Personal data that are collected via our website and our mobile application may be transferred outside Greek jurisdiction exclusively only for the fulfillment of the services that are requested via our website and are according to the terms of this particular privacy policy, as well as the articles of the GDPR regulation.

Also, Spitogatos in no case sells a user’s personal data, while during data communication to third parties, in accordance to the aforementioned services, this takes place only for the fulfillment of the purposes that are documented in this particular policy and regarding the same online services.

11. Information regarding cookies, search engines, and location data

Cookies is a technology/mechanism that is designed to speed up traffic analysis in websites, to make it easier for users to access services that are offered by our website and our mobile application, and to offer useful and relevant advertisement to our visitors. By using cookies, personal data are not transmitted or obtained from location identification systems. If a user doesn’t want their information to be collected via this mechanism (cookies), the user may use a simple process in their web browser, that allows to reject cookies usage.

The information about the site and app property suggestions will be visible in searches on the internal search engine and will be available on third-party search engines as the site and app allow its content to be indexed by third parties.

If the page regarding the listing ads has already been removed from the site and the app, it's likely that the saved copy will remain in the search results for a few days. Search results are not managed by the site and the app, but the user can request the removal of the page and request that the saved copy be updated directly to the search engine.

When you use the site and app with Active location identification, the site and application can collect and edit information about the current user's location. This data is processed anonymously, in a format that does not allow the user to be personally identified and used only for the purpose of facilitating the use of certain site and site-based and site-based features. Location services can be switched on or off by the user at any time by accessing your device's settings.

12. Duration of processing

The processing of the data will not last longer than is necessary to fulfill the purpose of the collection, namely the storage of search criteria, the notification, the publication of notices and the contact with professionals who meet the criteria of the user.

Processing will take place until the interested party decides to cancel the entered data, in contact with the data controller.

It will also be possible to last for as long as the storage of personal data becomes necessary in order to comply with our legal obligation or to defend our legitimate interests before the Courts.

13. User’s Rights

Privacy laws provide the user with the right to exercise certain rights. In particular, the user has the right to obtain confirmation of the existence of personal data, even if it is not yet registered, and that these data are available in comprehensible form.

It may also ask the data source to know the identity and contact details of the controller, processors and third parties on behalf of the controller, the processing purposes for which his or her personal data, recipients or categories of recipients of his data and the time of storage of the data and other matters referred to in Article 13 of the Regulation.

The user may also request the deletion of its data, its correction, limitation of processing, its updating of the previous data, the receipt of such data on a structured, commonly used and machine-readable data type, or the blocking of data have been processed in violation of law, opposed to processing and automated decision-making.

14. Regarding Inquiries

For any inquiry regarding this particular policy or in general, regarding operations or services of Spitogatos, you are encouraged to contact with us in the email address: support@spitogatos.gr or in our physical address: Rizountos 2, p.c. 167 77, Elliniko, Athens, or in our office tel. number: 210 96 58 530.

Lead Generation SA, VAT No 997927596, GEMI Registration No 123691601000